This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/61494c-0744-4991-ab67-0ad3c7962c09/1/nKMZ6lHIADqtlKjifOaUkqouM6g.mft File: nKMZ6lHIADqtlKjifOaUkqouM6g.mft (raw, json) Hash identifier: O7aLfHODayZoyGNpC902qC1sa/E/fGQqNLawF4uScno= Subject key identifier: 37:6B:E0:F5:0F:2C:63:7C:DA:FE:73:AC:06:88:36:92:AD:22:A1:BA Authority key identifier: 9C:A3:19:EA:51:C8:00:3A:AD:94:A8:E2:7C:E6:94:92:AA:2E:33:A8 Certificate issuer: /CN=9ca319ea51c8003aad94a8e27ce69492aa2e33a8 Certificate serial: 019B6FC6A037A412661D4E3DE0769FB5A4BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nKMZ6lHIADqtlKjifOaUkqouM6g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/61494c-0744-4991-ab67-0ad3c7962c09/1/nKMZ6lHIADqtlKjifOaUkqouM6g.mft Manifest number: 17A1 Signing time: Tue 30 Dec 2025 15:00:46 +0000 Manifest this update: Tue 30 Dec 2025 15:00:46 +0000 Manifest next update: Wed 31 Dec 2025 15:00:46 +0000 Files and hashes: 1: F76FpI_z3pp7FvEBXhJ_sZMIEq4.roa (hash: 1qsVc/WLV0a8wJB91bXtNOSX8a5UYSQoJwoErMzZDKk=) 2: nKMZ6lHIADqtlKjifOaUkqouM6g.crl (hash: Bndq0bTM+/QODRjyaWnFZtSv+Xlk6GyMZeKYE8iI+WU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/61494c-0744-4991-ab67-0ad3c7962c09/1/nKMZ6lHIADqtlKjifOaUkqouM6g.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/61494c-0744-4991-ab67-0ad3c7962c09/1/nKMZ6lHIADqtlKjifOaUkqouM6g.mft rsync://rpki.ripe.net/repository/DEFAULT/nKMZ6lHIADqtlKjifOaUkqouM6g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 15:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6f:c6:a0:37:a4:12:66:1d:4e:3d:e0:76:9f:b5:a4:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ca319ea51c8003aad94a8e27ce69492aa2e33a8 Validity Not Before: Dec 30 15:00:46 2025 GMT Not After : Dec 31 15:00:46 2025 GMT Subject: CN=376be0f50f2c637cdafe73ac06883692ad22a1ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:49:91:6b:00:8f:c3:53:27:a2:64:37:50:da: a0:da:91:fe:ae:43:e2:d9:9a:69:52:55:29:a8:2c: 69:5b:65:fb:cb:15:50:93:4a:cb:81:a5:75:ed:51: 43:3e:74:8f:81:e1:dc:b4:c5:cf:4e:10:9b:b7:a3: 92:e3:c9:b3:cf:78:89:7f:2f:25:27:a6:b2:71:b9: fd:b1:b7:14:bc:24:82:01:d8:b1:1c:93:84:fc:bf: 4c:48:1f:1b:f6:3a:c3:7f:e2:68:56:71:ed:98:14: 63:cc:74:5c:ae:d5:20:ef:96:50:fc:6e:61:a7:32: b9:77:cc:92:5f:3b:c7:c9:db:dd:86:e9:45:df:5d: 05:d7:35:55:55:23:3d:b6:19:bf:70:fd:a5:66:27: 91:01:ad:fd:ae:5f:b5:25:2a:bf:02:f7:4f:0a:bb: 01:ba:5e:08:5b:75:b2:c9:69:d8:d7:5e:35:94:48: a6:d5:f3:50:96:f2:cd:37:50:5b:b0:03:ff:ec:38: e1:54:84:09:98:16:cd:35:20:c7:89:e2:cb:c5:a9: f3:71:da:cd:88:8b:cc:77:db:7e:87:a8:82:90:ab: da:8a:de:f7:8f:93:ef:dc:c0:26:02:94:ed:df:94: ca:2e:d5:b6:a7:2a:4d:1d:72:83:86:4a:6d:01:4b: c9:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:6B:E0:F5:0F:2C:63:7C:DA:FE:73:AC:06:88:36:92:AD:22:A1:BA X509v3 Authority Key Identifier: keyid:9C:A3:19:EA:51:C8:00:3A:AD:94:A8:E2:7C:E6:94:92:AA:2E:33:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nKMZ6lHIADqtlKjifOaUkqouM6g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/61494c-0744-4991-ab67-0ad3c7962c09/1/nKMZ6lHIADqtlKjifOaUkqouM6g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/61494c-0744-4991-ab67-0ad3c7962c09/1/nKMZ6lHIADqtlKjifOaUkqouM6g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:56:74:35:e7:e8:39:1e:1b:32:7c:91:fa:be:a0:78:79:a6: 0e:53:f5:d7:26:d6:47:25:dd:28:63:e3:dd:0a:51:9f:c9:4a: 35:86:ae:de:ac:97:74:d7:43:8f:cc:f6:1a:fc:35:60:6a:bd: 1e:da:02:17:5e:38:d1:ce:c9:87:1e:d2:c8:40:57:c3:43:fd: ac:fc:7a:00:f1:d9:c5:5b:d1:1f:a9:09:43:45:f5:1a:4b:19: 9e:bc:c6:05:4c:00:b1:aa:02:29:c9:41:6f:bb:c7:7f:d2:0c: 76:7c:83:7c:f4:5f:46:6d:54:9f:17:4d:34:ef:da:9c:e1:d6: be:21:f0:01:12:3c:68:5a:03:b7:c9:c5:b2:12:45:8e:3a:6f: 8f:44:b2:0e:2f:f0:60:7d:24:23:c5:ee:1f:c2:28:69:5a:e0: 0a:0e:90:26:b5:6e:56:ed:5f:ce:07:5e:2a:66:03:cf:2e:2b: e2:62:22:86:40:05:a4:41:ab:db:48:e3:8d:ec:04:1b:39:cd: d2:af:61:02:cc:25:79:68:93:bf:13:17:62:c7:4e:3b:da:03: 81:88:34:46:41:9f:c1:52:62:2b:1e:44:cf:d7:c3:ec:9f:85: 8a:44:c7:79:97:10:3c:0f:05:2b:62:f0:b2:9d:6a:09:6d:8c: a0:0d:4d:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtvxqA3pBJmHU494HaftaS9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljYTMxOWVhNTFjODAwM2FhZDk0YThlMjdjZTY5NDkyYWEy ZTMzYTgwHhcNMjUxMjMwMTUwMDQ2WhcNMjUxMjMxMTUwMDQ2WjAzMTEwLwYDVQQD EygzNzZiZTBmNTBmMmM2MzdjZGFmZTczYWMwNjg4MzY5MmFkMjJhMWJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskmRawCPw1MnomQ3UNqg2pH+rkPi 2ZppUlUpqCxpW2X7yxVQk0rLgaV17VFDPnSPgeHctMXPThCbt6OS48mzz3iJfy8l J6aycbn9sbcUvCSCAdixHJOE/L9MSB8b9jrDf+JoVnHtmBRjzHRcrtUg75ZQ/G5h pzK5d8ySXzvHydvdhulF310F1zVVVSM9thm/cP2lZieRAa39rl+1JSq/AvdPCrsB ul4IW3WyyWnY1141lEim1fNQlvLNN1BbsAP/7DjhVIQJmBbNNSDHieLLxanzcdrN iIvMd9t+h6iCkKvait73j5Pv3MAmApTt35TKLtW2pypNHXKDhkptAUvJewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDdr4PUPLGN82v5zrAaINpKtIqG6MB8GA1UdIwQY MBaAFJyjGepRyAA6rZSo4nzmlJKqLjOoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbktNWjZsSElBRHF0bEtqaWZPYVVrcW91TTZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC82MTQ5NGMtMDc0NC00OTkxLWFiNjct MGFkM2M3OTYyYzA5LzEvbktNWjZsSElBRHF0bEtqaWZPYVVrcW91TTZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC82MTQ5NGMtMDc0NC00OTkxLWFiNjctMGFkM2M3OTYyYzA5 LzEvbktNWjZsSElBRHF0bEtqaWZPYVVrcW91TTZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqlZ0Nefo OR4bMnyR+r6geHmmDlP11ybWRyXdKGPj3QpRn8lKNYau3qyXdNdDj8z2Gvw1YGq9 HtoCF1440c7Jhx7SyEBXw0P9rPx6APHZxVvRH6kJQ0X1GksZnrzGBUwAsaoCKclB b7vHf9IMdnyDfPRfRm1UnxdNNO/anOHWviHwARI8aFoDt8nFshJFjjpvj0SyDi/w YH0kI8XuH8IoaVrgCg6QJrVuVu1fzgdeKmYDzy4r4mIihkAFpEGr20jjjewEGznN 0q9hAswleWiTvxMXYsdOO9oDgYg0RkGfwVJiKx5Ez9fD7J+FikTHeZcQPA8FK2Lw sp1qCW2MoA1N0w== -----END CERTIFICATE-----Generated at Tue Dec 30 16:35:29 2025 by rpki-client