This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.mft File: NufP3RKRk-IZw3ASHKFiUOQptYs.mft (raw, json) Hash identifier: s/+KdjJz2hxpePxJHLM8EYQ5muGW7xDfb6/YpMnhnOw= Subject key identifier: D7:1D:EF:F4:80:31:AC:36:D2:8A:D1:27:B6:92:FE:A2:71:D9:89:A6 Authority key identifier: 36:E7:CF:DD:12:91:93:E2:19:C3:70:12:1C:A1:62:50:E4:29:B5:8B Certificate issuer: /CN=36e7cfdd129193e219c370121ca16250e429b58b Certificate serial: 019B2F67B924A0E2DF3402BDA29EDD735FD2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NufP3RKRk-IZw3ASHKFiUOQptYs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.mft Manifest number: 1172 Signing time: Thu 18 Dec 2025 03:01:24 +0000 Manifest this update: Thu 18 Dec 2025 03:01:24 +0000 Manifest next update: Fri 19 Dec 2025 03:01:24 +0000 Files and hashes: 1: NufP3RKRk-IZw3ASHKFiUOQptYs.crl (hash: 6P9ZY1ycge0zQ1+k8+HGaVXTaDSrc5dOPoEkJ6jFp1A=) 2: TQTaN9R3PROnWSlPAnOimZ3OkV0.roa (hash: 6MvOdY9qe95Xeb6bYl6JjgUIxMzjpmO+qyLURJWgUDA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.crl rsync://rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.mft rsync://rpki.ripe.net/repository/DEFAULT/NufP3RKRk-IZw3ASHKFiUOQptYs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 03:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:67:b9:24:a0:e2:df:34:02:bd:a2:9e:dd:73:5f:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36e7cfdd129193e219c370121ca16250e429b58b Validity Not Before: Dec 18 03:01:24 2025 GMT Not After : Dec 19 03:01:24 2025 GMT Subject: CN=d71deff48031ac36d28ad127b692fea271d989a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:f3:c2:72:30:f7:39:c1:fc:ba:41:9d:e9:e0: f3:cc:b1:34:e6:c1:0a:b1:18:fe:15:75:d3:60:5b: 93:97:3f:d4:00:e7:9f:8a:b9:4c:b4:ad:aa:02:ea: b1:c7:ec:17:1c:d3:a1:0a:ce:8f:02:82:1c:65:51: 3d:d0:70:c6:dd:bb:8c:a8:1f:39:7e:c4:2d:1f:5f: 0c:fb:f9:2e:5f:e6:55:36:aa:14:0e:28:51:e2:cd: 8a:18:8a:5e:ff:eb:ad:93:3f:54:3b:d2:7d:61:8c: 65:b0:4d:ce:0c:31:86:4d:81:b3:61:60:df:c3:5c: 91:ab:b3:06:08:b8:d1:b7:b3:d7:55:22:48:67:58: b0:eb:cc:58:7c:95:ba:35:d2:aa:8e:19:e1:db:80: a6:62:db:a7:87:95:a8:92:e2:dd:72:c2:26:a9:0b: 6a:46:de:fa:e3:67:61:df:31:a8:3e:98:3d:cd:04: a0:3e:9a:b5:33:aa:24:25:46:ba:ab:d5:39:4f:3b: 09:e2:26:47:fa:0a:73:37:db:6b:ad:92:95:f1:22: fb:ec:f0:b7:c0:fb:8b:34:50:0c:a5:eb:db:9c:07: 66:a4:58:7a:86:82:e8:b2:ad:2a:ac:aa:eb:d3:71: 73:8e:61:91:3b:7f:eb:a5:6b:24:0b:4b:4b:d8:a5: 19:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:1D:EF:F4:80:31:AC:36:D2:8A:D1:27:B6:92:FE:A2:71:D9:89:A6 X509v3 Authority Key Identifier: keyid:36:E7:CF:DD:12:91:93:E2:19:C3:70:12:1C:A1:62:50:E4:29:B5:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NufP3RKRk-IZw3ASHKFiUOQptYs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:84:0e:c8:02:45:ed:53:12:c6:f2:db:83:4e:ef:3d:7a:fa: dc:cb:32:84:23:a5:1c:81:3a:8a:32:cc:a8:8c:60:a9:d6:a8: df:77:f1:85:44:d7:39:58:7a:08:71:59:3a:ce:57:ca:c6:2a: 01:29:bd:21:e2:5c:85:51:12:fe:32:01:ea:8c:b0:4e:47:5e: c0:6e:92:9c:d7:0b:68:bc:26:da:bd:b7:5c:c4:5d:f5:ce:99: 14:1c:f8:bd:a3:e4:ec:04:86:90:fe:0f:46:6f:46:a0:a7:22: 19:18:ea:eb:d1:28:3b:e1:eb:63:c9:bd:52:ed:ce:0c:ff:69: d0:97:ec:c4:e9:85:15:a6:f8:9a:a9:83:b7:3e:fb:90:a6:9d: 55:55:c4:ca:1c:e4:b3:e1:a0:7e:19:b4:99:9b:89:33:61:32: da:c8:fc:19:bb:f4:5e:2c:cd:c5:89:70:aa:e0:90:a0:bb:ee: b2:8c:17:9c:fc:d2:da:ce:d7:b4:0b:43:52:b2:9b:8b:26:63: 0a:d0:40:df:25:9c:9e:b0:35:74:7f:c1:bd:a3:b0:55:bc:0a: 12:18:7f:84:62:00:41:23:41:ce:c6:c3:a3:4d:2c:81:1e:41: ee:34:c8:ca:f7:95:5c:51:8b:cc:f9:fe:d3:d6:47:33:71:ad: bb:be:ee:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvZ7kkoOLfNAK9op7dc1/SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2ZTdjZmRkMTI5MTkzZTIxOWMzNzAxMjFjYTE2MjUwZTQy OWI1OGIwHhcNMjUxMjE4MDMwMTI0WhcNMjUxMjE5MDMwMTI0WjAzMTEwLwYDVQQD EyhkNzFkZWZmNDgwMzFhYzM2ZDI4YWQxMjdiNjkyZmVhMjcxZDk4OWE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4PPCcjD3OcH8ukGd6eDzzLE05sEK sRj+FXXTYFuTlz/UAOefirlMtK2qAuqxx+wXHNOhCs6PAoIcZVE90HDG3buMqB85 fsQtH18M+/kuX+ZVNqoUDihR4s2KGIpe/+utkz9UO9J9YYxlsE3ODDGGTYGzYWDf w1yRq7MGCLjRt7PXVSJIZ1iw68xYfJW6NdKqjhnh24CmYtunh5WokuLdcsImqQtq Rt7642dh3zGoPpg9zQSgPpq1M6okJUa6q9U5TzsJ4iZH+gpzN9trrZKV8SL77PC3 wPuLNFAMpevbnAdmpFh6hoLosq0qrKrr03FzjmGRO3/rpWskC0tL2KUZnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNcd7/SAMaw20orRJ7aS/qJx2YmmMB8GA1UdIwQY MBaAFDbnz90SkZPiGcNwEhyhYlDkKbWLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnVmUDNSS1JrLUladzNBU0hLRmlVT1FwdFlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8zNTU1ZTAtOTQ0My00ZTYzLWE4OWIt ZGQxN2JmZDY3Y2QzLzEvTnVmUDNSS1JrLUladzNBU0hLRmlVT1FwdFlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8zNTU1ZTAtOTQ0My00ZTYzLWE4OWItZGQxN2JmZDY3Y2Qz LzEvTnVmUDNSS1JrLUladzNBU0hLRmlVT1FwdFlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArIQOyAJF 7VMSxvLbg07vPXr63MsyhCOlHIE6ijLMqIxgqdao33fxhUTXOVh6CHFZOs5XysYq ASm9IeJchVES/jIB6oywTkdewG6SnNcLaLwm2r23XMRd9c6ZFBz4vaPk7ASGkP4P Rm9GoKciGRjq69EoO+HrY8m9Uu3ODP9p0JfsxOmFFab4mqmDtz77kKadVVXEyhzk s+Ggfhm0mZuJM2Ey2sj8Gbv0XizNxYlwquCQoLvusowXnPzS2s7XtAtDUrKbiyZj CtBA3yWcnrA1dH/BvaOwVbwKEhh/hGIAQSNBzsbDo00sgR5B7jTIyveVXFGLzPn+ 09ZHM3Gtu77udA== -----END CERTIFICATE-----Generated at Thu Dec 18 12:47:52 2025 by rpki-client