This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft File: nrUOU4bICaD65lMKpejZglJR3tA.mft (raw, json) Hash identifier: q3uuRpAXrlycqylg+FANN3xQPXZp8IFDrQnaV4glucg= Subject key identifier: 46:8E:D9:67:BD:ED:63:25:FA:4C:E2:D0:38:55:B9:C0:3F:AF:E6:1E Authority key identifier: 9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0 Certificate issuer: /CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0 Certificate serial: 019B2EC214E072AF50C1B0226DADA219B29C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft Manifest number: 0BC7 Signing time: Thu 18 Dec 2025 00:00:29 +0000 Manifest this update: Thu 18 Dec 2025 00:00:29 +0000 Manifest next update: Fri 19 Dec 2025 00:00:29 +0000 Files and hashes: 1: LUnk__H52Ka1UZQ74SFwt2XYOA0.roa (hash: STMUNAtIYTQ2D1f5QvDk6ta50/b1jlAx1bvn490hmQY=) 2: MpiQFhLt5luQY96zEfHw74epxis.roa (hash: 3slZSxLVuzJpGoahUjNIbwirBJQqYCX9x0wxGHpjm8U=) 3: j1xgO_hIvyN1bDBzOqYS6suNPzQ.roa (hash: nD3squlase6LCY8dCz/RdkZ25qLuoWJZ9yqzIv/Hk64=) 4: nrUOU4bICaD65lMKpejZglJR3tA.crl (hash: mstV2G4vbk799BElIsvaXtfOfVxRrRI/dGBRAeixLbI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:c2:14:e0:72:af:50:c1:b0:22:6d:ad:a2:19:b2:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0 Validity Not Before: Dec 18 00:00:29 2025 GMT Not After : Dec 19 00:00:29 2025 GMT Subject: CN=468ed967bded6325fa4ce2d03855b9c03fafe61e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:d3:fd:c7:b3:0c:55:7e:6a:8d:77:bb:72:b0: 5d:1e:f7:99:04:bc:60:b0:e2:49:b6:34:ad:b2:e5: 13:d5:ff:0d:32:21:ba:a5:3e:2d:7d:79:20:c4:4c: 03:42:f3:5c:55:38:51:55:13:f4:e8:03:e0:14:d0: 72:1b:92:e2:1f:9b:1a:04:b4:a9:a3:82:4e:8b:65: 7b:e2:99:7f:2c:26:49:24:22:39:63:97:fe:8f:b2: cd:cb:8d:a2:3b:e1:5e:a3:3e:eb:a6:6a:18:01:00: 28:3b:b6:b8:35:4f:9f:14:96:f2:32:8d:e2:e5:c8: de:92:f6:2a:6f:5b:5f:19:53:f6:6f:f5:98:71:45: 2d:46:84:b1:36:84:fe:fa:37:01:cd:2b:da:a8:30: b2:0d:e3:9b:40:5a:f8:cf:95:f9:0e:04:36:cf:f6: 4a:80:62:c7:50:37:7a:74:77:dd:1e:28:f6:7b:79: 30:7d:ef:74:4c:62:12:50:c1:5d:f7:10:3b:9f:d7: a9:fb:60:40:fd:5e:80:4f:62:c9:47:c4:14:58:f0: 76:2f:b6:84:29:e6:17:fd:52:03:31:da:01:b1:de: 8c:ff:99:5c:ca:01:ae:1a:33:25:a6:5f:53:f8:2a: 26:9d:80:20:d9:2f:59:52:be:89:96:2e:d5:c7:03: 1e:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:8E:D9:67:BD:ED:63:25:FA:4C:E2:D0:38:55:B9:C0:3F:AF:E6:1E X509v3 Authority Key Identifier: keyid:9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:2d:bf:74:c1:ea:26:f6:c3:b6:a1:b2:35:61:36:31:eb:91: a9:38:32:5b:64:cf:2e:d8:ef:34:0d:38:56:c2:84:ec:60:ac: bd:8e:77:20:2a:cf:8c:a1:6a:9d:f7:1f:33:fe:ac:cb:d5:fa: 0c:67:62:ed:4e:b6:72:21:1f:95:6d:f0:39:0f:a4:7a:12:39: cc:c3:fd:10:20:d6:f9:f6:d3:18:0e:0b:71:92:fc:6f:0e:63: 54:8c:e6:0a:81:6e:80:e2:e5:66:01:61:42:80:50:d3:d2:50: 98:77:96:8e:6a:dd:5d:c5:c1:14:9f:9d:cd:c6:d2:bf:a2:f7: 26:ff:65:bd:a3:67:9f:de:cb:81:e0:61:4d:45:78:92:80:06: e6:7f:13:45:57:ad:b6:09:1e:04:88:e4:30:a9:eb:b7:bc:30: 7a:43:4b:4d:1d:7a:98:2a:3c:d2:6d:4a:33:f6:bc:da:cf:7a: cd:ee:8e:c3:6d:37:f1:c8:f7:fe:0a:58:2a:0f:3a:ca:77:49: 99:2e:62:ce:e7:49:98:0f:62:5b:3f:6c:a0:ef:f7:a5:4f:01: 0c:4d:a2:a7:30:8a:08:c4:d7:a8:c1:5b:25:2b:b2:6a:ff:e8: 28:cf:7c:51:6c:78:04:a3:c9:a3:3a:92:21:d2:17:9a:a5:38: b6:eb:66:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsuwhTgcq9QwbAiba2iGbKcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllYjUwZTUzODZjODA5YTBmYWU2NTMwYWE1ZThkOTgyNTI1 MWRlZDAwHhcNMjUxMjE4MDAwMDI5WhcNMjUxMjE5MDAwMDI5WjAzMTEwLwYDVQQD Eyg0NjhlZDk2N2JkZWQ2MzI1ZmE0Y2UyZDAzODU1YjljMDNmYWZlNjFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4dP9x7MMVX5qjXe7crBdHveZBLxg sOJJtjStsuUT1f8NMiG6pT4tfXkgxEwDQvNcVThRVRP06APgFNByG5LiH5saBLSp o4JOi2V74pl/LCZJJCI5Y5f+j7LNy42iO+Feoz7rpmoYAQAoO7a4NU+fFJbyMo3i 5cjekvYqb1tfGVP2b/WYcUUtRoSxNoT++jcBzSvaqDCyDeObQFr4z5X5DgQ2z/ZK gGLHUDd6dHfdHij2e3kwfe90TGISUMFd9xA7n9ep+2BA/V6AT2LJR8QUWPB2L7aE KeYX/VIDMdoBsd6M/5lcygGuGjMlpl9T+ComnYAg2S9ZUr6Jli7VxwMe6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEaO2We97WMl+kzi0DhVucA/r+YeMB8GA1UdIwQY MBaAFJ61DlOGyAmg+uZTCqXo2YJSUd7QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnJVT1U0YklDYUQ2NWxNS3BlalpnbEpSM3RBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9iNTQ2NDEtYTk1YS00YWRkLWE0NWUt MWNhZGE2ZThiMWE5LzEvbnJVT1U0YklDYUQ2NWxNS3BlalpnbEpSM3RBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy9iNTQ2NDEtYTk1YS00YWRkLWE0NWUtMWNhZGE2ZThiMWE5 LzEvbnJVT1U0YklDYUQ2NWxNS3BlalpnbEpSM3RBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApS2/dMHq JvbDtqGyNWE2MeuRqTgyW2TPLtjvNA04VsKE7GCsvY53ICrPjKFqnfcfM/6sy9X6 DGdi7U62ciEflW3wOQ+kehI5zMP9ECDW+fbTGA4LcZL8bw5jVIzmCoFugOLlZgFh QoBQ09JQmHeWjmrdXcXBFJ+dzcbSv6L3Jv9lvaNnn97LgeBhTUV4koAG5n8TRVet tgkeBIjkMKnrt7wwekNLTR16mCo80m1KM/a82s96ze6Ow2038cj3/gpYKg86yndJ mS5izudJmA9iWz9soO/3pU8BDE2ipzCKCMTXqMFbJSuyav/oKM98UWx4BKPJozqS IdIXmqU4tutmpg== -----END CERTIFICATE-----Generated at Thu Dec 18 06:54:05 2025 by rpki-client