This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft File: NkK7yD4owQPBfVogHt71ZyY02-g.mft (raw, json) Hash identifier: R052IpYFjHqOV7BruEhUBbeXskTTc/U9+WpgBPtQOIU= Subject key identifier: 88:76:B3:40:48:FA:6B:BE:65:E2:57:5F:C4:7B:8F:DC:DF:12:B8:F4 Authority key identifier: 36:42:BB:C8:3E:28:C1:03:C1:7D:5A:20:1E:DE:F5:67:26:34:DB:E8 Certificate issuer: /CN=3642bbc83e28c103c17d5a201edef5672634dbe8 Certificate serial: 019B3E6CE7CFD0DC6E5E32C64DDA2AE35026 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NkK7yD4owQPBfVogHt71ZyY02-g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft Manifest number: 1285 Signing time: Sun 21 Dec 2025 01:01:23 +0000 Manifest this update: Sun 21 Dec 2025 01:01:23 +0000 Manifest next update: Mon 22 Dec 2025 01:01:23 +0000 Files and hashes: 1: NkK7yD4owQPBfVogHt71ZyY02-g.crl (hash: MjPPr+T/PwB8hUf6rGM4HTjG+M6zrLgAvcmlQWYbNqQ=) 2: saaFFJdprL2UcH3v0LL3zZpp7jc.roa (hash: YyF7BBYn0BiV4oWuG7tgrnT28h9nKay6fwuXu0twrBw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft rsync://rpki.ripe.net/repository/DEFAULT/NkK7yD4owQPBfVogHt71ZyY02-g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:e7:cf:d0:dc:6e:5e:32:c6:4d:da:2a:e3:50:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3642bbc83e28c103c17d5a201edef5672634dbe8 Validity Not Before: Dec 21 01:01:23 2025 GMT Not After : Dec 22 01:01:23 2025 GMT Subject: CN=8876b34048fa6bbe65e2575fc47b8fdcdf12b8f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e7:2f:a8:17:3d:a6:74:55:fa:d7:13:99:4f: 33:73:d7:98:9f:48:da:ec:1b:c5:2a:f0:e4:62:b6: a1:7f:21:af:b8:4f:27:fb:40:d8:82:e6:45:4b:c6: a2:19:93:a8:cc:da:dc:3a:ba:70:2f:cf:d5:08:43: d0:73:17:1e:84:69:28:9f:8c:38:7a:68:23:5b:be: eb:69:c4:12:45:3e:be:27:c9:9e:ab:b8:e5:34:e2: 31:d0:39:4d:77:25:93:3b:54:10:9c:34:8b:9c:01: 55:e2:f0:80:7a:3c:63:14:1d:84:a2:7f:2f:04:73: 9e:4b:45:af:c1:bb:82:4b:eb:1e:a7:1c:03:3e:08: bc:29:f9:0f:c5:20:bf:42:f0:f5:a1:20:2f:a3:1c: 17:17:6f:8b:27:d8:d6:5d:89:49:54:b8:77:3f:51: 15:7d:f8:37:46:ef:12:08:e8:79:29:a8:93:54:ee: 2c:10:d8:ae:83:d5:71:7a:9e:c0:82:55:8a:14:f3: d3:92:3c:34:ea:79:16:8c:7c:aa:f5:0b:ba:44:8b: 52:f2:6b:ff:35:83:d8:0c:46:d0:55:8e:90:ca:bc: b2:c9:d9:20:e2:82:3a:f7:e2:eb:fe:da:0c:47:2b: 6d:e8:d4:cd:06:bb:0c:22:76:2a:f1:5d:84:77:0c: cc:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:76:B3:40:48:FA:6B:BE:65:E2:57:5F:C4:7B:8F:DC:DF:12:B8:F4 X509v3 Authority Key Identifier: keyid:36:42:BB:C8:3E:28:C1:03:C1:7D:5A:20:1E:DE:F5:67:26:34:DB:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkK7yD4owQPBfVogHt71ZyY02-g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:f7:ab:30:d7:d0:1d:5b:48:27:bb:12:33:46:6b:93:e0:73: 7a:ca:16:59:f6:3c:e0:cd:e7:c1:b1:8f:ab:b0:f2:ab:6f:67: 52:5f:33:1a:1f:af:48:52:bb:05:64:51:a2:09:18:79:e5:bc: cc:6a:bd:6f:8f:0a:bf:96:ce:0d:11:4a:77:34:d8:79:10:29: be:7d:00:91:b0:c0:2a:ea:02:0a:9e:8c:c3:cc:36:72:4a:c0: e0:54:3a:41:bd:3a:30:cd:2c:19:e5:07:3e:75:82:f1:f6:4d: 6a:b1:33:5c:6a:7f:c5:4f:a0:24:46:51:85:9c:91:57:eb:ae: 12:dd:1d:88:e6:1d:ad:00:69:4e:17:9e:8a:19:28:a5:69:0d: 0c:f9:4f:78:ee:7b:49:d7:ea:59:dd:3a:00:f2:ec:5d:bb:2f: 5f:ac:98:9c:33:42:d1:20:a4:ff:a6:21:fb:0e:45:c8:33:c4: a1:b0:b6:07:7a:76:c2:ff:2e:40:79:d1:66:0f:db:a4:44:fc: 8b:18:f3:0a:ac:58:de:9a:51:6b:6e:4d:d8:da:ce:2c:b4:05: 8d:f2:3f:18:26:28:66:a5:d6:32:20:8e:04:a8:10:22:a1:9a: 22:0a:b6:c4:e4:1a:40:b3:a6:88:5c:21:0c:a8:88:43:24:4b: 57:f8:f4:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bOfP0NxuXjLGTdoq41AmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2NDJiYmM4M2UyOGMxMDNjMTdkNWEyMDFlZGVmNTY3MjYz NGRiZTgwHhcNMjUxMjIxMDEwMTIzWhcNMjUxMjIyMDEwMTIzWjAzMTEwLwYDVQQD Eyg4ODc2YjM0MDQ4ZmE2YmJlNjVlMjU3NWZjNDdiOGZkY2RmMTJiOGY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOcvqBc9pnRV+tcTmU8zc9eYn0ja 7BvFKvDkYrahfyGvuE8n+0DYguZFS8aiGZOozNrcOrpwL8/VCEPQcxcehGkon4w4 emgjW77racQSRT6+J8meq7jlNOIx0DlNdyWTO1QQnDSLnAFV4vCAejxjFB2Eon8v BHOeS0WvwbuCS+sepxwDPgi8KfkPxSC/QvD1oSAvoxwXF2+LJ9jWXYlJVLh3P1EV ffg3Ru8SCOh5KaiTVO4sENiug9Vxep7AglWKFPPTkjw06nkWjHyq9Qu6RItS8mv/ NYPYDEbQVY6Qyryyydkg4oI69+Lr/toMRytt6NTNBrsMInYq8V2EdwzMbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIh2s0BI+mu+ZeJXX8R7j9zfErj0MB8GA1UdIwQY MBaAFDZCu8g+KMEDwX1aIB7e9WcmNNvoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmtLN3lENG93UVBCZlZvZ0h0NzFaeVkwMi1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8xNTE5YTktYWM5Zi00ZjVkLWJmNGYt NmNiMmUwMmNhZWYyLzEvTmtLN3lENG93UVBCZlZvZ0h0NzFaeVkwMi1nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS8xNTE5YTktYWM5Zi00ZjVkLWJmNGYtNmNiMmUwMmNhZWYy LzEvTmtLN3lENG93UVBCZlZvZ0h0NzFaeVkwMi1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG/erMNfQ HVtIJ7sSM0Zrk+BzesoWWfY84M3nwbGPq7Dyq29nUl8zGh+vSFK7BWRRogkYeeW8 zGq9b48Kv5bODRFKdzTYeRApvn0AkbDAKuoCCp6Mw8w2ckrA4FQ6Qb06MM0sGeUH PnWC8fZNarEzXGp/xU+gJEZRhZyRV+uuEt0diOYdrQBpTheeihkopWkNDPlPeO57 SdfqWd06APLsXbsvX6yYnDNC0SCk/6Yh+w5FyDPEobC2B3p2wv8uQHnRZg/bpET8 ixjzCqxY3ppRa25N2NrOLLQFjfI/GCYoZqXWMiCOBKgQIqGaIgq2xOQaQLOmiFwh DKiIQyRLV/j0wg== -----END CERTIFICATE-----Generated at Sun Dec 21 05:37:38 2025 by rpki-client