This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/a33b29-bef3-461d-8878-2155126b1643/1/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.mft File: nPxi7NyR0Rl5zB0hpHxuw3jfpDY.mft (raw, json) Hash identifier: ET2W9zHbMKH1EIkRqkMuBgR+uzs+VaKjZi1s3B7wI2g= Subject key identifier: 2E:60:6D:B7:C5:E8:5C:AD:58:7C:55:66:3D:A5:B9:AB:14:2E:E9:2D Authority key identifier: 9C:FC:62:EC:DC:91:D1:19:79:CC:1D:21:A4:7C:6E:C3:78:DF:A4:36 Certificate issuer: /CN=9cfc62ecdc91d11979cc1d21a47c6ec378dfa436 Certificate serial: 019B4438FBC98D1D3B5F09DC3C7861506132 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/a33b29-bef3-461d-8878-2155126b1643/1/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.mft Manifest number: 1186 Signing time: Mon 22 Dec 2025 04:02:23 +0000 Manifest this update: Mon 22 Dec 2025 04:02:23 +0000 Manifest next update: Tue 23 Dec 2025 04:02:23 +0000 Files and hashes: 1: BuFdaMS1qY4jt-i_y_cN4QOcG_g.roa (hash: ltXbKfkdHFu9ibmOqMdLpCxXbbDufLPF6M4KyVnL37o=) 2: nPxi7NyR0Rl5zB0hpHxuw3jfpDY.crl (hash: /T5yrHmt2WtY0jNQLOJ5uJVBz+jhHaLyqxdgDgLyNOk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/a33b29-bef3-461d-8878-2155126b1643/1/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/a33b29-bef3-461d-8878-2155126b1643/1/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.mft rsync://rpki.ripe.net/repository/DEFAULT/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 04:02:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:38:fb:c9:8d:1d:3b:5f:09:dc:3c:78:61:50:61:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cfc62ecdc91d11979cc1d21a47c6ec378dfa436 Validity Not Before: Dec 22 04:02:23 2025 GMT Not After : Dec 23 04:02:23 2025 GMT Subject: CN=2e606db7c5e85cad587c55663da5b9ab142ee92d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:9e:c2:26:87:9e:3b:1b:9c:7c:8d:7f:f3:e6: a0:d2:fb:8f:57:7a:76:25:a6:a7:6d:94:1c:e7:73: 28:16:7c:5b:3b:51:e7:1d:65:b4:93:4b:d1:77:83: 39:aa:41:a5:b0:96:cb:60:25:6b:9a:4d:92:ee:b6: 2b:e2:f1:f2:d0:62:cf:49:eb:a8:f4:37:37:8b:26: 97:2f:e0:a1:31:b4:17:bf:d2:45:2d:da:77:4b:d3: 05:63:b2:76:c5:ff:78:82:8c:e4:57:df:7c:39:0d: e0:e7:6e:19:bb:75:6a:9a:4a:f9:d1:f8:80:0f:6a: d5:8b:33:cf:43:12:ed:0c:ec:b8:1b:29:a6:f0:96: 49:41:ca:b7:04:5d:63:ea:79:f8:32:30:a1:29:e7: cd:4a:e1:5f:42:14:3a:d1:53:58:42:8e:80:a7:3a: 10:3a:99:75:bd:6b:f2:02:d1:bb:61:fc:7a:7a:09: a1:b5:d6:de:7a:30:54:16:dd:6e:3b:b2:d3:ca:25: 0c:0a:3e:5d:d7:81:53:78:d3:7f:73:1a:1f:2a:1b: 26:73:e4:12:99:5d:39:17:64:b9:0b:5f:7f:f8:b6: fc:ec:2a:92:e7:d2:3d:93:5d:a6:a1:5a:9f:58:56: df:1c:67:87:69:71:6a:6c:ce:c2:b6:c9:c2:ca:a9: 08:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:60:6D:B7:C5:E8:5C:AD:58:7C:55:66:3D:A5:B9:AB:14:2E:E9:2D X509v3 Authority Key Identifier: keyid:9C:FC:62:EC:DC:91:D1:19:79:CC:1D:21:A4:7C:6E:C3:78:DF:A4:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/a33b29-bef3-461d-8878-2155126b1643/1/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/a33b29-bef3-461d-8878-2155126b1643/1/nPxi7NyR0Rl5zB0hpHxuw3jfpDY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:55:50:3e:af:91:cc:38:6e:68:fa:db:76:13:bb:c2:27:fd: 14:6f:46:0e:8d:8a:0a:65:ca:02:1c:b3:ee:1f:a8:83:53:10: 38:47:29:19:39:d5:8c:a3:b2:66:01:13:18:ce:08:bf:59:09: 15:26:10:6c:7a:6a:61:ff:66:c4:59:27:9d:49:aa:e7:ac:f8: 70:94:2c:cc:ad:90:dc:08:f9:7c:ec:d6:d0:e5:1e:0f:47:f9: 0f:73:cc:f2:8c:19:8b:b1:8b:34:f3:4a:94:84:bf:fb:0e:9c: 53:52:4b:73:0d:61:21:68:e1:55:48:30:5c:47:6f:98:e0:3e: 82:6d:1b:eb:e5:3d:02:a0:4b:5a:4c:5d:58:94:36:90:b4:bc: 99:e6:45:5c:11:fb:ab:f4:99:fc:e1:5e:df:0e:bb:7b:78:4a: 3f:7f:61:db:d7:23:ed:96:d4:3f:96:c2:b5:14:2d:ea:c1:7c: 80:c2:71:32:9a:c6:1c:7f:67:b9:fd:00:93:53:09:d8:2e:51: e3:49:76:af:a3:04:00:98:80:52:d4:53:4d:d2:9c:8f:cc:a4: 62:36:d6:9e:f4:4d:bf:c6:05:27:d0:46:d2:84:dd:5f:8c:0a: 5d:ee:7f:93:5a:9b:d9:ed:70:c8:c7:57:11:7f:0c:02:aa:ff: 82:bc:d2:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEOPvJjR07XwncPHhhUGEyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljZmM2MmVjZGM5MWQxMTk3OWNjMWQyMWE0N2M2ZWMzNzhk ZmE0MzYwHhcNMjUxMjIyMDQwMjIzWhcNMjUxMjIzMDQwMjIzWjAzMTEwLwYDVQQD EygyZTYwNmRiN2M1ZTg1Y2FkNTg3YzU1NjYzZGE1YjlhYjE0MmVlOTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Z7CJoeeOxucfI1/8+ag0vuPV3p2 JaanbZQc53MoFnxbO1HnHWW0k0vRd4M5qkGlsJbLYCVrmk2S7rYr4vHy0GLPSeuo 9Dc3iyaXL+ChMbQXv9JFLdp3S9MFY7J2xf94gozkV998OQ3g524Zu3Vqmkr50fiA D2rVizPPQxLtDOy4Gymm8JZJQcq3BF1j6nn4MjChKefNSuFfQhQ60VNYQo6ApzoQ Opl1vWvyAtG7Yfx6egmhtdbeejBUFt1uO7LTyiUMCj5d14FTeNN/cxofKhsmc+QS mV05F2S5C19/+Lb87CqS59I9k12moVqfWFbfHGeHaXFqbM7CtsnCyqkI3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC5gbbfF6FytWHxVZj2luasULuktMB8GA1UdIwQY MBaAFJz8YuzckdEZecwdIaR8bsN436Q2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblB4aTdOeVIwUmw1ekIwaHBIeHV3M2pmcERZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9hMzNiMjktYmVmMy00NjFkLTg4Nzgt MjE1NTEyNmIxNjQzLzEvblB4aTdOeVIwUmw1ekIwaHBIeHV3M2pmcERZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC9hMzNiMjktYmVmMy00NjFkLTg4NzgtMjE1NTEyNmIxNjQz LzEvblB4aTdOeVIwUmw1ekIwaHBIeHV3M2pmcERZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOVVQPq+R zDhuaPrbdhO7wif9FG9GDo2KCmXKAhyz7h+og1MQOEcpGTnVjKOyZgETGM4Iv1kJ FSYQbHpqYf9mxFknnUmq56z4cJQszK2Q3Aj5fOzW0OUeD0f5D3PM8owZi7GLNPNK lIS/+w6cU1JLcw1hIWjhVUgwXEdvmOA+gm0b6+U9AqBLWkxdWJQ2kLS8meZFXBH7 q/SZ/OFe3w67e3hKP39h29cj7ZbUP5bCtRQt6sF8gMJxMprGHH9nuf0Ak1MJ2C5R 40l2r6MEAJiAUtRTTdKcj8ykYjbWnvRNv8YFJ9BG0oTdX4wKXe5/k1qb2e1wyMdX EX8MAqr/grzSbw== -----END CERTIFICATE-----Generated at Mon Dec 22 12:59:23 2025 by rpki-client