This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.mft File: nkuBjJLE5paGs8KBAIVd-lA6BXo.mft (raw, json) Hash identifier: Sq4jomQiNynARPwT8znAWb2HN4/HVmE9uWurCaYr5LQ= Subject key identifier: B2:D3:C8:E6:81:A5:4C:AA:50:F2:F9:09:4F:00:B6:33:49:2E:74:58 Authority key identifier: 9E:4B:81:8C:92:C4:E6:96:86:B3:C2:81:00:85:5D:FA:50:3A:05:7A Certificate issuer: /CN=9e4b818c92c4e69686b3c28100855dfa503a057a Certificate serial: 019B41DB5AE2E433E8CA5DF8B6655DFC1907 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkuBjJLE5paGs8KBAIVd-lA6BXo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.mft Manifest number: 1788 Signing time: Sun 21 Dec 2025 17:00:53 +0000 Manifest this update: Sun 21 Dec 2025 17:00:53 +0000 Manifest next update: Mon 22 Dec 2025 17:00:53 +0000 Files and hashes: 1: kX9kKPziKiDt_OCvG008KoPTi9Q.asa (hash: QcEXl0ZFekAFdl0Cjpyri2azBr3Ni8j/8WTxRRI8zf8=) 2: nkuBjJLE5paGs8KBAIVd-lA6BXo.crl (hash: rCnoYb3TjWOtOkvtCeul5maGPes6oHxa6v7D03UnTWo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.mft rsync://rpki.ripe.net/repository/DEFAULT/nkuBjJLE5paGs8KBAIVd-lA6BXo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:db:5a:e2:e4:33:e8:ca:5d:f8:b6:65:5d:fc:19:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e4b818c92c4e69686b3c28100855dfa503a057a Validity Not Before: Dec 21 17:00:53 2025 GMT Not After : Dec 22 17:00:53 2025 GMT Subject: CN=b2d3c8e681a54caa50f2f9094f00b633492e7458 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1b:38:07:fb:91:6b:8d:a2:96:e2:63:d1:78: 67:63:1a:1a:c1:14:dc:68:44:50:df:2d:b3:df:9b: 5f:c0:bc:39:32:de:6d:2f:ff:24:5d:ba:46:70:bc: 8a:98:e3:58:ef:0e:d1:16:5d:e8:70:13:40:3a:c2: 58:c6:f1:5b:fd:52:98:75:f3:34:88:26:b9:0b:a5: c9:16:f1:fc:06:13:5e:c9:26:80:96:85:fd:2e:52: 42:1c:5e:89:77:1c:0f:b3:ac:82:7d:02:57:7f:c1: f0:9e:f0:de:04:c9:66:97:83:15:f3:93:d3:a6:f5: 39:e6:9e:bd:f4:7e:0f:12:6d:ef:ff:31:67:1d:ba: 58:06:02:32:8c:9b:2a:9d:ba:0c:01:f6:56:40:85: db:83:c5:4b:8e:ec:c8:0b:60:45:d0:ea:4b:10:b2: 87:a2:99:40:0e:ee:cd:7d:b0:7e:07:ef:db:67:2b: 7d:49:93:8f:67:52:6e:f1:c9:e1:1a:78:12:9f:67: 85:85:cb:9a:a9:63:04:d6:6b:be:e8:4d:6d:ed:ce: 8b:d0:4f:f0:eb:41:34:dd:89:bb:e1:59:e3:be:31: 17:7e:7a:bd:7c:d5:b6:33:ee:9a:7c:e8:dd:b3:96: 87:78:17:52:32:6f:a8:30:8d:16:6f:6b:cd:d9:6b: e8:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:D3:C8:E6:81:A5:4C:AA:50:F2:F9:09:4F:00:B6:33:49:2E:74:58 X509v3 Authority Key Identifier: keyid:9E:4B:81:8C:92:C4:E6:96:86:B3:C2:81:00:85:5D:FA:50:3A:05:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkuBjJLE5paGs8KBAIVd-lA6BXo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:ec:cf:89:12:4f:59:8d:d2:d9:8f:0b:79:b9:d5:5b:57:94: 92:75:c2:ec:0b:e1:de:86:b5:61:7d:7e:02:33:47:ff:46:6f: 88:4c:f6:88:2c:98:13:62:3f:03:e1:c9:1e:7a:7b:4a:20:3b: ce:3f:60:ef:8c:6f:f5:48:ba:8f:d9:0e:d5:2d:26:cc:09:75: 3c:d8:ce:5e:4a:f9:40:d4:26:ce:b7:58:76:32:38:05:60:50: 8f:da:8a:7c:54:fc:3d:77:69:f1:8a:23:68:9c:7b:10:84:01: 48:92:d1:d2:47:da:64:58:5c:a4:59:44:9b:92:17:35:0f:93: 26:f6:37:b2:08:6c:d4:82:51:54:d8:1d:7f:61:dd:81:0a:61: b9:4c:85:76:fb:3a:f9:ec:f4:78:2c:eb:9a:29:0a:93:58:03: 9f:57:f4:d7:5d:4f:ba:0e:2f:8d:82:54:33:c2:a5:ec:95:e3: 9b:fc:d6:16:f8:13:2a:ec:c5:6b:aa:6f:f4:d4:f6:99:90:b7: 32:f3:92:35:9c:82:cd:6b:c6:1e:df:d9:17:0d:e7:1f:a1:54: ca:d7:5d:fc:5e:f3:04:84:26:f9:a2:8a:bc:e8:7f:59:e4:7f: e3:2f:51:c6:2c:e4:b1:74:40:c5:81:36:e6:0c:f6:57:32:ba: 35:21:93:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtB21ri5DPoyl34tmVd/BkHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNGI4MThjOTJjNGU2OTY4NmIzYzI4MTAwODU1ZGZhNTAz YTA1N2EwHhcNMjUxMjIxMTcwMDUzWhcNMjUxMjIyMTcwMDUzWjAzMTEwLwYDVQQD EyhiMmQzYzhlNjgxYTU0Y2FhNTBmMmY5MDk0ZjAwYjYzMzQ5MmU3NDU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBs4B/uRa42iluJj0XhnYxoawRTc aERQ3y2z35tfwLw5Mt5tL/8kXbpGcLyKmONY7w7RFl3ocBNAOsJYxvFb/VKYdfM0 iCa5C6XJFvH8BhNeySaAloX9LlJCHF6JdxwPs6yCfQJXf8HwnvDeBMlml4MV85PT pvU55p699H4PEm3v/zFnHbpYBgIyjJsqnboMAfZWQIXbg8VLjuzIC2BF0OpLELKH oplADu7NfbB+B+/bZyt9SZOPZ1Ju8cnhGngSn2eFhcuaqWME1mu+6E1t7c6L0E/w 60E03Ym74VnjvjEXfnq9fNW2M+6afOjds5aHeBdSMm+oMI0Wb2vN2Wvo4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLLTyOaBpUyqUPL5CU8AtjNJLnRYMB8GA1UdIwQY MBaAFJ5LgYySxOaWhrPCgQCFXfpQOgV6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmt1QmpKTEU1cGFHczhLQkFJVmQtbEE2QlhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9lNGU4MWMtNGU4NC00NTI0LThkZGMt NDAxMGEzNmQ5Y2RkLzEvbmt1QmpKTEU1cGFHczhLQkFJVmQtbEE2QlhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9lNGU4MWMtNGU4NC00NTI0LThkZGMtNDAxMGEzNmQ5Y2Rk LzEvbmt1QmpKTEU1cGFHczhLQkFJVmQtbEE2QlhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZOzPiRJP WY3S2Y8LebnVW1eUknXC7Avh3oa1YX1+AjNH/0ZviEz2iCyYE2I/A+HJHnp7SiA7 zj9g74xv9Ui6j9kO1S0mzAl1PNjOXkr5QNQmzrdYdjI4BWBQj9qKfFT8PXdp8Yoj aJx7EIQBSJLR0kfaZFhcpFlEm5IXNQ+TJvY3sghs1IJRVNgdf2HdgQphuUyFdvs6 +ez0eCzrmikKk1gDn1f0111Pug4vjYJUM8Kl7JXjm/zWFvgTKuzFa6pv9NT2mZC3 MvOSNZyCzWvGHt/ZFw3nH6FUytdd/F7zBIQm+aKKvOh/WeR/4y9RxizksXRAxYE2 5gz2VzK6NSGT2Q== -----END CERTIFICATE-----Generated at Sun Dec 21 23:17:28 2025 by rpki-client