This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.mft File: nJGTyUKgcOtue3bTPBFwwauqq8A.mft (raw, json) Hash identifier: flepYtVs+yjTVBoWi1qMDgwQrAk4OEmxO8XcMbYQ0M4= Subject key identifier: C6:D6:70:41:EC:1A:86:12:3A:B8:67:CD:2B:A4:63:82:2B:A9:40:53 Authority key identifier: 9C:91:93:C9:42:A0:70:EB:6E:7B:76:D3:3C:11:70:C1:AB:AA:AB:C0 Certificate issuer: /CN=9c9193c942a070eb6e7b76d33c1170c1abaaabc0 Certificate serial: 019B3C1091A0B67AFB4F21FC4B10841A14E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nJGTyUKgcOtue3bTPBFwwauqq8A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.mft Manifest number: 028D Signing time: Sat 20 Dec 2025 14:01:17 +0000 Manifest this update: Sat 20 Dec 2025 14:01:17 +0000 Manifest next update: Sun 21 Dec 2025 14:01:17 +0000 Files and hashes: 1: nJGTyUKgcOtue3bTPBFwwauqq8A.crl (hash: YoUIqwd8uGKO9R7SrGnYHSzK85gUU6zC4zkJzIiV4UU=) 2: zsKGqfleCvDMwN0xjyFpS4xkenw.roa (hash: i/u/9VVtT03r4id3fmUnH+SfZ7Nvzq19dchi8Dl+uKg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.mft rsync://rpki.ripe.net/repository/DEFAULT/nJGTyUKgcOtue3bTPBFwwauqq8A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:91:a0:b6:7a:fb:4f:21:fc:4b:10:84:1a:14:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c9193c942a070eb6e7b76d33c1170c1abaaabc0 Validity Not Before: Dec 20 14:01:17 2025 GMT Not After : Dec 21 14:01:17 2025 GMT Subject: CN=c6d67041ec1a86123ab867cd2ba463822ba94053 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:fe:1f:92:eb:3f:db:1d:ee:82:94:43:ce:e8: ee:03:4e:cd:a7:82:bf:c1:19:7b:83:95:2f:af:e6: 20:57:d4:f3:a6:c1:a5:2f:08:d4:57:54:0e:df:65: 17:1e:29:c6:2f:23:1f:84:7d:c6:e5:9a:e0:ec:7c: 03:64:8d:ab:cb:ae:62:a5:0f:fc:29:c9:56:63:e2: cc:c8:8d:e7:4b:62:3f:49:72:3c:6e:94:ca:b4:5b: 97:d8:3d:e3:01:d6:a8:b7:e8:99:3d:8e:a3:41:fa: f5:26:5f:03:b1:77:69:23:14:4d:22:a0:38:2b:31: 91:94:e7:53:20:e2:7c:09:02:02:cc:13:80:a1:46: 56:28:d7:84:85:c0:c9:ee:f2:a9:09:da:c9:ab:bb: 16:84:07:d6:94:c5:dd:0b:de:21:d6:51:8a:76:67: 71:b0:27:52:11:c6:96:c5:dc:7b:b9:75:ab:0d:16: 9d:76:67:68:09:03:70:60:ba:f9:33:8d:61:1f:b5: 90:67:18:88:f6:fb:68:43:bb:85:b9:a8:4e:23:8f: 6f:fa:31:e7:ab:9c:f4:42:00:5c:b7:e3:03:31:94: 69:27:ab:77:c4:41:d9:49:38:38:05:53:df:fd:ac: 18:a2:4a:ef:e7:81:61:72:6b:1c:98:8f:49:92:6f: 0e:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:D6:70:41:EC:1A:86:12:3A:B8:67:CD:2B:A4:63:82:2B:A9:40:53 X509v3 Authority Key Identifier: keyid:9C:91:93:C9:42:A0:70:EB:6E:7B:76:D3:3C:11:70:C1:AB:AA:AB:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJGTyUKgcOtue3bTPBFwwauqq8A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:a8:1c:ce:71:11:44:a9:0f:b3:eb:42:43:2f:9f:c6:16:94: 2c:6c:2a:7d:bc:07:99:14:cc:19:62:17:30:99:b5:c7:65:7c: 42:f5:fc:0e:cd:22:44:0e:6c:46:b8:d0:58:19:29:0d:a7:84: 30:6d:92:36:07:47:3a:e4:24:69:64:fa:71:82:a6:eb:16:e8: 55:0f:79:82:2b:41:76:9b:a4:a5:6d:cb:e9:e9:45:a8:95:74: cc:e2:2e:bc:14:9a:26:c6:26:b4:4a:62:dc:4a:19:26:dd:fa: 40:7e:ad:c1:3f:d1:0d:b6:54:1b:8d:7c:1b:ba:63:25:c6:98: 34:34:40:e8:5f:b7:a0:ca:80:22:14:ee:82:7c:8b:41:29:94: b5:1d:05:23:c1:c6:f6:1a:4c:46:86:60:ed:cb:ef:c7:54:d7: d1:77:da:18:d4:e4:d8:4b:9a:86:b0:ea:86:b2:6f:d7:5c:c6: 2d:51:bc:3e:fe:93:79:b3:20:a7:c9:67:35:b2:17:17:96:be: e8:59:6b:80:3f:54:0b:82:93:03:bf:4b:2f:65:b5:d3:1c:f8: 16:0a:be:19:66:76:37:d8:6c:3f:11:c3:4f:11:e8:c1:99:d4: 43:08:b4:da:9c:e1:66:60:30:43:54:2c:bf:69:6e:f8:b1:d1: 22:9e:8d:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8EJGgtnr7TyH8SxCEGhThMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljOTE5M2M5NDJhMDcwZWI2ZTdiNzZkMzNjMTE3MGMxYWJh YWFiYzAwHhcNMjUxMjIwMTQwMTE3WhcNMjUxMjIxMTQwMTE3WjAzMTEwLwYDVQQD EyhjNmQ2NzA0MWVjMWE4NjEyM2FiODY3Y2QyYmE0NjM4MjJiYTk0MDUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/4fkus/2x3ugpRDzujuA07Np4K/ wRl7g5Uvr+YgV9TzpsGlLwjUV1QO32UXHinGLyMfhH3G5Zrg7HwDZI2ry65ipQ/8 KclWY+LMyI3nS2I/SXI8bpTKtFuX2D3jAdaot+iZPY6jQfr1Jl8DsXdpIxRNIqA4 KzGRlOdTIOJ8CQICzBOAoUZWKNeEhcDJ7vKpCdrJq7sWhAfWlMXdC94h1lGKdmdx sCdSEcaWxdx7uXWrDRaddmdoCQNwYLr5M41hH7WQZxiI9vtoQ7uFuahOI49v+jHn q5z0QgBct+MDMZRpJ6t3xEHZSTg4BVPf/awYokrv54FhcmscmI9Jkm8OcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMbWcEHsGoYSOrhnzSukY4IrqUBTMB8GA1UdIwQY MBaAFJyRk8lCoHDrbnt20zwRcMGrqqvAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkpHVHlVS2djT3R1ZTNiVFBCRnd3YXVxcThBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9lNjdlODItNzRkMS00NTk4LTgwZWUt Y2UwZTk3YmFiNmE3LzEvbkpHVHlVS2djT3R1ZTNiVFBCRnd3YXVxcThBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC9lNjdlODItNzRkMS00NTk4LTgwZWUtY2UwZTk3YmFiNmE3 LzEvbkpHVHlVS2djT3R1ZTNiVFBCRnd3YXVxcThBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtqgcznER RKkPs+tCQy+fxhaULGwqfbwHmRTMGWIXMJm1x2V8QvX8Ds0iRA5sRrjQWBkpDaeE MG2SNgdHOuQkaWT6cYKm6xboVQ95gitBdpukpW3L6elFqJV0zOIuvBSaJsYmtEpi 3EoZJt36QH6twT/RDbZUG418G7pjJcaYNDRA6F+3oMqAIhTugnyLQSmUtR0FI8HG 9hpMRoZg7cvvx1TX0XfaGNTk2EuahrDqhrJv11zGLVG8Pv6TebMgp8lnNbIXF5a+ 6FlrgD9UC4KTA79LL2W10xz4Fgq+GWZ2N9hsPxHDTxHowZnUQwi02pzhZmAwQ1Qs v2lu+LHRIp6N4w== -----END CERTIFICATE-----Generated at Sat Dec 20 18:09:45 2025 by rpki-client