This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/871d77-08aa-4a91-996a-8bba5fa3c317/1/nPBdS9XUK0F1rMY0rM8P-hhz8Ko.mft File: nPBdS9XUK0F1rMY0rM8P-hhz8Ko.mft (raw, json) Hash identifier: jgxV9WFLRNjihtwZU/VwvBfKJaULrSturWdPJlexVJs= Subject key identifier: 73:45:81:EA:25:CA:11:65:CE:72:64:3E:B4:1A:65:D7:05:94:CB:1A Authority key identifier: 9C:F0:5D:4B:D5:D4:2B:41:75:AC:C6:34:AC:CF:0F:FA:18:73:F0:AA Certificate issuer: /CN=9cf05d4bd5d42b4175acc634accf0ffa1873f0aa Certificate serial: 019B3156120D904BCCAFBF0EBAD51CAE0CBC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nPBdS9XUK0F1rMY0rM8P-hhz8Ko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/871d77-08aa-4a91-996a-8bba5fa3c317/1/nPBdS9XUK0F1rMY0rM8P-hhz8Ko.mft Manifest number: 060F Signing time: Thu 18 Dec 2025 12:01:22 +0000 Manifest this update: Thu 18 Dec 2025 12:01:22 +0000 Manifest next update: Fri 19 Dec 2025 12:01:22 +0000 Files and hashes: 1: nPBdS9XUK0F1rMY0rM8P-hhz8Ko.crl (hash: NVag+456RdqUk47+vI2/lsYhZpon0LRdMwRkwkHHIhg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/871d77-08aa-4a91-996a-8bba5fa3c317/1/nPBdS9XUK0F1rMY0rM8P-hhz8Ko.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/871d77-08aa-4a91-996a-8bba5fa3c317/1/nPBdS9XUK0F1rMY0rM8P-hhz8Ko.mft rsync://rpki.ripe.net/repository/DEFAULT/nPBdS9XUK0F1rMY0rM8P-hhz8Ko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 12:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:56:12:0d:90:4b:cc:af:bf:0e:ba:d5:1c:ae:0c:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cf05d4bd5d42b4175acc634accf0ffa1873f0aa Validity Not Before: Dec 18 12:01:22 2025 GMT Not After : Dec 19 12:01:22 2025 GMT Subject: CN=734581ea25ca1165ce72643eb41a65d70594cb1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ce:a9:03:1d:ce:2d:4c:fd:da:1e:6e:92:81: 98:05:a2:67:e6:4a:fe:e2:db:91:54:09:48:1d:17: ae:e2:98:23:44:fe:8a:be:01:ac:e0:a5:3e:7a:d1: 1e:e1:5c:24:27:73:06:b8:f5:f9:3a:a5:12:eb:12: ea:0e:da:be:6e:67:f4:7d:84:a7:91:6f:f7:3d:a9: 79:b3:d5:56:d4:78:ff:1d:73:bd:85:20:10:39:fc: 4e:95:d1:94:c3:84:ee:b0:91:95:73:02:b2:5a:ea: 76:6d:cf:e7:0b:6d:54:77:fc:2e:6e:64:d9:1a:65: a8:50:57:42:09:51:e6:ad:5d:79:e1:56:bb:d3:8c: 13:b9:52:8a:3f:89:3c:70:55:e2:16:91:74:bf:fd: 2a:a0:ef:74:9d:eb:b1:a2:ef:9b:54:70:eb:b0:16: 87:5c:8f:d5:a6:75:84:10:36:51:67:24:0e:44:fb: 24:56:30:ef:32:2c:fb:aa:5e:0c:5e:80:8d:37:a2: 16:82:ae:cf:84:fb:ad:f0:67:0a:17:88:3b:d6:5f: 11:6d:19:1c:ff:5a:0a:5d:3a:bb:4e:52:ce:51:21: 73:7e:ab:3c:2a:3f:4d:20:5a:59:f7:f2:b0:b5:9c: 3e:86:06:fd:7b:48:fe:b6:d9:bd:ea:37:61:0e:57: dc:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:45:81:EA:25:CA:11:65:CE:72:64:3E:B4:1A:65:D7:05:94:CB:1A X509v3 Authority Key Identifier: keyid:9C:F0:5D:4B:D5:D4:2B:41:75:AC:C6:34:AC:CF:0F:FA:18:73:F0:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nPBdS9XUK0F1rMY0rM8P-hhz8Ko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/871d77-08aa-4a91-996a-8bba5fa3c317/1/nPBdS9XUK0F1rMY0rM8P-hhz8Ko.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/871d77-08aa-4a91-996a-8bba5fa3c317/1/nPBdS9XUK0F1rMY0rM8P-hhz8Ko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:23:37:02:0b:68:1a:af:49:e1:85:79:49:cf:7c:3c:d3:3f: 23:d3:f5:53:c4:94:50:a9:9a:12:0e:ab:42:ae:e4:05:66:e5: 05:2b:1d:49:e6:de:a9:f8:52:62:cf:b6:ae:9b:61:21:34:10: 80:1c:64:f2:19:44:64:c4:99:67:61:24:bb:73:47:f9:ec:8f: 73:8b:c6:ed:55:dd:01:cc:6b:43:e3:ef:e2:66:1e:fe:d8:e3: 77:88:a1:3c:62:7e:8a:ee:a3:b9:4a:a4:e3:a4:37:e7:60:da: a0:1e:fc:c5:f9:cc:24:84:f1:61:44:d5:13:95:75:35:2e:92: cf:41:32:e1:8a:2d:ab:15:5e:eb:5b:76:71:c0:24:5a:83:ce: c6:fe:2c:a1:42:85:6f:5f:a1:d1:74:2b:d8:44:7f:73:78:e2: bf:af:6e:d3:d2:79:f8:86:ec:38:fa:82:38:13:f3:9b:b2:5e: c0:cf:da:69:df:53:7e:e9:3d:71:7e:f3:33:13:67:53:9f:4a: 5d:2a:6e:cc:f3:95:ea:ac:9b:9b:38:dd:c3:97:ab:0a:f1:92: f5:28:c0:3a:e4:b5:86:c1:11:6d:37:91:38:fa:82:f1:c4:02: 9f:f5:54:47:0f:59:88:00:eb:e9:06:99:41:84:6a:9c:1d:f3: 5f:db:8e:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxVhINkEvMr78OutUcrgy8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljZjA1ZDRiZDVkNDJiNDE3NWFjYzYzNGFjY2YwZmZhMTg3 M2YwYWEwHhcNMjUxMjE4MTIwMTIyWhcNMjUxMjE5MTIwMTIyWjAzMTEwLwYDVQQD Eyg3MzQ1ODFlYTI1Y2ExMTY1Y2U3MjY0M2ViNDFhNjVkNzA1OTRjYjFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtM6pAx3OLUz92h5ukoGYBaJn5kr+ 4tuRVAlIHReu4pgjRP6KvgGs4KU+etEe4VwkJ3MGuPX5OqUS6xLqDtq+bmf0fYSn kW/3Pal5s9VW1Hj/HXO9hSAQOfxOldGUw4TusJGVcwKyWup2bc/nC21Ud/wubmTZ GmWoUFdCCVHmrV154Va704wTuVKKP4k8cFXiFpF0v/0qoO90neuxou+bVHDrsBaH XI/VpnWEEDZRZyQORPskVjDvMiz7ql4MXoCNN6IWgq7PhPut8GcKF4g71l8RbRkc /1oKXTq7TlLOUSFzfqs8Kj9NIFpZ9/KwtZw+hgb9e0j+ttm96jdhDlfcTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHNFgeolyhFlznJkPrQaZdcFlMsaMB8GA1UdIwQY MBaAFJzwXUvV1CtBdazGNKzPD/oYc/CqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblBCZFM5WFVLMEYxck1ZMHJNOFAtaGh6OEtvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC84NzFkNzctMDhhYS00YTkxLTk5NmEt OGJiYTVmYTNjMzE3LzEvblBCZFM5WFVLMEYxck1ZMHJNOFAtaGh6OEtvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC84NzFkNzctMDhhYS00YTkxLTk5NmEtOGJiYTVmYTNjMzE3 LzEvblBCZFM5WFVLMEYxck1ZMHJNOFAtaGh6OEtvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVSM3Agto Gq9J4YV5Sc98PNM/I9P1U8SUUKmaEg6rQq7kBWblBSsdSebeqfhSYs+2rpthITQQ gBxk8hlEZMSZZ2Eku3NH+eyPc4vG7VXdAcxrQ+Pv4mYe/tjjd4ihPGJ+iu6juUqk 46Q352DaoB78xfnMJITxYUTVE5V1NS6Sz0Ey4YotqxVe61t2ccAkWoPOxv4soUKF b1+h0XQr2ER/c3jiv69u09J5+IbsOPqCOBPzm7JewM/aad9Tfuk9cX7zMxNnU59K XSpuzPOV6qybmzjdw5erCvGS9SjAOuS1hsERbTeROPqC8cQCn/VURw9ZiADr6QaZ QYRqnB3zX9uOwg== -----END CERTIFICATE-----Generated at Thu Dec 18 18:36:48 2025 by rpki-client