This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/b947da-e2f2-4cdd-ab30-624cd19e1aad/1/nAK6r7b7qr_o-oTdJp9bopIPFYM.mft File: nAK6r7b7qr_o-oTdJp9bopIPFYM.mft (raw, json) Hash identifier: JYZ2a6lpHqB+pOaOIZE0WO/AB24B4BYmEYvFXhjQu5k= Subject key identifier: 9C:9D:DC:9A:37:71:87:16:44:7F:63:D6:B5:5A:23:66:6B:C8:18:B5 Authority key identifier: 9C:02:BA:AF:B6:FB:AA:BF:E8:FA:84:DD:26:9F:5B:A2:92:0F:15:83 Certificate issuer: /CN=9c02baafb6fbaabfe8fa84dd269f5ba2920f1583 Certificate serial: 019B2F67F8D7326416B239EB8D4878E87C5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nAK6r7b7qr_o-oTdJp9bopIPFYM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/b947da-e2f2-4cdd-ab30-624cd19e1aad/1/nAK6r7b7qr_o-oTdJp9bopIPFYM.mft Manifest number: 177C Signing time: Thu 18 Dec 2025 03:01:41 +0000 Manifest this update: Thu 18 Dec 2025 03:01:41 +0000 Manifest next update: Fri 19 Dec 2025 03:01:41 +0000 Files and hashes: 1: nAK6r7b7qr_o-oTdJp9bopIPFYM.crl (hash: Htz+pcvhpYyAeQChxYwaXtsInbbe6q6O+tSJZy/U0FI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/b947da-e2f2-4cdd-ab30-624cd19e1aad/1/nAK6r7b7qr_o-oTdJp9bopIPFYM.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/b947da-e2f2-4cdd-ab30-624cd19e1aad/1/nAK6r7b7qr_o-oTdJp9bopIPFYM.mft rsync://rpki.ripe.net/repository/DEFAULT/nAK6r7b7qr_o-oTdJp9bopIPFYM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 03:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:67:f8:d7:32:64:16:b2:39:eb:8d:48:78:e8:7c:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c02baafb6fbaabfe8fa84dd269f5ba2920f1583 Validity Not Before: Dec 18 03:01:41 2025 GMT Not After : Dec 19 03:01:41 2025 GMT Subject: CN=9c9ddc9a37718716447f63d6b55a23666bc818b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:9b:71:00:bb:d5:cc:3c:12:81:1f:7b:ab:fd: b9:32:0c:73:d8:5f:88:fc:b0:f6:ee:00:b9:40:07: ec:ce:b0:19:b6:6f:2a:f9:0c:14:62:fb:c5:47:fb: 9d:1f:12:0a:44:19:f2:33:4d:8b:b2:2c:52:67:94: a6:85:b4:3d:7c:f6:d1:5e:26:2d:7e:da:bd:74:68: e8:5c:94:86:57:f0:fa:20:fe:7f:60:ea:ff:ef:54: 5a:5b:b9:76:93:db:f2:2b:73:af:57:61:81:8d:a4: d4:b7:5c:d3:17:8e:db:37:c4:19:50:b6:b2:e5:a4: 2e:cc:9d:7e:a8:4c:c3:ee:9d:21:f5:35:d9:06:f7: 18:d5:72:93:ca:5b:7f:62:26:bd:9f:83:fc:43:bd: c6:24:39:7c:9c:e4:83:38:93:00:e0:6b:48:40:f5: 24:37:b4:08:b7:6a:6d:19:55:62:1b:a2:60:3c:a7: ca:8e:5f:35:56:b2:09:1f:39:2b:a1:84:b2:e8:71: ae:5b:92:e6:9f:15:f8:ca:49:83:70:7b:b8:da:c2: 30:37:5b:2a:4a:10:00:b6:b1:94:d6:8c:03:74:85: 66:9d:2c:3f:56:39:e6:c7:fc:07:49:ef:50:74:3b: 03:1b:0a:48:c8:e5:3b:30:b8:e4:69:05:d3:08:a8: c8:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:9D:DC:9A:37:71:87:16:44:7F:63:D6:B5:5A:23:66:6B:C8:18:B5 X509v3 Authority Key Identifier: keyid:9C:02:BA:AF:B6:FB:AA:BF:E8:FA:84:DD:26:9F:5B:A2:92:0F:15:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAK6r7b7qr_o-oTdJp9bopIPFYM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b947da-e2f2-4cdd-ab30-624cd19e1aad/1/nAK6r7b7qr_o-oTdJp9bopIPFYM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b947da-e2f2-4cdd-ab30-624cd19e1aad/1/nAK6r7b7qr_o-oTdJp9bopIPFYM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:87:da:39:b6:6d:0f:78:5a:e3:e0:a2:d8:73:70:0a:94:88: b7:33:e8:31:5f:02:f5:a5:be:51:30:65:4d:ee:de:be:8a:82: dc:ca:50:a5:27:e8:f2:05:14:7b:b3:90:03:8a:4e:46:b9:3e: af:dd:ff:4c:7d:89:02:a6:18:be:e1:42:68:b0:48:2e:c5:ac: 45:9c:8c:31:0c:8e:de:92:0c:44:8b:5e:7c:6f:32:bb:bf:a8: a0:5d:bc:18:50:8e:f4:d6:36:26:2b:9e:c4:8a:8a:9b:47:84: 97:24:3d:b8:73:a1:b5:1f:9f:31:66:b8:76:8e:4e:1f:8d:4e: 56:bc:e9:62:33:f2:e0:e3:ef:5e:22:5c:7a:3c:5f:5d:10:36: f1:8e:69:78:a3:aa:0f:82:77:8e:32:b8:15:78:15:3a:aa:31: 60:48:d9:cb:e3:07:ab:f4:f1:f1:aa:fa:f1:86:b3:47:47:63: 29:bc:d9:77:2f:33:50:1e:8a:d8:ad:6e:56:1d:bf:d0:12:30: 75:ef:d4:7e:e3:84:67:8c:31:43:7d:df:20:e0:79:55:75:a4: 04:57:8c:52:86:d5:99:9a:b1:ea:57:26:39:d8:4b:39:14:2a: e6:99:d2:a9:f2:d2:50:d3:21:9e:7d:76:d1:70:a4:cb:9e:b1: a7:13:be:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvZ/jXMmQWsjnrjUh46HxaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljMDJiYWFmYjZmYmFhYmZlOGZhODRkZDI2OWY1YmEyOTIw ZjE1ODMwHhcNMjUxMjE4MDMwMTQxWhcNMjUxMjE5MDMwMTQxWjAzMTEwLwYDVQQD Eyg5YzlkZGM5YTM3NzE4NzE2NDQ3ZjYzZDZiNTVhMjM2NjZiYzgxOGI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4JtxALvVzDwSgR97q/25Mgxz2F+I /LD27gC5QAfszrAZtm8q+QwUYvvFR/udHxIKRBnyM02LsixSZ5SmhbQ9fPbRXiYt ftq9dGjoXJSGV/D6IP5/YOr/71RaW7l2k9vyK3OvV2GBjaTUt1zTF47bN8QZULay 5aQuzJ1+qEzD7p0h9TXZBvcY1XKTylt/Yia9n4P8Q73GJDl8nOSDOJMA4GtIQPUk N7QIt2ptGVViG6JgPKfKjl81VrIJHzkroYSy6HGuW5LmnxX4ykmDcHu42sIwN1sq ShAAtrGU1owDdIVmnSw/Vjnmx/wHSe9QdDsDGwpIyOU7MLjkaQXTCKjI6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJyd3Jo3cYcWRH9j1rVaI2ZryBi1MB8GA1UdIwQY MBaAFJwCuq+2+6q/6PqE3SafW6KSDxWDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkFLNnI3Yjdxcl9vLW9UZEpwOWJvcElQRllNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9iOTQ3ZGEtZTJmMi00Y2RkLWFiMzAt NjI0Y2QxOWUxYWFkLzEvbkFLNnI3Yjdxcl9vLW9UZEpwOWJvcElQRllNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi9iOTQ3ZGEtZTJmMi00Y2RkLWFiMzAtNjI0Y2QxOWUxYWFk LzEvbkFLNnI3Yjdxcl9vLW9UZEpwOWJvcElQRllNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATYfaObZt D3ha4+Ci2HNwCpSItzPoMV8C9aW+UTBlTe7evoqC3MpQpSfo8gUUe7OQA4pORrk+ r93/TH2JAqYYvuFCaLBILsWsRZyMMQyO3pIMRItefG8yu7+ooF28GFCO9NY2Jiue xIqKm0eElyQ9uHOhtR+fMWa4do5OH41OVrzpYjPy4OPvXiJcejxfXRA28Y5peKOq D4J3jjK4FXgVOqoxYEjZy+MHq/Tx8ar68YazR0djKbzZdy8zUB6K2K1uVh2/0BIw de/UfuOEZ4wxQ33fIOB5VXWkBFeMUobVmZqx6lcmOdhLORQq5pnSqfLSUNMhnn12 0XCky56xpxO+8A== -----END CERTIFICATE-----Generated at Thu Dec 18 11:11:33 2025 by rpki-client