This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/87f2a0-e07f-4d10-aa9b-2d06eb7f299f/1/Nk1Ii4xzG5HUpaK5CmZs7rwOGMk.mft File: Nk1Ii4xzG5HUpaK5CmZs7rwOGMk.mft (raw, json) Hash identifier: 474/58nAzUlRMWIz9scfrVvpOjmzvuRHrHd2ViN38Ts= Subject key identifier: 4A:0C:66:72:A0:68:09:B0:74:B6:64:DD:5A:15:AB:86:79:64:2B:BA Authority key identifier: 36:4D:48:8B:8C:73:1B:91:D4:A5:A2:B9:0A:66:6C:EE:BC:0E:18:C9 Certificate issuer: /CN=364d488b8c731b91d4a5a2b90a666ceebc0e18c9 Certificate serial: 019B462600E804C5833BA8DE8189E8320C43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nk1Ii4xzG5HUpaK5CmZs7rwOGMk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/87f2a0-e07f-4d10-aa9b-2d06eb7f299f/1/Nk1Ii4xzG5HUpaK5CmZs7rwOGMk.mft Manifest number: 029F Signing time: Mon 22 Dec 2025 13:00:54 +0000 Manifest this update: Mon 22 Dec 2025 13:00:54 +0000 Manifest next update: Tue 23 Dec 2025 13:00:54 +0000 Files and hashes: 1: Nk1Ii4xzG5HUpaK5CmZs7rwOGMk.crl (hash: aJTrASoDBk9jtF9h6f2+mP6RxQhrmMPDIIBWJAFeXyI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/87f2a0-e07f-4d10-aa9b-2d06eb7f299f/1/Nk1Ii4xzG5HUpaK5CmZs7rwOGMk.crl rsync://rpki.ripe.net/repository/DEFAULT/89/87f2a0-e07f-4d10-aa9b-2d06eb7f299f/1/Nk1Ii4xzG5HUpaK5CmZs7rwOGMk.mft rsync://rpki.ripe.net/repository/DEFAULT/Nk1Ii4xzG5HUpaK5CmZs7rwOGMk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 13:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:26:00:e8:04:c5:83:3b:a8:de:81:89:e8:32:0c:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=364d488b8c731b91d4a5a2b90a666ceebc0e18c9 Validity Not Before: Dec 22 13:00:54 2025 GMT Not After : Dec 23 13:00:54 2025 GMT Subject: CN=4a0c6672a06809b074b664dd5a15ab8679642bba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:0d:57:f2:c3:76:5e:4e:52:19:03:df:23:1f: 4e:0f:36:11:5b:ce:fd:f0:dc:55:01:70:4c:aa:56: fc:84:c3:25:8c:ca:08:8f:e2:7d:11:b7:2d:5a:ff: dd:06:3b:d1:ba:4b:4f:ad:d1:f5:f6:c2:58:85:30: 50:1d:6f:2c:a3:d0:4e:b2:c6:a5:7e:a1:ec:dd:6c: 49:10:a5:a5:88:ab:06:9c:9b:ab:6f:b0:fd:77:52: 13:3e:cd:aa:bb:d5:3e:09:2e:7f:d1:bf:93:62:55: 65:63:20:6d:d2:11:ab:74:28:e8:f3:d9:e7:3f:a8: 7a:b2:17:2d:0c:d6:a5:ec:d8:a4:f5:0b:0f:a0:2a: b0:b6:29:61:a4:de:41:95:9c:ba:1f:b3:bb:b9:96: 3f:db:93:b9:45:b9:d1:3d:11:93:02:73:77:8b:82: 9c:ac:1e:8e:9d:50:6f:7e:57:6d:03:d5:7f:58:fb: 77:a1:fb:8d:27:a7:84:9f:a7:7f:ff:39:c5:74:b6: 50:5b:46:a5:c2:74:9e:95:e9:bd:fc:a3:95:ef:d1: ec:8d:d9:6a:fa:e0:20:c5:32:db:41:3e:e4:f6:dc: 92:ba:21:a8:06:ff:ba:4b:f0:8e:74:83:4a:c6:cd: a3:ba:de:52:ed:42:24:de:81:d5:e7:d2:26:d0:86: 59:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:0C:66:72:A0:68:09:B0:74:B6:64:DD:5A:15:AB:86:79:64:2B:BA X509v3 Authority Key Identifier: keyid:36:4D:48:8B:8C:73:1B:91:D4:A5:A2:B9:0A:66:6C:EE:BC:0E:18:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nk1Ii4xzG5HUpaK5CmZs7rwOGMk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/87f2a0-e07f-4d10-aa9b-2d06eb7f299f/1/Nk1Ii4xzG5HUpaK5CmZs7rwOGMk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/87f2a0-e07f-4d10-aa9b-2d06eb7f299f/1/Nk1Ii4xzG5HUpaK5CmZs7rwOGMk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:88:91:5b:c2:da:3e:6a:92:2b:3c:22:4d:f3:f8:29:35:3d: e7:45:97:95:dc:71:84:3e:14:6d:c5:c9:14:ca:6e:e1:d9:69: 00:9b:0d:25:08:e6:2e:2d:b5:fb:8c:8e:5f:65:d1:5e:d9:a8: 62:a3:f8:7d:2d:64:44:d8:7a:40:b6:08:27:dd:68:57:d4:5e: b6:20:0b:0e:d5:04:5c:67:c8:32:df:76:38:a1:e3:3f:e8:55: 94:9a:65:2c:f2:af:86:12:7d:2f:cf:a7:fa:84:d9:7c:45:bc: 95:92:a5:eb:1d:15:04:6f:3e:c6:0c:64:14:0c:bb:67:96:5e: dd:44:d0:79:b2:de:45:ff:32:79:79:0e:cf:b4:6e:d8:d6:19: aa:6a:c7:21:95:0b:2c:c7:c5:fc:b2:ab:a6:e8:02:73:35:85: b2:ab:22:99:2b:37:59:09:06:f9:76:a7:bc:fd:b9:35:de:96: d6:7b:bb:3f:90:94:ad:2d:62:6e:ba:9e:82:fb:e1:f5:92:e3: b1:74:ec:19:dd:75:88:e4:17:86:6f:14:f2:ed:6c:cd:e3:34: 51:64:52:f2:80:00:99:60:fe:f7:44:c8:35:e7:89:3c:ff:62: df:cd:61:32:01:e7:ca:82:db:22:8b:fe:f3:8c:08:71:ad:c8: fc:76:f7:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGJgDoBMWDO6jegYnoMgxDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2NGQ0ODhiOGM3MzFiOTFkNGE1YTJiOTBhNjY2Y2VlYmMw ZTE4YzkwHhcNMjUxMjIyMTMwMDU0WhcNMjUxMjIzMTMwMDU0WjAzMTEwLwYDVQQD Eyg0YTBjNjY3MmEwNjgwOWIwNzRiNjY0ZGQ1YTE1YWI4Njc5NjQyYmJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsw1X8sN2Xk5SGQPfIx9ODzYRW879 8NxVAXBMqlb8hMMljMoIj+J9EbctWv/dBjvRuktPrdH19sJYhTBQHW8so9BOssal fqHs3WxJEKWliKsGnJurb7D9d1ITPs2qu9U+CS5/0b+TYlVlYyBt0hGrdCjo89nn P6h6shctDNal7Nik9QsPoCqwtilhpN5BlZy6H7O7uZY/25O5RbnRPRGTAnN3i4Kc rB6OnVBvfldtA9V/WPt3ofuNJ6eEn6d//znFdLZQW0alwnSelem9/KOV79Hsjdlq +uAgxTLbQT7k9tySuiGoBv+6S/COdINKxs2jut5S7UIk3oHV59Im0IZZZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEoMZnKgaAmwdLZk3VoVq4Z5ZCu6MB8GA1UdIwQY MBaAFDZNSIuMcxuR1KWiuQpmbO68DhjJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmsxSWk0eHpHNUhVcGFLNUNtWnM3cndPR01rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS84N2YyYTAtZTA3Zi00ZDEwLWFhOWIt MmQwNmViN2YyOTlmLzEvTmsxSWk0eHpHNUhVcGFLNUNtWnM3cndPR01rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS84N2YyYTAtZTA3Zi00ZDEwLWFhOWItMmQwNmViN2YyOTlm LzEvTmsxSWk0eHpHNUhVcGFLNUNtWnM3cndPR01rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR4iRW8La PmqSKzwiTfP4KTU950WXldxxhD4UbcXJFMpu4dlpAJsNJQjmLi21+4yOX2XRXtmo YqP4fS1kRNh6QLYIJ91oV9RetiALDtUEXGfIMt92OKHjP+hVlJplLPKvhhJ9L8+n +oTZfEW8lZKl6x0VBG8+xgxkFAy7Z5Ze3UTQebLeRf8yeXkOz7Ru2NYZqmrHIZUL LMfF/LKrpugCczWFsqsimSs3WQkG+XanvP25Nd6W1nu7P5CUrS1ibrqegvvh9ZLj sXTsGd11iOQXhm8U8u1szeM0UWRS8oAAmWD+90TINeeJPP9i381hMgHnyoLbIov+ 84wIca3I/Hb3qg== -----END CERTIFICATE-----Generated at Mon Dec 22 22:52:42 2025 by rpki-client