This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.mft File: nOlHV6w_cLQPNpMH02XryWV7q2k.mft (raw, json) Hash identifier: z8jKCwFE1XeNnct4ls01Sr/J7ib2PrXKT2Dv/NlWswQ= Subject key identifier: 71:86:6F:2F:87:B1:1A:67:C7:F6:33:C3:6E:74:1B:A1:81:BC:63:90 Authority key identifier: 9C:E9:47:57:AC:3F:70:B4:0F:36:93:07:D3:65:EB:C9:65:7B:AB:69 Certificate issuer: /CN=9ce94757ac3f70b40f369307d365ebc9657bab69 Certificate serial: 019B27415DC4B29B756035CFDF64CEF77F8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nOlHV6w_cLQPNpMH02XryWV7q2k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.mft Manifest number: 177D Signing time: Tue 16 Dec 2025 13:02:33 +0000 Manifest this update: Tue 16 Dec 2025 13:02:33 +0000 Manifest next update: Wed 17 Dec 2025 13:02:33 +0000 Files and hashes: 1: 4oft3Loz6Mj-iGBZld8Zml9nZKk.roa (hash: wH8MDJNmWcLwEAp7rv/L6Y94FGx4klTMMdgO3DL2B5U=) 2: 7Rx3mayEBwk8ldskeFY-2K2rZ-s.roa (hash: wklqA5tkn0CZJbDeoo6PYXZybB1iV079BOW7c/8yfmg=) 3: nOlHV6w_cLQPNpMH02XryWV7q2k.crl (hash: 5orIatYprIKu95rLjtouwWFGr14vdjG5RyQZBKesGns=) 4: ufDo1kTLEOZD1_qKQ7HiFNKPunM.roa (hash: ez87p1Up7V/1mOstPVoSc34fcjVVGs1wyCiou6O9r2k=) 5: x0sLhzFdsabJsjGmaTnhB2s9wws.roa (hash: ZbmagYZOZjVgRuVWz3KGPUrXIWBjrnqcYZ6kZuTx6+k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.crl rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.mft rsync://rpki.ripe.net/repository/DEFAULT/nOlHV6w_cLQPNpMH02XryWV7q2k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 13:02:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:41:5d:c4:b2:9b:75:60:35:cf:df:64:ce:f7:7f:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ce94757ac3f70b40f369307d365ebc9657bab69 Validity Not Before: Dec 16 13:02:33 2025 GMT Not After : Dec 17 13:02:33 2025 GMT Subject: CN=71866f2f87b11a67c7f633c36e741ba181bc6390 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:38:74:44:2b:f8:69:75:f5:3f:92:d0:fb:34: 84:aa:73:52:8b:2d:33:c7:37:30:c3:01:43:63:13: c6:1f:d1:57:a5:40:25:cc:3c:43:e0:8d:0b:b9:f5: d9:25:45:48:c7:67:84:ad:a4:a6:ef:a7:8b:e5:90: 31:77:eb:53:59:3f:6a:24:ab:0b:24:f5:70:7c:5f: 9b:98:31:3a:01:2b:bc:54:50:9f:f1:7b:14:34:90: c3:03:c7:cb:90:dd:f9:a0:ae:a3:14:78:4c:21:fd: c1:ba:43:48:0a:ea:24:ae:ac:94:e3:47:1c:d9:cd: 8f:88:95:7c:c6:db:3f:ff:20:b5:11:dc:9f:a3:63: 32:f1:f3:27:24:f1:4a:1f:49:1b:7b:20:9f:5d:25: 41:3a:be:a4:ee:6c:c9:33:b3:bc:26:84:5b:6e:da: 55:2b:c2:5d:e7:ae:26:22:27:07:38:f9:5f:b7:df: 45:2f:87:5c:2d:76:5b:3d:ec:7d:7d:da:84:a5:23: 64:4a:82:76:c1:f6:53:5f:38:75:0c:af:4e:c9:d3: 59:a9:f9:ce:5e:e0:99:97:35:34:33:f7:36:25:ea: 74:ff:1f:0d:53:61:00:2f:8f:f6:42:17:4c:d0:be: c5:21:27:3a:c7:76:72:d7:64:1a:e9:66:e2:41:24: 54:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:86:6F:2F:87:B1:1A:67:C7:F6:33:C3:6E:74:1B:A1:81:BC:63:90 X509v3 Authority Key Identifier: keyid:9C:E9:47:57:AC:3F:70:B4:0F:36:93:07:D3:65:EB:C9:65:7B:AB:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nOlHV6w_cLQPNpMH02XryWV7q2k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:a1:13:65:58:91:2c:7c:ad:37:94:e8:d1:8c:da:ec:22:c0: ab:61:53:56:a3:5e:8e:e7:02:d2:e5:66:68:30:7e:69:36:32: 8d:1e:32:41:81:d6:f5:da:6f:58:b1:6e:b6:29:d3:ad:5f:b7: a2:b2:f4:10:65:1d:ea:05:4b:f0:e5:99:29:2a:c8:32:66:75: d3:09:3e:60:91:cc:8e:95:b3:f5:5f:66:e3:bb:dc:58:6d:e1: 2a:92:e0:14:38:cb:48:48:64:4f:da:47:dd:ec:35:84:39:28: 94:37:fe:14:dd:41:be:ad:c7:19:72:fe:7c:95:2d:27:09:d4: 54:1e:6a:67:f1:59:5c:c2:fc:58:e2:43:5d:47:e0:27:f9:ec: 23:80:98:ba:b0:ac:01:a4:4b:4e:c0:c5:06:22:10:b5:02:c3: 0f:ca:9b:0f:1e:24:86:ff:9c:ab:bb:b0:d1:00:1f:d6:52:00: f3:d1:d8:3d:8e:6e:6d:d8:be:d1:e2:5c:83:53:f4:09:7d:d3: f3:36:62:03:31:71:6b:98:1d:e2:08:2d:57:00:62:36:bb:54: b3:92:61:15:1b:3e:c3:01:65:28:0c:4e:e8:ca:7f:f6:7b:9f: 11:cb:a0:22:95:97:47:dd:26:9a:79:1f:d5:bb:2b:3e:07:f1: 73:43:27:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsnQV3Espt1YDXP32TO93+NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljZTk0NzU3YWMzZjcwYjQwZjM2OTMwN2QzNjVlYmM5NjU3 YmFiNjkwHhcNMjUxMjE2MTMwMjMzWhcNMjUxMjE3MTMwMjMzWjAzMTEwLwYDVQQD Eyg3MTg2NmYyZjg3YjExYTY3YzdmNjMzYzM2ZTc0MWJhMTgxYmM2MzkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Dh0RCv4aXX1P5LQ+zSEqnNSiy0z xzcwwwFDYxPGH9FXpUAlzDxD4I0LufXZJUVIx2eEraSm76eL5ZAxd+tTWT9qJKsL JPVwfF+bmDE6ASu8VFCf8XsUNJDDA8fLkN35oK6jFHhMIf3BukNICuokrqyU40cc 2c2PiJV8xts//yC1Edyfo2My8fMnJPFKH0kbeyCfXSVBOr6k7mzJM7O8JoRbbtpV K8Jd564mIicHOPlft99FL4dcLXZbPex9fdqEpSNkSoJ2wfZTXzh1DK9OydNZqfnO XuCZlzU0M/c2Jep0/x8NU2EAL4/2QhdM0L7FISc6x3Zy12Qa6WbiQSRUVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHGGby+HsRpnx/Yzw250G6GBvGOQMB8GA1UdIwQY MBaAFJzpR1esP3C0DzaTB9Nl68lle6tpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbk9sSFY2d19jTFFQTnBNSDAyWHJ5V1Y3cTJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS80ODEyNjktZGJkYi00MjVlLTk2NDIt ZTFlYTQxYzlhMmU2LzEvbk9sSFY2d19jTFFQTnBNSDAyWHJ5V1Y3cTJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS80ODEyNjktZGJkYi00MjVlLTk2NDItZTFlYTQxYzlhMmU2 LzEvbk9sSFY2d19jTFFQTnBNSDAyWHJ5V1Y3cTJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsKETZViR LHytN5To0Yza7CLAq2FTVqNejucC0uVmaDB+aTYyjR4yQYHW9dpvWLFutinTrV+3 orL0EGUd6gVL8OWZKSrIMmZ10wk+YJHMjpWz9V9m47vcWG3hKpLgFDjLSEhkT9pH 3ew1hDkolDf+FN1Bvq3HGXL+fJUtJwnUVB5qZ/FZXML8WOJDXUfgJ/nsI4CYurCs AaRLTsDFBiIQtQLDD8qbDx4khv+cq7uw0QAf1lIA89HYPY5ubdi+0eJcg1P0CX3T 8zZiAzFxa5gd4ggtVwBiNrtUs5JhFRs+wwFlKAxO6Mp/9nufEcugIpWXR90mmnkf 1bsrPgfxc0Mneg== -----END CERTIFICATE-----Generated at Tue Dec 16 22:34:38 2025 by rpki-client