This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f974e9-4743-46db-a348-1d1989f06618/1/nL6cQ-51mJYAORlQhzRyM0a_cBY.mft File: nL6cQ-51mJYAORlQhzRyM0a_cBY.mft (raw, json) Hash identifier: dekl+8GJbHYk+ulZLURXn4g39lUdi5FUsyYKJmfjS7g= Subject key identifier: 42:13:DF:6A:AB:50:4E:75:B3:D9:25:AF:7F:40:B5:42:17:82:66:9B Authority key identifier: 9C:BE:9C:43:EE:75:98:96:00:39:19:50:87:34:72:33:46:BF:70:16 Certificate issuer: /CN=9cbe9c43ee759896003919508734723346bf7016 Certificate serial: 019B5D53CBA26F1A31002D9C78B0F8C3B37A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nL6cQ-51mJYAORlQhzRyM0a_cBY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f974e9-4743-46db-a348-1d1989f06618/1/nL6cQ-51mJYAORlQhzRyM0a_cBY.mft Manifest number: 135C Signing time: Sat 27 Dec 2025 01:02:11 +0000 Manifest this update: Sat 27 Dec 2025 01:02:11 +0000 Manifest next update: Sun 28 Dec 2025 01:02:11 +0000 Files and hashes: 1: UZ53Oxv_ea1DJibe26VPgv4-Vpo.roa (hash: hiy12f2VyI89A+R22FhEyFKlin2hs0EKoXos1apn778=) 2: nL6cQ-51mJYAORlQhzRyM0a_cBY.crl (hash: kPDV2oMXGLilb+v9xVrmfpjI1cCeKw8bVMrWdKrEK/Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f974e9-4743-46db-a348-1d1989f06618/1/nL6cQ-51mJYAORlQhzRyM0a_cBY.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f974e9-4743-46db-a348-1d1989f06618/1/nL6cQ-51mJYAORlQhzRyM0a_cBY.mft rsync://rpki.ripe.net/repository/DEFAULT/nL6cQ-51mJYAORlQhzRyM0a_cBY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 01:02:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5d:53:cb:a2:6f:1a:31:00:2d:9c:78:b0:f8:c3:b3:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cbe9c43ee759896003919508734723346bf7016 Validity Not Before: Dec 27 01:02:11 2025 GMT Not After : Dec 28 01:02:11 2025 GMT Subject: CN=4213df6aab504e75b3d925af7f40b5421782669b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ff:0d:ee:2b:ee:b6:01:ea:df:96:3f:14:eb: 63:4b:59:f6:0f:84:f2:31:6e:17:97:7f:0c:33:02: ac:35:a0:07:41:5f:b4:a1:18:6e:56:c1:aa:fd:fa: 27:0d:9d:04:a8:a5:65:b5:1c:b6:de:ec:5f:cf:29: ac:76:b7:eb:e8:bc:a8:e0:bd:24:f5:f1:5c:b3:e7: ea:97:cf:7f:d0:fd:16:b1:0e:71:9e:23:7d:d0:90: e3:5d:60:d1:23:73:9f:23:3f:b6:2b:71:77:3f:70: 3e:9d:24:1d:2c:42:7f:be:bd:7d:2c:b3:10:83:56: 36:d8:06:5b:d8:71:50:e9:32:d2:13:ed:fa:64:80: cc:c0:76:37:b4:2a:ae:7b:50:0b:00:4d:ec:bc:44: 41:77:0f:e4:a1:3a:47:4a:96:83:82:bd:79:5d:40: 6c:e3:3e:08:04:c9:37:17:8c:79:8d:68:bf:d5:59: 53:00:15:41:44:b1:a6:e2:17:0e:af:62:f1:6f:24: c8:0a:9a:52:6c:37:ab:4f:2d:17:7b:48:64:1f:bd: 10:4c:2d:53:e7:1b:c2:0b:ab:2f:00:be:73:1f:4e: 01:21:ed:fc:d3:d5:7a:14:0e:8f:ad:9e:6d:7c:54: 31:26:ed:b1:96:7c:69:60:ed:78:01:ec:94:8b:58: d9:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:13:DF:6A:AB:50:4E:75:B3:D9:25:AF:7F:40:B5:42:17:82:66:9B X509v3 Authority Key Identifier: keyid:9C:BE:9C:43:EE:75:98:96:00:39:19:50:87:34:72:33:46:BF:70:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nL6cQ-51mJYAORlQhzRyM0a_cBY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f974e9-4743-46db-a348-1d1989f06618/1/nL6cQ-51mJYAORlQhzRyM0a_cBY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f974e9-4743-46db-a348-1d1989f06618/1/nL6cQ-51mJYAORlQhzRyM0a_cBY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:1a:f8:a8:57:db:e2:49:72:8e:62:8b:90:4f:ae:a5:37:75: 06:d9:57:0f:76:b8:6c:b5:7f:b3:4e:5a:cc:6b:57:da:51:98: 0b:1f:6b:98:82:fc:bc:64:6a:f5:b1:cc:80:b4:2d:70:d8:cb: 5a:2e:ab:aa:df:cf:bc:07:5d:d5:55:77:4e:36:09:43:ac:95: 12:88:a9:fe:59:ff:af:57:2f:f0:c1:c0:41:8f:d7:fc:9a:1e: c7:8b:f4:13:87:13:a4:2a:ad:55:63:41:3c:7d:3c:05:0d:bd: c7:83:01:02:b1:1b:0a:14:1f:c9:2d:b3:4e:56:00:18:5c:ef: 70:23:ee:dd:02:d1:6c:08:44:fb:d9:0d:90:f4:df:73:d7:3b: b6:74:9d:08:b2:4b:59:db:f0:29:1b:19:06:d1:9b:40:a5:a9: c5:f1:ab:1f:56:24:86:4c:63:30:92:f9:75:13:18:4c:e0:6c: 74:56:dc:a7:95:e4:68:35:d7:0d:32:9e:d4:0c:02:2d:e3:fc: 44:86:e0:68:58:57:b7:65:96:69:9e:dc:d3:6b:23:54:6b:0b: b9:7e:68:50:67:5f:3a:26:57:ab:36:92:38:63:93:9b:30:35: cd:19:77:20:f8:82:72:bf:37:04:14:29:7d:de:f9:f3:77:da: f1:b6:5d:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtdU8uibxoxAC2ceLD4w7N6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljYmU5YzQzZWU3NTk4OTYwMDM5MTk1MDg3MzQ3MjMzNDZi ZjcwMTYwHhcNMjUxMjI3MDEwMjExWhcNMjUxMjI4MDEwMjExWjAzMTEwLwYDVQQD Eyg0MjEzZGY2YWFiNTA0ZTc1YjNkOTI1YWY3ZjQwYjU0MjE3ODI2NjliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApv8N7ivutgHq35Y/FOtjS1n2D4Ty MW4Xl38MMwKsNaAHQV+0oRhuVsGq/fonDZ0EqKVltRy23uxfzymsdrfr6Lyo4L0k 9fFcs+fql89/0P0WsQ5xniN90JDjXWDRI3OfIz+2K3F3P3A+nSQdLEJ/vr19LLMQ g1Y22AZb2HFQ6TLSE+36ZIDMwHY3tCque1ALAE3svERBdw/koTpHSpaDgr15XUBs 4z4IBMk3F4x5jWi/1VlTABVBRLGm4hcOr2LxbyTICppSbDerTy0Xe0hkH70QTC1T 5xvCC6svAL5zH04BIe3809V6FA6PrZ5tfFQxJu2xlnxpYO14AeyUi1jZeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEIT32qrUE51s9klr39AtUIXgmabMB8GA1UdIwQY MBaAFJy+nEPudZiWADkZUIc0cjNGv3AWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkw2Y1EtNTFtSllBT1JsUWh6UnlNMGFfY0JZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTc0ZTktNDc0My00NmRiLWEzNDgt MWQxOTg5ZjA2NjE4LzEvbkw2Y1EtNTFtSllBT1JsUWh6UnlNMGFfY0JZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTc0ZTktNDc0My00NmRiLWEzNDgtMWQxOTg5ZjA2NjE4 LzEvbkw2Y1EtNTFtSllBT1JsUWh6UnlNMGFfY0JZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAShr4qFfb 4klyjmKLkE+upTd1BtlXD3a4bLV/s05azGtX2lGYCx9rmIL8vGRq9bHMgLQtcNjL Wi6rqt/PvAdd1VV3TjYJQ6yVEoip/ln/r1cv8MHAQY/X/Joex4v0E4cTpCqtVWNB PH08BQ29x4MBArEbChQfyS2zTlYAGFzvcCPu3QLRbAhE+9kNkPTfc9c7tnSdCLJL WdvwKRsZBtGbQKWpxfGrH1YkhkxjMJL5dRMYTOBsdFbcp5XkaDXXDTKe1AwCLeP8 RIbgaFhXt2WWaZ7c02sjVGsLuX5oUGdfOiZXqzaSOGOTmzA1zRl3IPiCcr83BBQp fd7583fa8bZdXQ== -----END CERTIFICATE-----Generated at Sat Dec 27 10:49:53 2025 by rpki-client