This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.mft File: nKihMlGaJClJSXNjuMqjPnLGc_g.mft (raw, json) Hash identifier: Rbb1ADuBclsafdH6hQqHx8t3iPlEh8ewPd1SOPchwQM= Subject key identifier: 73:80:8C:5E:E7:A7:1E:F8:4D:68:93:A9:CE:BC:C3:2A:D3:F5:30:DE Authority key identifier: 9C:A8:A1:32:51:9A:24:29:49:49:73:63:B8:CA:A3:3E:72:C6:73:F8 Certificate issuer: /CN=9ca8a132519a242949497363b8caa33e72c673f8 Certificate serial: 019B40916DA38D2AE972F548406A7E730A46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nKihMlGaJClJSXNjuMqjPnLGc_g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.mft Manifest number: 1189 Signing time: Sun 21 Dec 2025 11:00:31 +0000 Manifest this update: Sun 21 Dec 2025 11:00:31 +0000 Manifest next update: Mon 22 Dec 2025 11:00:31 +0000 Files and hashes: 1: dXm9nDAbHEfPr8e0rvdta5vcQCQ.roa (hash: ZAX5/DrLWdB1icFKrgXw3Y2Wbffkldc6zIYnws0ruBM=) 2: iRubAGtbRFzHiw3kU73WMgNN_Ew.roa (hash: zVFcmjx3cq29/V7ruFQJSBuo9AC0OuJEahRAn89+q2w=) 3: nKihMlGaJClJSXNjuMqjPnLGc_g.crl (hash: Niyn7et5z29wxV689tfu94qa8Z0/CEbp0aD33CRQuAo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.mft rsync://rpki.ripe.net/repository/DEFAULT/nKihMlGaJClJSXNjuMqjPnLGc_g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:91:6d:a3:8d:2a:e9:72:f5:48:40:6a:7e:73:0a:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ca8a132519a242949497363b8caa33e72c673f8 Validity Not Before: Dec 21 11:00:31 2025 GMT Not After : Dec 22 11:00:31 2025 GMT Subject: CN=73808c5ee7a71ef84d6893a9cebcc32ad3f530de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:c3:95:e5:16:34:22:1e:00:80:5f:46:76:b2: f4:36:66:88:27:88:f9:cb:00:e5:9c:7e:e3:4b:d1: 4a:38:67:d7:95:be:41:ae:d3:2e:05:02:d3:ec:1a: f1:ab:0c:16:a3:66:cb:34:c4:89:c5:a9:11:13:00: 01:29:0b:62:1c:ea:13:80:2d:a2:ab:30:49:06:4f: f5:00:53:45:ab:1b:31:d5:49:61:b5:42:2d:69:1b: 61:4f:33:b9:cd:c7:3f:d9:99:9f:35:7b:5a:fe:60: 39:96:c4:7c:f7:b9:4d:f2:12:6e:48:87:be:07:37: 5c:59:ca:0f:85:b0:6c:31:da:18:1a:d1:bf:d8:82: 96:15:1e:2d:1b:44:c4:1e:d6:64:7f:8b:b0:0e:ef: 9d:9c:c3:bf:30:44:a9:91:cd:59:e1:e7:45:28:20: b6:92:84:04:bf:14:8f:f4:22:c3:ae:2a:b8:37:45: 5d:1e:21:41:90:8b:dc:a6:f4:15:26:dd:46:99:09: e1:ff:b1:16:05:cf:ff:d5:86:d4:68:83:ca:60:47: 9b:15:c4:2e:e2:32:68:2d:3b:18:3b:df:2a:b9:e8: db:dc:71:8f:9f:62:01:21:b5:63:e0:0a:c7:87:db: c8:e2:9b:f8:40:d4:62:3e:87:a0:b4:06:44:af:78: fc:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:80:8C:5E:E7:A7:1E:F8:4D:68:93:A9:CE:BC:C3:2A:D3:F5:30:DE X509v3 Authority Key Identifier: keyid:9C:A8:A1:32:51:9A:24:29:49:49:73:63:B8:CA:A3:3E:72:C6:73:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nKihMlGaJClJSXNjuMqjPnLGc_g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:af:4e:d1:84:34:86:3e:b8:9f:01:b8:1d:49:9f:32:4a:1c: 9f:f1:a5:92:34:58:37:18:02:0f:bc:d7:0b:05:d0:be:bb:c4: 04:5d:b2:66:44:9d:67:95:30:46:a1:3a:a6:78:92:19:4f:05: 75:31:1d:f4:b0:d3:a2:97:f0:6f:8e:b5:74:3d:e5:52:64:d4: fc:81:58:03:f9:ce:f6:48:20:01:82:db:5a:be:84:46:96:42: 90:31:64:94:bc:67:16:14:31:a5:ff:38:5a:0c:eb:4b:31:82: e4:8f:90:dd:6f:9b:37:0e:80:3a:4c:50:8e:9a:d1:d5:84:13: 06:c3:87:a2:d3:8f:f9:24:79:f6:bb:c1:45:3b:5a:44:64:cf: 5e:2f:28:b3:23:7a:6d:de:63:98:b1:82:36:4e:f2:06:2d:5d: e2:0a:2e:4a:de:a2:32:94:ae:40:81:b5:f4:04:2d:79:00:5a: 30:ef:8e:73:76:37:03:c3:37:cb:1a:b7:14:c3:af:25:9e:e5: 6e:2f:76:a8:eb:12:78:c7:df:9f:9d:97:cd:fa:bc:3e:78:15: b0:79:82:73:63:58:c8:ac:94:4d:23:1e:5e:20:5c:51:c4:cd: 77:58:4c:d8:3c:da:96:04:0b:ca:75:0b:b9:b5:c1:af:b4:f8: e5:30:81:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAkW2jjSrpcvVIQGp+cwpGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljYThhMTMyNTE5YTI0Mjk0OTQ5NzM2M2I4Y2FhMzNlNzJj NjczZjgwHhcNMjUxMjIxMTEwMDMxWhcNMjUxMjIyMTEwMDMxWjAzMTEwLwYDVQQD Eyg3MzgwOGM1ZWU3YTcxZWY4NGQ2ODkzYTljZWJjYzMyYWQzZjUzMGRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcOV5RY0Ih4AgF9GdrL0NmaIJ4j5 ywDlnH7jS9FKOGfXlb5BrtMuBQLT7BrxqwwWo2bLNMSJxakREwABKQtiHOoTgC2i qzBJBk/1AFNFqxsx1UlhtUItaRthTzO5zcc/2ZmfNXta/mA5lsR897lN8hJuSIe+ BzdcWcoPhbBsMdoYGtG/2IKWFR4tG0TEHtZkf4uwDu+dnMO/MESpkc1Z4edFKCC2 koQEvxSP9CLDriq4N0VdHiFBkIvcpvQVJt1GmQnh/7EWBc//1YbUaIPKYEebFcQu 4jJoLTsYO98quejb3HGPn2IBIbVj4ArHh9vI4pv4QNRiPoegtAZEr3j8FwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHOAjF7npx74TWiTqc68wyrT9TDeMB8GA1UdIwQY MBaAFJyooTJRmiQpSUlzY7jKoz5yxnP4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbktpaE1sR2FKQ2xKU1hOanVNcWpQbkxHY19nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8zZTBlOWEtNTFmMy00OWRlLTlkMWIt MDBjZDg2YWY4NDlkLzEvbktpaE1sR2FKQ2xKU1hOanVNcWpQbkxHY19nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC8zZTBlOWEtNTFmMy00OWRlLTlkMWItMDBjZDg2YWY4NDlk LzEvbktpaE1sR2FKQ2xKU1hOanVNcWpQbkxHY19nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaq9O0YQ0 hj64nwG4HUmfMkocn/GlkjRYNxgCD7zXCwXQvrvEBF2yZkSdZ5UwRqE6pniSGU8F dTEd9LDTopfwb461dD3lUmTU/IFYA/nO9kggAYLbWr6ERpZCkDFklLxnFhQxpf84 WgzrSzGC5I+Q3W+bNw6AOkxQjprR1YQTBsOHotOP+SR59rvBRTtaRGTPXi8osyN6 bd5jmLGCNk7yBi1d4gouSt6iMpSuQIG19AQteQBaMO+Oc3Y3A8M3yxq3FMOvJZ7l bi92qOsSeMffn52Xzfq8PngVsHmCc2NYyKyUTSMeXiBcUcTNd1hM2DzalgQLynUL ubXBr7T45TCBGw== -----END CERTIFICATE-----Generated at Sun Dec 21 13:52:37 2025 by rpki-client