This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/26c675-def7-4232-811b-8f76c3291fbc/1/NutRbqkC2WStsqptytmh3A9bfv4.mft File: NutRbqkC2WStsqptytmh3A9bfv4.mft (raw, json) Hash identifier: c350W5mYsuaa2sKAmaIymNyVc3FHMOik1LmLRtDl1cU= Subject key identifier: 15:77:A6:76:6F:79:DC:70:A5:54:0F:D4:D8:D7:3B:43:FD:C1:B1:30 Authority key identifier: 36:EB:51:6E:A9:02:D9:64:AD:B2:AA:6D:CA:D9:A1:DC:0F:5B:7E:FE Certificate issuer: /CN=36eb516ea902d964adb2aa6dcad9a1dc0f5b7efe Certificate serial: 019B3FB5CB8B7C8CA0BC062462AFBACDF49E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NutRbqkC2WStsqptytmh3A9bfv4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/26c675-def7-4232-811b-8f76c3291fbc/1/NutRbqkC2WStsqptytmh3A9bfv4.mft Manifest number: 171B Signing time: Sun 21 Dec 2025 07:00:37 +0000 Manifest this update: Sun 21 Dec 2025 07:00:37 +0000 Manifest next update: Mon 22 Dec 2025 07:00:37 +0000 Files and hashes: 1: NutRbqkC2WStsqptytmh3A9bfv4.crl (hash: Zx54oI1Hzg4K2w3ForHxwL55mPEQdaUzipW8lspVE50=) 2: XdAh2iIkdXAUuE10m0pcdADM_3Q.roa (hash: lEtjV/lSmPRly69ux6s/y/s94dr1ooRNJ7kAyfLCuys=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/26c675-def7-4232-811b-8f76c3291fbc/1/NutRbqkC2WStsqptytmh3A9bfv4.crl rsync://rpki.ripe.net/repository/DEFAULT/55/26c675-def7-4232-811b-8f76c3291fbc/1/NutRbqkC2WStsqptytmh3A9bfv4.mft rsync://rpki.ripe.net/repository/DEFAULT/NutRbqkC2WStsqptytmh3A9bfv4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:b5:cb:8b:7c:8c:a0:bc:06:24:62:af:ba:cd:f4:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36eb516ea902d964adb2aa6dcad9a1dc0f5b7efe Validity Not Before: Dec 21 07:00:37 2025 GMT Not After : Dec 22 07:00:37 2025 GMT Subject: CN=1577a6766f79dc70a5540fd4d8d73b43fdc1b130 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:08:de:cf:cc:71:02:53:d9:2b:5c:05:e3:d5: 5f:95:91:f0:0f:e6:f8:77:19:ba:cd:b4:14:74:2e: f4:2d:f5:c3:5b:79:97:0d:5c:df:56:fb:db:fe:b2: 48:c4:84:82:65:dd:06:02:ef:2f:d5:53:6e:65:c3: e9:72:3d:90:e2:fa:ab:5e:91:29:26:56:66:9e:0d: 92:30:09:31:ad:fe:17:15:36:32:b4:de:bb:b0:5c: c6:78:29:a7:f1:7b:44:18:2e:56:d5:61:fc:c3:bd: 4a:14:57:80:d9:d0:12:f6:9f:c3:71:a6:6f:0f:c3: 83:18:3a:3b:29:24:09:13:eb:84:a7:79:64:cd:39: f7:1e:e8:3b:51:a8:9d:47:8d:bb:b7:bc:ea:bf:64: d7:cd:6a:d8:15:0d:97:4d:d3:6e:ca:28:70:ff:28: ff:ec:6b:89:bb:78:67:67:11:19:b4:0a:f9:8f:f2: 59:53:62:81:5a:44:7b:00:5a:26:28:0d:7b:46:06: 0f:a6:bc:17:73:03:9f:dd:67:34:f2:03:f2:ba:c1: 71:9d:8f:a7:55:af:67:9e:2e:f8:88:18:f4:dc:22: f8:4e:14:4f:0b:02:01:12:ad:d1:88:35:8f:30:9c: 1b:af:c4:0e:2e:10:b5:63:e6:e2:79:67:26:0b:0b: ba:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:77:A6:76:6F:79:DC:70:A5:54:0F:D4:D8:D7:3B:43:FD:C1:B1:30 X509v3 Authority Key Identifier: keyid:36:EB:51:6E:A9:02:D9:64:AD:B2:AA:6D:CA:D9:A1:DC:0F:5B:7E:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NutRbqkC2WStsqptytmh3A9bfv4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/26c675-def7-4232-811b-8f76c3291fbc/1/NutRbqkC2WStsqptytmh3A9bfv4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/26c675-def7-4232-811b-8f76c3291fbc/1/NutRbqkC2WStsqptytmh3A9bfv4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:de:c0:d2:a4:9d:0e:b4:66:0b:37:f1:01:71:fe:91:1c:42: b7:d4:e9:3a:e4:c8:86:24:02:23:9a:ab:87:cf:5f:84:fd:87: 8b:74:95:51:e1:95:8d:3e:d3:f2:31:13:ae:4c:83:4a:8c:c0: 14:d5:21:c7:d6:c9:21:95:cf:1d:34:66:90:09:d0:7d:4d:6f: 3a:e5:d1:96:86:a3:8a:02:8f:4f:ba:ff:14:8b:e5:9b:9f:a4: 9a:62:fb:91:48:b9:28:b6:f9:8c:f5:7c:c7:db:36:f9:6f:02: 45:db:d9:c3:de:e7:f6:20:cd:4d:c6:7d:c0:ab:d8:ab:3c:8a: 36:4c:c5:29:bd:54:b0:1a:d4:d8:c4:5f:4b:f5:11:d2:64:c2: 5e:21:06:12:39:c5:3e:0d:c0:f6:60:10:c0:28:e5:98:85:7e: 4a:84:d1:37:12:24:9b:dd:07:d1:50:2b:25:a4:eb:58:32:a3: ab:64:27:61:35:e9:cc:e6:f0:38:c3:ee:f6:ef:09:db:6c:c0: 21:f6:d3:7f:a9:2d:65:1e:ce:d5:de:22:eb:34:dc:24:1f:e7: 8b:eb:1e:95:c0:99:f4:5d:13:c0:d3:22:33:49:73:8f:b4:7f: df:95:65:5c:50:bd:01:30:67:1a:70:85:69:71:38:24:8a:f5: 50:06:6a:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/tcuLfIygvAYkYq+6zfSeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2ZWI1MTZlYTkwMmQ5NjRhZGIyYWE2ZGNhZDlhMWRjMGY1 YjdlZmUwHhcNMjUxMjIxMDcwMDM3WhcNMjUxMjIyMDcwMDM3WjAzMTEwLwYDVQQD EygxNTc3YTY3NjZmNzlkYzcwYTU1NDBmZDRkOGQ3M2I0M2ZkYzFiMTMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5wjez8xxAlPZK1wF49VflZHwD+b4 dxm6zbQUdC70LfXDW3mXDVzfVvvb/rJIxISCZd0GAu8v1VNuZcPpcj2Q4vqrXpEp JlZmng2SMAkxrf4XFTYytN67sFzGeCmn8XtEGC5W1WH8w71KFFeA2dAS9p/DcaZv D8ODGDo7KSQJE+uEp3lkzTn3Hug7UaidR427t7zqv2TXzWrYFQ2XTdNuyihw/yj/ 7GuJu3hnZxEZtAr5j/JZU2KBWkR7AFomKA17RgYPprwXcwOf3Wc08gPyusFxnY+n Va9nni74iBj03CL4ThRPCwIBEq3RiDWPMJwbr8QOLhC1Y+bieWcmCwu6mwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBV3pnZvedxwpVQP1NjXO0P9wbEwMB8GA1UdIwQY MBaAFDbrUW6pAtlkrbKqbcrZodwPW37+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnV0UmJxa0MyV1N0c3FwdHl0bWgzQTliZnY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8yNmM2NzUtZGVmNy00MjMyLTgxMWIt OGY3NmMzMjkxZmJjLzEvTnV0UmJxa0MyV1N0c3FwdHl0bWgzQTliZnY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS8yNmM2NzUtZGVmNy00MjMyLTgxMWItOGY3NmMzMjkxZmJj LzEvTnV0UmJxa0MyV1N0c3FwdHl0bWgzQTliZnY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM97A0qSd DrRmCzfxAXH+kRxCt9TpOuTIhiQCI5qrh89fhP2Hi3SVUeGVjT7T8jETrkyDSozA FNUhx9bJIZXPHTRmkAnQfU1vOuXRloajigKPT7r/FIvlm5+kmmL7kUi5KLb5jPV8 x9s2+W8CRdvZw97n9iDNTcZ9wKvYqzyKNkzFKb1UsBrU2MRfS/UR0mTCXiEGEjnF Pg3A9mAQwCjlmIV+SoTRNxIkm90H0VArJaTrWDKjq2QnYTXpzObwOMPu9u8J22zA IfbTf6ktZR7O1d4i6zTcJB/ni+selcCZ9F0TwNMiM0lzj7R/35VlXFC9ATBnGnCF aXE4JIr1UAZqAw== -----END CERTIFICATE-----Generated at Sun Dec 21 13:39:57 2025 by rpki-client