This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.mft File: nKkOfa8VwXwbmrxXIVe8fZF7OZE.mft (raw, json) Hash identifier: ZY3zW6rutSlHigJkOkLa73qTKtUYkThFWBiSL9EzEHY= Subject key identifier: AD:D1:6B:C9:BD:F8:08:B8:C4:35:25:AC:D1:19:60:93:EF:3A:7D:80 Authority key identifier: 9C:A9:0E:7D:AF:15:C1:7C:1B:9A:BC:57:21:57:BC:7D:91:7B:39:91 Certificate issuer: /CN=9ca90e7daf15c17c1b9abc572157bc7d917b3991 Certificate serial: 019B36B478BEF0AF674702E198331599F896 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nKkOfa8VwXwbmrxXIVe8fZF7OZE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.mft Manifest number: 130B Signing time: Fri 19 Dec 2025 13:02:35 +0000 Manifest this update: Fri 19 Dec 2025 13:02:35 +0000 Manifest next update: Sat 20 Dec 2025 13:02:35 +0000 Files and hashes: 1: nKkOfa8VwXwbmrxXIVe8fZF7OZE.crl (hash: fJFI/LXNJ9ZkYU921N8pZJ0cHtzOuF9Yex2jyFND8PE=) 2: rbFhRWy7PnH1-c74EqjQ8O_SsH8.roa (hash: +OgMhgDQLZldm2bdOQKGi3uI3dnjtK1GBopk2ba9vPU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.mft rsync://rpki.ripe.net/repository/DEFAULT/nKkOfa8VwXwbmrxXIVe8fZF7OZE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 13:02:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:b4:78:be:f0:af:67:47:02:e1:98:33:15:99:f8:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ca90e7daf15c17c1b9abc572157bc7d917b3991 Validity Not Before: Dec 19 13:02:35 2025 GMT Not After : Dec 20 13:02:35 2025 GMT Subject: CN=add16bc9bdf808b8c43525acd1196093ef3a7d80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:20:4b:20:99:80:e0:3f:0b:70:6d:d0:b8:a6: 8d:8f:12:2a:e0:6e:9d:c5:9a:9b:b3:8c:ac:a1:34: 42:2b:bf:77:ad:99:b4:8e:b3:68:89:ce:73:b0:54: 90:83:43:c4:a1:9f:70:83:9d:dd:b4:17:71:8e:e7: 16:aa:7c:c5:ae:37:b3:77:0e:99:a6:d7:a0:21:51: 3c:da:bb:08:5d:da:77:db:9b:d5:e7:ab:25:74:5f: a9:58:b6:78:27:24:bf:b3:35:ae:26:9e:07:e8:f7: 1d:38:2d:47:b4:05:06:0f:73:70:9b:95:96:01:32: 21:14:6f:0f:12:bc:46:80:ff:af:8b:2a:a1:b8:5e: 1e:78:e5:0f:b3:f8:35:16:1c:ff:4f:c4:30:7c:ad: 9a:ce:d6:34:6f:35:47:3a:9c:a7:10:37:f9:5d:06: 12:49:ab:65:ad:06:5f:97:46:29:7d:55:8c:80:7c: 2c:f5:11:c8:cd:c6:6b:7e:4a:46:9c:1d:02:a8:d7: e6:2a:0e:0f:5a:96:e3:41:81:2c:ae:2d:b8:89:7f: ad:57:3c:6d:07:24:f5:c5:84:fb:5b:14:1c:76:32: 8c:78:ce:3d:5a:51:cb:a6:76:cd:57:32:1e:d9:7f: 79:1c:37:24:de:18:c7:01:50:de:55:27:b2:f1:0f: 16:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:D1:6B:C9:BD:F8:08:B8:C4:35:25:AC:D1:19:60:93:EF:3A:7D:80 X509v3 Authority Key Identifier: keyid:9C:A9:0E:7D:AF:15:C1:7C:1B:9A:BC:57:21:57:BC:7D:91:7B:39:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nKkOfa8VwXwbmrxXIVe8fZF7OZE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:b4:ee:09:ed:e5:30:d7:44:29:e9:b3:d5:9e:7e:3e:3f:eb: ce:8a:b7:23:b0:9b:64:94:d8:a6:d1:33:57:c0:db:19:3d:51: 07:80:4c:d7:5d:71:c4:b9:dc:66:bc:28:6a:ba:14:e5:4e:5f: a0:c5:df:3a:ae:44:2d:d1:e0:a2:93:0b:f2:98:05:a9:4b:ab: dd:30:5f:8b:ab:95:ae:ea:af:c0:2c:21:0e:95:84:c8:d5:b9: 36:25:1c:31:40:2e:b7:51:5b:8c:ed:61:4f:59:9d:c3:7b:b9: cb:27:18:bc:6c:6c:9e:8c:04:f7:65:6c:06:43:07:b5:29:c1: 27:66:24:a6:9e:5e:1c:a9:bb:2a:19:5d:04:b3:6b:16:73:66: 64:3c:34:b7:84:33:a1:c3:68:3f:78:96:cd:8c:d4:46:94:58: f9:25:ed:fb:d6:15:19:ff:98:1e:ff:dc:47:b7:9d:66:48:74: dd:2f:d9:66:cf:f2:35:8d:60:88:98:b7:6a:37:cb:e8:6d:b8: c9:63:47:82:e2:c2:7a:a1:2c:f5:71:60:34:02:2f:1f:6c:6a: d6:b8:75:29:25:39:6f:fd:6e:ad:8a:52:6f:c7:58:3e:48:24: 6e:fb:aa:0b:76:e6:29:f8:65:b6:9d:59:53:60:8a:fc:be:46: 82:d1:17:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2tHi+8K9nRwLhmDMVmfiWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljYTkwZTdkYWYxNWMxN2MxYjlhYmM1NzIxNTdiYzdkOTE3 YjM5OTEwHhcNMjUxMjE5MTMwMjM1WhcNMjUxMjIwMTMwMjM1WjAzMTEwLwYDVQQD EyhhZGQxNmJjOWJkZjgwOGI4YzQzNTI1YWNkMTE5NjA5M2VmM2E3ZDgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyBLIJmA4D8LcG3QuKaNjxIq4G6d xZqbs4ysoTRCK793rZm0jrNoic5zsFSQg0PEoZ9wg53dtBdxjucWqnzFrjezdw6Z ptegIVE82rsIXdp325vV56sldF+pWLZ4JyS/szWuJp4H6PcdOC1HtAUGD3Nwm5WW ATIhFG8PErxGgP+viyqhuF4eeOUPs/g1Fhz/T8QwfK2aztY0bzVHOpynEDf5XQYS SatlrQZfl0YpfVWMgHws9RHIzcZrfkpGnB0CqNfmKg4PWpbjQYEsri24iX+tVzxt ByT1xYT7WxQcdjKMeM49WlHLpnbNVzIe2X95HDck3hjHAVDeVSey8Q8WcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK3Ra8m9+Ai4xDUlrNEZYJPvOn2AMB8GA1UdIwQY MBaAFJypDn2vFcF8G5q8VyFXvH2RezmRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbktrT2ZhOFZ3WHdibXJ4WElWZThmWkY3T1pFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8yNWYzNzUtMTQwZi00NmU5LTk2N2Ut NmU0NTlhNThlMWQ2LzEvbktrT2ZhOFZ3WHdibXJ4WElWZThmWkY3T1pFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy8yNWYzNzUtMTQwZi00NmU5LTk2N2UtNmU0NTlhNThlMWQ2 LzEvbktrT2ZhOFZ3WHdibXJ4WElWZThmWkY3T1pFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMbTuCe3l MNdEKemz1Z5+Pj/rzoq3I7CbZJTYptEzV8DbGT1RB4BM111xxLncZrwoaroU5U5f oMXfOq5ELdHgopML8pgFqUur3TBfi6uVruqvwCwhDpWEyNW5NiUcMUAut1FbjO1h T1mdw3u5yycYvGxsnowE92VsBkMHtSnBJ2Ykpp5eHKm7KhldBLNrFnNmZDw0t4Qz ocNoP3iWzYzURpRY+SXt+9YVGf+YHv/cR7edZkh03S/ZZs/yNY1giJi3ajfL6G24 yWNHguLCeqEs9XFgNAIvH2xq1rh1KSU5b/1urYpSb8dYPkgkbvuqC3bmKfhltp1Z U2CK/L5GgtEX3Q== -----END CERTIFICATE-----Generated at Fri Dec 19 20:10:38 2025 by rpki-client