This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.mft File: nUZUJyZmhDb6k-dX_u9NReJM1uM.mft (raw, json) Hash identifier: 5jPeANGfpig0MdKjgJchakyKOEparIfigPJQVZxzw0w= Subject key identifier: 2E:6C:6B:89:E2:78:C3:47:5B:33:8B:C1:8D:34:10:AE:6E:DF:8B:E6 Authority key identifier: 9D:46:54:27:26:66:84:36:FA:93:E7:57:FE:EF:4D:45:E2:4C:D6:E3 Certificate issuer: /CN=9d46542726668436fa93e757feef4d45e24cd6e3 Certificate serial: 019B522A59F53A01674690EBC244156D0324 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nUZUJyZmhDb6k-dX_u9NReJM1uM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.mft Manifest number: 14D5 Signing time: Wed 24 Dec 2025 21:01:05 +0000 Manifest this update: Wed 24 Dec 2025 21:01:05 +0000 Manifest next update: Thu 25 Dec 2025 21:01:05 +0000 Files and hashes: 1: _1ZVUyiWiKcUkDQ7d9MEjN-Qxjg.roa (hash: B9N8iWkGu9FMB4JofKmJJULgTYSFoSVSwpeNEHQNG3o=) 2: nUZUJyZmhDb6k-dX_u9NReJM1uM.crl (hash: fHbRFZ/hjk5w1dWFRAwUu8XvcPizQVAwablrCXPTxjg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.mft rsync://rpki.ripe.net/repository/DEFAULT/nUZUJyZmhDb6k-dX_u9NReJM1uM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:2a:59:f5:3a:01:67:46:90:eb:c2:44:15:6d:03:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d46542726668436fa93e757feef4d45e24cd6e3 Validity Not Before: Dec 24 21:01:05 2025 GMT Not After : Dec 25 21:01:05 2025 GMT Subject: CN=2e6c6b89e278c3475b338bc18d3410ae6edf8be6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:5e:20:74:05:bc:7a:9d:b5:8e:4d:98:26:38: e8:86:3a:d8:89:35:76:24:a6:a4:c8:33:3c:8d:8a: f2:03:26:7e:10:7a:93:6b:cc:b9:3b:1e:0b:41:b0: 8e:94:76:f4:f1:2b:24:65:7a:c5:51:a6:96:12:43: c6:5d:38:1c:b7:16:0e:19:b9:dd:f4:c3:31:fe:2d: 57:5f:88:19:f7:f6:5a:03:3a:c6:56:2f:f2:a7:4b: ea:fc:83:30:85:bf:a1:0a:66:fb:96:86:fc:1b:00: 3c:fd:50:77:df:43:3a:09:42:9e:4c:cd:91:3a:df: 45:8f:d9:ce:59:4c:70:f3:dd:60:79:13:65:60:1f: 70:21:13:d9:38:c3:4b:95:e0:3b:11:67:95:40:b9: b8:3b:73:d5:0b:4c:1a:ba:71:60:a0:62:ab:77:5e: 22:00:ab:91:e1:1c:6a:92:19:6d:d5:db:77:27:7f: 62:da:02:dd:65:9f:36:17:b3:48:04:9d:e0:b7:69: 9e:5a:d0:d7:85:05:f6:15:10:82:a5:aa:57:f7:4d: a8:f2:e5:e6:58:98:97:5c:8a:3e:e0:18:1a:2d:37: c3:37:2b:a7:6e:79:52:ff:0a:f8:ff:15:6b:86:f9: 84:ac:8f:95:cb:57:b4:e7:17:0c:9b:18:fe:bc:91: 21:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:6C:6B:89:E2:78:C3:47:5B:33:8B:C1:8D:34:10:AE:6E:DF:8B:E6 X509v3 Authority Key Identifier: keyid:9D:46:54:27:26:66:84:36:FA:93:E7:57:FE:EF:4D:45:E2:4C:D6:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nUZUJyZmhDb6k-dX_u9NReJM1uM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:71:c8:c5:ae:9a:fb:59:58:b7:2d:e4:f0:5b:c8:63:f1:0c: 06:4c:22:95:13:f4:8e:73:15:f8:35:ad:ae:e3:0b:02:3c:ab: 07:52:38:db:12:82:f7:b3:bc:94:78:a7:a8:b5:0a:23:77:ce: af:c5:1f:78:98:7c:54:37:e7:a3:0b:0b:a6:da:cf:48:d3:d3: 84:96:5b:6a:4f:ba:32:71:67:f4:c0:99:bf:6e:eb:ad:02:0f: 73:1d:84:76:da:83:65:f1:e0:59:26:b9:71:6f:8e:d8:3d:20: b6:71:7d:c1:cd:37:85:b3:41:af:bd:f0:22:ab:08:0e:5d:8d: 55:f3:e3:ce:b7:36:15:34:03:1d:49:cf:5d:ed:11:a0:13:80: a4:9f:f3:c2:24:e5:27:42:49:98:0d:7c:0f:f0:e2:c7:4a:8b: d8:3c:20:d7:94:82:a7:c2:56:bb:35:a9:48:0f:f5:e9:a2:ea: d5:3e:ad:dc:71:66:d5:b4:7e:ad:0f:a7:95:18:b8:f4:16:8b: c5:29:8a:5c:1f:32:ca:5d:1a:5a:d1:20:e5:f8:f1:a1:c9:bd: 46:0f:8a:e0:ae:bb:f2:e1:e1:4f:cb:20:38:92:6c:1e:c6:eb: b4:85:d9:4f:e7:63:10:aa:40:bb:fb:7a:88:11:1f:99:f0:c0: d1:a9:c0:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSKln1OgFnRpDrwkQVbQMkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkNDY1NDI3MjY2Njg0MzZmYTkzZTc1N2ZlZWY0ZDQ1ZTI0 Y2Q2ZTMwHhcNMjUxMjI0MjEwMTA1WhcNMjUxMjI1MjEwMTA1WjAzMTEwLwYDVQQD EygyZTZjNmI4OWUyNzhjMzQ3NWIzMzhiYzE4ZDM0MTBhZTZlZGY4YmU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq14gdAW8ep21jk2YJjjohjrYiTV2 JKakyDM8jYryAyZ+EHqTa8y5Ox4LQbCOlHb08SskZXrFUaaWEkPGXTgctxYOGbnd 9MMx/i1XX4gZ9/ZaAzrGVi/yp0vq/IMwhb+hCmb7lob8GwA8/VB330M6CUKeTM2R Ot9Fj9nOWUxw891geRNlYB9wIRPZOMNLleA7EWeVQLm4O3PVC0waunFgoGKrd14i AKuR4Rxqkhlt1dt3J39i2gLdZZ82F7NIBJ3gt2meWtDXhQX2FRCCpapX902o8uXm WJiXXIo+4BgaLTfDNyunbnlS/wr4/xVrhvmErI+Vy1e05xcMmxj+vJEhQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC5sa4nieMNHWzOLwY00EK5u34vmMB8GA1UdIwQY MBaAFJ1GVCcmZoQ2+pPnV/7vTUXiTNbjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblVaVUp5Wm1oRGI2ay1kWF91OU5SZUpNMXVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS81ODAwNWEtNTIzMy00ODQ0LWIwMjQt MjllMzVhZTkxMmRhLzEvblVaVUp5Wm1oRGI2ay1kWF91OU5SZUpNMXVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS81ODAwNWEtNTIzMy00ODQ0LWIwMjQtMjllMzVhZTkxMmRh LzEvblVaVUp5Wm1oRGI2ay1kWF91OU5SZUpNMXVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmHHIxa6a +1lYty3k8FvIY/EMBkwilRP0jnMV+DWtruMLAjyrB1I42xKC97O8lHinqLUKI3fO r8UfeJh8VDfnowsLptrPSNPThJZbak+6MnFn9MCZv27rrQIPcx2EdtqDZfHgWSa5 cW+O2D0gtnF9wc03hbNBr73wIqsIDl2NVfPjzrc2FTQDHUnPXe0RoBOApJ/zwiTl J0JJmA18D/Dix0qL2Dwg15SCp8JWuzWpSA/16aLq1T6t3HFm1bR+rQ+nlRi49BaL xSmKXB8yyl0aWtEg5fjxocm9Rg+K4K678uHhT8sgOJJsHsbrtIXZT+djEKpAu/t6 iBEfmfDA0anAZg== -----END CERTIFICATE-----Generated at Wed Dec 24 23:19:22 2025 by rpki-client