This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/8d666d-06ab-44d2-a6a5-af635d875575/1/nM9T8eCub18z28-A6ox0H2gkhf4.mft File: nM9T8eCub18z28-A6ox0H2gkhf4.mft (raw, json) Hash identifier: ItW8emiyMpmLITdL5pDqVIc0D6JoyfgvE6sDbCiL1/0= Subject key identifier: D5:9B:06:E9:B8:BD:09:0F:90:D8:27:65:31:0A:9C:29:49:E6:43:14 Authority key identifier: 9C:CF:53:F1:E0:AE:6F:5F:33:DB:CF:80:EA:8C:74:1F:68:24:85:FE Certificate issuer: /CN=9ccf53f1e0ae6f5f33dbcf80ea8c741f682485fe Certificate serial: 019B3BD94D3BEE312FAD4AFF2F5046F2FEA9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nM9T8eCub18z28-A6ox0H2gkhf4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/8d666d-06ab-44d2-a6a5-af635d875575/1/nM9T8eCub18z28-A6ox0H2gkhf4.mft Manifest number: 0743 Signing time: Sat 20 Dec 2025 13:00:55 +0000 Manifest this update: Sat 20 Dec 2025 13:00:55 +0000 Manifest next update: Sun 21 Dec 2025 13:00:55 +0000 Files and hashes: 1: nM9T8eCub18z28-A6ox0H2gkhf4.crl (hash: 2nBkxySOgxNXykC9de7M4BJFisG4LRfXREmZEwRpD94=) 2: ypZztjZlxetD-72tfNr-C4vUMMo.roa (hash: KOjPZ5JmKNPLP4XD3KiiaO/OQDRjqwb/lVaqB3ewFWk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/8d666d-06ab-44d2-a6a5-af635d875575/1/nM9T8eCub18z28-A6ox0H2gkhf4.crl rsync://rpki.ripe.net/repository/DEFAULT/52/8d666d-06ab-44d2-a6a5-af635d875575/1/nM9T8eCub18z28-A6ox0H2gkhf4.mft rsync://rpki.ripe.net/repository/DEFAULT/nM9T8eCub18z28-A6ox0H2gkhf4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:4d:3b:ee:31:2f:ad:4a:ff:2f:50:46:f2:fe:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ccf53f1e0ae6f5f33dbcf80ea8c741f682485fe Validity Not Before: Dec 20 13:00:55 2025 GMT Not After : Dec 21 13:00:55 2025 GMT Subject: CN=d59b06e9b8bd090f90d82765310a9c2949e64314 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:1e:10:ba:56:a1:e0:c0:38:85:6a:54:38:64: c5:b0:c2:75:22:c6:9d:a0:dc:7f:02:11:a0:26:ba: 23:87:a3:d0:b3:cd:14:05:6f:46:78:c8:5d:3f:48: d0:dc:6b:77:19:90:d2:77:11:f9:dc:cd:c3:71:3b: 31:4b:39:e9:9f:99:3c:8d:53:a4:13:56:bf:56:dc: 84:ce:24:06:d2:ad:2d:44:72:58:d7:09:7c:3d:7d: f7:ec:c9:a9:89:57:43:7b:b5:c0:b3:d3:b8:21:95: 6d:6f:66:d4:be:d1:59:ed:13:64:97:52:ba:e8:c2: 79:eb:95:be:3d:88:ec:bc:15:9b:b4:a8:6a:d8:5a: ba:ff:2f:c4:c8:ab:48:0c:18:ad:3b:76:97:a5:3b: fb:57:60:40:69:55:d7:b2:03:64:fc:21:1c:64:4a: 31:fe:ab:83:3f:48:b8:37:70:75:33:e7:c2:d8:0e: af:6f:52:69:1d:4b:3e:0f:d7:60:03:d7:f5:86:47: 03:1e:49:25:42:df:6b:d2:a9:ba:59:87:46:93:79: 55:b9:1c:dc:ae:59:bf:ea:a5:13:74:ba:52:b0:3d: 5b:81:eb:f1:2d:a2:c6:96:bb:2c:d2:af:0e:0f:ea: 30:5d:dc:2e:d6:37:48:27:37:f2:53:b3:40:1b:91: 78:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:9B:06:E9:B8:BD:09:0F:90:D8:27:65:31:0A:9C:29:49:E6:43:14 X509v3 Authority Key Identifier: keyid:9C:CF:53:F1:E0:AE:6F:5F:33:DB:CF:80:EA:8C:74:1F:68:24:85:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nM9T8eCub18z28-A6ox0H2gkhf4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/8d666d-06ab-44d2-a6a5-af635d875575/1/nM9T8eCub18z28-A6ox0H2gkhf4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/8d666d-06ab-44d2-a6a5-af635d875575/1/nM9T8eCub18z28-A6ox0H2gkhf4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:d7:1c:20:83:99:c8:f4:45:2d:28:0d:1d:41:31:92:8a:32: d1:96:9c:a2:25:95:cc:28:7b:89:69:fd:ca:fc:ce:34:b9:e8: b8:e2:77:c3:d4:d7:6e:08:67:18:68:8d:f2:09:6e:36:35:e4: f5:70:46:fa:f6:14:f4:34:18:6e:f8:8f:32:da:2e:cc:f2:dd: 28:17:a7:80:eb:63:70:3f:55:8d:18:a0:4f:f7:1b:06:87:d3: 1b:1c:3e:9e:7f:f3:71:b1:f7:74:d4:8d:2c:be:a7:4c:3b:47: 3f:b4:82:56:dc:14:50:b3:dd:53:00:ac:8d:bf:50:bb:d1:3e: 96:fd:bc:4d:f6:5c:9c:89:50:72:29:cd:f6:aa:c8:39:b3:1a: a3:49:b5:68:87:45:03:f0:db:1a:c6:41:c7:dd:1a:1e:db:ad: 36:fa:cc:fa:4f:aa:92:1d:ec:9c:2a:07:80:4c:c1:be:f3:be: 01:0e:15:12:82:7e:6b:dc:18:12:31:96:0d:0d:36:5b:f1:00: cf:d3:26:21:83:45:47:7e:2b:37:60:4b:72:f1:07:e8:68:5e: 9b:f1:a0:09:76:dd:03:c3:78:9c:eb:34:71:f0:df:51:0f:49: 79:ba:ba:9c:07:14:f6:91:81:b5:4f:7d:02:cd:9d:63:0e:c8: 90:d2:2a:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72U077jEvrUr/L1BG8v6pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljY2Y1M2YxZTBhZTZmNWYzM2RiY2Y4MGVhOGM3NDFmNjgy NDg1ZmUwHhcNMjUxMjIwMTMwMDU1WhcNMjUxMjIxMTMwMDU1WjAzMTEwLwYDVQQD EyhkNTliMDZlOWI4YmQwOTBmOTBkODI3NjUzMTBhOWMyOTQ5ZTY0MzE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5x4Qulah4MA4hWpUOGTFsMJ1Isad oNx/AhGgJrojh6PQs80UBW9GeMhdP0jQ3Gt3GZDSdxH53M3DcTsxSznpn5k8jVOk E1a/VtyEziQG0q0tRHJY1wl8PX337MmpiVdDe7XAs9O4IZVtb2bUvtFZ7RNkl1K6 6MJ565W+PYjsvBWbtKhq2Fq6/y/EyKtIDBitO3aXpTv7V2BAaVXXsgNk/CEcZEox /quDP0i4N3B1M+fC2A6vb1JpHUs+D9dgA9f1hkcDHkklQt9r0qm6WYdGk3lVuRzc rlm/6qUTdLpSsD1bgevxLaLGlrss0q8OD+owXdwu1jdIJzfyU7NAG5F44QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNWbBum4vQkPkNgnZTEKnClJ5kMUMB8GA1UdIwQY MBaAFJzPU/Hgrm9fM9vPgOqMdB9oJIX+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbk05VDhlQ3ViMTh6MjgtQTZveDBIMmdraGY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi84ZDY2NmQtMDZhYi00NGQyLWE2YTUt YWY2MzVkODc1NTc1LzEvbk05VDhlQ3ViMTh6MjgtQTZveDBIMmdraGY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi84ZDY2NmQtMDZhYi00NGQyLWE2YTUtYWY2MzVkODc1NTc1 LzEvbk05VDhlQ3ViMTh6MjgtQTZveDBIMmdraGY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn9ccIIOZ yPRFLSgNHUExkooy0ZacoiWVzCh7iWn9yvzONLnouOJ3w9TXbghnGGiN8gluNjXk 9XBG+vYU9DQYbviPMtouzPLdKBengOtjcD9VjRigT/cbBofTGxw+nn/zcbH3dNSN LL6nTDtHP7SCVtwUULPdUwCsjb9Qu9E+lv28TfZcnIlQcinN9qrIObMao0m1aIdF A/DbGsZBx90aHtutNvrM+k+qkh3snCoHgEzBvvO+AQ4VEoJ+a9wYEjGWDQ02W/EA z9MmIYNFR34rN2BLcvEH6Ghem/GgCXbdA8N4nOs0cfDfUQ9Jebq6nAcU9pGBtU99 As2dYw7IkNIq5A== -----END CERTIFICATE-----Generated at Sat Dec 20 17:22:52 2025 by rpki-client