This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.mft File: nMJvGM-WuGpFBrO4TMxE07NQaiA.mft (raw, json) Hash identifier: Z9EI5mRco3xoinN+BywsrL6Bizv+KxCGIGQydzNjn/I= Subject key identifier: 8D:92:56:8B:03:41:5E:B6:44:DF:BB:B7:12:32:F4:CB:98:79:EB:E0 Authority key identifier: 9C:C2:6F:18:CF:96:B8:6A:45:06:B3:B8:4C:CC:44:D3:B3:50:6A:20 Certificate issuer: /CN=9cc26f18cf96b86a4506b3b84ccc44d3b3506a20 Certificate serial: 019B6656299DE76617519B2D04EDD6BB3CAB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nMJvGM-WuGpFBrO4TMxE07NQaiA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.mft Manifest number: 0965 Signing time: Sun 28 Dec 2025 19:01:21 +0000 Manifest this update: Sun 28 Dec 2025 19:01:21 +0000 Manifest next update: Mon 29 Dec 2025 19:01:21 +0000 Files and hashes: 1: jYsRIvoDURhQER-g8gsgtrlE-uw.roa (hash: GoEsOPwpW5DP9dw5vT+vzZBcfSyAVzSYkZdL0zk1Xg8=) 2: nMJvGM-WuGpFBrO4TMxE07NQaiA.crl (hash: 9ZEa6mUraeIELEgJgAen9rEFZrVdkoH2XJlo0mjRD5U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.mft rsync://rpki.ripe.net/repository/DEFAULT/nMJvGM-WuGpFBrO4TMxE07NQaiA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 19:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:66:56:29:9d:e7:66:17:51:9b:2d:04:ed:d6:bb:3c:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cc26f18cf96b86a4506b3b84ccc44d3b3506a20 Validity Not Before: Dec 28 19:01:21 2025 GMT Not After : Dec 29 19:01:21 2025 GMT Subject: CN=8d92568b03415eb644dfbbb71232f4cb9879ebe0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:50:a3:66:13:47:d4:9a:78:3a:dc:62:35:e3: 7e:af:fc:40:99:c0:f2:ba:16:ec:e8:81:f3:89:4a: 72:e9:cc:86:db:92:f2:29:da:d5:7b:a0:45:9e:86: f0:39:05:f8:c9:77:43:a2:53:31:99:d1:84:be:1a: 0e:af:46:89:6a:1a:42:2a:52:0f:ef:bb:40:ab:96: 04:98:8f:2a:7d:06:25:18:bf:f5:88:70:58:65:33: e6:4c:a7:2b:5a:a8:24:77:4f:1f:07:11:7a:e5:19: f1:43:6a:97:ab:f8:70:eb:d8:36:1f:a0:84:58:68: 44:d0:7c:5f:16:88:02:c3:7e:43:59:35:fa:db:73: 33:b9:8b:2b:1b:6b:7f:15:66:c2:72:17:29:3b:26: da:ef:92:fa:39:f6:6c:07:3d:2c:e3:15:af:ac:c7: c4:f0:e5:95:14:d6:71:e8:a7:66:00:0d:f9:6b:9b: 2f:7c:0c:a1:90:fc:c3:39:92:b2:5e:f2:9c:f3:64: f5:ba:9c:1b:c5:dd:a4:77:46:a5:de:36:7d:2e:31: f9:ca:a2:3b:18:c8:5d:bf:19:f2:01:8b:e2:f9:44: 9d:91:d0:35:fe:48:f1:2b:88:f3:9a:5e:7e:39:4d: 3f:ac:78:9f:f2:a4:f2:74:4e:ac:67:47:27:46:21: a2:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:92:56:8B:03:41:5E:B6:44:DF:BB:B7:12:32:F4:CB:98:79:EB:E0 X509v3 Authority Key Identifier: keyid:9C:C2:6F:18:CF:96:B8:6A:45:06:B3:B8:4C:CC:44:D3:B3:50:6A:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nMJvGM-WuGpFBrO4TMxE07NQaiA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:8b:47:a9:f7:6a:fa:a0:42:36:2a:d1:a6:18:6b:3a:c8:55: 1e:90:af:c1:fe:95:35:ae:c4:28:29:d0:78:bc:27:a7:8b:0c: cf:0a:ad:47:4d:3c:ef:95:23:45:70:ab:b8:91:01:0b:c2:c4: a7:27:94:77:3b:35:95:60:60:6d:14:27:5b:47:ba:16:d4:ff: bc:99:06:2e:5b:7c:92:c8:b8:3e:d5:a7:0e:90:81:24:65:6f: 8b:c0:b0:c9:5e:cc:b6:6d:b4:2b:48:93:65:32:f1:05:9d:f9: 10:0c:ad:15:55:5a:49:8c:5b:d5:f0:6f:a3:bd:49:6b:87:27: 31:c4:5e:87:08:bb:f1:da:24:0d:22:2b:34:c2:e7:09:e0:0e: b0:4b:ed:78:c8:91:4a:0f:d7:5f:21:3f:12:ce:76:54:39:b5: 13:77:4a:34:72:d5:76:d8:7c:c1:c6:22:83:03:75:6b:4f:1e: b6:d6:1e:7f:7e:2a:d7:c5:42:99:ab:d8:b7:1b:f0:cc:78:d3: 71:81:f1:24:89:34:f9:a4:d8:1d:f5:23:a9:31:31:f5:30:69: a1:bf:a9:74:01:75:5e:b3:ff:cd:40:94:18:57:81:ca:8d:0d: ff:c4:8d:ff:93:eb:75:0c:54:7f:c0:4c:db:b0:1e:3d:da:42: 6d:c1:d2:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtmVimd52YXUZstBO3WuzyrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljYzI2ZjE4Y2Y5NmI4NmE0NTA2YjNiODRjY2M0NGQzYjM1 MDZhMjAwHhcNMjUxMjI4MTkwMTIxWhcNMjUxMjI5MTkwMTIxWjAzMTEwLwYDVQQD Eyg4ZDkyNTY4YjAzNDE1ZWI2NDRkZmJiYjcxMjMyZjRjYjk4NzllYmUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1CjZhNH1Jp4OtxiNeN+r/xAmcDy uhbs6IHziUpy6cyG25LyKdrVe6BFnobwOQX4yXdDolMxmdGEvhoOr0aJahpCKlIP 77tAq5YEmI8qfQYlGL/1iHBYZTPmTKcrWqgkd08fBxF65RnxQ2qXq/hw69g2H6CE WGhE0HxfFogCw35DWTX623MzuYsrG2t/FWbCchcpOyba75L6OfZsBz0s4xWvrMfE 8OWVFNZx6KdmAA35a5svfAyhkPzDOZKyXvKc82T1upwbxd2kd0al3jZ9LjH5yqI7 GMhdvxnyAYvi+USdkdA1/kjxK4jzml5+OU0/rHif8qTydE6sZ0cnRiGiYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI2SVosDQV62RN+7txIy9MuYeevgMB8GA1UdIwQY MBaAFJzCbxjPlrhqRQazuEzMRNOzUGogMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbk1KdkdNLVd1R3BGQnJPNFRNeEUwN05RYWlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8zNjI5NTgtMDZkZC00YzA0LTg4NjQt MDEzOTg5NDJmYjVhLzEvbk1KdkdNLVd1R3BGQnJPNFRNeEUwN05RYWlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy8zNjI5NTgtMDZkZC00YzA0LTg4NjQtMDEzOTg5NDJmYjVh LzEvbk1KdkdNLVd1R3BGQnJPNFRNeEUwN05RYWlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaItHqfdq +qBCNirRphhrOshVHpCvwf6VNa7EKCnQeLwnp4sMzwqtR00875UjRXCruJEBC8LE pyeUdzs1lWBgbRQnW0e6FtT/vJkGLlt8ksi4PtWnDpCBJGVvi8CwyV7Mtm20K0iT ZTLxBZ35EAytFVVaSYxb1fBvo71Ja4cnMcRehwi78dokDSIrNMLnCeAOsEvteMiR Sg/XXyE/Es52VDm1E3dKNHLVdth8wcYigwN1a08ettYef34q18VCmavYtxvwzHjT cYHxJIk0+aTYHfUjqTEx9TBpob+pdAF1XrP/zUCUGFeByo0N/8SN/5PrdQxUf8BM 27AePdpCbcHSSA== -----END CERTIFICATE-----Generated at Mon Dec 29 01:10:55 2025 by rpki-client