This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.mft File: NnRl_9ujwFwhvlsV8NkV78ywaeU.mft (raw, json) Hash identifier: GAEt6uEzDC+e6YtCNG4vMKnzHS3wnN/jHR0Wjxo6CYQ= Subject key identifier: 97:76:48:2F:1D:16:DD:41:EC:77:2B:BC:EA:09:6D:0D:34:F7:16:96 Authority key identifier: 36:74:65:FF:DB:A3:C0:5C:21:BE:5B:15:F0:D9:15:EF:CC:B0:69:E5 Certificate issuer: /CN=367465ffdba3c05c21be5b15f0d915efccb069e5 Certificate serial: 019B3D5985141526814EB3FB81F34C27E291 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NnRl_9ujwFwhvlsV8NkV78ywaeU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.mft Manifest number: 0E69 Signing time: Sat 20 Dec 2025 20:00:35 +0000 Manifest this update: Sat 20 Dec 2025 20:00:35 +0000 Manifest next update: Sun 21 Dec 2025 20:00:35 +0000 Files and hashes: 1: NnRl_9ujwFwhvlsV8NkV78ywaeU.crl (hash: 53y4hrhjuykNDnRv8H8aiZtdXfYHazOOxhudRnua668=) 2: apGrLeQXGFDnmjDGU5J1xhLa7ts.roa (hash: TvPWK0JX9FOtKwbjXZr2maaJZh4hwmSWvBJ0nfoejxE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.mft rsync://rpki.ripe.net/repository/DEFAULT/NnRl_9ujwFwhvlsV8NkV78ywaeU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:85:14:15:26:81:4e:b3:fb:81:f3:4c:27:e2:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=367465ffdba3c05c21be5b15f0d915efccb069e5 Validity Not Before: Dec 20 20:00:35 2025 GMT Not After : Dec 21 20:00:35 2025 GMT Subject: CN=9776482f1d16dd41ec772bbcea096d0d34f71696 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:75:08:e3:61:83:fc:a0:e2:09:a9:62:e4:e0: 37:c6:5e:c4:a1:69:39:8a:cc:b1:08:90:da:b8:b2: 3f:76:b6:f3:b0:83:d0:00:6f:d0:5b:94:88:f9:60: 67:9a:e4:5d:ea:dd:3a:81:4b:8f:73:85:82:39:18: 26:31:3b:b6:f4:b9:a7:d3:42:82:e7:82:dc:18:43: 21:7a:2f:ca:98:90:b1:9f:7b:91:20:12:f1:2f:37: a6:f1:dc:1f:f0:e0:38:f8:3f:ac:f5:1c:69:54:56: a1:05:7a:9b:ca:7f:7f:5d:45:ac:c8:98:e1:eb:a7: 9f:d3:f9:40:ef:de:14:80:82:a0:7b:87:82:a6:27: 44:de:ee:b2:80:cf:8c:56:44:de:e8:44:63:97:af: d1:0e:51:c6:2c:6d:7f:4c:3e:f3:36:1c:22:8b:47: 62:12:0e:7c:05:e0:a1:2f:15:9f:b8:37:74:74:d2: 99:5f:61:d9:bb:f9:61:4b:df:a3:8f:e5:c1:15:3e: d5:20:a7:30:26:c2:b6:39:7c:95:69:0f:dd:03:5d: d0:f2:82:c5:da:bb:57:b7:a3:9a:21:92:85:43:6e: 35:0d:38:46:53:d1:7e:04:42:70:a4:66:8d:75:b2: 53:c6:0d:4a:39:72:b3:9c:6b:71:7b:aa:5c:21:1d: 67:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:76:48:2F:1D:16:DD:41:EC:77:2B:BC:EA:09:6D:0D:34:F7:16:96 X509v3 Authority Key Identifier: keyid:36:74:65:FF:DB:A3:C0:5C:21:BE:5B:15:F0:D9:15:EF:CC:B0:69:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NnRl_9ujwFwhvlsV8NkV78ywaeU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:f5:9d:2c:6d:dd:c0:2a:7c:c5:e9:8b:e6:d5:de:99:d9:99: d1:48:e2:df:9b:34:d9:1f:c5:75:34:be:e3:1d:3d:30:45:fa: 8b:49:e3:56:6a:d4:38:b2:b8:f5:ac:e2:81:e9:a0:d8:fb:6f: 43:6f:77:d6:94:05:29:7d:94:16:83:ea:f7:fc:3c:7e:79:9b: c9:74:0d:12:4e:fc:94:ae:0a:d5:54:57:c5:41:57:5c:49:2f: e8:5c:f6:19:10:7c:99:1f:ef:4d:92:f0:71:73:d8:fe:d3:01: 83:78:59:06:aa:97:c0:03:21:54:14:d4:26:d2:42:ad:3c:89: a3:f4:6f:d5:70:90:41:ec:38:7a:c4:6c:cf:44:56:2e:b0:1a: e6:23:bc:bc:f1:12:ae:e7:de:90:d4:a6:d5:a7:b0:52:9e:0a: 01:c0:d4:ff:c1:5c:cc:a3:46:97:e2:e2:37:ff:26:72:d8:ea: b9:b5:a1:e0:4d:64:97:4c:4c:9d:ba:35:cb:a5:fd:32:fd:af: 6d:77:12:b3:d7:c6:fe:7d:44:e4:54:4e:00:a8:33:07:78:6f: 2f:86:2f:e4:3d:e9:d5:d7:a2:6d:7b:12:85:aa:63:b9:b9:f1: bb:8b:26:49:f3:1f:dc:2b:c7:53:f6:38:42:d4:6e:f6:95:28: 2f:da:66:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WYUUFSaBTrP7gfNMJ+KRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2NzQ2NWZmZGJhM2MwNWMyMWJlNWIxNWYwZDkxNWVmY2Ni MDY5ZTUwHhcNMjUxMjIwMjAwMDM1WhcNMjUxMjIxMjAwMDM1WjAzMTEwLwYDVQQD Eyg5Nzc2NDgyZjFkMTZkZDQxZWM3NzJiYmNlYTA5NmQwZDM0ZjcxNjk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5nUI42GD/KDiCali5OA3xl7EoWk5 isyxCJDauLI/drbzsIPQAG/QW5SI+WBnmuRd6t06gUuPc4WCORgmMTu29Lmn00KC 54LcGEMhei/KmJCxn3uRIBLxLzem8dwf8OA4+D+s9RxpVFahBXqbyn9/XUWsyJjh 66ef0/lA794UgIKge4eCpidE3u6ygM+MVkTe6ERjl6/RDlHGLG1/TD7zNhwii0di Eg58BeChLxWfuDd0dNKZX2HZu/lhS9+jj+XBFT7VIKcwJsK2OXyVaQ/dA13Q8oLF 2rtXt6OaIZKFQ241DThGU9F+BEJwpGaNdbJTxg1KOXKznGtxe6pcIR1n+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJd2SC8dFt1B7HcrvOoJbQ009xaWMB8GA1UdIwQY MBaAFDZ0Zf/bo8BcIb5bFfDZFe/MsGnlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTm5SbF85dWp3RndodmxzVjhOa1Y3OHl3YWVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi83NWNhMWEtNjgyOC00ZTZkLTlmZWEt NWU0N2NmMTk5ZGZmLzEvTm5SbF85dWp3RndodmxzVjhOa1Y3OHl3YWVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi83NWNhMWEtNjgyOC00ZTZkLTlmZWEtNWU0N2NmMTk5ZGZm LzEvTm5SbF85dWp3RndodmxzVjhOa1Y3OHl3YWVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJvWdLG3d wCp8xemL5tXemdmZ0Uji35s02R/FdTS+4x09MEX6i0njVmrUOLK49azigemg2Ptv Q2931pQFKX2UFoPq9/w8fnmbyXQNEk78lK4K1VRXxUFXXEkv6Fz2GRB8mR/vTZLw cXPY/tMBg3hZBqqXwAMhVBTUJtJCrTyJo/Rv1XCQQew4esRsz0RWLrAa5iO8vPES rufekNSm1aewUp4KAcDU/8FczKNGl+LiN/8mctjqubWh4E1kl0xMnbo1y6X9Mv2v bXcSs9fG/n1E5FROAKgzB3hvL4Yv5D3p1deibXsShapjubnxu4smSfMf3CvHU/Y4 QtRu9pUoL9pm4w== -----END CERTIFICATE-----Generated at Sun Dec 21 04:06:48 2025 by rpki-client