This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft File: nlUyAHdpaUSxYTwujJxgah4G63k.mft (raw, json) Hash identifier: gtEi5/1bR9CYhbz9aewHKXFjSRz6z0Ira1PGU+kITNQ= Subject key identifier: A5:D4:01:94:08:64:BD:F4:5C:64:29:81:1F:F1:0D:12:E9:17:91:69 Authority key identifier: 9E:55:32:00:77:69:69:44:B1:61:3C:2E:8C:9C:60:6A:1E:06:EB:79 Certificate issuer: /CN=9e55320077696944b1613c2e8c9c606a1e06eb79 Certificate serial: 019B3D230ABAA4F85B81E932CD0148271B92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft Manifest number: 17A7 Signing time: Sat 20 Dec 2025 19:01:05 +0000 Manifest this update: Sat 20 Dec 2025 19:01:05 +0000 Manifest next update: Sun 21 Dec 2025 19:01:05 +0000 Files and hashes: 1: MWa5Dj5_kmbgw0j6IBXQLJfi3UE.roa (hash: IKx6KdWK7MMrT+DuoPdaDD+mZCI7VV+oe8XMrptTZ1w=) 2: QjtWj02YBmI5Jv7YvgwRw2CvoyA.roa (hash: xzR/aqYGTG/UIUSP1rL50ozgA3zAN0ypP0J4BQa6rSk=) 3: T1_pchNqlq7DTDdnnhWMYLChBoU.roa (hash: 3peIpL8l/Rnx3wWmXa0H7Vz2+9XZpZaFvAX9xROlB/s=) 4: crvEgPTpcYjRSHsrYeLgXXEBKUk.roa (hash: 7eXEVTxEH/UTzDacXKPIjatCFJu/CB4kzr15IvQwXDk=) 5: hvCCVUZ3vm78utey9zVykeFfmZg.roa (hash: 8LKNeWR/ydRJi6I0838T1dU97Q8jY2cXv/vQVdAuDbQ=) 6: nlUyAHdpaUSxYTwujJxgah4G63k.crl (hash: v9HYEvKnH2qTOPA4R29DtOW9qHBOJMJ9CPFKRG6wjx0=) 7: oGavUwYGf9k8hmqppcV6OhAR0l8.roa (hash: xxSUypsCBzVEfCKjWpeRgbmsfcja4p6HlyrSFwzu1Eo=) 8: ofJM-BOf8d42dE82c9Ub9dgl42A.roa (hash: 5Kr1/Loqh5IoZ9YAjtlJKKCAtdpo/Xrh4HBNFY8lq58=) 9: qealtEqMLJg3Xy2LvZJt_teWrWQ.roa (hash: jUDg3WMKq6N0QAPZM0fHhLPl0mZhBgxm/pe95LVDZy0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.crl rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:23:0a:ba:a4:f8:5b:81:e9:32:cd:01:48:27:1b:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e55320077696944b1613c2e8c9c606a1e06eb79 Validity Not Before: Dec 20 19:01:05 2025 GMT Not After : Dec 21 19:01:05 2025 GMT Subject: CN=a5d401940864bdf45c6429811ff10d12e9179169 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:a0:5e:f8:25:2f:44:ce:89:0b:e9:3a:e7:6b: fb:9a:e6:d2:ca:38:b0:3b:86:75:77:e8:89:25:e2: 7c:2b:79:94:85:12:88:93:21:58:dd:fa:da:97:0e: 66:53:f6:69:c0:73:98:bc:ff:09:92:5a:ca:0b:20: ed:76:fc:78:16:fa:55:5d:60:20:9c:56:f5:c9:50: 3e:2a:dc:ca:03:db:1b:ed:eb:76:16:a9:7c:0f:0e: cd:4c:6e:4f:0c:1d:21:53:ce:7f:a4:e9:7a:d6:e0: 5e:2a:08:fb:0d:56:d0:61:13:a9:a6:7b:58:71:11: e4:6f:0f:d2:49:69:3e:37:60:5e:7c:98:f3:a2:b0: c1:24:a1:12:5d:24:43:48:3c:b4:dd:49:6f:4f:0f: 67:05:08:14:8e:69:75:3d:c7:25:35:92:d3:71:df: 43:c0:76:51:a6:e5:55:61:1a:ed:c4:c9:a1:52:b8: 2b:52:34:e2:2a:c2:b8:8b:1d:13:7b:95:71:c1:89: d6:79:84:2c:a9:ce:c2:11:79:fa:a1:0e:17:4f:c3: 11:8f:64:65:57:d3:60:2c:d6:8d:52:92:ff:7d:ed: d9:1a:03:40:a7:69:87:a4:a5:f0:2d:d4:b2:b8:51: d4:bd:a2:d5:34:11:fd:f9:12:d3:14:e8:52:ea:e8: f5:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:D4:01:94:08:64:BD:F4:5C:64:29:81:1F:F1:0D:12:E9:17:91:69 X509v3 Authority Key Identifier: keyid:9E:55:32:00:77:69:69:44:B1:61:3C:2E:8C:9C:60:6A:1E:06:EB:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:25:4f:86:6d:35:90:f1:e4:4e:53:c4:e2:1a:2e:d0:5e:31: e1:cd:60:db:9a:2e:33:98:b5:c5:aa:13:7f:2f:63:7f:23:05: 87:d1:c8:06:3c:9d:ce:f4:02:18:3e:9e:00:c0:3d:a6:49:cc: b6:c3:86:e3:db:1a:03:d0:48:21:17:7a:e7:d6:e7:56:c4:ea: 11:1c:c1:49:cb:6b:07:fd:35:ac:20:2c:91:bf:3f:bc:0b:2f: b2:da:1d:9d:e1:e0:91:ee:b3:9b:91:60:db:2c:e9:da:57:13: f3:8e:4c:83:2e:06:51:8a:94:2c:ef:a2:19:0b:15:bc:8e:a4: b9:58:7d:11:0e:77:50:37:fa:ce:fa:b3:6e:88:58:01:ad:b1: b4:b8:bf:3a:2b:bb:2a:db:fb:ef:39:df:6b:2a:30:e2:b8:c7: f4:1a:9a:40:1d:81:2b:4a:88:97:c9:21:6f:69:7c:82:be:70: f2:8b:cb:df:62:98:94:08:c7:73:60:9a:c9:89:a1:db:11:6d: 9e:ee:27:80:43:6d:65:cc:ed:36:d4:cf:42:ed:c2:df:8a:25: 5d:cb:df:6c:d8:00:5e:33:04:69:fb:7b:c3:a3:b1:57:1d:fa: a7:84:09:48:9c:30:2c:f7:af:cd:cb:b3:b8:29:0d:32:fd:5b: ec:68:fc:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9Iwq6pPhbgekyzQFIJxuSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNTUzMjAwNzc2OTY5NDRiMTYxM2MyZThjOWM2MDZhMWUw NmViNzkwHhcNMjUxMjIwMTkwMTA1WhcNMjUxMjIxMTkwMTA1WjAzMTEwLwYDVQQD EyhhNWQ0MDE5NDA4NjRiZGY0NWM2NDI5ODExZmYxMGQxMmU5MTc5MTY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9aBe+CUvRM6JC+k652v7mubSyjiw O4Z1d+iJJeJ8K3mUhRKIkyFY3fralw5mU/ZpwHOYvP8JklrKCyDtdvx4FvpVXWAg nFb1yVA+KtzKA9sb7et2Fql8Dw7NTG5PDB0hU85/pOl61uBeKgj7DVbQYROppntY cRHkbw/SSWk+N2BefJjzorDBJKESXSRDSDy03UlvTw9nBQgUjml1PcclNZLTcd9D wHZRpuVVYRrtxMmhUrgrUjTiKsK4ix0Te5VxwYnWeYQsqc7CEXn6oQ4XT8MRj2Rl V9NgLNaNUpL/fe3ZGgNAp2mHpKXwLdSyuFHUvaLVNBH9+RLTFOhS6uj1WQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKXUAZQIZL30XGQpgR/xDRLpF5FpMB8GA1UdIwQY MBaAFJ5VMgB3aWlEsWE8LoycYGoeBut5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmxVeUFIZHBhVVN4WVR3dWpKeGdhaDRHNjNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8yNjBiNjEtYTM0OC00ZDQ3LTkyZjYt MWUwZThiOTA5ZTM0LzEvbmxVeUFIZHBhVVN4WVR3dWpKeGdhaDRHNjNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC8yNjBiNjEtYTM0OC00ZDQ3LTkyZjYtMWUwZThiOTA5ZTM0 LzEvbmxVeUFIZHBhVVN4WVR3dWpKeGdhaDRHNjNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAACVPhm01 kPHkTlPE4hou0F4x4c1g25ouM5i1xaoTfy9jfyMFh9HIBjydzvQCGD6eAMA9pknM tsOG49saA9BIIRd659bnVsTqERzBSctrB/01rCAskb8/vAsvstodneHgke6zm5Fg 2yzp2lcT845Mgy4GUYqULO+iGQsVvI6kuVh9EQ53UDf6zvqzbohYAa2xtLi/Oiu7 Ktv77znfayow4rjH9BqaQB2BK0qIl8khb2l8gr5w8ovL32KYlAjHc2CayYmh2xFt nu4ngENtZcztNtTPQu3C34olXcvfbNgAXjMEaft7w6OxVx36p4QJSJwwLPevzcuz uCkNMv1b7Gj8oA== -----END CERTIFICATE-----Generated at Sun Dec 21 04:45:34 2025 by rpki-client