This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft File: NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft (raw, json) Hash identifier: +Gt0XR3aN6PbZsJJ3LihPdfG8nt69af6Q6GhUOP6gvk= Subject key identifier: AF:33:25:78:1F:FB:2E:B7:EE:4D:D9:CA:1D:2A:C2:92:E2:7C:45:49 Authority key identifier: 35:45:A7:20:01:64:91:20:41:BB:93:1E:FB:1F:EA:C1:23:B4:3A:18 Certificate issuer: /CN=3545a7200164912041bb931efb1feac123b43a18 Certificate serial: 019B3E6C765CDFE8CFA9108340C799152C35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft Manifest number: 178F Signing time: Sun 21 Dec 2025 01:00:54 +0000 Manifest this update: Sun 21 Dec 2025 01:00:54 +0000 Manifest next update: Mon 22 Dec 2025 01:00:54 +0000 Files and hashes: 1: 8s1U0KmUYb897VvjMdVaiCCBr8Y.roa (hash: 5qEC8e4y3KYPBzPpD5dv/300fB0lSnNjSuXLoow+Q8w=) 2: LaYkRMNeto2OFZ9VBnU48w_HGgs.roa (hash: 16B1JfqcXDvmz5pVWUS+KsHYpQRrCgD9R9Tg6uXacIA=) 3: NUWnIAFkkSBBu5Me-x_qwSO0Ohg.crl (hash: +y5GOBFrkn6E4fdnRFvrjKSUealWgvW09C+i3wyTpnw=) 4: W8oJrry2382XyDpwYu9d1fRM57k.roa (hash: vgOtreWyL8SSvp1wiImWd0ZzLXQJtP4n+ctgbIbJd6I=) 5: ZPnSp5toQpthOZvn7vrTi1PIJ0A.roa (hash: 2xJoiopsp/aP4IfMiv71h2CCh2maxmce9cHqGdAd1jM=) 6: hDuQO-2O-6Lo8qgrhYqNM0G4P24.roa (hash: WUDxmKQLeVQHlfqkPeKYvZqVqvTuBp11Xfwh/S2zHnQ=) 7: rJESdqv17knzJ4wNzfBk8WWWnw0.roa (hash: BdHgAA5eA1A53dV1mMcPmgdF0S7eP4oFR6WHvpTEZ/k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 01:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:76:5c:df:e8:cf:a9:10:83:40:c7:99:15:2c:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3545a7200164912041bb931efb1feac123b43a18 Validity Not Before: Dec 21 01:00:54 2025 GMT Not After : Dec 22 01:00:54 2025 GMT Subject: CN=af3325781ffb2eb7ee4dd9ca1d2ac292e27c4549 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:fe:d0:5e:eb:f2:6a:08:6c:09:c2:e3:4b:0e: fe:94:7c:5c:8b:67:91:4c:2d:40:df:cb:a4:03:8d: 11:2a:b9:e5:19:65:33:2f:e1:86:05:63:dd:a0:15: e7:12:de:86:ab:23:9b:92:db:9f:4f:9a:5e:ee:ce: e0:fd:06:be:fd:a9:19:55:1c:95:ee:95:48:b8:c8: 61:22:e8:cc:4b:91:a3:12:c3:50:e0:80:d0:0f:89: ac:d2:96:a3:81:dc:ca:79:e3:87:49:94:66:d8:50: 6e:73:62:68:7b:36:71:d9:5c:94:3e:0f:59:84:9c: 47:d7:3a:43:bf:8e:c0:97:bc:94:8a:be:94:58:59: ba:19:57:24:ac:9d:0f:0b:21:a5:22:3f:e9:b7:0f: 87:42:1c:4e:bc:ef:82:e4:96:0e:68:f5:69:67:8a: 8e:0f:c4:c8:7f:51:24:61:f8:a8:06:92:0b:b5:7e: 3f:55:4b:9e:3f:e6:17:95:4b:61:f6:21:82:ff:f7: ea:a0:ca:5c:4f:fe:64:53:fc:75:ed:b8:1f:49:97: c0:6a:90:17:21:ee:35:0d:38:5e:83:e5:68:c9:62: 5d:7e:7e:d9:9d:c5:d1:ea:a2:4c:a8:04:87:37:12: 46:43:ca:48:c8:46:23:8a:c9:92:1d:4a:04:eb:bf: 52:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:33:25:78:1F:FB:2E:B7:EE:4D:D9:CA:1D:2A:C2:92:E2:7C:45:49 X509v3 Authority Key Identifier: keyid:35:45:A7:20:01:64:91:20:41:BB:93:1E:FB:1F:EA:C1:23:B4:3A:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:07:a1:ee:32:0d:15:71:bd:99:05:2f:d6:19:e7:ac:42:54: fd:fb:e6:8d:53:84:c3:2f:6f:1b:6c:d1:74:52:c8:ce:1d:11: d6:91:34:26:11:07:91:00:5f:20:39:83:8c:87:73:d9:63:d3: f5:b3:b0:32:a6:8a:42:8f:c5:42:96:5b:8c:3e:26:d1:3f:83: 62:97:11:2b:7b:61:7e:69:e3:c9:bb:a2:73:ea:27:23:42:11: 43:9d:c6:8d:cc:36:d3:6f:36:4c:10:28:1f:f8:0e:cc:cf:a4: a5:b2:77:cc:1e:c3:54:74:dc:51:37:c5:30:1a:ce:fe:a1:d1: 5e:d7:73:34:42:59:18:1f:9c:10:86:14:a8:58:37:10:a9:41: 5a:36:f1:00:73:96:10:8b:9e:cf:25:19:33:44:b1:d5:81:33: 85:69:12:e3:be:01:56:58:d2:9f:81:a0:d5:16:65:c4:e4:8b: 1d:96:4b:1a:e9:f6:9f:a8:7f:b1:47:fd:4b:7a:cd:ca:f9:6d: a2:cb:6f:e5:08:b4:dc:64:e9:21:9c:b1:cf:a3:d2:1f:7b:f9: 57:e0:bc:78:d6:17:87:a5:88:8e:8c:1b:1b:5b:b1:b9:ff:0b: 07:41:61:f5:0a:33:30:c4:e0:17:65:70:36:93:87:83:18:1f: 5d:2f:b1:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bHZc3+jPqRCDQMeZFSw1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NDVhNzIwMDE2NDkxMjA0MWJiOTMxZWZiMWZlYWMxMjNi NDNhMTgwHhcNMjUxMjIxMDEwMDU0WhcNMjUxMjIyMDEwMDU0WjAzMTEwLwYDVQQD EyhhZjMzMjU3ODFmZmIyZWI3ZWU0ZGQ5Y2ExZDJhYzI5MmUyN2M0NTQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnf7QXuvyaghsCcLjSw7+lHxci2eR TC1A38ukA40RKrnlGWUzL+GGBWPdoBXnEt6GqyObktufT5pe7s7g/Qa+/akZVRyV 7pVIuMhhIujMS5GjEsNQ4IDQD4ms0pajgdzKeeOHSZRm2FBuc2JoezZx2VyUPg9Z hJxH1zpDv47Al7yUir6UWFm6GVckrJ0PCyGlIj/ptw+HQhxOvO+C5JYOaPVpZ4qO D8TIf1EkYfioBpILtX4/VUueP+YXlUth9iGC//fqoMpcT/5kU/x17bgfSZfAapAX Ie41DTheg+VoyWJdfn7ZncXR6qJMqASHNxJGQ8pIyEYjismSHUoE679S9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK8zJXgf+y637k3Zyh0qwpLifEVJMB8GA1UdIwQY MBaAFDVFpyABZJEgQbuTHvsf6sEjtDoYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlVXbklBRmtrU0JCdTVNZS14X3F3U08wT2hnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy81OWM0YjgtODdmNC00ZjJmLWE0NDkt YWFiYjA2MmU0MGRiLzEvTlVXbklBRmtrU0JCdTVNZS14X3F3U08wT2hnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy81OWM0YjgtODdmNC00ZjJmLWE0NDktYWFiYjA2MmU0MGRi LzEvTlVXbklBRmtrU0JCdTVNZS14X3F3U08wT2hnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsQeh7jIN FXG9mQUv1hnnrEJU/fvmjVOEwy9vG2zRdFLIzh0R1pE0JhEHkQBfIDmDjIdz2WPT 9bOwMqaKQo/FQpZbjD4m0T+DYpcRK3thfmnjybuic+onI0IRQ53Gjcw20282TBAo H/gOzM+kpbJ3zB7DVHTcUTfFMBrO/qHRXtdzNEJZGB+cEIYUqFg3EKlBWjbxAHOW EIuezyUZM0Sx1YEzhWkS474BVljSn4Gg1RZlxOSLHZZLGun2n6h/sUf9S3rNyvlt ostv5Qi03GTpIZyxz6PSH3v5V+C8eNYXh6WIjowbG1uxuf8LB0Fh9QozMMTgF2Vw NpOHgxgfXS+xQQ== -----END CERTIFICATE-----Generated at Sun Dec 21 11:19:04 2025 by rpki-client