This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/229182-4bdc-4234-a989-90d58c603256/1/nLt3urQ4qT002dXAqOC57zKuXaA.mft File: nLt3urQ4qT002dXAqOC57zKuXaA.mft (raw, json) Hash identifier: uZWhpJk+1TMhakRCZxet+HP/tgylWYDJhgtdgDDwKz0= Subject key identifier: 5B:21:46:76:D4:4D:2A:98:80:3C:FB:D3:34:85:9F:EF:46:B7:5E:45 Authority key identifier: 9C:BB:77:BA:B4:38:A9:3D:34:D9:D5:C0:A8:E0:B9:EF:32:AE:5D:A0 Certificate issuer: /CN=9cbb77bab438a93d34d9d5c0a8e0b9ef32ae5da0 Certificate serial: 019B53AC4CBE264CBB27B8E25AB2861B2B15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLt3urQ4qT002dXAqOC57zKuXaA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/229182-4bdc-4234-a989-90d58c603256/1/nLt3urQ4qT002dXAqOC57zKuXaA.mft Manifest number: 091A Signing time: Thu 25 Dec 2025 04:02:39 +0000 Manifest this update: Thu 25 Dec 2025 04:02:39 +0000 Manifest next update: Fri 26 Dec 2025 04:02:39 +0000 Files and hashes: 1: TAsOnRZq8fiVm7IgWJUxtwQKXQw.roa (hash: uvW+4Cm/xTtLLngk0h3md/Re7mjqyVC2fS5xyiOuuj4=) 2: nLt3urQ4qT002dXAqOC57zKuXaA.crl (hash: Px1hr5toaCgVriRWZe0JwGholfCuguPoLuz7mrZF+Q4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/229182-4bdc-4234-a989-90d58c603256/1/nLt3urQ4qT002dXAqOC57zKuXaA.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/229182-4bdc-4234-a989-90d58c603256/1/nLt3urQ4qT002dXAqOC57zKuXaA.mft rsync://rpki.ripe.net/repository/DEFAULT/nLt3urQ4qT002dXAqOC57zKuXaA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:ac:4c:be:26:4c:bb:27:b8:e2:5a:b2:86:1b:2b:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cbb77bab438a93d34d9d5c0a8e0b9ef32ae5da0 Validity Not Before: Dec 25 04:02:39 2025 GMT Not After : Dec 26 04:02:39 2025 GMT Subject: CN=5b214676d44d2a98803cfbd334859fef46b75e45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:00:95:87:9d:aa:bd:06:ba:20:93:ef:96:ba: 35:bc:52:bd:20:09:d2:6d:3e:4a:1c:7d:4f:61:d0: 17:fc:e1:f3:4d:5c:e7:96:01:5e:c5:81:91:fa:48: 5e:ba:25:4a:d8:a6:b4:73:4b:5b:0c:81:9e:7d:a5: 74:4e:0d:27:b1:05:2d:6d:f5:2a:d8:97:a6:0e:19: 8e:61:ed:73:75:4f:f1:79:f0:88:15:32:3e:fa:d3: 21:11:b6:4c:d7:14:92:ce:35:27:41:4d:8b:56:3c: 51:d0:4b:76:56:34:9e:63:71:bd:e2:fe:f9:4d:86: 2f:ee:74:58:c0:18:cd:a9:3c:8a:a1:54:cd:91:35: 9c:06:c9:4c:b2:6c:74:b0:ce:c9:61:21:6f:58:87: 11:06:d4:6c:e2:f0:1c:f1:cc:e7:d6:b4:84:0e:64: 04:d4:f4:f8:8b:7f:29:be:f3:4f:ca:a1:7c:c6:f8: 01:7b:35:27:e5:71:25:8c:0d:e0:78:ce:c3:4d:59: b5:87:17:1c:ba:f6:d8:d1:8b:fa:4a:7d:01:ed:a1: 9c:da:74:f3:61:dc:78:55:a6:67:b7:63:55:42:2a: b6:68:de:0f:05:a1:d1:1b:50:fb:60:1f:7c:12:41: e4:5e:e4:87:56:0c:ae:0e:f5:ca:7d:5d:4a:7f:71: e8:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:21:46:76:D4:4D:2A:98:80:3C:FB:D3:34:85:9F:EF:46:B7:5E:45 X509v3 Authority Key Identifier: keyid:9C:BB:77:BA:B4:38:A9:3D:34:D9:D5:C0:A8:E0:B9:EF:32:AE:5D:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLt3urQ4qT002dXAqOC57zKuXaA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/229182-4bdc-4234-a989-90d58c603256/1/nLt3urQ4qT002dXAqOC57zKuXaA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/229182-4bdc-4234-a989-90d58c603256/1/nLt3urQ4qT002dXAqOC57zKuXaA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:97:6a:24:c0:9f:58:a3:59:f4:df:a1:c5:3c:c7:1f:7c:7a: 23:a8:85:ca:48:b6:4e:f1:07:24:1a:e9:4a:61:9d:7c:e9:b2: 5e:d1:af:61:27:2e:b9:40:f7:7e:57:8d:ed:76:37:b1:68:e7: 16:1a:22:f8:09:74:db:f5:40:03:d8:ec:78:ee:68:81:91:87: 9d:b8:f0:a6:07:6b:92:5f:60:82:57:1b:5c:11:f1:23:33:a5: 62:39:13:b2:59:9d:ee:c9:46:bd:98:9e:bf:00:47:d6:60:69: 96:21:fd:c0:7d:43:5b:cd:c3:d4:5a:aa:49:0e:2f:7d:79:26: 5c:3e:2f:54:b3:fd:d8:90:b7:48:eb:10:dc:59:3a:0c:ab:74: 8e:1f:be:3a:5a:7c:74:63:52:d3:9d:51:5b:c3:94:68:cf:60: 8c:e6:60:02:4f:75:82:15:87:54:3c:8c:45:dd:3d:b9:57:1b: 0f:de:b5:09:61:24:d5:b5:9e:48:8c:c0:ec:70:da:94:cf:7d: f2:46:de:f2:31:90:f7:de:ea:a6:f7:6a:6b:3e:40:3d:cc:7d: 2f:7f:1f:c9:84:18:49:ca:dd:53:3c:f3:bb:27:71:97:c0:1b: 2d:70:6d:88:4f:91:f6:f2:27:56:73:0d:0b:2c:73:93:fa:8e: f3:ec:2f:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTrEy+Jky7J7jiWrKGGysVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljYmI3N2JhYjQzOGE5M2QzNGQ5ZDVjMGE4ZTBiOWVmMzJh ZTVkYTAwHhcNMjUxMjI1MDQwMjM5WhcNMjUxMjI2MDQwMjM5WjAzMTEwLwYDVQQD Eyg1YjIxNDY3NmQ0NGQyYTk4ODAzY2ZiZDMzNDg1OWZlZjQ2Yjc1ZTQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgCVh52qvQa6IJPvlro1vFK9IAnS bT5KHH1PYdAX/OHzTVznlgFexYGR+kheuiVK2Ka0c0tbDIGefaV0Tg0nsQUtbfUq 2JemDhmOYe1zdU/xefCIFTI++tMhEbZM1xSSzjUnQU2LVjxR0Et2VjSeY3G94v75 TYYv7nRYwBjNqTyKoVTNkTWcBslMsmx0sM7JYSFvWIcRBtRs4vAc8czn1rSEDmQE 1PT4i38pvvNPyqF8xvgBezUn5XEljA3geM7DTVm1hxccuvbY0Yv6Sn0B7aGc2nTz Ydx4VaZnt2NVQiq2aN4PBaHRG1D7YB98EkHkXuSHVgyuDvXKfV1Kf3Ho6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFshRnbUTSqYgDz70zSFn+9Gt15FMB8GA1UdIwQY MBaAFJy7d7q0OKk9NNnVwKjgue8yrl2gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkx0M3VyUTRxVDAwMmRYQXFPQzU3ekt1WGFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8yMjkxODItNGJkYy00MjM0LWE5ODkt OTBkNThjNjAzMjU2LzEvbkx0M3VyUTRxVDAwMmRYQXFPQzU3ekt1WGFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS8yMjkxODItNGJkYy00MjM0LWE5ODktOTBkNThjNjAzMjU2 LzEvbkx0M3VyUTRxVDAwMmRYQXFPQzU3ekt1WGFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOpdqJMCf WKNZ9N+hxTzHH3x6I6iFyki2TvEHJBrpSmGdfOmyXtGvYScuuUD3fleN7XY3sWjn Fhoi+Al02/VAA9jseO5ogZGHnbjwpgdrkl9gglcbXBHxIzOlYjkTslmd7slGvZie vwBH1mBpliH9wH1DW83D1FqqSQ4vfXkmXD4vVLP92JC3SOsQ3Fk6DKt0jh++Olp8 dGNS051RW8OUaM9gjOZgAk91ghWHVDyMRd09uVcbD961CWEk1bWeSIzA7HDalM99 8kbe8jGQ997qpvdqaz5APcx9L38fyYQYScrdUzzzuydxl8AbLXBtiE+R9vInVnMN Cyxzk/qO8+wvTg== -----END CERTIFICATE-----Generated at Thu Dec 25 11:19:51 2025 by rpki-client