This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft File: nlUyAHdpaUSxYTwujJxgah4G63k.mft (raw, json) Hash identifier: TyvvHmUW5DeuZmud3CAEs5lcUzUu5Vr0Fc0tPVzv240= Subject key identifier: FE:21:81:C6:56:DA:64:F6:07:BF:87:F2:ED:35:7B:CC:A3:2B:37:EB Authority key identifier: 9E:55:32:00:77:69:69:44:B1:61:3C:2E:8C:9C:60:6A:1E:06:EB:79 Certificate issuer: /CN=9e55320077696944b1613c2e8c9c606a1e06eb79 Certificate serial: 019B3F112C5E7C384581634D7AA7641775DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft Manifest number: 17A8 Signing time: Sun 21 Dec 2025 04:00:48 +0000 Manifest this update: Sun 21 Dec 2025 04:00:48 +0000 Manifest next update: Mon 22 Dec 2025 04:00:48 +0000 Files and hashes: 1: MWa5Dj5_kmbgw0j6IBXQLJfi3UE.roa (hash: IKx6KdWK7MMrT+DuoPdaDD+mZCI7VV+oe8XMrptTZ1w=) 2: QjtWj02YBmI5Jv7YvgwRw2CvoyA.roa (hash: xzR/aqYGTG/UIUSP1rL50ozgA3zAN0ypP0J4BQa6rSk=) 3: T1_pchNqlq7DTDdnnhWMYLChBoU.roa (hash: 3peIpL8l/Rnx3wWmXa0H7Vz2+9XZpZaFvAX9xROlB/s=) 4: crvEgPTpcYjRSHsrYeLgXXEBKUk.roa (hash: 7eXEVTxEH/UTzDacXKPIjatCFJu/CB4kzr15IvQwXDk=) 5: hvCCVUZ3vm78utey9zVykeFfmZg.roa (hash: 8LKNeWR/ydRJi6I0838T1dU97Q8jY2cXv/vQVdAuDbQ=) 6: nlUyAHdpaUSxYTwujJxgah4G63k.crl (hash: vSxj6zOy/04iUUTNIkKVbJg/WctHGAk8sJDuz0Jwpbc=) 7: oGavUwYGf9k8hmqppcV6OhAR0l8.roa (hash: xxSUypsCBzVEfCKjWpeRgbmsfcja4p6HlyrSFwzu1Eo=) 8: ofJM-BOf8d42dE82c9Ub9dgl42A.roa (hash: 5Kr1/Loqh5IoZ9YAjtlJKKCAtdpo/Xrh4HBNFY8lq58=) 9: qealtEqMLJg3Xy2LvZJt_teWrWQ.roa (hash: jUDg3WMKq6N0QAPZM0fHhLPl0mZhBgxm/pe95LVDZy0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.crl rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:2c:5e:7c:38:45:81:63:4d:7a:a7:64:17:75:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e55320077696944b1613c2e8c9c606a1e06eb79 Validity Not Before: Dec 21 04:00:48 2025 GMT Not After : Dec 22 04:00:48 2025 GMT Subject: CN=fe2181c656da64f607bf87f2ed357bcca32b37eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:76:a7:e3:21:dd:53:df:ca:7c:02:a7:83:d2: e3:c5:6c:10:31:4b:5e:2d:60:b3:c1:d7:66:67:2c: 81:8e:43:23:b4:0f:2a:af:bc:2f:c3:94:94:0f:e3: 7b:56:a4:75:7c:a2:43:18:cf:c0:1b:89:9b:c4:a7: 78:2a:ab:78:99:5c:ba:55:6f:c9:9f:60:b4:64:13: 22:2b:a8:05:63:e9:4b:14:c6:7e:ec:9b:3f:da:8e: d4:54:83:b8:cf:11:fe:cf:c2:95:85:e3:61:92:21: 00:37:3d:eb:58:1d:a6:06:d2:56:cf:34:af:cd:52: 41:9a:0a:67:e4:4c:b0:2c:28:49:bf:48:38:3c:f0: 90:ea:94:25:ad:9f:97:4d:7e:65:c9:ec:7a:66:45: 32:bb:4c:49:5a:8e:2d:fd:5d:76:9a:fb:a1:fc:4c: fc:e7:65:f9:6d:8b:8c:c7:75:e1:e5:8c:c7:92:5b: 6d:97:38:1c:fc:06:99:da:a2:cb:e1:f8:1f:32:f0: 1a:f9:43:92:e1:ff:29:bb:38:65:35:a2:e3:0a:12: ea:dc:e9:be:0b:8e:a2:ed:a4:fd:e3:41:f3:17:14: ae:29:c0:59:be:b5:31:c0:bc:81:79:b4:1b:3b:34: fb:ac:af:92:4c:c7:9f:a9:33:77:55:57:aa:f3:cd: ac:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:21:81:C6:56:DA:64:F6:07:BF:87:F2:ED:35:7B:CC:A3:2B:37:EB X509v3 Authority Key Identifier: keyid:9E:55:32:00:77:69:69:44:B1:61:3C:2E:8C:9C:60:6A:1E:06:EB:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:e7:4f:83:fb:76:da:90:5e:ed:5b:cb:97:33:e6:ec:f5:b2: bf:e9:82:75:01:2b:bd:e8:7e:77:85:c2:34:18:80:f3:ef:a8: 74:81:58:6c:e5:70:f2:e4:82:6a:64:68:04:fa:3d:54:1b:9a: c2:cd:66:b6:93:ff:61:15:b9:93:cd:6f:e1:31:7f:19:97:75: f0:52:73:6e:4e:84:94:ce:31:d0:d4:fc:b8:ae:0f:0e:8e:a5: e1:87:79:08:00:fb:8a:bd:08:f4:84:cc:3d:b9:ef:10:a4:e1: 27:86:db:d3:d3:7f:06:bd:c7:14:db:03:3d:49:ef:47:9f:47: 81:1a:b9:e3:a2:48:4d:8b:90:41:19:80:84:aa:3a:74:5a:fc: d6:ba:e4:87:fb:d8:c2:47:f6:2f:9c:c5:da:ed:9a:84:a3:8c: 2e:a3:fb:77:6c:50:cf:7a:a0:5f:fe:fe:88:96:bb:50:7d:a8: 78:c8:d0:58:d8:4a:7a:06:6f:09:fe:03:ce:47:1e:94:26:83: d3:50:97:21:57:32:64:32:57:94:2d:57:51:80:ab:18:06:1c: 56:a4:81:77:92:3d:f8:00:16:25:4d:2e:f4:c7:c0:84:fa:58: 6b:bd:8b:02:f1:e3:3e:4b:3d:7e:18:44:78:23:2a:5d:f4:08: 13:5e:97:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/ESxefDhFgWNNeqdkF3XbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNTUzMjAwNzc2OTY5NDRiMTYxM2MyZThjOWM2MDZhMWUw NmViNzkwHhcNMjUxMjIxMDQwMDQ4WhcNMjUxMjIyMDQwMDQ4WjAzMTEwLwYDVQQD EyhmZTIxODFjNjU2ZGE2NGY2MDdiZjg3ZjJlZDM1N2JjY2EzMmIzN2ViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHan4yHdU9/KfAKng9LjxWwQMUte LWCzwddmZyyBjkMjtA8qr7wvw5SUD+N7VqR1fKJDGM/AG4mbxKd4Kqt4mVy6VW/J n2C0ZBMiK6gFY+lLFMZ+7Js/2o7UVIO4zxH+z8KVheNhkiEANz3rWB2mBtJWzzSv zVJBmgpn5EywLChJv0g4PPCQ6pQlrZ+XTX5lyex6ZkUyu0xJWo4t/V12mvuh/Ez8 52X5bYuMx3Xh5YzHklttlzgc/AaZ2qLL4fgfMvAa+UOS4f8puzhlNaLjChLq3Om+ C46i7aT940HzFxSuKcBZvrUxwLyBebQbOzT7rK+STMefqTN3VVeq882s7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP4hgcZW2mT2B7+H8u01e8yjKzfrMB8GA1UdIwQY MBaAFJ5VMgB3aWlEsWE8LoycYGoeBut5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmxVeUFIZHBhVVN4WVR3dWpKeGdhaDRHNjNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8yNjBiNjEtYTM0OC00ZDQ3LTkyZjYt MWUwZThiOTA5ZTM0LzEvbmxVeUFIZHBhVVN4WVR3dWpKeGdhaDRHNjNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC8yNjBiNjEtYTM0OC00ZDQ3LTkyZjYtMWUwZThiOTA5ZTM0 LzEvbmxVeUFIZHBhVVN4WVR3dWpKeGdhaDRHNjNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArudPg/t2 2pBe7VvLlzPm7PWyv+mCdQErveh+d4XCNBiA8++odIFYbOVw8uSCamRoBPo9VBua ws1mtpP/YRW5k81v4TF/GZd18FJzbk6ElM4x0NT8uK4PDo6l4Yd5CAD7ir0I9ITM PbnvEKThJ4bb09N/Br3HFNsDPUnvR59HgRq546JITYuQQRmAhKo6dFr81rrkh/vY wkf2L5zF2u2ahKOMLqP7d2xQz3qgX/7+iJa7UH2oeMjQWNhKegZvCf4DzkcelCaD 01CXIVcyZDJXlC1XUYCrGAYcVqSBd5I9+AAWJU0u9MfAhPpYa72LAvHjPks9fhhE eCMqXfQIE16XiQ== -----END CERTIFICATE-----Generated at Sun Dec 21 07:45:03 2025 by rpki-client