This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft File: nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft (raw, json) Hash identifier: sKtDKn9yO8Iy5Hf9XKUGS2C7M6a5onYOWketuiukByk= Subject key identifier: A3:6A:49:92:49:61:1B:AE:2E:F5:A4:B9:12:8B:16:75:98:89:AF:8F Authority key identifier: 9E:43:72:F6:39:32:BA:7F:E8:F1:61:B5:64:B9:38:60:61:4A:80:BA Certificate issuer: /CN=9e4372f63932ba7fe8f161b564b93860614a80ba Certificate serial: 019B4DDF5E723D163C361CF521E172BAFA5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkNy9jkyun_o8WG1ZLk4YGFKgLo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft Manifest number: 0784 Signing time: Wed 24 Dec 2025 01:00:42 +0000 Manifest this update: Wed 24 Dec 2025 01:00:42 +0000 Manifest next update: Thu 25 Dec 2025 01:00:42 +0000 Files and hashes: 1: TaAxyGE0YZ7m-xRwM6T1q9wMqQw.roa (hash: 76tscvyJdodgkrjTmEZQdEHR921zYs8tliL/2ouT7RA=) 2: nkNy9jkyun_o8WG1ZLk4YGFKgLo.crl (hash: UHLPsJYEFY9i6PZ6SJJKZErJ05NHsQm9SEprasWJvGU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft rsync://rpki.ripe.net/repository/DEFAULT/nkNy9jkyun_o8WG1ZLk4YGFKgLo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 19:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:df:5e:72:3d:16:3c:36:1c:f5:21:e1:72:ba:fa:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e4372f63932ba7fe8f161b564b93860614a80ba Validity Not Before: Dec 24 01:00:42 2025 GMT Not After : Dec 25 01:00:42 2025 GMT Subject: CN=a36a499249611bae2ef5a4b9128b16759889af8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:cb:da:1e:65:d8:37:c6:83:e5:69:8b:9a:77: 7b:95:4b:20:cc:70:4a:05:cf:45:9b:25:3e:bc:50: a7:9e:2b:41:3e:db:ca:44:2b:66:69:b7:99:43:52: 69:14:29:ae:b3:13:b4:53:2f:f7:67:37:5a:08:4f: 71:f6:e7:8f:1c:3b:31:d6:06:81:bd:1f:d6:c5:68: bb:a9:f0:c8:70:4a:71:73:96:1e:56:ac:ca:24:fb: af:9b:95:c4:56:73:cc:4b:b4:3e:a8:14:99:7b:e1: 49:29:49:2f:27:25:42:2d:3f:38:64:fb:eb:8d:69: 30:e5:43:83:5c:ea:24:33:5e:16:0d:04:1c:7e:0a: d5:0a:9d:7e:c4:5f:5a:d8:4f:fa:76:08:43:df:c7: d2:32:7b:47:8a:86:c4:19:08:e0:52:3a:43:12:37: b1:ec:2c:1c:0c:e3:6a:d9:a2:0a:ac:e4:35:0c:b5: 66:45:75:74:f2:22:61:4f:49:81:13:7b:6d:f8:9d: 03:be:57:9d:c9:3b:72:7c:12:01:da:4d:bb:9f:f9: 3e:2d:38:6d:73:70:49:fd:b1:89:d9:7e:61:af:1b: cf:ee:36:0c:24:0b:af:81:70:1d:52:5e:15:54:be: 08:92:b3:64:94:ec:48:5c:8a:7f:ac:a9:f6:48:a8: 76:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:6A:49:92:49:61:1B:AE:2E:F5:A4:B9:12:8B:16:75:98:89:AF:8F X509v3 Authority Key Identifier: keyid:9E:43:72:F6:39:32:BA:7F:E8:F1:61:B5:64:B9:38:60:61:4A:80:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkNy9jkyun_o8WG1ZLk4YGFKgLo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:59:aa:65:bc:e8:1d:3b:9b:84:dc:51:07:34:4e:2d:bc:08: 58:f5:14:b5:91:e1:29:a9:e3:aa:37:98:86:e7:50:11:97:fa: a0:da:bb:72:9d:2e:5c:90:2a:70:65:1f:96:27:0c:f0:33:b3: 7e:72:78:76:77:4e:c2:f1:1d:3e:be:93:b6:86:20:d2:dd:36: 83:e4:57:27:b6:e0:4f:67:d9:77:d8:7b:f9:17:02:16:ab:dc: cf:d5:ca:67:de:51:d4:02:36:3b:5e:76:f2:23:06:5a:1a:c7: d1:3e:b5:13:e9:73:49:21:9b:e4:a6:d4:81:db:00:28:d9:bd: 44:ff:44:71:3e:07:9e:68:a7:2a:9c:bd:c3:05:ec:25:98:7d: ce:96:6c:f3:c9:9a:b5:da:85:f3:b9:86:d3:7b:e0:26:96:2c: 06:14:51:43:3d:93:b8:80:3b:ae:54:e7:14:6f:b1:76:2f:2c: 19:40:a2:6a:06:1f:ec:18:05:b1:a3:ca:f4:43:d5:bd:15:e1: e6:96:55:24:e5:4e:de:39:75:db:3d:56:09:33:5c:56:02:41: 0f:e5:4f:53:e3:5a:ed:62:18:9f:da:6f:ff:00:cd:54:14:a0: 1d:17:48:e4:0f:8f:4f:15:33:1c:40:e1:92:f1:da:33:46:5d: 8e:86:72:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtN315yPRY8Nhz1IeFyuvpaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNDM3MmY2MzkzMmJhN2ZlOGYxNjFiNTY0YjkzODYwNjE0 YTgwYmEwHhcNMjUxMjI0MDEwMDQyWhcNMjUxMjI1MDEwMDQyWjAzMTEwLwYDVQQD EyhhMzZhNDk5MjQ5NjExYmFlMmVmNWE0YjkxMjhiMTY3NTk4ODlhZjhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsvaHmXYN8aD5WmLmnd7lUsgzHBK Bc9FmyU+vFCnnitBPtvKRCtmabeZQ1JpFCmusxO0Uy/3ZzdaCE9x9uePHDsx1gaB vR/WxWi7qfDIcEpxc5YeVqzKJPuvm5XEVnPMS7Q+qBSZe+FJKUkvJyVCLT84ZPvr jWkw5UODXOokM14WDQQcfgrVCp1+xF9a2E/6dghD38fSMntHiobEGQjgUjpDEjex 7CwcDONq2aIKrOQ1DLVmRXV08iJhT0mBE3tt+J0DvledyTtyfBIB2k27n/k+LTht c3BJ/bGJ2X5hrxvP7jYMJAuvgXAdUl4VVL4IkrNklOxIXIp/rKn2SKh2wwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKNqSZJJYRuuLvWkuRKLFnWYia+PMB8GA1UdIwQY MBaAFJ5DcvY5Mrp/6PFhtWS5OGBhSoC6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmtOeTlqa3l1bl9vOFdHMVpMazRZR0ZLZ0xvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi8zOTY3YTYtNzlmMy00YWZmLWIzNGIt YWUwZWE2NjQzYmJkLzEvbmtOeTlqa3l1bl9vOFdHMVpMazRZR0ZLZ0xvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi8zOTY3YTYtNzlmMy00YWZmLWIzNGItYWUwZWE2NjQzYmJk LzEvbmtOeTlqa3l1bl9vOFdHMVpMazRZR0ZLZ0xvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANVmqZbzo HTubhNxRBzROLbwIWPUUtZHhKanjqjeYhudQEZf6oNq7cp0uXJAqcGUflicM8DOz fnJ4dndOwvEdPr6TtoYg0t02g+RXJ7bgT2fZd9h7+RcCFqvcz9XKZ95R1AI2O152 8iMGWhrH0T61E+lzSSGb5KbUgdsAKNm9RP9EcT4HnminKpy9wwXsJZh9zpZs88ma tdqF87mG03vgJpYsBhRRQz2TuIA7rlTnFG+xdi8sGUCiagYf7BgFsaPK9EPVvRXh 5pZVJOVO3jl12z1WCTNcVgJBD+VPU+Na7WIYn9pv/wDNVBSgHRdI5A+PTxUzHEDh kvHaM0ZdjoZytA== -----END CERTIFICATE-----Generated at Wed Dec 24 03:34:22 2025 by rpki-client