This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.mft File: nAqMF3kR9kwwVXNogVueZ9j8PA8.mft (raw, json) Hash identifier: Yhub0rqgL2kI9cgPDTsCwvyt4RaF7PYBKV21Cx/vUuE= Subject key identifier: D8:63:A0:8C:81:6F:DC:DE:35:C6:26:0C:18:43:55:2E:18:B6:14:34 Authority key identifier: 9C:0A:8C:17:79:11:F6:4C:30:55:73:68:81:5B:9E:67:D8:FC:3C:0F Certificate issuer: /CN=9c0a8c177911f64c30557368815b9e67d8fc3c0f Certificate serial: 019B661E81D3C0991F30A2F2CFACAF84CEB8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nAqMF3kR9kwwVXNogVueZ9j8PA8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.mft Manifest number: 0DAF Signing time: Sun 28 Dec 2025 18:00:33 +0000 Manifest this update: Sun 28 Dec 2025 18:00:33 +0000 Manifest next update: Mon 29 Dec 2025 18:00:33 +0000 Files and hashes: 1: d6blSjaqO2EcEPuhj7EsQzjBTt0.roa (hash: 4jd/vZVphNUOF+ezj/NTHKtL7kzqYpJOJYm6eI+27Hw=) 2: nAqMF3kR9kwwVXNogVueZ9j8PA8.crl (hash: RUVGLOVd/Qdf6Z2hV802hhCNdDE+qUPqAPHMm+i62mE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.mft rsync://rpki.ripe.net/repository/DEFAULT/nAqMF3kR9kwwVXNogVueZ9j8PA8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 18:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:66:1e:81:d3:c0:99:1f:30:a2:f2:cf:ac:af:84:ce:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c0a8c177911f64c30557368815b9e67d8fc3c0f Validity Not Before: Dec 28 18:00:33 2025 GMT Not After : Dec 29 18:00:33 2025 GMT Subject: CN=d863a08c816fdcde35c6260c1843552e18b61434 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:1b:e9:58:99:87:df:23:9c:77:64:1a:68:2c: 12:9b:26:ba:f5:c6:63:26:7a:f6:9b:b1:7a:ff:88: 99:3d:7b:55:19:18:f2:a3:93:60:6c:a3:93:43:43: 69:0f:93:0e:4e:2d:88:16:76:42:52:3c:53:fb:3a: 52:ef:0c:46:1c:7f:32:4c:3b:09:9d:fb:e4:06:c5: 7a:e3:d4:21:78:a8:99:13:4e:80:dd:0b:dd:da:33: 05:95:1f:6f:ff:48:7e:10:2a:a7:59:e9:3f:2c:f3: ba:06:47:cd:7f:f7:6a:b9:88:2c:8a:df:0b:f0:e1: 40:51:19:35:1f:c6:f8:1a:7b:36:0a:af:f3:c2:50: 3f:a6:bf:a2:33:ee:08:cd:4d:1c:08:8f:da:c4:7d: 9a:e5:60:59:ac:81:4f:8a:f0:ec:66:6c:48:84:a4: 2c:06:c6:91:80:e9:0e:ff:f3:cb:a0:f8:0b:03:93: f4:c6:87:45:d2:f6:64:26:63:49:1a:7a:ab:0e:23: 35:5d:e3:bf:fe:d3:0d:ed:58:01:0a:74:aa:88:ad: cc:b7:24:f7:cd:bb:29:53:39:c7:8e:b8:c2:ac:69: 30:e4:b1:61:b2:6c:36:a5:38:54:3d:8e:f9:a1:1d: ff:82:5b:db:7f:5b:92:e2:c9:47:c1:ff:68:77:b3: 10:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:63:A0:8C:81:6F:DC:DE:35:C6:26:0C:18:43:55:2E:18:B6:14:34 X509v3 Authority Key Identifier: keyid:9C:0A:8C:17:79:11:F6:4C:30:55:73:68:81:5B:9E:67:D8:FC:3C:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAqMF3kR9kwwVXNogVueZ9j8PA8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:5a:07:1d:f6:bb:b2:2d:76:e3:67:e7:9f:2d:6f:ed:76:69: d6:f4:db:fc:5c:a8:b9:fa:8b:ce:13:d7:8e:01:e9:db:eb:1a: ae:73:0e:52:02:55:18:aa:16:3e:e6:61:e3:9b:81:a9:9e:cf: 81:3b:e1:a2:6b:6d:47:1f:0e:b1:23:31:f2:5d:ad:bb:72:21: 92:b0:e7:39:54:a3:cc:08:95:4b:d5:0a:85:ab:94:30:9e:56: 7b:68:1f:98:ed:0d:f6:91:0b:6d:6f:d9:f7:a7:a4:df:40:4a: 0e:4a:89:2e:a2:72:a7:40:f8:91:ec:82:be:f0:90:3b:97:c8: 60:58:dc:0d:33:03:32:95:f7:85:cf:d9:7f:8a:e2:29:fc:d6: 1e:97:b8:6e:07:09:37:1d:59:78:23:26:8a:7b:ca:b7:3a:d3: d3:c7:0e:2e:cd:63:c8:55:f8:57:85:a4:b0:c6:61:46:f5:82: fb:bc:ea:ca:79:3b:45:1f:a1:dc:6a:ac:b1:f2:71:a2:a9:a8: af:1a:06:a7:29:b5:90:ee:df:87:17:fe:c2:75:d4:92:4f:e2: cb:07:53:75:c7:3e:03:ee:86:c0:ac:4a:95:a5:8d:86:55:95: d1:ba:6f:e7:a9:f4:1c:8c:58:99:14:48:bf:dd:19:d6:aa:b7: e3:fc:c7:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtmHoHTwJkfMKLyz6yvhM64MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljMGE4YzE3NzkxMWY2NGMzMDU1NzM2ODgxNWI5ZTY3ZDhm YzNjMGYwHhcNMjUxMjI4MTgwMDMzWhcNMjUxMjI5MTgwMDMzWjAzMTEwLwYDVQQD EyhkODYzYTA4YzgxNmZkY2RlMzVjNjI2MGMxODQzNTUyZTE4YjYxNDM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhvpWJmH3yOcd2QaaCwSmya69cZj Jnr2m7F6/4iZPXtVGRjyo5NgbKOTQ0NpD5MOTi2IFnZCUjxT+zpS7wxGHH8yTDsJ nfvkBsV649QheKiZE06A3Qvd2jMFlR9v/0h+ECqnWek/LPO6BkfNf/dquYgsit8L 8OFAURk1H8b4Gns2Cq/zwlA/pr+iM+4IzU0cCI/axH2a5WBZrIFPivDsZmxIhKQs BsaRgOkO//PLoPgLA5P0xodF0vZkJmNJGnqrDiM1XeO//tMN7VgBCnSqiK3MtyT3 zbspUznHjrjCrGkw5LFhsmw2pThUPY75oR3/glvbf1uS4slHwf9od7MQ/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNhjoIyBb9zeNcYmDBhDVS4YthQ0MB8GA1UdIwQY MBaAFJwKjBd5EfZMMFVzaIFbnmfY/DwPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkFxTUYza1I5a3d3VlhOb2dWdWVaOWo4UEE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy80YzczNzktMzY0OS00MWRlLTg5Zjct ZDU2Mzc0ZTExNTdhLzEvbkFxTUYza1I5a3d3VlhOb2dWdWVaOWo4UEE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy80YzczNzktMzY0OS00MWRlLTg5ZjctZDU2Mzc0ZTExNTdh LzEvbkFxTUYza1I5a3d3VlhOb2dWdWVaOWo4UEE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANFoHHfa7 si1242fnny1v7XZp1vTb/FyoufqLzhPXjgHp2+sarnMOUgJVGKoWPuZh45uBqZ7P gTvhomttRx8OsSMx8l2tu3IhkrDnOVSjzAiVS9UKhauUMJ5We2gfmO0N9pELbW/Z 96ek30BKDkqJLqJyp0D4keyCvvCQO5fIYFjcDTMDMpX3hc/Zf4riKfzWHpe4bgcJ Nx1ZeCMminvKtzrT08cOLs1jyFX4V4WksMZhRvWC+7zqynk7RR+h3GqssfJxoqmo rxoGpym1kO7fhxf+wnXUkk/iywdTdcc+A+6GwKxKlaWNhlWV0bpv56n0HIxYmRRI v90Z1qq34/zHjw== -----END CERTIFICATE-----Generated at Sun Dec 28 23:25:55 2025 by rpki-client