This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.mft File: nu_LEgXreVVHHlyPVDSpIHKtPd0.mft (raw, json) Hash identifier: mOQDxI4ngPcd6ZUgrclP26psQ7uXvD3WUtvxlHHPD+8= Subject key identifier: 17:88:50:EF:7E:5C:C1:B5:84:AB:C4:DA:F5:FF:CE:DC:1A:34:D3:D6 Authority key identifier: 9E:EF:CB:12:05:EB:79:55:47:1E:5C:8F:54:34:A9:20:72:AD:3D:DD Certificate issuer: /CN=9eefcb1205eb7955471e5c8f5434a92072ad3ddd Certificate serial: 019B661ED2BECEFAD92FE3EDFDE1E04A8AB7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nu_LEgXreVVHHlyPVDSpIHKtPd0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.mft Manifest number: 0FD2 Signing time: Sun 28 Dec 2025 18:00:54 +0000 Manifest this update: Sun 28 Dec 2025 18:00:54 +0000 Manifest next update: Mon 29 Dec 2025 18:00:54 +0000 Files and hashes: 1: 9ZobQzUYHfXp-yMAZxRbAV5EiZE.roa (hash: SI8rvZn5cQ6+WJdvUqlPbbCYAcBbQc6oDM3iBm6911w=) 2: nu_LEgXreVVHHlyPVDSpIHKtPd0.crl (hash: z7BRAEQ0BHtHGkNPsEqqZbTbsmo5qjNG+xn5Pckcfq4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.crl rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.mft rsync://rpki.ripe.net/repository/DEFAULT/nu_LEgXreVVHHlyPVDSpIHKtPd0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:66:1e:d2:be:ce:fa:d9:2f:e3:ed:fd:e1:e0:4a:8a:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9eefcb1205eb7955471e5c8f5434a92072ad3ddd Validity Not Before: Dec 28 18:00:54 2025 GMT Not After : Dec 29 18:00:54 2025 GMT Subject: CN=178850ef7e5cc1b584abc4daf5ffcedc1a34d3d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:45:90:dc:45:2a:a6:14:b9:11:a6:89:56:fe: 4b:97:93:41:bc:39:cc:08:f7:75:61:b3:1a:aa:38: 65:00:e6:2c:34:6c:81:1c:79:f7:24:58:8e:d0:7d: a1:a2:2e:6f:6d:ce:49:6d:e3:8e:29:2d:4e:7d:ab: 91:ec:56:e9:86:e0:2f:84:31:7a:2b:4d:e7:56:c3: c8:b0:ed:d5:b1:b0:a7:2e:63:bf:69:bd:6e:71:af: e7:7d:35:49:ec:bf:8a:50:0e:ba:88:33:bc:24:a7: d7:12:54:fa:29:7c:31:4b:d9:39:fd:34:60:1f:a6: cc:58:bb:fe:ed:cc:84:d8:c7:23:2e:be:c7:9f:48: 9d:d4:9e:9e:fb:03:d9:00:22:98:5a:6a:20:c3:c5: 00:34:c6:72:da:79:dc:17:60:14:fc:68:7d:75:1f: d9:ef:21:7f:d4:9f:c7:ba:99:ed:83:d6:0b:13:b1: ab:41:d1:92:29:ba:f4:4b:6e:85:56:70:d8:b2:4c: ee:a9:e6:5b:ff:42:f7:b5:ba:02:0c:72:15:25:78: fe:c0:47:f2:e0:cf:b2:1d:e7:45:5a:4c:dd:db:4e: ec:49:cd:1f:bc:24:f2:7f:95:e9:8a:d5:77:14:ac: 02:62:12:05:49:9a:53:c9:aa:5d:5a:96:f8:e3:a5: 3f:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:88:50:EF:7E:5C:C1:B5:84:AB:C4:DA:F5:FF:CE:DC:1A:34:D3:D6 X509v3 Authority Key Identifier: keyid:9E:EF:CB:12:05:EB:79:55:47:1E:5C:8F:54:34:A9:20:72:AD:3D:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nu_LEgXreVVHHlyPVDSpIHKtPd0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:19:54:71:2c:5e:0b:7f:a7:4b:d8:94:94:9b:11:5b:13:70: 15:ec:34:65:65:f7:e3:ad:49:80:aa:29:09:03:5d:d6:20:7f: 0c:2a:d5:05:d5:06:7f:d5:76:bd:30:8d:e3:0d:a2:48:18:7b: 7f:3c:e6:72:07:e0:a0:06:a2:f7:5e:74:b1:34:35:7a:4e:92: 6f:09:50:88:b5:28:0a:f0:31:09:da:61:a0:81:76:e8:42:c6: 86:ea:cd:a6:7b:6b:02:78:cf:04:04:40:9f:46:f8:1b:c9:40: 8a:ae:59:86:0e:21:bf:9c:60:86:54:79:ca:68:ce:c9:76:32: 55:a1:91:22:86:1f:20:f4:53:23:c9:1d:49:0e:89:97:85:52: c9:b9:17:e1:dd:6d:c9:01:cf:9b:d0:be:1d:93:4e:43:88:8d: 00:b7:b9:af:1b:c5:ca:8e:2e:b5:df:f2:93:78:ea:85:74:ff: 56:82:f1:f1:fd:2e:51:66:f7:bc:20:c3:f7:e8:e5:66:af:8d: 81:2a:2c:60:42:64:f2:91:a5:3b:29:87:7d:ec:99:38:43:97: b9:c0:20:5a:3a:61:de:c2:64:09:c7:10:a3:81:d2:ec:46:a5: b9:e1:11:38:10:15:0b:fb:38:84:12:f8:2b:bf:1b:02:fb:6f: cf:b6:ad:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtmHtK+zvrZL+Pt/eHgSoq3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllZWZjYjEyMDVlYjc5NTU0NzFlNWM4ZjU0MzRhOTIwNzJh ZDNkZGQwHhcNMjUxMjI4MTgwMDU0WhcNMjUxMjI5MTgwMDU0WjAzMTEwLwYDVQQD EygxNzg4NTBlZjdlNWNjMWI1ODRhYmM0ZGFmNWZmY2VkYzFhMzRkM2Q2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0WQ3EUqphS5EaaJVv5Ll5NBvDnM CPd1YbMaqjhlAOYsNGyBHHn3JFiO0H2hoi5vbc5JbeOOKS1OfauR7FbphuAvhDF6 K03nVsPIsO3VsbCnLmO/ab1uca/nfTVJ7L+KUA66iDO8JKfXElT6KXwxS9k5/TRg H6bMWLv+7cyE2McjLr7Hn0id1J6e+wPZACKYWmogw8UANMZy2nncF2AU/Gh9dR/Z 7yF/1J/Hupntg9YLE7GrQdGSKbr0S26FVnDYskzuqeZb/0L3tboCDHIVJXj+wEfy 4M+yHedFWkzd207sSc0fvCTyf5XpitV3FKwCYhIFSZpTyapdWpb446U/sQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBeIUO9+XMG1hKvE2vX/ztwaNNPWMB8GA1UdIwQY MBaAFJ7vyxIF63lVRx5cj1Q0qSByrT3dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnVfTEVnWHJlVlZISGx5UFZEU3BJSEt0UGQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS85MjE2MDktNThhNS00MzA2LWI4MmIt NGI3ZGNkODc3N2RlLzEvbnVfTEVnWHJlVlZISGx5UFZEU3BJSEt0UGQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS85MjE2MDktNThhNS00MzA2LWI4MmItNGI3ZGNkODc3N2Rl LzEvbnVfTEVnWHJlVlZISGx5UFZEU3BJSEt0UGQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADhlUcSxe C3+nS9iUlJsRWxNwFew0ZWX3461JgKopCQNd1iB/DCrVBdUGf9V2vTCN4w2iSBh7 fzzmcgfgoAai9150sTQ1ek6SbwlQiLUoCvAxCdphoIF26ELGhurNpntrAnjPBARA n0b4G8lAiq5Zhg4hv5xghlR5ymjOyXYyVaGRIoYfIPRTI8kdSQ6Jl4VSybkX4d1t yQHPm9C+HZNOQ4iNALe5rxvFyo4utd/yk3jqhXT/VoLx8f0uUWb3vCDD9+jlZq+N gSosYEJk8pGlOymHfeyZOEOXucAgWjph3sJkCccQo4HS7EalueEROBAVC/s4hBL4 K78bAvtvz7at0Q== -----END CERTIFICATE-----Generated at Sun Dec 28 22:13:02 2025 by rpki-client