This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.mft File: NKY9yGEg6H9M_4xZrzJh5uEpL9k.mft (raw, json) Hash identifier: 9/+pwLGEyHZpB2qiYuA6yM8OhR70NIMtFdwzGGHVi3o= Subject key identifier: 89:55:D5:5F:2D:83:9B:40:43:94:C1:1A:9C:D9:07:82:C7:C1:1D:D7 Authority key identifier: 34:A6:3D:C8:61:20:E8:7F:4C:FF:8C:59:AF:32:61:E6:E1:29:2F:D9 Certificate issuer: /CN=34a63dc86120e87f4cff8c59af3261e6e1292fd9 Certificate serial: 019B3D598902B03BB40CB9C60C7234C01532 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NKY9yGEg6H9M_4xZrzJh5uEpL9k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.mft Manifest number: 10BF Signing time: Sat 20 Dec 2025 20:00:36 +0000 Manifest this update: Sat 20 Dec 2025 20:00:36 +0000 Manifest next update: Sun 21 Dec 2025 20:00:36 +0000 Files and hashes: 1: MjfPB6z00e-ff7RNJtIi20gDUz8.roa (hash: Cpw1zTo9jE0fDsY0ux+7L1DgxTy3Nnzm8fXHw47pw5Q=) 2: NKY9yGEg6H9M_4xZrzJh5uEpL9k.crl (hash: 1WpE4hm3ZevGLP6g5+nEsDr0UhAiZRDFxtAMOeymOU8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.mft rsync://rpki.ripe.net/repository/DEFAULT/NKY9yGEg6H9M_4xZrzJh5uEpL9k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:89:02:b0:3b:b4:0c:b9:c6:0c:72:34:c0:15:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34a63dc86120e87f4cff8c59af3261e6e1292fd9 Validity Not Before: Dec 20 20:00:36 2025 GMT Not After : Dec 21 20:00:36 2025 GMT Subject: CN=8955d55f2d839b404394c11a9cd90782c7c11dd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c6:24:0d:69:ca:2e:02:fb:2b:a6:ca:a4:bb: ef:3b:80:e2:d0:eb:68:b5:e8:06:05:3b:01:50:a6: 55:c6:61:16:79:57:f8:44:af:e9:47:bc:9a:a4:dc: 10:d6:5e:20:14:44:da:2a:16:4e:9b:af:b0:09:68: dd:7b:dd:cf:c0:cd:a7:45:ae:6e:63:58:4d:a9:a1: 85:bc:d1:56:67:f1:28:11:74:c0:fb:11:8e:1d:6a: 83:3a:81:6d:4d:8d:63:83:de:2e:26:cc:b3:67:ac: 17:2f:03:16:a0:b8:9d:51:32:8f:8b:2a:88:5c:7f: 56:b1:9d:2b:cd:0c:59:59:38:91:70:ea:eb:93:97: 25:a9:ed:74:af:93:1a:d9:41:37:b2:da:3a:f9:21: 14:6f:e9:29:42:66:17:7e:35:7e:de:3d:62:a8:39: 7b:02:54:91:58:46:37:77:64:a4:3e:1d:53:4b:9b: 99:ec:28:67:f9:cc:40:b4:e6:6b:65:8c:77:1d:6a: 9c:90:a2:46:d1:57:c3:63:8c:f0:96:9a:c3:ce:dd: 38:0f:c4:23:70:7a:75:33:60:b1:d4:87:8c:c6:a0: ee:ab:72:67:f6:66:d5:79:20:1d:8f:3c:86:0e:d2: 36:44:fb:b5:6f:27:9e:78:ed:75:55:c2:58:e2:e1: 29:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:55:D5:5F:2D:83:9B:40:43:94:C1:1A:9C:D9:07:82:C7:C1:1D:D7 X509v3 Authority Key Identifier: keyid:34:A6:3D:C8:61:20:E8:7F:4C:FF:8C:59:AF:32:61:E6:E1:29:2F:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NKY9yGEg6H9M_4xZrzJh5uEpL9k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:11:64:0d:f3:99:f1:1d:7d:ad:bf:d3:4a:d9:ed:05:b0:27: 18:50:04:f4:8c:1b:14:06:86:1e:8d:d7:75:e4:c1:dc:5a:89: ae:d5:61:4a:8f:cb:13:4f:bb:df:bf:c0:c8:c5:d2:b4:56:ba: 6c:21:59:18:85:af:fa:7f:14:3a:f6:59:1a:0e:ff:94:fb:2e: f0:40:a2:e0:13:c0:09:20:b8:b5:35:93:33:fd:b5:d8:02:2a: 44:bf:5d:37:07:36:35:33:f2:b3:dd:d5:e1:06:b2:7b:1a:fc: 09:92:f1:f5:02:b6:d1:cd:ff:c8:66:44:ed:2c:fb:10:17:77: 86:a5:05:e8:31:5b:c9:61:51:11:bb:96:b8:cb:20:c9:d0:94: d7:a4:a6:0a:87:82:0d:ad:04:9c:12:8a:00:44:dc:20:dd:9e: 44:69:b0:91:f0:2c:64:b0:bd:71:83:f6:7f:9f:3b:0f:4c:3a: 3e:86:f1:b9:ee:e6:2c:2b:5c:53:4a:03:27:37:5c:de:d9:ba: c8:89:2a:3d:22:80:e1:94:07:70:a5:3d:85:1e:b6:70:cf:e1: ea:09:9a:d6:e0:28:a1:63:c7:c9:3c:99:c6:64:fe:ec:5c:18: a4:99:1c:be:8e:b0:7e:b5:39:dc:18:91:1e:3c:96:c4:d5:af: 14:a7:ca:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WYkCsDu0DLnGDHI0wBUyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0YTYzZGM4NjEyMGU4N2Y0Y2ZmOGM1OWFmMzI2MWU2ZTEy OTJmZDkwHhcNMjUxMjIwMjAwMDM2WhcNMjUxMjIxMjAwMDM2WjAzMTEwLwYDVQQD Eyg4OTU1ZDU1ZjJkODM5YjQwNDM5NGMxMWE5Y2Q5MDc4MmM3YzExZGQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycYkDWnKLgL7K6bKpLvvO4Di0Oto tegGBTsBUKZVxmEWeVf4RK/pR7yapNwQ1l4gFETaKhZOm6+wCWjde93PwM2nRa5u Y1hNqaGFvNFWZ/EoEXTA+xGOHWqDOoFtTY1jg94uJsyzZ6wXLwMWoLidUTKPiyqI XH9WsZ0rzQxZWTiRcOrrk5clqe10r5Ma2UE3sto6+SEUb+kpQmYXfjV+3j1iqDl7 AlSRWEY3d2SkPh1TS5uZ7Chn+cxAtOZrZYx3HWqckKJG0VfDY4zwlprDzt04D8Qj cHp1M2Cx1IeMxqDuq3Jn9mbVeSAdjzyGDtI2RPu1byeeeO11VcJY4uEpbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIlV1V8tg5tAQ5TBGpzZB4LHwR3XMB8GA1UdIwQY MBaAFDSmPchhIOh/TP+MWa8yYebhKS/ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTktZOXlHRWc2SDlNXzR4WnJ6Smg1dUVwTDlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy82YjljN2EtOWRjNy00MDQwLWIyOWEt ZmM3YTBlYTZiMGUyLzEvTktZOXlHRWc2SDlNXzR4WnJ6Smg1dUVwTDlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy82YjljN2EtOWRjNy00MDQwLWIyOWEtZmM3YTBlYTZiMGUy LzEvTktZOXlHRWc2SDlNXzR4WnJ6Smg1dUVwTDlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALhFkDfOZ 8R19rb/TStntBbAnGFAE9IwbFAaGHo3XdeTB3FqJrtVhSo/LE0+737/AyMXStFa6 bCFZGIWv+n8UOvZZGg7/lPsu8ECi4BPACSC4tTWTM/212AIqRL9dNwc2NTPys93V 4Qayexr8CZLx9QK20c3/yGZE7Sz7EBd3hqUF6DFbyWFREbuWuMsgydCU16SmCoeC Da0EnBKKAETcIN2eRGmwkfAsZLC9cYP2f587D0w6Pobxue7mLCtcU0oDJzdc3tm6 yIkqPSKA4ZQHcKU9hR62cM/h6gma1uAooWPHyTyZxmT+7FwYpJkcvo6wfrU53BiR HjyWxNWvFKfKWw== -----END CERTIFICATE-----Generated at Sun Dec 21 04:05:12 2025 by rpki-client