This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft File: nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft (raw, json) Hash identifier: YlPlRX53nox+CS3IVObCmKbz9xrjuB3kbBbClRJ5KZQ= Subject key identifier: 9E:3D:9D:7D:2A:77:5F:58:EA:C6:94:A5:53:2F:E6:F5:A4:1E:30:28 Authority key identifier: 9E:6F:26:22:E6:5C:2E:E8:63:50:1D:77:21:47:5A:05:EF:53:43:FB Certificate issuer: /CN=9e6f2622e65c2ee863501d7721475a05ef5343fb Certificate serial: 019B3FB68E858FDB40E102865A9742F13F2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nm8mIuZcLuhjUB13IUdaBe9TQ_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft Manifest number: 037F Signing time: Sun 21 Dec 2025 07:01:27 +0000 Manifest this update: Sun 21 Dec 2025 07:01:27 +0000 Manifest next update: Mon 22 Dec 2025 07:01:27 +0000 Files and hashes: 1: cuJe5r6PJPS-jv29DbSoyr1BYdg.roa (hash: 2tGiauvihDEwDBBUXD4gVcgWbpgeD9AUpt2tKQwt6ew=) 2: nm8mIuZcLuhjUB13IUdaBe9TQ_s.crl (hash: vr811HMCSMCMY7q46MfgcEP8yRurFIlGgLyjov4pM14=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft rsync://rpki.ripe.net/repository/DEFAULT/nm8mIuZcLuhjUB13IUdaBe9TQ_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:b6:8e:85:8f:db:40:e1:02:86:5a:97:42:f1:3f:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e6f2622e65c2ee863501d7721475a05ef5343fb Validity Not Before: Dec 21 07:01:27 2025 GMT Not After : Dec 22 07:01:27 2025 GMT Subject: CN=9e3d9d7d2a775f58eac694a5532fe6f5a41e3028 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a3:f9:93:a3:ad:36:7a:6d:1c:2b:92:58:bb: d3:21:e4:cd:e7:e4:d2:36:0b:19:04:31:7d:14:7f: 9a:34:a3:bd:92:30:24:4a:61:6c:00:6f:9e:22:8d: dd:b0:cb:b0:bb:cf:88:93:30:d6:3a:fd:bc:51:47: ce:ad:5e:5a:9a:de:f7:2f:78:00:d4:ff:90:c7:98: 79:83:6a:09:d7:99:1b:80:a9:32:28:a8:ef:d9:ed: 9f:c1:41:2a:a7:e7:d8:ff:be:b5:c9:31:cf:a6:e2: bc:66:17:3c:a1:83:64:ab:c8:19:8f:46:16:5e:56: 66:34:4d:b2:f4:03:e8:40:3a:7e:ca:c4:c1:5a:87: 2c:75:0f:5a:f5:8d:99:06:5d:ee:2e:6b:f9:41:c9: 9f:20:b5:fa:3a:e6:bc:4e:48:3c:70:cc:a5:d3:c2: 96:5c:93:dd:88:1c:cc:13:d3:7d:9a:0b:a8:d4:d2: b6:cb:78:08:a6:1a:22:de:fe:9b:6a:a9:19:bf:c3: b9:5d:c4:72:b5:c4:d9:55:90:5f:cd:5f:b9:b9:82: d1:a4:35:6a:44:02:d0:80:30:c5:f5:63:b1:ff:f5: db:45:7f:0a:e5:2a:2c:1c:a7:db:1a:d3:a4:7e:9d: 74:5d:1f:14:98:a1:6a:ca:85:12:e7:fe:e2:c0:84: eb:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:3D:9D:7D:2A:77:5F:58:EA:C6:94:A5:53:2F:E6:F5:A4:1E:30:28 X509v3 Authority Key Identifier: keyid:9E:6F:26:22:E6:5C:2E:E8:63:50:1D:77:21:47:5A:05:EF:53:43:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nm8mIuZcLuhjUB13IUdaBe9TQ_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:d1:76:8f:ed:56:5f:bb:37:e5:f8:12:3b:01:87:99:67:3c: 26:c3:1d:11:83:c7:b0:06:62:de:d7:b5:89:f0:d6:18:38:93: 09:87:91:7d:c2:47:21:34:62:92:b1:30:37:55:d6:b8:9d:59: 0c:2a:1c:4f:a2:b1:29:9b:35:58:a3:98:e4:d0:d1:7d:10:48: 37:92:d8:a5:06:b1:cf:c2:f7:be:a4:b6:4c:b3:ae:b0:d1:3c: ec:57:4d:82:08:80:b6:5e:57:c6:34:dc:5b:04:82:df:3e:d6: 22:43:fa:60:fc:25:1d:44:5a:aa:61:7c:8e:9a:71:15:17:10: ba:94:56:0e:65:d2:69:6e:0e:5b:f7:0c:e7:e7:cf:6a:fc:d4: 28:30:d2:81:7f:fc:d8:fa:4f:47:79:6b:69:b8:19:b2:5b:a1: 47:86:1d:6a:fd:35:77:45:90:9b:b1:96:e1:ff:1c:8d:94:e4: 0a:bd:4f:d3:ee:f1:2c:f1:18:b5:00:6c:af:8a:52:d6:cb:2b: 6e:75:1a:b1:79:a8:23:22:b7:bf:43:cf:87:d7:fd:d7:e9:4f: 61:97:3a:dc:89:74:11:e2:90:4c:88:c5:4e:75:2d:a5:8f:46: 44:76:80:69:6d:8e:ac:c4:32:a8:82:22:eb:12:43:ea:a6:3f: 6c:02:55:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/to6Fj9tA4QKGWpdC8T8rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNmYyNjIyZTY1YzJlZTg2MzUwMWQ3NzIxNDc1YTA1ZWY1 MzQzZmIwHhcNMjUxMjIxMDcwMTI3WhcNMjUxMjIyMDcwMTI3WjAzMTEwLwYDVQQD Eyg5ZTNkOWQ3ZDJhNzc1ZjU4ZWFjNjk0YTU1MzJmZTZmNWE0MWUzMDI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxaP5k6OtNnptHCuSWLvTIeTN5+TS NgsZBDF9FH+aNKO9kjAkSmFsAG+eIo3dsMuwu8+IkzDWOv28UUfOrV5amt73L3gA 1P+Qx5h5g2oJ15kbgKkyKKjv2e2fwUEqp+fY/761yTHPpuK8Zhc8oYNkq8gZj0YW XlZmNE2y9APoQDp+ysTBWocsdQ9a9Y2ZBl3uLmv5QcmfILX6Oua8Tkg8cMyl08KW XJPdiBzME9N9mguo1NK2y3gIphoi3v6baqkZv8O5XcRytcTZVZBfzV+5uYLRpDVq RALQgDDF9WOx//XbRX8K5SosHKfbGtOkfp10XR8UmKFqyoUS5/7iwITr4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ49nX0qd19Y6saUpVMv5vWkHjAoMB8GA1UdIwQY MBaAFJ5vJiLmXC7oY1AddyFHWgXvU0P7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbm04bUl1WmNMdWhqVUIxM0lVZGFCZTlUUV9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS81OTNkZDUtYjkwNy00ZGU4LTgwY2Qt YjFkYjcwMDcxZGRlLzEvbm04bUl1WmNMdWhqVUIxM0lVZGFCZTlUUV9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS81OTNkZDUtYjkwNy00ZGU4LTgwY2QtYjFkYjcwMDcxZGRl LzEvbm04bUl1WmNMdWhqVUIxM0lVZGFCZTlUUV9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ9F2j+1W X7s35fgSOwGHmWc8JsMdEYPHsAZi3te1ifDWGDiTCYeRfcJHITRikrEwN1XWuJ1Z DCocT6KxKZs1WKOY5NDRfRBIN5LYpQaxz8L3vqS2TLOusNE87FdNggiAtl5XxjTc WwSC3z7WIkP6YPwlHURaqmF8jppxFRcQupRWDmXSaW4OW/cM5+fPavzUKDDSgX/8 2PpPR3lrabgZsluhR4Ydav01d0WQm7GW4f8cjZTkCr1P0+7xLPEYtQBsr4pS1ssr bnUasXmoIyK3v0PPh9f91+lPYZc63Il0EeKQTIjFTnUtpY9GRHaAaW2OrMQyqIIi 6xJD6qY/bAJV4g== -----END CERTIFICATE-----Generated at Sun Dec 21 09:16:37 2025 by rpki-client