This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.mft File: NkgvLv77kno8r_6h2R8kF_PS59c.mft (raw, json) Hash identifier: Q9xW+F1bD2JMmRncOOGXu87qvkfoW7lTLyGInIl9vuw= Subject key identifier: 23:34:2A:AD:79:56:73:DA:27:E8:DA:D5:C5:F6:F2:21:0B:F2:25:2F Authority key identifier: 36:48:2F:2E:FE:FB:92:7A:3C:AF:FE:A1:D9:1F:24:17:F3:D2:E7:D7 Certificate issuer: /CN=36482f2efefb927a3caffea1d91f2417f3d2e7d7 Certificate serial: 019B2EFA6A709AA383A91C621F18F0C6F74A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NkgvLv77kno8r_6h2R8kF_PS59c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.mft Manifest number: 1142 Signing time: Thu 18 Dec 2025 01:02:01 +0000 Manifest this update: Thu 18 Dec 2025 01:02:01 +0000 Manifest next update: Fri 19 Dec 2025 01:02:01 +0000 Files and hashes: 1: G4a30ttfjHFxij-eVrmW-fidH94.roa (hash: WeyOFJKV6AN+3rP0u3s/qWHiA31iewGjEQEJOzY4D5I=) 2: NkgvLv77kno8r_6h2R8kF_PS59c.crl (hash: 4TGj0QbZFi3FkYWmKiUqNyOZF0ccKBCM6MB6n/ebUHk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.mft rsync://rpki.ripe.net/repository/DEFAULT/NkgvLv77kno8r_6h2R8kF_PS59c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:02:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:fa:6a:70:9a:a3:83:a9:1c:62:1f:18:f0:c6:f7:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36482f2efefb927a3caffea1d91f2417f3d2e7d7 Validity Not Before: Dec 18 01:02:01 2025 GMT Not After : Dec 19 01:02:01 2025 GMT Subject: CN=23342aad795673da27e8dad5c5f6f2210bf2252f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:c8:59:59:b9:55:21:bd:6a:bc:b6:d1:1e:5d: c9:76:ab:ec:9f:f2:00:3a:ea:b3:ea:c9:37:ac:76: 81:fe:b1:73:f5:65:92:bf:f7:cf:1d:6f:11:1b:7a: 7a:55:86:1c:6c:74:8f:b9:b4:63:23:7f:58:34:ce: cd:fd:e9:29:47:65:e9:58:27:9f:32:18:13:d8:7c: 8a:32:56:0e:a0:9b:80:ec:67:11:08:26:46:f0:e9: 20:dc:6a:1f:35:f2:84:2f:fb:0d:7e:50:f7:0c:d5: 3a:eb:b5:5a:33:e4:a1:40:99:25:92:92:62:3e:a3: 71:b3:13:37:09:db:97:9b:03:18:55:82:67:34:2f: b7:13:8c:1b:e8:a1:81:d2:c0:ef:a7:36:a3:e2:b7: 9f:76:44:46:9b:5f:de:08:9a:01:e9:63:81:cf:d7: 35:4d:bb:3c:87:09:56:9c:b5:5f:b6:36:9c:00:10: 26:bf:68:a6:9b:cc:60:c7:db:06:f7:74:84:7a:66: 07:1a:82:40:87:0d:f4:e4:1e:c8:5a:e4:40:d8:14: 0f:31:18:c4:8d:d9:30:f0:0d:b5:67:ce:18:a5:a6: 92:22:70:c6:d6:9a:2e:1f:fe:6e:dd:58:bf:d2:c9: a5:fc:1a:0a:68:aa:87:e7:a8:4d:1b:d9:b0:59:f5: 7c:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:34:2A:AD:79:56:73:DA:27:E8:DA:D5:C5:F6:F2:21:0B:F2:25:2F X509v3 Authority Key Identifier: keyid:36:48:2F:2E:FE:FB:92:7A:3C:AF:FE:A1:D9:1F:24:17:F3:D2:E7:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkgvLv77kno8r_6h2R8kF_PS59c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:f3:f6:67:34:bc:b4:ef:fa:ba:28:73:04:76:1f:21:de:a8: 4c:28:26:4d:4a:aa:b2:be:e5:93:9f:bf:96:14:39:ea:53:e2: 4f:19:c5:02:fc:f2:61:e1:b5:c5:74:86:8c:5e:24:23:82:a9: f4:b6:c8:e2:4a:84:75:36:3b:99:dc:b2:3b:31:13:65:11:c3: e8:d4:38:6c:fb:f0:97:4e:c3:9c:da:29:f9:7a:7e:78:25:41: 61:8c:b0:48:d1:39:b7:3f:e0:25:34:ef:57:22:af:08:2a:99: 64:e1:64:d9:d3:e6:8a:7e:40:a0:7b:0d:ad:41:00:f5:3b:83: bc:e6:d1:97:c6:28:5f:0b:7d:35:5c:c2:d1:3e:1a:cf:cf:87: 34:1b:ae:32:03:86:94:5f:a9:13:1e:cb:64:98:67:2a:b0:c0: b8:79:f9:c0:41:89:3c:1e:2f:67:03:64:e0:d0:e9:3c:b6:98: 30:18:22:6a:d4:69:e7:fe:30:74:cf:65:53:44:53:6b:49:85: 95:d4:a8:55:e5:52:5b:5b:6b:c0:10:d7:59:ba:22:1d:cf:75: 5b:33:0d:b6:1a:2d:a6:bd:f3:ce:47:82:47:db:40:2a:7f:8f: 39:c2:0c:8f:53:0f:77:1b:50:fd:23:16:35:1c:75:e2:49:6c: 88:99:ee:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+mpwmqODqRxiHxjwxvdKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2NDgyZjJlZmVmYjkyN2EzY2FmZmVhMWQ5MWYyNDE3ZjNk MmU3ZDcwHhcNMjUxMjE4MDEwMjAxWhcNMjUxMjE5MDEwMjAxWjAzMTEwLwYDVQQD EygyMzM0MmFhZDc5NTY3M2RhMjdlOGRhZDVjNWY2ZjIyMTBiZjIyNTJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5chZWblVIb1qvLbRHl3Jdqvsn/IA Ouqz6sk3rHaB/rFz9WWSv/fPHW8RG3p6VYYcbHSPubRjI39YNM7N/ekpR2XpWCef MhgT2HyKMlYOoJuA7GcRCCZG8Okg3GofNfKEL/sNflD3DNU667VaM+ShQJklkpJi PqNxsxM3CduXmwMYVYJnNC+3E4wb6KGB0sDvpzaj4refdkRGm1/eCJoB6WOBz9c1 Tbs8hwlWnLVftjacABAmv2imm8xgx9sG93SEemYHGoJAhw305B7IWuRA2BQPMRjE jdkw8A21Z84YpaaSInDG1pouH/5u3Vi/0sml/BoKaKqH56hNG9mwWfV8xQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCM0Kq15VnPaJ+ja1cX28iEL8iUvMB8GA1UdIwQY MBaAFDZILy7++5J6PK/+odkfJBfz0ufXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmtndkx2Nzdrbm84cl82aDJSOGtGX1BTNTljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9lNGIwMGMtYTkyOS00OGQ0LWI3ZDgt NzY4ODczMWJlZDlkLzEvTmtndkx2Nzdrbm84cl82aDJSOGtGX1BTNTljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi9lNGIwMGMtYTkyOS00OGQ0LWI3ZDgtNzY4ODczMWJlZDlk LzEvTmtndkx2Nzdrbm84cl82aDJSOGtGX1BTNTljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnvP2ZzS8 tO/6uihzBHYfId6oTCgmTUqqsr7lk5+/lhQ56lPiTxnFAvzyYeG1xXSGjF4kI4Kp 9LbI4kqEdTY7mdyyOzETZRHD6NQ4bPvwl07DnNop+Xp+eCVBYYywSNE5tz/gJTTv VyKvCCqZZOFk2dPmin5AoHsNrUEA9TuDvObRl8YoXwt9NVzC0T4az8+HNBuuMgOG lF+pEx7LZJhnKrDAuHn5wEGJPB4vZwNk4NDpPLaYMBgiatRp5/4wdM9lU0RTa0mF ldSoVeVSW1trwBDXWboiHc91WzMNthotpr3zzkeCR9tAKn+POcIMj1MPdxtQ/SMW NRx14klsiJnuvw== -----END CERTIFICATE-----Generated at Thu Dec 18 11:11:34 2025 by rpki-client