This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.mft File: nYHLUEMmdDsX02SiBIdcOcbtvAk.mft (raw, json) Hash identifier: pa4bNUuY/Cr2HH8r3bRm9+Do9/1jeYRk9CpFHpIucbM= Subject key identifier: 96:4B:C1:F3:7F:5B:72:05:03:F1:4E:AF:AE:D1:8F:89:08:AA:1C:58 Authority key identifier: 9D:81:CB:50:43:26:74:3B:17:D3:64:A2:04:87:5C:39:C6:ED:BC:09 Certificate issuer: /CN=9d81cb504326743b17d364a204875c39c6edbc09 Certificate serial: 019B40C92306545A5EC9648EFC823C3EF20F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nYHLUEMmdDsX02SiBIdcOcbtvAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.mft Manifest number: 1121 Signing time: Sun 21 Dec 2025 12:01:22 +0000 Manifest this update: Sun 21 Dec 2025 12:01:22 +0000 Manifest next update: Mon 22 Dec 2025 12:01:22 +0000 Files and hashes: 1: JP_mk9oH8p5bvlYYSWGek7KXox0.roa (hash: QozdhhJZu+Cfz+XSJNvXYpnVEpaUzqrN6lM64Dbcl70=) 2: nYHLUEMmdDsX02SiBIdcOcbtvAk.crl (hash: F33HG5Kaykqo3qvbk7bBmJ6kFhYvghVWRodBO7tWPHY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.mft rsync://rpki.ripe.net/repository/DEFAULT/nYHLUEMmdDsX02SiBIdcOcbtvAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:c9:23:06:54:5a:5e:c9:64:8e:fc:82:3c:3e:f2:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d81cb504326743b17d364a204875c39c6edbc09 Validity Not Before: Dec 21 12:01:22 2025 GMT Not After : Dec 22 12:01:22 2025 GMT Subject: CN=964bc1f37f5b720503f14eafaed18f8908aa1c58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:38:a9:eb:50:41:f6:8d:b9:78:52:53:14:ac: a9:07:40:f3:16:e7:d1:8f:17:2a:9e:69:c3:7b:38: e4:27:b9:a8:c0:18:17:13:b1:11:1f:4b:80:8b:c6: 68:5e:2b:77:9c:26:bb:8b:97:08:13:b6:89:f7:5e: b4:e5:c7:7d:5a:0e:eb:e5:e1:64:0b:71:ec:6c:5e: b3:42:da:63:62:e4:5f:a7:c9:d6:1c:c7:12:42:c4: 82:4e:76:f8:c5:40:42:82:be:e9:75:65:b3:d6:95: 94:29:45:3f:97:c7:4c:43:42:4d:d0:00:e0:52:a1: d6:4e:1d:50:67:1b:ea:00:df:60:4d:fa:99:1a:7b: 87:45:f3:cc:60:14:db:09:34:4a:63:99:65:ce:0b: 93:90:02:33:4d:43:1e:ba:b3:f0:2c:3b:3d:82:be: c9:ca:97:d4:44:63:c1:1d:9a:0c:d3:ab:c9:22:34: 24:cb:ac:9b:de:ec:a4:86:f5:eb:da:42:3d:e5:cb: 2c:a3:a9:1a:87:3f:4a:86:10:95:76:19:b3:0e:82: 56:df:d9:1d:00:e9:08:df:86:e1:fc:1f:6d:41:c0: 89:85:b2:f5:55:88:8d:e7:d0:75:41:07:cb:b3:5d: 1c:ea:37:89:d5:f7:44:a0:e7:ad:71:91:45:c7:57: 77:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:4B:C1:F3:7F:5B:72:05:03:F1:4E:AF:AE:D1:8F:89:08:AA:1C:58 X509v3 Authority Key Identifier: keyid:9D:81:CB:50:43:26:74:3B:17:D3:64:A2:04:87:5C:39:C6:ED:BC:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nYHLUEMmdDsX02SiBIdcOcbtvAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:cf:35:f0:c9:04:c0:10:61:a6:52:08:54:fc:0e:ff:48:a0: 0c:ce:54:ec:da:d6:c3:5d:d9:19:d3:0a:4b:fb:31:53:c6:52: 41:5b:d2:e2:c6:68:92:11:69:c9:cf:f4:fd:71:22:99:6d:8e: d8:89:3e:4d:6f:cf:f6:33:2f:48:16:4b:6c:f3:d8:86:cd:d3: 61:5c:70:f6:bf:ba:c9:d6:41:40:4c:fb:8d:f1:c5:3a:ef:ed: b9:01:1a:9c:84:9f:d4:1e:4a:d6:d3:35:1a:1a:2d:a3:59:aa: 35:32:e9:c7:23:5d:22:bf:49:05:36:1c:be:0f:7e:3c:39:b6: 3f:57:0d:4a:24:2a:07:57:cd:30:c5:1b:e3:e3:33:d2:b9:80: 7d:06:1a:82:13:24:a7:96:02:c0:28:d0:29:87:c2:18:97:8c: 01:2e:85:c0:4f:3d:0c:0f:b7:3c:4a:70:f4:ea:41:2a:1d:a3: e0:e6:2a:a1:aa:30:1b:56:ab:7f:ae:ae:7d:1b:7b:a1:27:d9: 58:ef:9d:bf:02:0d:a4:62:59:d7:40:45:f4:50:c0:48:04:5f: 4d:61:12:04:d6:cd:18:e9:47:87:9f:58:f6:bc:cf:e4:40:d6: 1e:c1:0a:92:0e:f2:8f:c3:f8:b1:b2:8b:61:bb:ac:10:df:17: 8e:2b:ae:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAySMGVFpeyWSO/II8PvIPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkODFjYjUwNDMyNjc0M2IxN2QzNjRhMjA0ODc1YzM5YzZl ZGJjMDkwHhcNMjUxMjIxMTIwMTIyWhcNMjUxMjIyMTIwMTIyWjAzMTEwLwYDVQQD Eyg5NjRiYzFmMzdmNWI3MjA1MDNmMTRlYWZhZWQxOGY4OTA4YWExYzU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzip61BB9o25eFJTFKypB0DzFufR jxcqnmnDezjkJ7mowBgXE7ERH0uAi8ZoXit3nCa7i5cIE7aJ91605cd9Wg7r5eFk C3HsbF6zQtpjYuRfp8nWHMcSQsSCTnb4xUBCgr7pdWWz1pWUKUU/l8dMQ0JN0ADg UqHWTh1QZxvqAN9gTfqZGnuHRfPMYBTbCTRKY5llzguTkAIzTUMeurPwLDs9gr7J ypfURGPBHZoM06vJIjQky6yb3uykhvXr2kI95csso6kahz9KhhCVdhmzDoJW39kd AOkI34bh/B9tQcCJhbL1VYiN59B1QQfLs10c6jeJ1fdEoOetcZFFx1d3DwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJZLwfN/W3IFA/FOr67Rj4kIqhxYMB8GA1UdIwQY MBaAFJ2By1BDJnQ7F9NkogSHXDnG7bwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbllITFVFTW1kRHNYMDJTaUJJZGNPY2J0dkFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8zMzlkMjktNzEyYS00Yzg2LTk1MTAt ZTRkNmJjZjMzNmI3LzEvbllITFVFTW1kRHNYMDJTaUJJZGNPY2J0dkFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy8zMzlkMjktNzEyYS00Yzg2LTk1MTAtZTRkNmJjZjMzNmI3 LzEvbllITFVFTW1kRHNYMDJTaUJJZGNPY2J0dkFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGc818MkE wBBhplIIVPwO/0igDM5U7NrWw13ZGdMKS/sxU8ZSQVvS4sZokhFpyc/0/XEimW2O 2Ik+TW/P9jMvSBZLbPPYhs3TYVxw9r+6ydZBQEz7jfHFOu/tuQEanISf1B5K1tM1 Ghoto1mqNTLpxyNdIr9JBTYcvg9+PDm2P1cNSiQqB1fNMMUb4+Mz0rmAfQYaghMk p5YCwCjQKYfCGJeMAS6FwE89DA+3PEpw9OpBKh2j4OYqoaowG1arf66ufRt7oSfZ WO+dvwINpGJZ10BF9FDASARfTWESBNbNGOlHh59Y9rzP5EDWHsEKkg7yj8P4sbKL YbusEN8XjiuupQ== -----END CERTIFICATE-----Generated at Sun Dec 21 13:24:20 2025 by rpki-client