This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/791963-af47-4c4c-88b7-a30e96db49c4/1/nMHPS2otJ73LJqeD6Ddu5uspX9g.mft File: nMHPS2otJ73LJqeD6Ddu5uspX9g.mft (raw, json) Hash identifier: Kgc8VF+wNyvdj4m+WvWzogiXGeReT1H8ypjae5BUXBw= Subject key identifier: 8F:74:2A:F5:FB:04:23:41:13:6A:78:F6:45:08:29:B6:C8:F8:8D:EE Authority key identifier: 9C:C1:CF:4B:6A:2D:27:BD:CB:26:A7:83:E8:37:6E:E6:EB:29:5F:D8 Certificate issuer: /CN=9cc1cf4b6a2d27bdcb26a783e8376ee6eb295fd8 Certificate serial: 019B2EF99600CEDFFCB31D1520189C7DA66B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nMHPS2otJ73LJqeD6Ddu5uspX9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/791963-af47-4c4c-88b7-a30e96db49c4/1/nMHPS2otJ73LJqeD6Ddu5uspX9g.mft Manifest number: 0DAA Signing time: Thu 18 Dec 2025 01:01:07 +0000 Manifest this update: Thu 18 Dec 2025 01:01:07 +0000 Manifest next update: Fri 19 Dec 2025 01:01:07 +0000 Files and hashes: 1: nMHPS2otJ73LJqeD6Ddu5uspX9g.crl (hash: +O3JiqUc1O1aCgRk0JABxopJSdEMSGoaUG4l2J9Er6E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/791963-af47-4c4c-88b7-a30e96db49c4/1/nMHPS2otJ73LJqeD6Ddu5uspX9g.crl rsync://rpki.ripe.net/repository/DEFAULT/51/791963-af47-4c4c-88b7-a30e96db49c4/1/nMHPS2otJ73LJqeD6Ddu5uspX9g.mft rsync://rpki.ripe.net/repository/DEFAULT/nMHPS2otJ73LJqeD6Ddu5uspX9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:f9:96:00:ce:df:fc:b3:1d:15:20:18:9c:7d:a6:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cc1cf4b6a2d27bdcb26a783e8376ee6eb295fd8 Validity Not Before: Dec 18 01:01:07 2025 GMT Not After : Dec 19 01:01:07 2025 GMT Subject: CN=8f742af5fb042341136a78f6450829b6c8f88dee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:65:4d:d2:da:ba:83:d1:7d:f3:87:4e:27:6b: 34:c2:74:e9:93:47:38:77:99:22:a2:2f:1b:fb:70: 50:2d:df:47:e5:73:06:3f:87:c0:6a:57:ec:8d:2b: 24:8a:98:f2:24:e1:d6:e9:9b:62:1f:8c:3f:38:4e: 7f:87:e9:01:8a:0c:e3:1d:00:42:ce:4f:20:38:05: 84:73:d7:82:ac:d4:e6:e1:77:47:0a:dc:51:8e:91: 24:9a:81:00:da:d0:8c:b7:9e:47:cb:42:d1:0e:cd: 45:4d:81:28:b4:3e:7f:9d:ac:c6:e2:de:b4:81:d5: fa:62:f3:4a:2c:8b:df:ca:dd:ac:e4:0c:89:97:3f: a5:3e:0d:7c:5e:9d:b2:96:98:bd:b9:66:c9:81:3d: 7a:3d:14:ca:e4:ad:ce:ff:72:6b:9b:ba:db:6c:88: a3:42:ab:d7:f5:30:57:12:c0:40:68:38:40:70:4a: 2b:72:1f:f2:ff:ee:4e:0b:c1:31:34:d9:d2:80:20: 73:c6:16:93:22:bb:85:ba:00:17:cc:bd:f8:d7:b3: 98:e1:41:2e:c9:df:44:91:3f:13:aa:f0:ca:13:1f: 2f:02:bc:31:19:62:01:dd:81:fb:b0:96:14:5c:10: 1e:f0:51:36:c4:28:62:47:c6:87:c6:7f:9e:31:f0: 0c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:74:2A:F5:FB:04:23:41:13:6A:78:F6:45:08:29:B6:C8:F8:8D:EE X509v3 Authority Key Identifier: keyid:9C:C1:CF:4B:6A:2D:27:BD:CB:26:A7:83:E8:37:6E:E6:EB:29:5F:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nMHPS2otJ73LJqeD6Ddu5uspX9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/791963-af47-4c4c-88b7-a30e96db49c4/1/nMHPS2otJ73LJqeD6Ddu5uspX9g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/791963-af47-4c4c-88b7-a30e96db49c4/1/nMHPS2otJ73LJqeD6Ddu5uspX9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:65:6c:67:98:c0:29:65:36:99:98:16:a9:6d:16:a2:a4:23: 52:51:95:70:c9:0d:22:52:c5:76:25:89:e4:6d:f1:a8:6f:b4: 3b:3a:73:ef:9f:4c:43:56:5b:60:ec:c6:af:93:95:2b:db:80: 2e:f3:3f:35:e5:53:d7:02:a6:b6:dc:74:69:db:fd:09:55:b5: ac:8c:29:6a:2e:2a:f3:52:c1:80:2c:e5:ee:5c:c7:a6:2c:4f: da:f9:96:83:2d:13:42:9f:8e:3e:67:71:26:03:c6:76:27:67: b4:89:3f:2f:2c:f2:82:77:e6:6a:6b:f9:3d:b1:e7:53:10:86: f9:7d:89:63:2a:5e:2c:91:3a:44:b1:ea:5f:8a:0b:20:2e:23: 1b:88:29:4a:e9:35:1d:f3:43:8a:8b:d1:23:b4:2c:8a:45:ca: 36:ae:3d:52:aa:fa:5b:84:3f:41:03:76:0f:68:c1:27:f7:39: 44:ea:7d:43:8e:aa:69:61:67:5d:4c:55:95:b6:0b:b4:08:50: 1d:a2:0f:21:73:97:76:9d:99:0c:6e:6b:39:ec:76:b8:31:60: 30:6d:0e:5c:08:3b:b5:c6:20:28:fc:96:55:4e:90:81:db:ad: 2f:3e:cd:34:05:ae:08:b5:df:e7:42:96:2f:24:e0:96:2e:3f: e7:4b:b7:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+ZYAzt/8sx0VIBicfaZrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljYzFjZjRiNmEyZDI3YmRjYjI2YTc4M2U4Mzc2ZWU2ZWIy OTVmZDgwHhcNMjUxMjE4MDEwMTA3WhcNMjUxMjE5MDEwMTA3WjAzMTEwLwYDVQQD Eyg4Zjc0MmFmNWZiMDQyMzQxMTM2YTc4ZjY0NTA4MjliNmM4Zjg4ZGVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmVN0tq6g9F984dOJ2s0wnTpk0c4 d5kioi8b+3BQLd9H5XMGP4fAalfsjSskipjyJOHW6ZtiH4w/OE5/h+kBigzjHQBC zk8gOAWEc9eCrNTm4XdHCtxRjpEkmoEA2tCMt55Hy0LRDs1FTYEotD5/nazG4t60 gdX6YvNKLIvfyt2s5AyJlz+lPg18Xp2ylpi9uWbJgT16PRTK5K3O/3Jrm7rbbIij QqvX9TBXEsBAaDhAcEorch/y/+5OC8ExNNnSgCBzxhaTIruFugAXzL3417OY4UEu yd9EkT8TqvDKEx8vArwxGWIB3YH7sJYUXBAe8FE2xChiR8aHxn+eMfAMGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI90KvX7BCNBE2p49kUIKbbI+I3uMB8GA1UdIwQY MBaAFJzBz0tqLSe9yyang+g3bubrKV/YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbk1IUFMyb3RKNzNMSnFlRDZEZHU1dXNwWDlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS83OTE5NjMtYWY0Ny00YzRjLTg4Yjct YTMwZTk2ZGI0OWM0LzEvbk1IUFMyb3RKNzNMSnFlRDZEZHU1dXNwWDlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS83OTE5NjMtYWY0Ny00YzRjLTg4YjctYTMwZTk2ZGI0OWM0 LzEvbk1IUFMyb3RKNzNMSnFlRDZEZHU1dXNwWDlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcGVsZ5jA KWU2mZgWqW0WoqQjUlGVcMkNIlLFdiWJ5G3xqG+0Ozpz759MQ1ZbYOzGr5OVK9uA LvM/NeVT1wKmttx0adv9CVW1rIwpai4q81LBgCzl7lzHpixP2vmWgy0TQp+OPmdx JgPGdidntIk/Lyzygnfmamv5PbHnUxCG+X2JYypeLJE6RLHqX4oLIC4jG4gpSuk1 HfNDiovRI7QsikXKNq49Uqr6W4Q/QQN2D2jBJ/c5ROp9Q46qaWFnXUxVlbYLtAhQ HaIPIXOXdp2ZDG5rOex2uDFgMG0OXAg7tcYgKPyWVU6QgdutLz7NNAWuCLXf50KW LyTgli4/50u3OQ== -----END CERTIFICATE-----Generated at Thu Dec 18 07:03:02 2025 by rpki-client