This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.mft File: nAMai2oolAx5NrpueCuUoJYr-yc.mft (raw, json) Hash identifier: xVOIxzopaNhJMjmflbbR/5Q8kvGcEgRpcn0UeqwzAEs= Subject key identifier: E7:D9:F2:0E:DF:71:45:A0:8A:3F:36:B6:41:C7:9D:E0:7A:AC:2E:B4 Authority key identifier: 9C:03:1A:8B:6A:28:94:0C:79:36:BA:6E:78:2B:94:A0:96:2B:FB:27 Certificate issuer: /CN=9c031a8b6a28940c7936ba6e782b94a0962bfb27 Certificate serial: 019B3E6DDED59BF2385444F21E3D142D220B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nAMai2oolAx5NrpueCuUoJYr-yc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.mft Manifest number: 0518 Signing time: Sun 21 Dec 2025 01:02:26 +0000 Manifest this update: Sun 21 Dec 2025 01:02:26 +0000 Manifest next update: Mon 22 Dec 2025 01:02:26 +0000 Files and hashes: 1: nAMai2oolAx5NrpueCuUoJYr-yc.crl (hash: ze2kcD2ZfiAGCAzFcGzGKx+nMnRjE04bnXheyJBQdPI=) 2: sazfzVz6q9bIns0N5tJ_KIxOhyU.roa (hash: 7Dx7RnLHW4HsXUHgAbio+tOs+19yMbUTjmWX8tX1e1E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.mft rsync://rpki.ripe.net/repository/DEFAULT/nAMai2oolAx5NrpueCuUoJYr-yc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:de:d5:9b:f2:38:54:44:f2:1e:3d:14:2d:22:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c031a8b6a28940c7936ba6e782b94a0962bfb27 Validity Not Before: Dec 21 01:02:26 2025 GMT Not After : Dec 22 01:02:26 2025 GMT Subject: CN=e7d9f20edf7145a08a3f36b641c79de07aac2eb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:0c:5c:dd:dc:ab:19:7d:06:1b:69:0e:08:37: 00:e6:ac:c8:7b:6e:84:1d:0d:6e:4d:f2:b1:70:1e: a8:ec:fd:90:80:36:e1:68:6e:1f:94:56:ea:3d:9d: 14:a7:6f:14:1f:c3:97:87:e6:02:e4:c7:59:fb:35: 9b:a7:99:41:0b:f4:40:d6:ef:7e:b0:49:ef:d1:26: 16:33:aa:83:45:05:bb:9d:02:21:4a:f5:3a:5b:c1: 18:84:80:65:1c:6c:6e:9e:26:a2:67:06:db:bd:6d: fa:f3:7c:4c:83:f1:44:02:c4:d0:a3:c6:d6:5d:c8: f9:3c:5e:f1:d5:94:21:05:f0:6d:8b:16:0a:b2:9a: c4:0f:95:1b:d8:dc:4a:5f:bd:a4:0e:4f:c8:6b:7b: 3d:af:26:f8:57:3a:dd:dd:f0:14:30:5b:e9:d9:c5: 08:12:2a:36:79:ee:9f:0d:98:68:2a:aa:f8:69:4a: 90:a2:82:fb:fd:94:be:f0:d0:2b:c0:f3:3c:37:9d: 86:e8:39:2a:ea:3b:9a:19:8d:a3:92:dc:33:26:7a: 1a:d7:cd:d2:26:b9:06:1d:63:59:2d:d0:30:6f:0b: c2:1f:ab:c4:77:17:63:0e:c8:48:52:a7:73:12:20: f8:61:6d:5a:aa:a7:89:1e:e0:cb:b7:9c:96:d5:c8: c2:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:D9:F2:0E:DF:71:45:A0:8A:3F:36:B6:41:C7:9D:E0:7A:AC:2E:B4 X509v3 Authority Key Identifier: keyid:9C:03:1A:8B:6A:28:94:0C:79:36:BA:6E:78:2B:94:A0:96:2B:FB:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAMai2oolAx5NrpueCuUoJYr-yc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:79:fc:81:78:5d:cd:88:8f:c3:d9:53:4f:86:56:d6:34:f0: a2:cc:98:7d:05:8c:7d:10:4c:ab:e6:33:9a:d7:2c:ef:b8:ca: 8d:9c:73:a0:bb:78:60:fd:2a:05:de:32:77:e8:1f:d0:19:e7: 01:5b:be:a8:62:96:0d:22:fd:8b:30:2d:86:4c:bb:12:fd:07: e2:72:3d:64:cc:93:49:66:5e:7c:0e:1e:67:e9:ba:70:08:ed: b7:e2:1d:81:50:b4:8c:41:2d:be:0c:eb:db:ad:f2:d3:29:17: 23:ed:8e:69:ab:f5:cc:0f:93:0a:e2:ec:bc:cb:cc:11:83:8e: 8f:f2:4f:18:3d:e0:e6:3f:d5:b2:52:06:9d:81:1f:04:79:d8: 7a:c2:df:08:83:e7:a0:63:8a:bd:35:6e:6a:35:d4:28:ad:b2: ae:88:14:1e:4e:a4:7a:17:85:5c:4d:8b:1c:32:29:6e:7e:48: c6:17:7c:11:f0:67:4c:85:74:b4:14:dd:14:5d:53:c1:6c:6e: 81:50:26:a1:37:ee:7f:50:0a:1b:d9:40:53:1d:67:49:1c:16: 21:f3:d5:b6:33:be:cd:05:a3:2c:f7:e0:e3:73:3e:8d:26:4a: ef:d0:d7:3d:7a:24:28:8c:b3:1d:4c:8e:7c:71:61:b3:c9:63: 94:a3:2e:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bd7Vm/I4VETyHj0ULSILMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljMDMxYThiNmEyODk0MGM3OTM2YmE2ZTc4MmI5NGEwOTYy YmZiMjcwHhcNMjUxMjIxMDEwMjI2WhcNMjUxMjIyMDEwMjI2WjAzMTEwLwYDVQQD EyhlN2Q5ZjIwZWRmNzE0NWEwOGEzZjM2YjY0MWM3OWRlMDdhYWMyZWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAxc3dyrGX0GG2kOCDcA5qzIe26E HQ1uTfKxcB6o7P2QgDbhaG4flFbqPZ0Up28UH8OXh+YC5MdZ+zWbp5lBC/RA1u9+ sEnv0SYWM6qDRQW7nQIhSvU6W8EYhIBlHGxuniaiZwbbvW3683xMg/FEAsTQo8bW Xcj5PF7x1ZQhBfBtixYKsprED5Ub2NxKX72kDk/Ia3s9ryb4Vzrd3fAUMFvp2cUI Eio2ee6fDZhoKqr4aUqQooL7/ZS+8NArwPM8N52G6Dkq6juaGY2jktwzJnoa183S JrkGHWNZLdAwbwvCH6vEdxdjDshIUqdzEiD4YW1aqqeJHuDLt5yW1cjC4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOfZ8g7fcUWgij82tkHHneB6rC60MB8GA1UdIwQY MBaAFJwDGotqKJQMeTa6bngrlKCWK/snMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkFNYWkyb29sQXg1TnJwdWVDdVVvSllyLXljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8zNDMzZmUtNjQwOC00NjhkLTgxZTQt ZjAzZWI4NzQwYzNlLzEvbkFNYWkyb29sQXg1TnJwdWVDdVVvSllyLXljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy8zNDMzZmUtNjQwOC00NjhkLTgxZTQtZjAzZWI4NzQwYzNl LzEvbkFNYWkyb29sQXg1TnJwdWVDdVVvSllyLXljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc3n8gXhd zYiPw9lTT4ZW1jTwosyYfQWMfRBMq+Yzmtcs77jKjZxzoLt4YP0qBd4yd+gf0Bnn AVu+qGKWDSL9izAthky7Ev0H4nI9ZMyTSWZefA4eZ+m6cAjtt+IdgVC0jEEtvgzr 263y0ykXI+2Oaav1zA+TCuLsvMvMEYOOj/JPGD3g5j/VslIGnYEfBHnYesLfCIPn oGOKvTVuajXUKK2yrogUHk6keheFXE2LHDIpbn5Ixhd8EfBnTIV0tBTdFF1TwWxu gVAmoTfuf1AKG9lAUx1nSRwWIfPVtjO+zQWjLPfg43M+jSZK79DXPXokKIyzHUyO fHFhs8ljlKMupQ== -----END CERTIFICATE-----Generated at Sun Dec 21 10:03:45 2025 by rpki-client