This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/9e8166-160f-4ce2-9017-1e151aa1afdc/1/nY85NIPUicQp_Biwk0LXbQr-QkQ.mft File: nY85NIPUicQp_Biwk0LXbQr-QkQ.mft (raw, json) Hash identifier: wro6LkhuCxdIMJKOPUYOiKwoVYmH9K54DMMgpxfe0zk= Subject key identifier: 9F:19:EB:57:41:B2:A1:E5:39:66:98:00:3F:A6:79:AD:35:78:AF:5B Authority key identifier: 9D:8F:39:34:83:D4:89:C4:29:FC:18:B0:93:42:D7:6D:0A:FE:42:44 Certificate issuer: /CN=9d8f393483d489c429fc18b09342d76d0afe4244 Certificate serial: 019B6C210A22E6592D9FBE9273F1577F9E28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nY85NIPUicQp_Biwk0LXbQr-QkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/9e8166-160f-4ce2-9017-1e151aa1afdc/1/nY85NIPUicQp_Biwk0LXbQr-QkQ.mft Manifest number: 138A Signing time: Mon 29 Dec 2025 22:01:03 +0000 Manifest this update: Mon 29 Dec 2025 22:01:03 +0000 Manifest next update: Tue 30 Dec 2025 22:01:03 +0000 Files and hashes: 1: fCKBgjNaPgCYlEAaSC02t2TX-HQ.roa (hash: z50OwHqPJLgmTj1OD+z+QDtPxp5JJkD8lN3khIG3bwQ=) 2: nY85NIPUicQp_Biwk0LXbQr-QkQ.crl (hash: DvYBX8c84xZxwD2G2uigCHJYobEp+XoCSNIDmhM5Uf4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/9e8166-160f-4ce2-9017-1e151aa1afdc/1/nY85NIPUicQp_Biwk0LXbQr-QkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/9e8166-160f-4ce2-9017-1e151aa1afdc/1/nY85NIPUicQp_Biwk0LXbQr-QkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/nY85NIPUicQp_Biwk0LXbQr-QkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 22:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:21:0a:22:e6:59:2d:9f:be:92:73:f1:57:7f:9e:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d8f393483d489c429fc18b09342d76d0afe4244 Validity Not Before: Dec 29 22:01:03 2025 GMT Not After : Dec 30 22:01:03 2025 GMT Subject: CN=9f19eb5741b2a1e5396698003fa679ad3578af5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b2:53:45:e2:b6:a6:22:16:99:46:64:43:9a: 4f:bc:23:ac:48:19:b2:da:d2:74:e5:56:70:13:90: 8a:22:ee:5e:93:7c:44:a0:c6:f2:5c:75:25:e7:7d: df:33:60:f4:11:dc:ad:73:18:60:b9:26:53:51:25: b5:7c:70:aa:92:3d:e5:44:47:e1:f9:76:68:f1:0e: ba:64:8d:6e:8f:98:75:31:a6:62:14:6f:e4:f0:2b: 6c:bb:18:c4:3d:f6:71:39:57:e2:2a:fe:7c:43:eb: 72:09:ae:77:50:1b:0a:0c:00:d3:e8:6c:89:17:6a: ff:bc:61:86:80:ce:5b:5e:e7:06:4e:9c:8c:61:7f: 9b:5d:fe:4f:33:68:dc:eb:98:5e:72:fe:67:cd:a4: de:a8:a3:fe:50:9a:f6:85:f7:54:0f:04:52:26:f3: 26:49:b4:a6:f5:ee:98:45:d0:08:cb:f2:27:2f:0d: 5d:f9:14:65:14:75:10:c9:f7:2c:2c:7c:0b:55:2a: ac:6c:6c:5d:54:c3:10:6b:fd:4e:6b:f5:d6:33:4f: 5c:38:b1:94:b0:72:bb:1c:2a:86:23:75:4e:44:4a: d0:8a:ab:69:ec:88:ee:f3:a8:a8:1c:37:52:be:32: 11:f8:d1:1f:7a:a6:29:44:5c:a2:7d:a1:51:79:67: f0:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:19:EB:57:41:B2:A1:E5:39:66:98:00:3F:A6:79:AD:35:78:AF:5B X509v3 Authority Key Identifier: keyid:9D:8F:39:34:83:D4:89:C4:29:FC:18:B0:93:42:D7:6D:0A:FE:42:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nY85NIPUicQp_Biwk0LXbQr-QkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9e8166-160f-4ce2-9017-1e151aa1afdc/1/nY85NIPUicQp_Biwk0LXbQr-QkQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9e8166-160f-4ce2-9017-1e151aa1afdc/1/nY85NIPUicQp_Biwk0LXbQr-QkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:f3:52:e7:c6:23:b2:ae:d6:97:4f:f5:db:4e:67:8a:3e:99: 40:0c:f7:f4:cc:44:65:11:82:ce:17:46:df:40:dd:df:46:8a: 61:9e:be:0d:de:50:41:a4:67:a2:b4:76:80:07:9e:d6:1e:79: dd:bb:78:84:fe:ea:5f:9a:bd:2c:45:b5:23:14:9f:81:2a:62: d6:cb:9a:cd:8f:14:08:0d:83:fa:a7:04:27:40:bf:9f:1f:81: 7e:22:dd:d9:d0:01:79:51:df:2e:b2:c3:a2:6a:80:3c:95:d7: 58:37:d6:69:04:25:8c:84:19:9a:9f:59:14:07:96:8b:4b:56: 72:cb:cb:cc:3c:55:89:22:1e:87:1d:38:88:8e:46:89:7e:2e: ca:f3:12:e2:2f:59:17:40:d6:7c:09:b6:64:7e:0e:ad:c0:be: f2:6e:59:98:72:fa:36:10:fe:c2:90:88:f9:00:95:2e:ef:5b: 67:19:4b:fe:3b:24:93:21:32:b6:55:5a:19:ab:4c:0b:52:c5: 8c:e1:f5:ff:08:af:b2:31:b8:29:81:70:8f:33:e0:b0:3e:dd: a7:f0:ae:cc:ed:cf:f5:3a:ad:a4:d0:8c:49:4b:1d:f9:1c:8e: c6:12:a3:4f:25:a8:e0:5d:d4:39:5a:5f:80:85:8c:1f:ea:6b: 21:50:fe:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtsIQoi5lktn76Sc/FXf54oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkOGYzOTM0ODNkNDg5YzQyOWZjMThiMDkzNDJkNzZkMGFm ZTQyNDQwHhcNMjUxMjI5MjIwMTAzWhcNMjUxMjMwMjIwMTAzWjAzMTEwLwYDVQQD Eyg5ZjE5ZWI1NzQxYjJhMWU1Mzk2Njk4MDAzZmE2NzlhZDM1NzhhZjViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7JTReK2piIWmUZkQ5pPvCOsSBmy 2tJ05VZwE5CKIu5ek3xEoMbyXHUl533fM2D0EdytcxhguSZTUSW1fHCqkj3lREfh +XZo8Q66ZI1uj5h1MaZiFG/k8CtsuxjEPfZxOVfiKv58Q+tyCa53UBsKDADT6GyJ F2r/vGGGgM5bXucGTpyMYX+bXf5PM2jc65hecv5nzaTeqKP+UJr2hfdUDwRSJvMm SbSm9e6YRdAIy/InLw1d+RRlFHUQyfcsLHwLVSqsbGxdVMMQa/1Oa/XWM09cOLGU sHK7HCqGI3VORErQiqtp7Iju86ioHDdSvjIR+NEfeqYpRFyifaFReWfwUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ8Z61dBsqHlOWaYAD+mea01eK9bMB8GA1UdIwQY MBaAFJ2POTSD1InEKfwYsJNC120K/kJEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblk4NU5JUFVpY1FwX0Jpd2swTFhiUXItUWtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC85ZTgxNjYtMTYwZi00Y2UyLTkwMTct MWUxNTFhYTFhZmRjLzEvblk4NU5JUFVpY1FwX0Jpd2swTFhiUXItUWtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC85ZTgxNjYtMTYwZi00Y2UyLTkwMTctMWUxNTFhYTFhZmRj LzEvblk4NU5JUFVpY1FwX0Jpd2swTFhiUXItUWtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlPNS58Yj sq7Wl0/1205nij6ZQAz39MxEZRGCzhdG30Dd30aKYZ6+Dd5QQaRnorR2gAee1h55 3bt4hP7qX5q9LEW1IxSfgSpi1suazY8UCA2D+qcEJ0C/nx+BfiLd2dABeVHfLrLD omqAPJXXWDfWaQQljIQZmp9ZFAeWi0tWcsvLzDxViSIehx04iI5GiX4uyvMS4i9Z F0DWfAm2ZH4OrcC+8m5ZmHL6NhD+wpCI+QCVLu9bZxlL/jskkyEytlVaGatMC1LF jOH1/wivsjG4KYFwjzPgsD7dp/CuzO3P9TqtpNCMSUsd+RyOxhKjTyWo4F3UOVpf gIWMH+prIVD+Pg== -----END CERTIFICATE-----Generated at Tue Dec 30 07:59:17 2025 by rpki-client