This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/0c3d1b-fc23-41fb-af9c-a163f573b6d9/1/nR_TKOt-elrN5RmPDX6b4mhHbXE.mft File: nR_TKOt-elrN5RmPDX6b4mhHbXE.mft (raw, json) Hash identifier: Z7dpfgQvOtw85pys6neO/sjboMTLkBwLqIE/WgvlvdQ= Subject key identifier: 97:63:9D:9B:F6:D3:98:53:E9:61:EE:6E:A7:94:9E:B3:91:8C:C0:CC Authority key identifier: 9D:1F:D3:28:EB:7E:7A:5A:CD:E5:19:8F:0D:7E:9B:E2:68:47:6D:71 Certificate issuer: /CN=9d1fd328eb7e7a5acde5198f0d7e9be268476d71 Certificate serial: 019B29D3768487DD4E6D754B2DD745EFBCE1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nR_TKOt-elrN5RmPDX6b4mhHbXE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/0c3d1b-fc23-41fb-af9c-a163f573b6d9/1/nR_TKOt-elrN5RmPDX6b4mhHbXE.mft Manifest number: 1226 Signing time: Wed 17 Dec 2025 01:01:22 +0000 Manifest this update: Wed 17 Dec 2025 01:01:22 +0000 Manifest next update: Thu 18 Dec 2025 01:01:22 +0000 Files and hashes: 1: nR_TKOt-elrN5RmPDX6b4mhHbXE.crl (hash: z7dHVbuUhgo9XtsejC6qbNvE8QZV/hcQTUExx5mwlgM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/0c3d1b-fc23-41fb-af9c-a163f573b6d9/1/nR_TKOt-elrN5RmPDX6b4mhHbXE.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/0c3d1b-fc23-41fb-af9c-a163f573b6d9/1/nR_TKOt-elrN5RmPDX6b4mhHbXE.mft rsync://rpki.ripe.net/repository/DEFAULT/nR_TKOt-elrN5RmPDX6b4mhHbXE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 01:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:29:d3:76:84:87:dd:4e:6d:75:4b:2d:d7:45:ef:bc:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d1fd328eb7e7a5acde5198f0d7e9be268476d71 Validity Not Before: Dec 17 01:01:22 2025 GMT Not After : Dec 18 01:01:22 2025 GMT Subject: CN=97639d9bf6d39853e961ee6ea7949eb3918cc0cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:78:30:00:74:61:c0:6d:ca:43:ef:fe:0f:df: 98:cd:6b:a9:dd:c5:c3:eb:9f:88:cb:48:45:c3:c3: a1:c0:6a:57:10:9d:66:2b:23:ce:fe:cc:3e:56:05: ed:e4:bf:b8:2d:af:87:65:b7:ea:11:f3:5e:8c:6a: 96:b0:a3:8e:95:0f:b4:b3:ff:56:4a:0a:a1:58:7a: 07:c9:01:e1:d5:ce:77:a9:2e:b5:c2:dd:97:f4:32: 65:13:74:8f:9e:7b:6c:75:92:75:dd:1a:2a:62:5b: a1:0c:28:40:6d:29:2d:9c:13:96:86:41:7d:40:ef: 4f:69:b2:dc:72:ee:cd:28:90:f4:34:6e:49:ab:a7: bb:5d:a7:ff:a3:15:97:0b:67:d5:ea:bd:1c:45:a8: 7b:ae:24:d2:01:31:bf:3f:be:e9:23:2d:40:4a:79: ce:8e:8f:8c:91:36:4f:e0:59:12:b3:bf:a0:92:f1: 6c:e3:61:ad:55:ba:e1:b8:07:24:c8:b3:65:5f:7b: c3:e6:a0:a3:00:81:15:95:2b:da:75:37:f9:0e:27: d6:fd:e1:9c:ad:69:1e:1a:dd:16:30:c6:2f:b5:ef: 89:8c:ad:e8:92:39:c4:ad:99:e0:66:03:b7:81:e9: d5:8f:03:6b:88:3c:50:1f:43:96:94:ea:d8:f8:43: e1:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:63:9D:9B:F6:D3:98:53:E9:61:EE:6E:A7:94:9E:B3:91:8C:C0:CC X509v3 Authority Key Identifier: keyid:9D:1F:D3:28:EB:7E:7A:5A:CD:E5:19:8F:0D:7E:9B:E2:68:47:6D:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nR_TKOt-elrN5RmPDX6b4mhHbXE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0c3d1b-fc23-41fb-af9c-a163f573b6d9/1/nR_TKOt-elrN5RmPDX6b4mhHbXE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0c3d1b-fc23-41fb-af9c-a163f573b6d9/1/nR_TKOt-elrN5RmPDX6b4mhHbXE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:55:0c:1a:0c:b6:05:2a:a3:b5:e1:58:8b:6e:3a:f3:30:89: 16:85:7b:a3:6f:c4:96:a1:a9:0f:5f:f5:2a:ab:2a:96:64:9c: 2e:9d:07:71:7e:36:91:5a:91:54:1d:87:3c:17:7d:d0:4a:76: 22:58:cd:04:c5:f1:86:a5:f1:e2:cf:ca:75:5e:b9:42:26:ed: fc:35:44:c3:91:9b:2e:50:ba:8d:5d:4d:d7:de:3a:cc:b9:29: b1:73:01:a8:0c:4c:59:38:28:4c:9d:1a:11:b3:42:24:5a:cf: c9:f3:fc:06:9b:01:a4:20:3a:3c:d1:8a:d8:5b:57:64:9c:60: f7:26:18:a6:83:c7:53:22:9b:05:36:4a:3c:ce:b4:73:64:7e: 43:dd:75:5b:d4:dd:9b:ee:07:c7:7f:87:c5:ec:6b:3b:78:e6: ee:15:35:e6:a1:ce:c7:26:06:97:3d:44:90:67:ce:92:0d:08: e2:8d:28:83:de:04:2a:a2:27:33:fb:dc:a2:e5:9d:9d:ed:36: f9:7b:90:5a:15:c4:6e:db:d3:d9:4d:7e:98:a4:2a:99:4c:39: 12:c8:6e:53:55:13:98:d2:bf:c4:79:e9:c8:7b:f9:f9:f0:49: 9e:57:b4:dc:ef:8e:a9:b9:a2:36:5d:cc:21:5d:37:f4:00:57: 33:af:ef:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsp03aEh91ObXVLLddF77zhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMWZkMzI4ZWI3ZTdhNWFjZGU1MTk4ZjBkN2U5YmUyNjg0 NzZkNzEwHhcNMjUxMjE3MDEwMTIyWhcNMjUxMjE4MDEwMTIyWjAzMTEwLwYDVQQD Eyg5NzYzOWQ5YmY2ZDM5ODUzZTk2MWVlNmVhNzk0OWViMzkxOGNjMGNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHgwAHRhwG3KQ+/+D9+YzWup3cXD 65+Iy0hFw8OhwGpXEJ1mKyPO/sw+VgXt5L+4La+HZbfqEfNejGqWsKOOlQ+0s/9W SgqhWHoHyQHh1c53qS61wt2X9DJlE3SPnntsdZJ13RoqYluhDChAbSktnBOWhkF9 QO9PabLccu7NKJD0NG5Jq6e7Xaf/oxWXC2fV6r0cRah7riTSATG/P77pIy1ASnnO jo+MkTZP4FkSs7+gkvFs42GtVbrhuAckyLNlX3vD5qCjAIEVlSvadTf5DifW/eGc rWkeGt0WMMYvte+JjK3okjnErZngZgO3genVjwNriDxQH0OWlOrY+EPhXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJdjnZv205hT6WHubqeUnrORjMDMMB8GA1UdIwQY MBaAFJ0f0yjrfnpazeUZjw1+m+JoR21xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblJfVEtPdC1lbHJONVJtUERYNmI0bWhIYlhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8wYzNkMWItZmMyMy00MWZiLWFmOWMt YTE2M2Y1NzNiNmQ5LzEvblJfVEtPdC1lbHJONVJtUERYNmI0bWhIYlhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC8wYzNkMWItZmMyMy00MWZiLWFmOWMtYTE2M2Y1NzNiNmQ5 LzEvblJfVEtPdC1lbHJONVJtUERYNmI0bWhIYlhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa1UMGgy2 BSqjteFYi2468zCJFoV7o2/ElqGpD1/1KqsqlmScLp0HcX42kVqRVB2HPBd90Ep2 IljNBMXxhqXx4s/KdV65Qibt/DVEw5GbLlC6jV1N1946zLkpsXMBqAxMWTgoTJ0a EbNCJFrPyfP8BpsBpCA6PNGK2FtXZJxg9yYYpoPHUyKbBTZKPM60c2R+Q911W9Td m+4Hx3+HxexrO3jm7hU15qHOxyYGlz1EkGfOkg0I4o0og94EKqInM/vcouWdne02 +XuQWhXEbtvT2U1+mKQqmUw5EshuU1UTmNK/xHnpyHv5+fBJnle03O+OqbmiNl3M IV039ABXM6/vpQ== -----END CERTIFICATE-----Generated at Wed Dec 17 11:20:54 2025 by rpki-client