This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft File: nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft (raw, json) Hash identifier: 5TPcSP0J/rteyLfTND1YZjRNAyzRS6n46zhBNbbfpDE= Subject key identifier: 4E:18:1B:45:9F:B8:58:E7:A1:34:69:36:DF:2B:DD:DF:9D:76:47:0A Authority key identifier: 9C:B9:6C:E5:9C:59:55:75:30:F0:EA:A4:4C:66:45:03:D9:C4:01:ED Certificate issuer: /CN=9cb96ce59c59557530f0eaa44c664503d9c401ed Certificate serial: 019B3AC66D48AF46BCFD6B194FA38CBAF37A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLls5ZxZVXUw8OqkTGZFA9nEAe0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft Manifest number: 0A56 Signing time: Sat 20 Dec 2025 08:00:41 +0000 Manifest this update: Sat 20 Dec 2025 08:00:41 +0000 Manifest next update: Sun 21 Dec 2025 08:00:41 +0000 Files and hashes: 1: 19v0BW9D62wRoBFE5ozFJdwOMQA.roa (hash: YMLiN+GeZBDn6zKwSH23wr8pzSjB9vWlcqgXSCgH65E=) 2: 3tnysXSWwHO1pVPMNTsKAFmbFYA.roa (hash: M1MYIv2ti+oy8ugPTOoaH1dKP2qImhnFM+vIoNAp6YU=) 3: 9JwtlsVNx4_up1QMmZlfBeyOaK4.roa (hash: u78W1NzQkBkN4wGgOZ6ykgdqITqsuyTPVjwEYRW9o4E=) 4: HvZFP08B7xYA2IQmujw7UzbkG0Q.roa (hash: 7DGwHO9AiazjzBsJl92PU2yw56tPjljLpvn/rYKQLdM=) 5: nLls5ZxZVXUw8OqkTGZFA9nEAe0.crl (hash: HvcGiUVivi+lq/Z5I9YnfYneRribChZDdaOegi5v4TM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.crl rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft rsync://rpki.ripe.net/repository/DEFAULT/nLls5ZxZVXUw8OqkTGZFA9nEAe0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 08:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:c6:6d:48:af:46:bc:fd:6b:19:4f:a3:8c:ba:f3:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cb96ce59c59557530f0eaa44c664503d9c401ed Validity Not Before: Dec 20 08:00:41 2025 GMT Not After : Dec 21 08:00:41 2025 GMT Subject: CN=4e181b459fb858e7a1346936df2bdddf9d76470a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c5:75:42:10:ff:a1:9b:a4:7b:b6:98:4a:10: a4:f6:1f:89:af:fb:ba:b1:57:67:54:dd:57:9c:83: cb:b3:84:69:b6:00:18:1a:77:33:5c:84:ea:8e:53: aa:b6:61:ae:b2:b4:13:97:14:6a:19:c8:10:a4:6e: e7:f0:e8:7b:77:c1:f5:64:63:ac:3a:00:59:4a:f7: e2:66:f5:cc:3f:18:e3:e0:45:94:69:46:4c:ca:8d: 5c:77:9b:a5:ff:b6:78:91:d3:b0:03:43:1f:ff:70: f1:7f:08:ae:da:65:1b:ad:e8:c1:61:ea:65:1a:fd: 2f:f9:1b:5b:65:61:f7:ac:1a:df:eb:32:5f:85:c9: a9:2d:c5:75:31:65:1a:2b:8f:9e:7a:9a:e4:ba:a1: 53:1c:2a:e4:e5:65:d1:e2:d9:6c:11:e5:00:d6:84: f2:e3:96:5a:67:6a:5e:ad:4f:a3:f6:36:15:76:a3: 08:1c:53:50:72:a7:b4:21:55:fe:77:7b:01:0d:e2: 26:74:5b:8f:4a:cc:cb:84:b2:b8:5a:52:0c:25:cd: 5b:74:8a:ab:83:72:56:72:dc:fc:5d:01:96:43:6f: fa:ea:39:46:27:39:03:c3:04:30:a5:72:78:06:b8: 23:69:e5:71:a1:0a:58:61:d8:77:43:0f:cd:39:db: ec:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:18:1B:45:9F:B8:58:E7:A1:34:69:36:DF:2B:DD:DF:9D:76:47:0A X509v3 Authority Key Identifier: keyid:9C:B9:6C:E5:9C:59:55:75:30:F0:EA:A4:4C:66:45:03:D9:C4:01:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLls5ZxZVXUw8OqkTGZFA9nEAe0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:60:03:79:d0:10:f2:ba:0a:d6:1c:38:35:b8:b7:bd:b4:1b: 05:38:48:03:c7:5e:0c:2e:01:12:19:f7:91:28:e0:a4:cf:bc: 57:7b:26:7a:5c:bc:d5:81:6b:ee:2e:eb:29:55:33:46:c0:f7: d5:97:f3:dc:3f:9a:61:9d:4f:fc:da:a2:3e:3b:3a:60:ea:66: 77:bd:de:d9:e3:1d:3e:ff:f4:65:62:f3:1b:33:4e:61:c0:12: e3:a2:39:b8:32:1e:3a:0e:91:d0:eb:c2:92:86:f3:56:9b:b0: 5b:14:e4:33:19:d5:77:54:d0:06:1e:3b:86:7b:60:4c:be:23: 60:dd:a8:57:72:7a:a1:49:91:2a:b4:52:78:8d:0f:7c:94:68: 06:45:d4:81:35:80:a0:3d:88:0a:16:2e:d3:3b:cf:16:f0:85: 32:95:98:eb:d0:6f:7b:d9:d4:30:b9:25:57:74:32:a0:89:2e: a3:11:a6:8b:07:41:e3:b7:f3:de:f6:ba:c0:76:26:8c:45:48: 53:05:72:b5:93:50:47:b1:4c:47:7d:65:d9:ee:d4:dc:70:c8: 56:ab:8d:c0:50:1f:26:eb:f8:8e:11:b9:f3:1a:10:ea:9d:b8: db:45:11:c0:29:aa:fb:c2:e5:c8:ce:09:93:dc:57:22:f6:87: d0:aa:8d:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6xm1Ir0a8/WsZT6OMuvN6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljYjk2Y2U1OWM1OTU1NzUzMGYwZWFhNDRjNjY0NTAzZDlj NDAxZWQwHhcNMjUxMjIwMDgwMDQxWhcNMjUxMjIxMDgwMDQxWjAzMTEwLwYDVQQD Eyg0ZTE4MWI0NTlmYjg1OGU3YTEzNDY5MzZkZjJiZGRkZjlkNzY0NzBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMV1QhD/oZuke7aYShCk9h+Jr/u6 sVdnVN1XnIPLs4RptgAYGnczXITqjlOqtmGusrQTlxRqGcgQpG7n8Oh7d8H1ZGOs OgBZSvfiZvXMPxjj4EWUaUZMyo1cd5ul/7Z4kdOwA0Mf/3Dxfwiu2mUbrejBYepl Gv0v+RtbZWH3rBrf6zJfhcmpLcV1MWUaK4+eeprkuqFTHCrk5WXR4tlsEeUA1oTy 45ZaZ2perU+j9jYVdqMIHFNQcqe0IVX+d3sBDeImdFuPSszLhLK4WlIMJc1bdIqr g3JWctz8XQGWQ2/66jlGJzkDwwQwpXJ4BrgjaeVxoQpYYdh3Qw/NOdvsXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE4YG0WfuFjnoTRpNt8r3d+ddkcKMB8GA1UdIwQY MBaAFJy5bOWcWVV1MPDqpExmRQPZxAHtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkxsczVaeFpWWFV3OE9xa1RHWkZBOW5FQWUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS81ZGQ3YjEtZTMzNy00MDRkLWI3NjQt ZGRiMGIxNDhlNDZiLzEvbkxsczVaeFpWWFV3OE9xa1RHWkZBOW5FQWUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS81ZGQ3YjEtZTMzNy00MDRkLWI3NjQtZGRiMGIxNDhlNDZi LzEvbkxsczVaeFpWWFV3OE9xa1RHWkZBOW5FQWUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdmADedAQ 8roK1hw4Nbi3vbQbBThIA8deDC4BEhn3kSjgpM+8V3smely81YFr7i7rKVUzRsD3 1Zfz3D+aYZ1P/NqiPjs6YOpmd73e2eMdPv/0ZWLzGzNOYcAS46I5uDIeOg6R0OvC kobzVpuwWxTkMxnVd1TQBh47hntgTL4jYN2oV3J6oUmRKrRSeI0PfJRoBkXUgTWA oD2IChYu0zvPFvCFMpWY69Bve9nUMLklV3QyoIkuoxGmiwdB47fz3va6wHYmjEVI UwVytZNQR7FMR31l2e7U3HDIVquNwFAfJuv4jhG58xoQ6p2420URwCmq+8LlyM4J k9xXIvaH0KqNJg== -----END CERTIFICATE-----Generated at Sat Dec 20 13:35:15 2025 by rpki-client