This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f974e9-4743-46db-a348-1d1989f06618/1/nL6cQ-51mJYAORlQhzRyM0a_cBY.mft File: nL6cQ-51mJYAORlQhzRyM0a_cBY.mft (raw, json) Hash identifier: sd0caHprBsH9OqpiyF4+W1A6Q9vnyP5jo4NTZmQBtzQ= Subject key identifier: B7:37:A9:53:02:FB:59:6D:02:C3:C2:F8:0D:F5:AE:B1:DF:26:BD:2A Authority key identifier: 9C:BE:9C:43:EE:75:98:96:00:39:19:50:87:34:72:33:46:BF:70:16 Certificate issuer: /CN=9cbe9c43ee759896003919508734723346bf7016 Certificate serial: 019AF12E12BCA3AF7D13D47E416878EE660D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nL6cQ-51mJYAORlQhzRyM0a_cBY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f974e9-4743-46db-a348-1d1989f06618/1/nL6cQ-51mJYAORlQhzRyM0a_cBY.mft Manifest number: 1324 Signing time: Sat 06 Dec 2025 01:01:59 +0000 Manifest this update: Sat 06 Dec 2025 01:01:59 +0000 Manifest next update: Sun 07 Dec 2025 01:01:59 +0000 Files and hashes: 1: UZ53Oxv_ea1DJibe26VPgv4-Vpo.roa (hash: hiy12f2VyI89A+R22FhEyFKlin2hs0EKoXos1apn778=) 2: nL6cQ-51mJYAORlQhzRyM0a_cBY.crl (hash: VFhMgIkj+OVOwKo0KHHYZYHn4ObqdjfKyvO6AirFKQ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f974e9-4743-46db-a348-1d1989f06618/1/nL6cQ-51mJYAORlQhzRyM0a_cBY.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f974e9-4743-46db-a348-1d1989f06618/1/nL6cQ-51mJYAORlQhzRyM0a_cBY.mft rsync://rpki.ripe.net/repository/DEFAULT/nL6cQ-51mJYAORlQhzRyM0a_cBY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:12:bc:a3:af:7d:13:d4:7e:41:68:78:ee:66:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cbe9c43ee759896003919508734723346bf7016 Validity Not Before: Dec 6 01:01:59 2025 GMT Not After : Dec 7 01:01:59 2025 GMT Subject: CN=b737a95302fb596d02c3c2f80df5aeb1df26bd2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c3:2b:b0:49:c6:85:59:30:76:fe:ec:58:54: 28:ff:b7:7d:bb:99:a6:49:cc:fc:57:bd:c0:26:64: 42:fa:58:38:9e:79:6d:d6:21:13:e2:fa:d2:ea:55: dc:ab:e6:2d:7a:ce:e8:0f:54:61:8e:7c:04:78:4b: 99:dd:3e:1f:d4:c4:73:83:8e:ab:6a:66:e2:c6:ff: d0:ff:1e:36:f1:04:7e:92:d6:ea:4a:0a:fc:95:5a: ae:e4:6d:0f:29:ff:6d:27:b0:90:69:9a:28:98:66: f5:76:e5:f6:6f:00:86:2c:06:bd:02:f1:cf:23:a3: 48:86:0f:ce:d3:38:b0:e1:f1:5e:67:a6:f3:93:42: f4:9b:86:96:90:5b:eb:96:96:19:0c:90:ae:56:bc: f3:13:a6:f9:ca:1e:c2:98:14:1f:9f:12:f9:cd:5e: 9d:d2:04:e1:35:ad:9d:83:46:55:52:ce:33:e9:17: 89:40:93:55:4e:1f:fd:f6:f7:ac:69:9a:ab:94:27: 41:6f:08:b6:47:7f:5a:04:6f:54:c2:b8:38:a0:be: 2a:ac:69:dc:25:7c:a0:4e:01:80:d7:52:e2:f9:17: 1f:9f:d5:9e:f2:10:17:60:fc:73:3e:db:6b:ec:e4: d2:83:33:f5:f6:b2:d3:d9:bc:9c:72:1c:d3:85:62: a6:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:37:A9:53:02:FB:59:6D:02:C3:C2:F8:0D:F5:AE:B1:DF:26:BD:2A X509v3 Authority Key Identifier: keyid:9C:BE:9C:43:EE:75:98:96:00:39:19:50:87:34:72:33:46:BF:70:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nL6cQ-51mJYAORlQhzRyM0a_cBY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f974e9-4743-46db-a348-1d1989f06618/1/nL6cQ-51mJYAORlQhzRyM0a_cBY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f974e9-4743-46db-a348-1d1989f06618/1/nL6cQ-51mJYAORlQhzRyM0a_cBY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:a3:a8:f2:ac:b7:62:a9:0a:62:ce:05:75:eb:a5:ee:ee:27: a3:72:75:f4:e6:c1:08:87:91:63:b9:b7:a5:36:df:b2:80:92: e7:78:7c:16:1a:75:ab:03:40:46:64:62:2b:44:50:af:37:ba: a3:5a:e1:c7:de:23:c1:3f:64:59:5d:cc:2c:af:68:3f:85:a8: 5c:e0:24:5f:39:46:bc:2d:6a:3d:23:69:93:2f:a6:c3:96:97: 90:28:73:9b:e6:d4:5b:35:09:6d:8c:a4:1d:43:48:dd:60:87: 57:e9:61:76:27:8d:d7:47:c3:88:81:80:0b:20:c1:ea:6a:3c: c2:df:3e:15:c9:01:ed:12:17:f2:12:5d:fd:91:9a:e0:8d:7f: b2:9e:c1:8d:58:90:2e:1c:1e:3c:f6:f3:68:9a:8a:ba:42:aa: 84:7e:c6:ad:8a:d5:9c:26:08:70:00:42:f4:90:aa:73:db:5f: 24:2f:38:b5:7c:c5:6d:78:f8:af:58:2b:81:8e:27:98:54:2a: b1:bf:c5:b8:19:56:9c:61:3d:ea:08:5d:7e:c8:38:22:5c:85: 80:a7:7f:73:0b:98:a0:0b:78:d2:5b:f0:a9:dd:26:ce:23:fe: 5d:3c:96:98:cd:3f:f3:ea:16:16:2a:a7:60:2d:f3:1e:84:b9: df:48:67:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLhK8o699E9R+QWh47mYNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljYmU5YzQzZWU3NTk4OTYwMDM5MTk1MDg3MzQ3MjMzNDZi ZjcwMTYwHhcNMjUxMjA2MDEwMTU5WhcNMjUxMjA3MDEwMTU5WjAzMTEwLwYDVQQD EyhiNzM3YTk1MzAyZmI1OTZkMDJjM2MyZjgwZGY1YWViMWRmMjZiZDJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssMrsEnGhVkwdv7sWFQo/7d9u5mm Scz8V73AJmRC+lg4nnlt1iET4vrS6lXcq+Ytes7oD1RhjnwEeEuZ3T4f1MRzg46r ambixv/Q/x428QR+ktbqSgr8lVqu5G0PKf9tJ7CQaZoomGb1duX2bwCGLAa9AvHP I6NIhg/O0ziw4fFeZ6bzk0L0m4aWkFvrlpYZDJCuVrzzE6b5yh7CmBQfnxL5zV6d 0gThNa2dg0ZVUs4z6ReJQJNVTh/99vesaZqrlCdBbwi2R39aBG9Uwrg4oL4qrGnc JXygTgGA11Li+Rcfn9We8hAXYPxzPttr7OTSgzP19rLT2bycchzThWKm5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLc3qVMC+1ltAsPC+A31rrHfJr0qMB8GA1UdIwQY MBaAFJy+nEPudZiWADkZUIc0cjNGv3AWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkw2Y1EtNTFtSllBT1JsUWh6UnlNMGFfY0JZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTc0ZTktNDc0My00NmRiLWEzNDgt MWQxOTg5ZjA2NjE4LzEvbkw2Y1EtNTFtSllBT1JsUWh6UnlNMGFfY0JZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTc0ZTktNDc0My00NmRiLWEzNDgtMWQxOTg5ZjA2NjE4 LzEvbkw2Y1EtNTFtSllBT1JsUWh6UnlNMGFfY0JZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI6Oo8qy3 YqkKYs4Fdeul7u4no3J19ObBCIeRY7m3pTbfsoCS53h8Fhp1qwNARmRiK0RQrze6 o1rhx94jwT9kWV3MLK9oP4WoXOAkXzlGvC1qPSNpky+mw5aXkChzm+bUWzUJbYyk HUNI3WCHV+lhdieN10fDiIGACyDB6mo8wt8+FckB7RIX8hJd/ZGa4I1/sp7BjViQ LhwePPbzaJqKukKqhH7GrYrVnCYIcABC9JCqc9tfJC84tXzFbXj4r1grgY4nmFQq sb/FuBlWnGE96ghdfsg4IlyFgKd/cwuYoAt40lvwqd0mziP+XTyWmM0/8+oWFiqn YC3zHoS530hnXA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:05:49 2025 by rpki-client