This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft File: nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft (raw, json) Hash identifier: SvqYpqrbS1MF+5I24V6xPV1evrhokP2jTV3HqzCXWW4= Subject key identifier: 80:FF:56:1C:2E:B1:62:FF:9C:EE:BB:6A:17:70:45:AB:49:C7:76:29 Authority key identifier: 9C:C5:C3:5D:98:68:6F:3D:8A:38:74:17:1B:14:32:87:F5:E3:E7:33 Certificate issuer: /CN=9cc5c35d98686f3d8a3874171b143287f5e3e733 Certificate serial: 019B71B5062CFDB3E505ACD1101A1215AC32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nMXDXZhobz2KOHQXGxQyh_Xj5zM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft Manifest number: 03C6 Signing time: Wed 31 Dec 2025 00:00:47 +0000 Manifest this update: Wed 31 Dec 2025 00:00:47 +0000 Manifest next update: Thu 01 Jan 2026 00:00:47 +0000 Files and hashes: 1: BqZIe6gQs5PVIE84eQo2_DOFBSU.roa (hash: U/7+ugA60UPkZBbdU298MJ3Zk+Vay3cife8TG24P130=) 2: nMXDXZhobz2KOHQXGxQyh_Xj5zM.crl (hash: LomNRMgJfitx2R1DDrBeNSRdEUqRRkrq1Rht7NSXTM4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft rsync://rpki.ripe.net/repository/DEFAULT/nMXDXZhobz2KOHQXGxQyh_Xj5zM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:71:b5:06:2c:fd:b3:e5:05:ac:d1:10:1a:12:15:ac:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cc5c35d98686f3d8a3874171b143287f5e3e733 Validity Not Before: Dec 31 00:00:47 2025 GMT Not After : Jan 1 00:00:47 2026 GMT Subject: CN=80ff561c2eb162ff9ceebb6a177045ab49c77629 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ca:81:02:f3:a8:f5:a5:e0:fa:15:4d:99:6f: a6:15:4c:2a:5f:10:ae:ba:5f:18:a7:3f:a8:2e:a8: c1:9a:70:a7:00:c3:2a:ad:d2:91:21:c3:df:6f:97: b4:ad:f7:78:a9:3e:54:cd:51:cc:d7:c7:b3:b5:0e: 44:c3:e1:09:45:07:e9:6c:0a:2f:df:69:7b:60:d2: 97:0c:fe:70:94:74:22:7c:46:e9:35:f8:10:3b:12: e2:46:ff:e1:86:ff:0f:6e:ca:17:bc:ea:96:e1:2c: 31:c6:f6:e9:5b:25:d5:cc:a4:47:5b:bc:7b:a7:c0: 6e:6e:95:9a:64:85:f0:42:c3:53:1f:04:9a:29:a4: 9f:a3:da:c6:e8:87:e7:95:f7:00:f8:18:ec:ff:82: ca:ce:b3:75:ad:da:ec:cc:9b:0e:67:1f:e8:b8:60: c8:04:4a:75:fb:c5:b6:ea:34:d3:bb:b1:55:a2:e2: 39:ae:8a:c6:10:a8:3c:f5:94:1f:82:39:d4:36:44: 6a:6c:b5:01:36:ea:73:dc:d8:8f:14:4b:e8:cf:d2: 50:fb:41:30:06:93:cb:bb:96:8e:8b:2d:ed:76:c9: 33:99:07:29:c4:90:2c:2f:51:67:a8:63:91:80:19: 53:7b:62:05:6c:8b:60:8f:0d:ee:0c:21:2b:89:d1: 50:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:FF:56:1C:2E:B1:62:FF:9C:EE:BB:6A:17:70:45:AB:49:C7:76:29 X509v3 Authority Key Identifier: keyid:9C:C5:C3:5D:98:68:6F:3D:8A:38:74:17:1B:14:32:87:F5:E3:E7:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nMXDXZhobz2KOHQXGxQyh_Xj5zM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:12:db:4b:b8:4e:69:3b:f7:3f:13:ff:50:3f:a9:6d:30:d9: 6a:a1:5a:d4:42:9b:e9:4c:96:ea:66:fe:79:42:ad:80:f4:17: 08:4f:be:09:78:bb:6f:d1:e5:91:13:5c:8b:53:0d:26:ed:ee: 74:b8:30:04:0c:b6:10:34:1b:20:06:d7:0a:8c:a3:22:12:5c: 7e:2b:fa:ac:dd:82:62:30:5e:1f:72:e4:66:03:96:84:a4:f9: 2c:38:47:96:02:20:97:0b:5c:bd:57:79:67:3b:92:a7:81:1d: 25:ce:38:91:36:18:7e:de:91:f8:94:33:e9:0a:57:c1:aa:36: 1b:96:ce:4c:e4:95:3d:af:17:d0:d7:d6:eb:10:e1:30:74:5a: 03:7a:17:80:40:0f:14:66:74:91:a6:a8:73:56:b1:cc:2a:e0: 7b:71:b3:de:64:28:de:9b:70:86:c8:00:dc:0c:df:fd:03:06: 2d:1e:ba:0b:ec:6e:32:e0:69:05:53:44:09:69:92:1b:65:6b: f2:10:9c:4d:ce:45:62:8f:ac:9b:85:bf:37:97:cf:55:46:6b: a1:d8:bc:f0:9b:f1:87:5f:36:27:70:55:88:56:09:e8:d0:cf: d0:a6:e5:f2:41:6f:cb:14:08:87:fd:ad:ab:31:48:3d:5c:5c: 5d:5a:98:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtxtQYs/bPlBazREBoSFawyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljYzVjMzVkOTg2ODZmM2Q4YTM4NzQxNzFiMTQzMjg3ZjVl M2U3MzMwHhcNMjUxMjMxMDAwMDQ3WhcNMjYwMTAxMDAwMDQ3WjAzMTEwLwYDVQQD Eyg4MGZmNTYxYzJlYjE2MmZmOWNlZWJiNmExNzcwNDVhYjQ5Yzc3NjI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8qBAvOo9aXg+hVNmW+mFUwqXxCu ul8Ypz+oLqjBmnCnAMMqrdKRIcPfb5e0rfd4qT5UzVHM18eztQ5Ew+EJRQfpbAov 32l7YNKXDP5wlHQifEbpNfgQOxLiRv/hhv8PbsoXvOqW4SwxxvbpWyXVzKRHW7x7 p8BubpWaZIXwQsNTHwSaKaSfo9rG6IfnlfcA+Bjs/4LKzrN1rdrszJsOZx/ouGDI BEp1+8W26jTTu7FVouI5rorGEKg89ZQfgjnUNkRqbLUBNupz3NiPFEvoz9JQ+0Ew BpPLu5aOiy3tdskzmQcpxJAsL1FnqGORgBlTe2IFbItgjw3uDCEridFQGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFID/VhwusWL/nO67ahdwRatJx3YpMB8GA1UdIwQY MBaAFJzFw12YaG89ijh0FxsUMof14+czMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbk1YRFhaaG9iejJLT0hRWEd4UXloX1hqNXpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8xMTg2ZTQtMGMxNC00YjgwLTk5ODEt ZTg3NTEwM2ZhZjEyLzEvbk1YRFhaaG9iejJLT0hRWEd4UXloX1hqNXpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8xMTg2ZTQtMGMxNC00YjgwLTk5ODEtZTg3NTEwM2ZhZjEy LzEvbk1YRFhaaG9iejJLT0hRWEd4UXloX1hqNXpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADxLbS7hO aTv3PxP/UD+pbTDZaqFa1EKb6UyW6mb+eUKtgPQXCE++CXi7b9HlkRNci1MNJu3u dLgwBAy2EDQbIAbXCoyjIhJcfiv6rN2CYjBeH3LkZgOWhKT5LDhHlgIglwtcvVd5 ZzuSp4EdJc44kTYYft6R+JQz6QpXwao2G5bOTOSVPa8X0NfW6xDhMHRaA3oXgEAP FGZ0kaaoc1axzCrge3Gz3mQo3ptwhsgA3Azf/QMGLR66C+xuMuBpBVNECWmSG2Vr 8hCcTc5FYo+sm4W/N5fPVUZrodi88Jvxh182J3BViFYJ6NDP0Kbl8kFvyxQIh/2t qzFIPVxcXVqYmQ== -----END CERTIFICATE-----Generated at Wed Dec 31 09:24:12 2025 by rpki-client