This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.mft File: NUb_Rc5QVX7cTAMG4fhpSCrUI-A.mft (raw, json) Hash identifier: DyhxM9DswWd5o4MDZ3aKqP0plMXx9c2bG+Vw6rNHeU0= Subject key identifier: 79:96:BB:E2:2C:95:62:54:AA:CD:F4:DB:FA:71:33:82:56:00:79:9F Authority key identifier: 35:46:FF:45:CE:50:55:7E:DC:4C:03:06:E1:F8:69:48:2A:D4:23:E0 Certificate issuer: /CN=3546ff45ce50557edc4c0306e1f869482ad423e0 Certificate serial: 019B3B34B44EA408E7D4CBDAA57AEF999F92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.mft Manifest number: 0942 Signing time: Sat 20 Dec 2025 10:01:08 +0000 Manifest this update: Sat 20 Dec 2025 10:01:08 +0000 Manifest next update: Sun 21 Dec 2025 10:01:08 +0000 Files and hashes: 1: NUb_Rc5QVX7cTAMG4fhpSCrUI-A.crl (hash: ghAI6GX4csqZbX4Z5oOOwUXB5MM5+duasRUz+dNOEC0=) 2: Rv1036YGXSxZ-LNtEMTG-yB-cpE.roa (hash: 9hIhakYU1jL8ELRanjY68hTQVJc33GMXNtFCdw91hfI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.mft rsync://rpki.ripe.net/repository/DEFAULT/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:34:b4:4e:a4:08:e7:d4:cb:da:a5:7a:ef:99:9f:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3546ff45ce50557edc4c0306e1f869482ad423e0 Validity Not Before: Dec 20 10:01:08 2025 GMT Not After : Dec 21 10:01:08 2025 GMT Subject: CN=7996bbe22c956254aacdf4dbfa7133825600799f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:68:42:ff:cc:bc:f2:61:43:7d:a1:9c:78:a7: 0f:79:a3:74:f1:98:9c:f8:f3:f4:5f:03:ba:2b:9e: 5c:ba:d1:1b:fe:47:77:dd:2b:28:a7:a6:15:f6:c2: 68:cd:30:ba:e6:8d:a4:46:96:e6:19:bd:7b:74:79: ff:42:94:d3:46:68:ed:c8:f3:cf:70:b2:65:e1:2d: 1e:36:0b:ba:d1:b9:96:9a:7f:e1:3f:46:cc:fe:17: e8:05:50:42:10:07:1c:91:f5:e5:ab:0e:ab:d3:4c: 19:2c:df:56:8e:71:66:1b:b9:b8:86:d3:6d:78:2b: 83:ed:1d:29:05:2b:b9:70:01:10:36:94:62:53:44: 3f:2b:b1:c2:da:e6:b2:cd:ac:01:81:bf:fa:f7:5a: 38:19:a5:2d:b1:55:d1:a6:7c:35:41:7f:e6:c0:31: 33:44:e6:f5:8b:0c:ca:e5:6b:22:78:8e:16:09:6c: 4d:14:a6:6b:14:d0:96:86:71:d5:5a:69:fc:19:83: 9e:7b:90:3f:a9:d3:d2:1b:66:98:a3:da:75:a8:07: 9f:95:48:0c:94:90:ca:d7:d2:fa:cc:78:b0:1a:a1: 98:5a:e3:2e:95:de:1f:6b:c4:95:7f:13:f4:95:d4: f5:8d:22:88:95:56:f3:7f:72:09:b1:cb:9f:a0:80: dc:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:96:BB:E2:2C:95:62:54:AA:CD:F4:DB:FA:71:33:82:56:00:79:9F X509v3 Authority Key Identifier: keyid:35:46:FF:45:CE:50:55:7E:DC:4C:03:06:E1:F8:69:48:2A:D4:23:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:ae:e0:26:2f:20:6a:bb:9f:15:d2:c4:c1:c0:57:79:09:2b: 0a:d0:78:28:a8:d6:2d:9c:cb:2b:a7:2a:dc:86:17:a3:60:d1: 43:59:49:51:47:95:4a:52:58:79:44:34:9c:9d:5e:32:b9:4a: d8:70:d3:4e:a9:8b:ac:26:91:02:bb:a0:5d:ca:55:b7:46:2a: 52:55:bb:c6:c0:22:41:f5:a9:2d:dd:97:48:97:d8:3a:d6:54: 1e:63:67:68:0b:7d:a5:58:20:12:a5:13:f7:b7:2e:54:e0:87: 82:7a:8c:93:28:68:d7:6d:c9:6f:d2:df:5f:1b:8d:7d:99:8f: a9:22:fc:5c:8f:d0:bd:99:b0:d0:1d:06:51:13:74:9c:cc:88: 26:2b:af:d8:3a:bf:1c:ab:20:dc:79:35:c0:43:1d:08:f6:45: 7e:6d:7d:d9:26:e9:3d:3a:4a:9e:35:5c:e6:7c:33:c5:b7:ad: 97:22:4c:8b:2d:bf:d9:3e:9d:d9:b5:16:b7:d3:7e:14:d6:42: 9a:89:15:22:24:41:ca:00:7f:ae:9b:8f:83:97:a4:44:aa:ec: d4:62:32:21:44:d1:8b:49:5a:f5:0c:c2:ea:05:69:88:68:9b: 01:61:c9:69:7f:4e:54:c2:19:14:20:d0:4c:1f:da:1f:44:0b: d3:13:6e:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7NLROpAjn1MvapXrvmZ+SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NDZmZjQ1Y2U1MDU1N2VkYzRjMDMwNmUxZjg2OTQ4MmFk NDIzZTAwHhcNMjUxMjIwMTAwMTA4WhcNMjUxMjIxMTAwMTA4WjAzMTEwLwYDVQQD Eyg3OTk2YmJlMjJjOTU2MjU0YWFjZGY0ZGJmYTcxMzM4MjU2MDA3OTlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3mhC/8y88mFDfaGceKcPeaN08Zic +PP0XwO6K55cutEb/kd33Ssop6YV9sJozTC65o2kRpbmGb17dHn/QpTTRmjtyPPP cLJl4S0eNgu60bmWmn/hP0bM/hfoBVBCEAcckfXlqw6r00wZLN9WjnFmG7m4htNt eCuD7R0pBSu5cAEQNpRiU0Q/K7HC2uayzawBgb/691o4GaUtsVXRpnw1QX/mwDEz ROb1iwzK5WsieI4WCWxNFKZrFNCWhnHVWmn8GYOee5A/qdPSG2aYo9p1qAeflUgM lJDK19L6zHiwGqGYWuMuld4fa8SVfxP0ldT1jSKIlVbzf3IJscufoIDcJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHmWu+IslWJUqs302/pxM4JWAHmfMB8GA1UdIwQY MBaAFDVG/0XOUFV+3EwDBuH4aUgq1CPgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlViX1JjNVFWWDdjVEFNRzRmaHBTQ3JVSS1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9jOTA4NjktZWUyMC00OTM5LTg0MGUt NjQwYzc0YTk0Y2M2LzEvTlViX1JjNVFWWDdjVEFNRzRmaHBTQ3JVSS1BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9jOTA4NjktZWUyMC00OTM5LTg0MGUtNjQwYzc0YTk0Y2M2 LzEvTlViX1JjNVFWWDdjVEFNRzRmaHBTQ3JVSS1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALK7gJi8g arufFdLEwcBXeQkrCtB4KKjWLZzLK6cq3IYXo2DRQ1lJUUeVSlJYeUQ0nJ1eMrlK 2HDTTqmLrCaRArugXcpVt0YqUlW7xsAiQfWpLd2XSJfYOtZUHmNnaAt9pVggEqUT 97cuVOCHgnqMkyho123Jb9LfXxuNfZmPqSL8XI/QvZmw0B0GURN0nMyIJiuv2Dq/ HKsg3Hk1wEMdCPZFfm192SbpPTpKnjVc5nwzxbetlyJMiy2/2T6d2bUWt9N+FNZC mokVIiRBygB/rpuPg5ekRKrs1GIyIUTRi0la9QzC6gVpiGibAWHJaX9OVMIZFCDQ TB/aH0QL0xNuHg== -----END CERTIFICATE-----Generated at Sat Dec 20 18:37:39 2025 by rpki-client