This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/a33b29-bef3-461d-8878-2155126b1643/1/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.mft File: nPxi7NyR0Rl5zB0hpHxuw3jfpDY.mft (raw, json) Hash identifier: P22V472m28FFFQqCOoWesF+gqzTFVHUgHBwS31D9Feo= Subject key identifier: 8D:E3:6A:D5:F7:88:19:82:09:64:51:47:9B:54:47:A5:1A:D6:59:FB Authority key identifier: 9C:FC:62:EC:DC:91:D1:19:79:CC:1D:21:A4:7C:6E:C3:78:DF:A4:36 Certificate issuer: /CN=9cfc62ecdc91d11979cc1d21a47c6ec378dfa436 Certificate serial: 019B68EA5B6ECAAB0B6CC7E97022EE94D6FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/a33b29-bef3-461d-8878-2155126b1643/1/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.mft Manifest number: 1199 Signing time: Mon 29 Dec 2025 07:02:27 +0000 Manifest this update: Mon 29 Dec 2025 07:02:27 +0000 Manifest next update: Tue 30 Dec 2025 07:02:27 +0000 Files and hashes: 1: BuFdaMS1qY4jt-i_y_cN4QOcG_g.roa (hash: ltXbKfkdHFu9ibmOqMdLpCxXbbDufLPF6M4KyVnL37o=) 2: nPxi7NyR0Rl5zB0hpHxuw3jfpDY.crl (hash: VHKKKevzSj+JU0w3VOD2m4sh/HZXjPeYus7v0kCr6lM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/a33b29-bef3-461d-8878-2155126b1643/1/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/a33b29-bef3-461d-8878-2155126b1643/1/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.mft rsync://rpki.ripe.net/repository/DEFAULT/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 07:02:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:68:ea:5b:6e:ca:ab:0b:6c:c7:e9:70:22:ee:94:d6:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cfc62ecdc91d11979cc1d21a47c6ec378dfa436 Validity Not Before: Dec 29 07:02:27 2025 GMT Not After : Dec 30 07:02:27 2025 GMT Subject: CN=8de36ad5f7881982096451479b5447a51ad659fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:53:05:1a:72:f6:6e:59:30:50:9c:e2:5b:ff: 9b:7f:ce:d0:fc:49:d0:95:93:f4:ad:27:89:f4:e9: 52:04:a2:0d:0a:0e:7d:79:53:8d:3e:15:6b:e6:08: 20:4b:65:7f:03:2c:15:7e:2f:f6:72:32:99:ca:66: a7:75:66:07:b4:ee:48:d0:65:30:84:6d:02:7e:1d: 6f:6f:c3:6e:99:21:45:d7:ea:9b:b3:75:87:52:c6: d5:e4:c2:93:df:7e:1b:56:40:76:c4:8d:5a:5c:5b: cb:08:6b:4b:4a:67:a1:a3:67:4d:2a:af:93:fb:28: a7:7c:b3:14:db:44:85:41:43:ab:ca:4c:98:46:4d: d6:bb:0c:7c:2b:85:22:35:5f:1a:52:45:29:65:ff: dd:44:78:97:13:01:fb:8f:1b:d7:f0:63:2b:2d:c5: cf:b4:f9:fb:db:73:e1:2a:fa:6b:60:6c:a0:62:3b: 72:53:17:6b:bc:97:b2:a6:8c:fc:40:f0:80:59:2d: ab:28:54:09:78:b3:fc:bd:e5:e9:87:80:10:53:96: 91:c0:21:4e:b1:5d:ce:f8:3c:17:a3:23:7a:76:95: f5:db:aa:bf:7c:1e:d6:c1:c9:a9:a6:a7:ee:48:8f: 28:14:ad:df:14:2d:cf:72:c2:7a:f6:d4:e8:58:e6: 37:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:E3:6A:D5:F7:88:19:82:09:64:51:47:9B:54:47:A5:1A:D6:59:FB X509v3 Authority Key Identifier: keyid:9C:FC:62:EC:DC:91:D1:19:79:CC:1D:21:A4:7C:6E:C3:78:DF:A4:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/a33b29-bef3-461d-8878-2155126b1643/1/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/a33b29-bef3-461d-8878-2155126b1643/1/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:40:9d:07:b3:e5:bc:23:d8:08:c5:06:51:c6:0a:3c:d3:32: bc:ee:65:23:4c:66:b7:3c:c4:7f:04:e7:c7:55:56:36:7d:0f: 41:cf:4a:bf:44:38:2f:8e:00:0f:84:72:60:9a:d5:ae:77:92: 51:44:fa:d3:42:bd:e9:11:20:1d:92:a8:48:23:cb:08:55:e5: 16:a7:e5:26:3c:49:4a:70:45:e8:dc:39:cb:94:40:b2:b6:c5: 13:c9:2e:e2:de:1c:2d:5d:80:b1:2a:90:b8:38:5b:bc:9b:73: 43:7d:46:17:b2:63:33:d3:1c:bd:a7:23:b9:55:10:3b:a3:fc: ed:14:20:fc:7d:1c:06:7d:e9:ab:c7:be:10:25:c3:b2:88:4c: 27:f1:f5:9e:d7:0a:84:e9:3a:03:c7:01:f4:2f:b1:2b:b1:1c: ad:2c:14:62:db:f8:34:2d:d2:33:58:70:d9:04:41:73:37:b7: 66:72:4c:2b:5d:68:7c:2e:f0:35:c0:d5:63:e1:79:2a:6e:f9: 05:d2:cf:f3:96:6c:ce:20:b2:b6:1e:90:c4:28:6b:20:e9:3a: 9e:c7:da:bc:c9:8f:bb:18:22:e8:cb:67:eb:3f:86:55:15:06: 19:16:5d:c8:32:1e:47:81:e0:7b:7e:93:11:de:fb:25:31:38: d2:a5:46:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZto6ltuyqsLbMfpcCLulNb7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljZmM2MmVjZGM5MWQxMTk3OWNjMWQyMWE0N2M2ZWMzNzhk ZmE0MzYwHhcNMjUxMjI5MDcwMjI3WhcNMjUxMjMwMDcwMjI3WjAzMTEwLwYDVQQD Eyg4ZGUzNmFkNWY3ODgxOTgyMDk2NDUxNDc5YjU0NDdhNTFhZDY1OWZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0FMFGnL2blkwUJziW/+bf87Q/EnQ lZP0rSeJ9OlSBKINCg59eVONPhVr5gggS2V/AywVfi/2cjKZymandWYHtO5I0GUw hG0Cfh1vb8NumSFF1+qbs3WHUsbV5MKT334bVkB2xI1aXFvLCGtLSmeho2dNKq+T +yinfLMU20SFQUOrykyYRk3Wuwx8K4UiNV8aUkUpZf/dRHiXEwH7jxvX8GMrLcXP tPn723PhKvprYGygYjtyUxdrvJeypoz8QPCAWS2rKFQJeLP8veXph4AQU5aRwCFO sV3O+DwXoyN6dpX126q/fB7WwcmppqfuSI8oFK3fFC3PcsJ69tToWOY3iQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI3jatX3iBmCCWRRR5tUR6Ua1ln7MB8GA1UdIwQY MBaAFJz8YuzckdEZecwdIaR8bsN436Q2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblB4aTdOeVIwUmw1ekIwaHBIeHV3M2pmcERZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9hMzNiMjktYmVmMy00NjFkLTg4Nzgt MjE1NTEyNmIxNjQzLzEvblB4aTdOeVIwUmw1ekIwaHBIeHV3M2pmcERZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC9hMzNiMjktYmVmMy00NjFkLTg4NzgtMjE1NTEyNmIxNjQz LzEvblB4aTdOeVIwUmw1ekIwaHBIeHV3M2pmcERZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgkCdB7Pl vCPYCMUGUcYKPNMyvO5lI0xmtzzEfwTnx1VWNn0PQc9Kv0Q4L44AD4RyYJrVrneS UUT600K96REgHZKoSCPLCFXlFqflJjxJSnBF6Nw5y5RAsrbFE8ku4t4cLV2AsSqQ uDhbvJtzQ31GF7JjM9McvacjuVUQO6P87RQg/H0cBn3pq8e+ECXDsohMJ/H1ntcK hOk6A8cB9C+xK7EcrSwUYtv4NC3SM1hw2QRBcze3ZnJMK11ofC7wNcDVY+F5Km75 BdLP85ZsziCyth6QxChrIOk6nsfavMmPuxgi6Mtn6z+GVRUGGRZdyDIeR4Hge36T Ed77JTE40qVG1Q== -----END CERTIFICATE-----Generated at Mon Dec 29 14:39:36 2025 by rpki-client