This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/f4863a-aeae-42f7-ba14-ed4a138c4113/1/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.mft File: nYraNSmCoxm1TV5IPTRCY0ZzPqQ.mft (raw, json) Hash identifier: golxehs+jrtXnPvaL9VN/+kfzviblyr3++KnP+M/bDg= Subject key identifier: CB:C0:AF:E2:60:EB:F0:3B:56:65:84:51:A6:54:4A:D5:BD:B8:FE:BD Authority key identifier: 9D:8A:DA:35:29:82:A3:19:B5:4D:5E:48:3D:34:42:63:46:73:3E:A4 Certificate issuer: /CN=9d8ada352982a319b54d5e483d34426346733ea4 Certificate serial: 019B533D052088311BF559F2AE2CC15A4352 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/f4863a-aeae-42f7-ba14-ed4a138c4113/1/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.mft Manifest number: 1684 Signing time: Thu 25 Dec 2025 02:01:06 +0000 Manifest this update: Thu 25 Dec 2025 02:01:06 +0000 Manifest next update: Fri 26 Dec 2025 02:01:06 +0000 Files and hashes: 1: KpbjIIUZw0-XxCl1KqQDZ_EUKkY.roa (hash: KJWoFU4L0w8L8ZUG5csCrTHWK3udD7xALiAnkocVeD0=) 2: nYraNSmCoxm1TV5IPTRCY0ZzPqQ.crl (hash: 5QdIine1a0BbYT2z9J0QZPzEBOC13wiZChcl5MgELNY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/f4863a-aeae-42f7-ba14-ed4a138c4113/1/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/f4863a-aeae-42f7-ba14-ed4a138c4113/1/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.mft rsync://rpki.ripe.net/repository/DEFAULT/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 02:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:3d:05:20:88:31:1b:f5:59:f2:ae:2c:c1:5a:43:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d8ada352982a319b54d5e483d34426346733ea4 Validity Not Before: Dec 25 02:01:06 2025 GMT Not After : Dec 26 02:01:06 2025 GMT Subject: CN=cbc0afe260ebf03b56658451a6544ad5bdb8febd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f5:08:dd:1a:cd:e2:b3:7e:60:ac:7b:90:3d: 71:a0:26:c8:fa:8c:18:29:28:e7:a7:dc:7d:5c:42: 1a:7c:6d:b8:82:73:15:09:94:7e:c7:d7:53:88:ac: 38:c5:c7:6e:74:20:5f:d8:c6:76:55:a1:6a:5f:68: ee:ac:ca:73:a1:f4:29:ec:41:19:b0:09:9a:e4:0d: 59:03:f7:b7:c1:58:8f:8f:7b:dd:12:3c:c2:78:f7: 14:06:c2:44:47:7b:e2:1e:b3:30:c3:1b:12:58:be: 1c:28:86:cb:b0:95:fb:0a:3c:ab:96:62:ed:ae:27: 69:41:d9:11:eb:b9:a8:c8:32:29:c5:27:a3:56:fc: 82:86:e6:97:0d:01:dc:a6:b5:9c:78:16:83:e1:88: 34:67:7b:77:df:c7:f0:28:49:ea:25:35:9b:d2:bc: c1:77:ae:e2:4d:27:39:96:1a:bd:3d:05:4f:92:4f: 45:25:32:9c:1f:43:a8:2e:de:9b:c8:ff:47:f5:d4: ea:8f:d3:39:56:b4:55:39:91:d8:25:92:bc:0f:1e: 43:57:3e:dd:bf:29:55:f2:35:ed:ce:be:a6:12:e1: 30:a9:f5:7e:07:06:93:e0:69:62:7b:6d:1e:ea:15: 11:e4:4a:08:fe:cf:82:3d:c8:f1:c4:90:c8:9c:31: 83:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:C0:AF:E2:60:EB:F0:3B:56:65:84:51:A6:54:4A:D5:BD:B8:FE:BD X509v3 Authority Key Identifier: keyid:9D:8A:DA:35:29:82:A3:19:B5:4D:5E:48:3D:34:42:63:46:73:3E:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f4863a-aeae-42f7-ba14-ed4a138c4113/1/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f4863a-aeae-42f7-ba14-ed4a138c4113/1/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:41:aa:d4:ca:e1:13:07:ce:3d:a1:93:2e:30:4c:21:80:57: 8c:09:f8:d1:11:43:03:14:00:b8:c1:af:92:12:46:2a:9e:c3: 08:11:3e:88:ba:3d:cb:76:e5:c9:67:c3:c2:1e:33:6c:b6:cd: cf:14:9d:28:53:98:76:12:07:24:65:7b:3b:4e:98:9e:96:dc: 6e:1b:d2:95:ee:08:02:bd:f3:cd:6f:e0:83:5d:30:93:4f:52: fe:31:91:03:a8:20:62:70:16:27:a6:d2:c2:e5:c3:30:f5:1e: f2:d9:8e:be:9e:d5:69:5c:07:96:0e:46:b3:b9:4a:31:63:d3: 28:e4:e7:de:a6:e1:8d:c1:07:21:c8:fd:2b:b1:aa:f1:a4:ea: 15:ce:fd:ca:19:cf:10:59:0a:b9:1b:b0:a4:11:1e:ba:e6:05: 30:a0:41:8c:3b:ce:c7:3e:2f:6c:bc:54:b4:57:89:8c:21:07: 47:94:22:4f:d6:7d:1e:eb:14:6a:0f:d7:7c:80:82:3d:28:b9: 9d:74:15:7e:8e:0d:97:90:d1:0a:7a:c1:96:40:88:cb:92:3e: be:a9:1e:22:2b:9e:72:19:22:04:fd:b2:90:47:e0:de:2b:14: ed:21:5a:a8:94:f8:27:9d:ee:c5:a1:0d:e0:68:d4:63:ec:7f: 99:1c:78:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTPQUgiDEb9VnyrizBWkNSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkOGFkYTM1Mjk4MmEzMTliNTRkNWU0ODNkMzQ0MjYzNDY3 MzNlYTQwHhcNMjUxMjI1MDIwMTA2WhcNMjUxMjI2MDIwMTA2WjAzMTEwLwYDVQQD EyhjYmMwYWZlMjYwZWJmMDNiNTY2NTg0NTFhNjU0NGFkNWJkYjhmZWJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvUI3RrN4rN+YKx7kD1xoCbI+owY KSjnp9x9XEIafG24gnMVCZR+x9dTiKw4xcdudCBf2MZ2VaFqX2jurMpzofQp7EEZ sAma5A1ZA/e3wViPj3vdEjzCePcUBsJER3viHrMwwxsSWL4cKIbLsJX7CjyrlmLt ridpQdkR67moyDIpxSejVvyChuaXDQHcprWceBaD4Yg0Z3t338fwKEnqJTWb0rzB d67iTSc5lhq9PQVPkk9FJTKcH0OoLt6byP9H9dTqj9M5VrRVOZHYJZK8Dx5DVz7d vylV8jXtzr6mEuEwqfV+BwaT4Glie20e6hUR5EoI/s+CPcjxxJDInDGDoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMvAr+Jg6/A7VmWEUaZUStW9uP69MB8GA1UdIwQY MBaAFJ2K2jUpgqMZtU1eSD00QmNGcz6kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbllyYU5TbUNveG0xVFY1SVBUUkNZMFp6UHFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9mNDg2M2EtYWVhZS00MmY3LWJhMTQt ZWQ0YTEzOGM0MTEzLzEvbllyYU5TbUNveG0xVFY1SVBUUkNZMFp6UHFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9mNDg2M2EtYWVhZS00MmY3LWJhMTQtZWQ0YTEzOGM0MTEz LzEvbllyYU5TbUNveG0xVFY1SVBUUkNZMFp6UHFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALkGq1Mrh EwfOPaGTLjBMIYBXjAn40RFDAxQAuMGvkhJGKp7DCBE+iLo9y3blyWfDwh4zbLbN zxSdKFOYdhIHJGV7O06YnpbcbhvSle4IAr3zzW/gg10wk09S/jGRA6ggYnAWJ6bS wuXDMPUe8tmOvp7VaVwHlg5Gs7lKMWPTKOTn3qbhjcEHIcj9K7Gq8aTqFc79yhnP EFkKuRuwpBEeuuYFMKBBjDvOxz4vbLxUtFeJjCEHR5QiT9Z9HusUag/XfICCPSi5 nXQVfo4Nl5DRCnrBlkCIy5I+vqkeIiuechkiBP2ykEfg3isU7SFaqJT4J53uxaEN 4GjUY+x/mRx4Gg== -----END CERTIFICATE-----Generated at Thu Dec 25 09:21:36 2025 by rpki-client