This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft File: nynoVUAgve-hfFVhQ4-0uvWDH1I.mft (raw, json) Hash identifier: gpFVqZU4wlidWFl7wnkchI6ktkfpio37NpjAD0O+mUU= Subject key identifier: 45:D5:F9:FE:39:E6:44:45:77:77:5C:77:E2:13:FA:CD:20:0E:7C:7E Authority key identifier: 9F:29:E8:55:40:20:BD:EF:A1:7C:55:61:43:8F:B4:BA:F5:83:1F:52 Certificate issuer: /CN=9f29e8554020bdefa17c5561438fb4baf5831f52 Certificate serial: 019B68E8FB3F02DEDCEB9BE0B864059E4700 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nynoVUAgve-hfFVhQ4-0uvWDH1I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft Manifest number: 0AB8 Signing time: Mon 29 Dec 2025 07:00:57 +0000 Manifest this update: Mon 29 Dec 2025 07:00:57 +0000 Manifest next update: Tue 30 Dec 2025 07:00:57 +0000 Files and hashes: 1: ZcSRf0HxnWHQIw5MIAf_WL9oY6A.roa (hash: cP2ZkY5lLDgrJYkw2lqKqOmENJRMWCl82XCDZbZfylY=) 2: dk4GVxnPxj9mrIWRHBmkYZR_RAY.roa (hash: eaMuW15awNbcED9U+mZfT6o28nxoJ9RTD5vuUNkkC90=) 3: nynoVUAgve-hfFVhQ4-0uvWDH1I.crl (hash: sxXgJVWGNppj5HYPuj5Gf9R16Q3WlM0+IQU7uEtAejw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft rsync://rpki.ripe.net/repository/DEFAULT/nynoVUAgve-hfFVhQ4-0uvWDH1I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 07:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:68:e8:fb:3f:02:de:dc:eb:9b:e0:b8:64:05:9e:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f29e8554020bdefa17c5561438fb4baf5831f52 Validity Not Before: Dec 29 07:00:57 2025 GMT Not After : Dec 30 07:00:57 2025 GMT Subject: CN=45d5f9fe39e6444577775c77e213facd200e7c7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:e4:a5:3a:7c:79:99:11:0d:fa:e2:ed:f6:48: c0:26:8a:de:33:46:70:fd:14:52:f5:43:2e:9d:80: 29:07:8e:7a:b2:87:b5:c4:dc:99:27:53:88:aa:d7: 53:f0:66:c3:4f:bb:62:97:f9:84:e8:b3:f2:44:73: e3:d4:ab:c0:97:62:13:cc:12:34:ea:fb:7e:87:04: ee:f4:b3:81:67:b8:6d:b0:d5:32:f9:d1:6b:20:35: c3:80:4f:c5:6b:0c:15:1e:c3:29:96:bf:ee:a0:22: e3:d3:92:67:e4:7b:d5:ba:60:83:8d:47:84:9f:c6: 75:bc:71:81:b0:5b:54:ee:00:e7:5e:b1:0d:62:34: 55:77:70:3c:05:a7:b5:51:6c:be:41:e2:4e:bc:46: 71:a8:c4:ac:e9:ea:7a:55:70:8d:4b:93:95:bc:06: 67:b6:01:df:d9:0d:b0:f6:9c:c2:b6:28:7b:03:7b: c9:98:e9:71:37:31:3e:56:47:0a:a8:08:ce:62:71: ad:72:8e:bd:9e:4b:e7:73:c2:f1:f0:ef:10:00:d8: 7d:b8:80:d6:af:82:51:c1:65:c1:4b:5a:b9:d4:38: 44:34:83:81:26:57:f7:3e:c3:3b:de:a9:36:77:92: 10:2e:14:cd:10:20:13:fb:35:3f:7d:46:1a:e9:33: c5:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:D5:F9:FE:39:E6:44:45:77:77:5C:77:E2:13:FA:CD:20:0E:7C:7E X509v3 Authority Key Identifier: keyid:9F:29:E8:55:40:20:BD:EF:A1:7C:55:61:43:8F:B4:BA:F5:83:1F:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nynoVUAgve-hfFVhQ4-0uvWDH1I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:dc:a0:35:5b:a9:e4:b6:a4:f8:af:2f:03:5f:d6:eb:2b:8f: d4:f1:b8:d7:18:01:19:71:7d:5f:93:98:3d:e1:ac:d1:d2:75: c4:0e:af:f4:e5:8a:0e:7a:0d:90:83:0e:d0:bd:be:be:90:55: df:89:78:eb:18:ec:62:e7:53:cb:36:b1:7e:8b:f4:26:72:4c: 79:69:0f:e8:b2:86:38:92:69:1f:be:c3:63:e4:f3:b9:eb:5d: 04:fd:8c:d6:01:c1:c4:e5:74:2c:f0:70:2a:c8:2f:2d:dd:96: fc:13:41:90:5c:a0:33:c9:9a:66:29:b5:2e:f8:f7:37:2c:6f: 2f:4e:4d:25:68:8a:c2:0e:c7:89:e5:99:25:3f:c9:56:57:8f: 59:54:1f:fb:28:66:81:9a:c0:ad:4d:61:8f:6e:eb:a5:42:26: b7:b8:32:4c:40:d7:02:50:64:af:57:d9:a8:7c:56:16:0e:4a: 35:15:a2:cb:86:56:79:1a:13:b3:f6:d3:4b:9f:e6:b4:09:ea: a6:de:a8:15:a8:12:ca:18:0a:62:d5:e5:f3:33:82:c5:25:24: a8:ec:c5:89:75:c4:b3:35:d4:79:a1:01:e5:de:84:29:9a:ab: 2d:d4:47:e1:3a:b2:ca:16:90:ac:a3:1c:3e:15:5f:ea:d5:29: 7f:72:c9:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZto6Ps/At7c65vguGQFnkcAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmMjllODU1NDAyMGJkZWZhMTdjNTU2MTQzOGZiNGJhZjU4 MzFmNTIwHhcNMjUxMjI5MDcwMDU3WhcNMjUxMjMwMDcwMDU3WjAzMTEwLwYDVQQD Eyg0NWQ1ZjlmZTM5ZTY0NDQ1Nzc3NzVjNzdlMjEzZmFjZDIwMGU3YzdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOSlOnx5mREN+uLt9kjAJoreM0Zw /RRS9UMunYApB456soe1xNyZJ1OIqtdT8GbDT7til/mE6LPyRHPj1KvAl2ITzBI0 6vt+hwTu9LOBZ7htsNUy+dFrIDXDgE/FawwVHsMplr/uoCLj05Jn5HvVumCDjUeE n8Z1vHGBsFtU7gDnXrENYjRVd3A8Bae1UWy+QeJOvEZxqMSs6ep6VXCNS5OVvAZn tgHf2Q2w9pzCtih7A3vJmOlxNzE+VkcKqAjOYnGtco69nkvnc8Lx8O8QANh9uIDW r4JRwWXBS1q51DhENIOBJlf3PsM73qk2d5IQLhTNECAT+zU/fUYa6TPFvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEXV+f455kRFd3dcd+IT+s0gDnx+MB8GA1UdIwQY MBaAFJ8p6FVAIL3voXxVYUOPtLr1gx9SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnlub1ZVQWd2ZS1oZkZWaFE0LTB1dldESDFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8yZGJlMDQtNDNhOC00OTYzLThlODYt M2ZlOGY4OTZlNTUxLzEvbnlub1ZVQWd2ZS1oZkZWaFE0LTB1dldESDFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy8yZGJlMDQtNDNhOC00OTYzLThlODYtM2ZlOGY4OTZlNTUx LzEvbnlub1ZVQWd2ZS1oZkZWaFE0LTB1dldESDFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApNygNVup 5Lak+K8vA1/W6yuP1PG41xgBGXF9X5OYPeGs0dJ1xA6v9OWKDnoNkIMO0L2+vpBV 34l46xjsYudTyzaxfov0JnJMeWkP6LKGOJJpH77DY+TzuetdBP2M1gHBxOV0LPBw KsgvLd2W/BNBkFygM8maZim1Lvj3NyxvL05NJWiKwg7HieWZJT/JVlePWVQf+yhm gZrArU1hj27rpUImt7gyTEDXAlBkr1fZqHxWFg5KNRWiy4ZWeRoTs/bTS5/mtAnq pt6oFagSyhgKYtXl8zOCxSUkqOzFiXXEszXUeaEB5d6EKZqrLdRH4TqyyhaQrKMc PhVf6tUpf3LJUA== -----END CERTIFICATE-----Generated at Mon Dec 29 12:05:15 2025 by rpki-client