This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft File: nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft (raw, json) Hash identifier: Pkl0VWHm4tT6NMvaikFT84zkHZ13ViWvFJXnxYKshUQ= Subject key identifier: E3:96:1E:B0:CC:F5:4A:B0:07:DB:27:ED:49:AA:CD:35:80:C8:43:08 Authority key identifier: 9E:43:72:F6:39:32:BA:7F:E8:F1:61:B5:64:B9:38:60:61:4A:80:BA Certificate issuer: /CN=9e4372f63932ba7fe8f161b564b93860614a80ba Certificate serial: 019B3E6CBEB8EF80B133847CA8F07C49D648 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkNy9jkyun_o8WG1ZLk4YGFKgLo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft Manifest number: 077C Signing time: Sun 21 Dec 2025 01:01:12 +0000 Manifest this update: Sun 21 Dec 2025 01:01:12 +0000 Manifest next update: Mon 22 Dec 2025 01:01:12 +0000 Files and hashes: 1: TaAxyGE0YZ7m-xRwM6T1q9wMqQw.roa (hash: 76tscvyJdodgkrjTmEZQdEHR921zYs8tliL/2ouT7RA=) 2: nkNy9jkyun_o8WG1ZLk4YGFKgLo.crl (hash: S2rc0Ofm0796ytTu+y5YJTq5ZAmTaAVbLPU93CjOR1Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft rsync://rpki.ripe.net/repository/DEFAULT/nkNy9jkyun_o8WG1ZLk4YGFKgLo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:be:b8:ef:80:b1:33:84:7c:a8:f0:7c:49:d6:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e4372f63932ba7fe8f161b564b93860614a80ba Validity Not Before: Dec 21 01:01:12 2025 GMT Not After : Dec 22 01:01:12 2025 GMT Subject: CN=e3961eb0ccf54ab007db27ed49aacd3580c84308 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:dc:8b:0a:21:59:0e:85:cd:08:07:c5:b0:0f: e6:c0:24:1d:bc:2f:bf:97:0a:a4:b2:97:dd:20:c2: c2:c1:7b:b0:c9:25:76:13:a8:70:5a:b6:03:1a:2a: 5e:0b:8b:b7:fb:8e:69:30:0c:2e:d5:2a:82:7b:e7: 52:0e:c9:d8:b5:2a:39:9a:10:86:7c:db:c4:de:21: f4:1c:48:aa:a1:8b:f5:90:99:7b:08:19:44:0c:96: 80:dc:67:d3:1d:e0:9e:a2:ef:36:f4:22:ec:7c:26: 07:c5:ce:d4:e4:5a:a6:d4:7e:15:7e:9e:1f:1f:9e: 5a:7b:8d:9f:d4:10:78:fb:1d:0f:89:81:45:18:e3: 10:6c:4f:53:88:72:1c:31:b0:f0:5a:6e:b3:a0:c0: c3:2a:44:4d:2d:8a:70:ea:b6:d7:70:ba:d8:16:2b: b5:dc:df:61:ee:ec:34:37:b1:10:96:50:ae:b8:b2: 30:7c:90:8d:a2:20:55:72:5c:d9:f6:62:65:25:ba: 2e:60:a5:82:33:9f:8e:1e:96:c9:f3:13:e6:1f:ba: aa:e9:5e:b3:2b:b4:e2:1a:9b:a9:51:79:b3:a1:ca: 4b:93:bf:8b:6e:95:00:55:1c:73:57:d6:8f:6d:73: 3e:d0:44:ce:e5:ae:8f:0e:7a:73:59:e1:53:f7:01: bd:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:96:1E:B0:CC:F5:4A:B0:07:DB:27:ED:49:AA:CD:35:80:C8:43:08 X509v3 Authority Key Identifier: keyid:9E:43:72:F6:39:32:BA:7F:E8:F1:61:B5:64:B9:38:60:61:4A:80:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkNy9jkyun_o8WG1ZLk4YGFKgLo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:2a:d2:49:a4:d8:8d:ad:2c:57:4d:c5:90:5a:ec:86:ed:61: 0e:30:e8:a2:10:a6:2c:2d:19:39:e7:1b:a7:f2:fe:0d:55:98: cf:f3:5e:c0:9b:e8:82:2f:bc:31:44:72:ae:8c:af:69:75:27: ee:54:2e:07:eb:97:0c:3c:0a:7d:9e:ee:01:43:85:5e:04:a5: 7a:db:31:79:a8:17:9b:f5:ae:f0:1a:b8:24:e6:f0:d8:be:88: 69:f8:39:34:29:99:78:f1:20:50:66:5a:b9:ea:28:29:84:32: 03:4f:84:d6:a8:aa:74:a7:8b:88:6c:67:19:19:05:c4:58:1e: f5:0c:5f:e9:5c:b6:c2:31:03:f2:dd:25:19:08:c0:2d:ce:f4: 8a:aa:9b:8e:ac:14:f0:b9:d3:4d:12:f3:f9:2b:1d:c9:c9:6f: 07:b9:63:a3:93:f7:f5:ac:8d:ad:af:43:ba:f8:bc:2b:d5:25: fe:23:0c:2c:92:a9:88:40:54:96:24:c4:e2:c6:b8:32:00:85: dd:e4:c5:a6:63:05:bc:35:0d:7a:c7:61:b4:36:88:c1:34:dc: b4:b5:a4:6a:ae:12:15:b1:9b:b0:4c:8b:45:7e:8d:32:b7:9d: 47:46:39:ca:02:bc:4f:57:7e:fd:56:d7:a3:a4:35:bb:ae:38: 5f:fe:94:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bL6474CxM4R8qPB8SdZIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNDM3MmY2MzkzMmJhN2ZlOGYxNjFiNTY0YjkzODYwNjE0 YTgwYmEwHhcNMjUxMjIxMDEwMTEyWhcNMjUxMjIyMDEwMTEyWjAzMTEwLwYDVQQD EyhlMzk2MWViMGNjZjU0YWIwMDdkYjI3ZWQ0OWFhY2QzNTgwYzg0MzA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytyLCiFZDoXNCAfFsA/mwCQdvC+/ lwqkspfdIMLCwXuwySV2E6hwWrYDGipeC4u3+45pMAwu1SqCe+dSDsnYtSo5mhCG fNvE3iH0HEiqoYv1kJl7CBlEDJaA3GfTHeCeou829CLsfCYHxc7U5Fqm1H4Vfp4f H55ae42f1BB4+x0PiYFFGOMQbE9TiHIcMbDwWm6zoMDDKkRNLYpw6rbXcLrYFiu1 3N9h7uw0N7EQllCuuLIwfJCNoiBVclzZ9mJlJbouYKWCM5+OHpbJ8xPmH7qq6V6z K7TiGpupUXmzocpLk7+LbpUAVRxzV9aPbXM+0ETO5a6PDnpzWeFT9wG9ewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOOWHrDM9UqwB9sn7UmqzTWAyEMIMB8GA1UdIwQY MBaAFJ5DcvY5Mrp/6PFhtWS5OGBhSoC6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmtOeTlqa3l1bl9vOFdHMVpMazRZR0ZLZ0xvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi8zOTY3YTYtNzlmMy00YWZmLWIzNGIt YWUwZWE2NjQzYmJkLzEvbmtOeTlqa3l1bl9vOFdHMVpMazRZR0ZLZ0xvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi8zOTY3YTYtNzlmMy00YWZmLWIzNGItYWUwZWE2NjQzYmJk LzEvbmtOeTlqa3l1bl9vOFdHMVpMazRZR0ZLZ0xvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiSrSSaTY ja0sV03FkFrshu1hDjDoohCmLC0ZOecbp/L+DVWYz/NewJvogi+8MURyroyvaXUn 7lQuB+uXDDwKfZ7uAUOFXgSletsxeagXm/Wu8Bq4JObw2L6Iafg5NCmZePEgUGZa ueooKYQyA0+E1qiqdKeLiGxnGRkFxFge9Qxf6Vy2wjED8t0lGQjALc70iqqbjqwU 8LnTTRLz+SsdyclvB7ljo5P39ayNra9Duvi8K9Ul/iMMLJKpiEBUliTE4sa4MgCF 3eTFpmMFvDUNesdhtDaIwTTctLWkaq4SFbGbsEyLRX6NMredR0Y5ygK8T1d+/VbX o6Q1u644X/6UOg== -----END CERTIFICATE-----Generated at Sun Dec 21 06:03:37 2025 by rpki-client