This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/47e609-b6b7-443b-8a04-e285cd8cad12/1/nurBz77ElK6UV8hm5jYYZcTzAEg.mft File: nurBz77ElK6UV8hm5jYYZcTzAEg.mft (raw, json) Hash identifier: Qscd9i2wQ9dyJiH4YUFGPHFM0Ii/85flEOls5mr2LG8= Subject key identifier: 22:97:8A:31:30:0E:97:18:31:7E:39:13:62:7C:7B:15:95:DE:9B:20 Authority key identifier: 9E:EA:C1:CF:BE:C4:94:AE:94:57:C8:66:E6:36:18:65:C4:F3:00:48 Certificate issuer: /CN=9eeac1cfbec494ae9457c866e6361865c4f30048 Certificate serial: 019B552B77BB1C56E772817397CAE60AACD4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nurBz77ElK6UV8hm5jYYZcTzAEg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/47e609-b6b7-443b-8a04-e285cd8cad12/1/nurBz77ElK6UV8hm5jYYZcTzAEg.mft Manifest number: 0D90 Signing time: Thu 25 Dec 2025 11:01:10 +0000 Manifest this update: Thu 25 Dec 2025 11:01:10 +0000 Manifest next update: Fri 26 Dec 2025 11:01:10 +0000 Files and hashes: 1: mmnZOOh4xZoAyB6ozP7dMz0vpOQ.roa (hash: MPgwr3P3oOg7+ut0sMgX1kiy6aK0r7pykdMfFbGH85I=) 2: nurBz77ElK6UV8hm5jYYZcTzAEg.crl (hash: q5YisqpTCZVCo/Ts9ZSuXe8V9kuB0NJWmfpuqoeKyRs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/47e609-b6b7-443b-8a04-e285cd8cad12/1/nurBz77ElK6UV8hm5jYYZcTzAEg.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/47e609-b6b7-443b-8a04-e285cd8cad12/1/nurBz77ElK6UV8hm5jYYZcTzAEg.mft rsync://rpki.ripe.net/repository/DEFAULT/nurBz77ElK6UV8hm5jYYZcTzAEg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 10:17:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:55:2b:77:bb:1c:56:e7:72:81:73:97:ca:e6:0a:ac:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9eeac1cfbec494ae9457c866e6361865c4f30048 Validity Not Before: Dec 25 11:01:10 2025 GMT Not After : Dec 26 11:01:10 2025 GMT Subject: CN=22978a31300e9718317e3913627c7b1595de9b20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:0a:4d:92:f3:eb:b3:b0:20:8c:ea:07:af:9b: 42:db:7d:66:e5:29:2e:35:1b:9e:01:36:e9:46:4c: 3c:9f:6c:a9:1f:af:8b:ee:1b:04:09:2b:9f:ee:16: e8:e1:25:66:41:91:b7:fa:fb:70:78:44:1e:b3:cc: cd:80:df:01:02:44:20:30:b5:2f:3c:56:87:82:64: 2e:9d:95:19:e3:7f:6e:d9:63:7f:9d:ad:6e:d6:1a: 33:e8:dc:71:63:d2:76:12:ea:e2:b4:f0:c6:fb:0d: 88:7f:7a:35:b5:a3:71:68:c9:bd:d0:95:45:ca:c1: 8f:13:b7:bf:99:20:de:29:f7:a3:07:57:bc:53:5c: 2d:62:97:a0:41:f6:a0:10:73:0d:7e:3a:c4:76:3e: aa:ba:38:4e:73:b1:3e:ec:3d:07:d8:47:b3:e3:45: 8b:d7:f3:20:fd:02:be:3c:52:f0:cd:04:be:ec:40: 79:6b:d0:27:68:91:00:ad:22:11:09:a3:dc:ca:3a: e2:46:e7:0f:62:51:e3:3f:31:5b:fb:b6:90:cb:c5: 78:21:c5:3c:8e:22:37:e4:53:9d:71:8d:2e:9c:a1: fe:ea:2f:de:0e:02:d7:62:92:a8:8b:b1:90:02:28: 9e:d6:6c:33:92:20:b3:bb:1c:a2:b5:3b:d9:f7:2e: 44:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:97:8A:31:30:0E:97:18:31:7E:39:13:62:7C:7B:15:95:DE:9B:20 X509v3 Authority Key Identifier: keyid:9E:EA:C1:CF:BE:C4:94:AE:94:57:C8:66:E6:36:18:65:C4:F3:00:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nurBz77ElK6UV8hm5jYYZcTzAEg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/47e609-b6b7-443b-8a04-e285cd8cad12/1/nurBz77ElK6UV8hm5jYYZcTzAEg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/47e609-b6b7-443b-8a04-e285cd8cad12/1/nurBz77ElK6UV8hm5jYYZcTzAEg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:77:d8:d3:7a:24:b9:7f:83:cc:83:03:a2:f2:d8:f3:31:d7: ef:44:f3:f0:5a:03:fa:10:d2:8c:be:7c:eb:4e:e7:c4:d0:2c: 3d:56:8c:6c:ed:1e:68:d3:a0:7f:d8:17:80:88:e3:63:23:4d: 92:58:f1:56:02:13:8e:0b:e2:d6:ba:1d:63:1e:1a:e8:a2:e7: 48:a4:29:65:8a:aa:d2:3f:76:59:0e:73:ca:c5:19:fa:92:54: 80:a0:a6:8f:f3:da:6c:9b:04:54:3b:b1:d2:0e:a6:1b:0f:fd: 02:90:c3:e3:55:04:54:ca:d5:1b:16:b8:dd:43:29:fb:24:d4: 69:4e:a9:da:36:7b:08:f1:af:f5:29:62:f0:6a:9e:03:0c:c1: 2a:48:30:80:a4:d4:53:4b:b8:e4:fc:97:0b:3f:66:77:ac:66: a9:d1:68:31:ec:d4:fe:df:6e:e9:ef:40:0c:ab:d6:68:f5:14: a6:ac:c8:fb:3c:c4:78:79:f4:4f:bf:94:92:96:92:3e:60:be: fa:df:77:da:dd:4c:9f:38:76:0b:bd:5d:53:19:d9:bf:0a:cf: 79:c2:6e:c5:0e:d9:14:91:c0:87:91:61:3b:b8:68:14:5f:6b: f8:89:ae:38:db:3a:fd:fe:05:ab:c6:dc:c9:4f:67:4e:05:ea: d5:16:c6:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtVK3e7HFbncoFzl8rmCqzUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllZWFjMWNmYmVjNDk0YWU5NDU3Yzg2NmU2MzYxODY1YzRm MzAwNDgwHhcNMjUxMjI1MTEwMTEwWhcNMjUxMjI2MTEwMTEwWjAzMTEwLwYDVQQD EygyMjk3OGEzMTMwMGU5NzE4MzE3ZTM5MTM2MjdjN2IxNTk1ZGU5YjIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQpNkvPrs7AgjOoHr5tC231m5Sku NRueATbpRkw8n2ypH6+L7hsECSuf7hbo4SVmQZG3+vtweEQes8zNgN8BAkQgMLUv PFaHgmQunZUZ439u2WN/na1u1hoz6NxxY9J2EuritPDG+w2If3o1taNxaMm90JVF ysGPE7e/mSDeKfejB1e8U1wtYpegQfagEHMNfjrEdj6qujhOc7E+7D0H2Eez40WL 1/Mg/QK+PFLwzQS+7EB5a9AnaJEArSIRCaPcyjriRucPYlHjPzFb+7aQy8V4IcU8 jiI35FOdcY0unKH+6i/eDgLXYpKoi7GQAiie1mwzkiCzuxyitTvZ9y5E8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCKXijEwDpcYMX45E2J8exWV3psgMB8GA1UdIwQY MBaAFJ7qwc++xJSulFfIZuY2GGXE8wBIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnVyQno3N0VsSzZVVjhobTVqWVlaY1R6QUVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS80N2U2MDktYjZiNy00NDNiLThhMDQt ZTI4NWNkOGNhZDEyLzEvbnVyQno3N0VsSzZVVjhobTVqWVlaY1R6QUVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS80N2U2MDktYjZiNy00NDNiLThhMDQtZTI4NWNkOGNhZDEy LzEvbnVyQno3N0VsSzZVVjhobTVqWVlaY1R6QUVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB3fY03ok uX+DzIMDovLY8zHX70Tz8FoD+hDSjL58607nxNAsPVaMbO0eaNOgf9gXgIjjYyNN kljxVgITjgvi1rodYx4a6KLnSKQpZYqq0j92WQ5zysUZ+pJUgKCmj/PabJsEVDux 0g6mGw/9ApDD41UEVMrVGxa43UMp+yTUaU6p2jZ7CPGv9Sli8GqeAwzBKkgwgKTU U0u45PyXCz9md6xmqdFoMezU/t9u6e9ADKvWaPUUpqzI+zzEeHn0T7+UkpaSPmC+ +t932t1Mnzh2C71dUxnZvwrPecJuxQ7ZFJHAh5FhO7hoFF9r+ImuONs6/f4Fq8bc yU9nTgXq1RbGxw== -----END CERTIFICATE-----Generated at Thu Dec 25 16:00:19 2025 by rpki-client