This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/nhUzxHAsLMtang6HqyetVrFfLHY.mft File: nhUzxHAsLMtang6HqyetVrFfLHY.mft (raw, json) Hash identifier: s1Xzy0XxuDcLPoAJDBD4Xt8p5+4IQs+/bAXTWgvm4OE= Subject key identifier: C1:65:6A:32:63:D7:9C:E1:B3:35:57:8B:F5:F0:73:53:C6:7E:81:AE Authority key identifier: 9E:15:33:C4:70:2C:2C:CB:5A:9E:0E:87:AB:27:AD:56:B1:5F:2C:76 Certificate issuer: /CN=9e1533c4702c2ccb5a9e0e87ab27ad56b15f2c76 Certificate serial: 019AF163F7DABB56EEA5E10A0C67BDA27CAC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nhUzxHAsLMtang6HqyetVrFfLHY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/nhUzxHAsLMtang6HqyetVrFfLHY.mft Manifest number: 0E35 Signing time: Sat 06 Dec 2025 02:00:51 +0000 Manifest this update: Sat 06 Dec 2025 02:00:51 +0000 Manifest next update: Sun 07 Dec 2025 02:00:51 +0000 Files and hashes: 1: RYaLU7P7StEvfIaG8O_HUuwrXWg.roa (hash: YEpuYm5zeKipnH1+lgwVkLpZPGAKbbKNqPvP2OUt0Mc=) 2: g1QBI0oBpZMDfLnVbzlJh58dtno.roa (hash: DThH0UYff9JRlzHoLRkutIVBWjbtodZbQuiDh8h2xSo=) 3: nhUzxHAsLMtang6HqyetVrFfLHY.crl (hash: t8Jagpaqt15D4H0qpzt4RhWCYyZekOpebhcaGa6+bss=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/nhUzxHAsLMtang6HqyetVrFfLHY.crl rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/nhUzxHAsLMtang6HqyetVrFfLHY.mft rsync://rpki.ripe.net/repository/DEFAULT/nhUzxHAsLMtang6HqyetVrFfLHY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:f7:da:bb:56:ee:a5:e1:0a:0c:67:bd:a2:7c:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e1533c4702c2ccb5a9e0e87ab27ad56b15f2c76 Validity Not Before: Dec 6 02:00:51 2025 GMT Not After : Dec 7 02:00:51 2025 GMT Subject: CN=c1656a3263d79ce1b335578bf5f07353c67e81ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a0:1f:df:c7:ba:aa:17:c7:a3:f6:d0:9d:74: f1:11:59:2f:52:df:38:d5:41:78:b3:76:07:98:d9: 49:36:e7:fe:34:f1:6b:01:1a:07:b2:52:9a:66:7d: 5a:36:e8:14:e6:51:7c:69:d4:6c:8e:7d:99:ca:e6: e3:08:42:01:43:df:2d:6c:dd:4e:61:55:dd:7f:aa: 87:fd:44:4c:6f:3a:6c:71:af:bf:6f:04:f2:3d:88: 41:31:a7:12:72:ce:c1:55:9d:87:9f:74:e8:71:be: 70:be:d7:2e:f1:95:b7:4c:b7:9e:00:d1:fa:28:ab: ec:d0:b6:92:4a:be:64:cd:af:fc:17:09:dc:6d:39: 9c:bc:32:d4:cd:79:65:94:4f:1a:08:02:35:c0:95: 88:d9:29:32:d4:15:2b:1b:60:2a:87:7e:b5:16:01: 66:2a:d5:0b:1a:b0:79:8f:3f:30:6b:0d:4d:7a:27: 1d:be:ec:e8:3e:72:31:ee:4a:4c:56:55:d1:3b:89: 86:fe:24:b8:ec:b9:50:cd:41:54:a7:6a:16:1a:98: e5:57:32:b0:b5:78:76:2a:ff:b3:e1:9d:e8:1e:7f: 58:ca:2d:8b:0b:23:c2:d1:2a:13:ad:ee:64:84:43: a4:6d:8c:29:81:51:75:ea:be:14:a2:95:3f:5a:66: 5d:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:65:6A:32:63:D7:9C:E1:B3:35:57:8B:F5:F0:73:53:C6:7E:81:AE X509v3 Authority Key Identifier: keyid:9E:15:33:C4:70:2C:2C:CB:5A:9E:0E:87:AB:27:AD:56:B1:5F:2C:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nhUzxHAsLMtang6HqyetVrFfLHY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/nhUzxHAsLMtang6HqyetVrFfLHY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/nhUzxHAsLMtang6HqyetVrFfLHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:86:12:0d:f6:c5:63:05:1c:a6:36:09:f5:0e:df:c8:cd:a3: 62:be:61:8a:c8:bb:14:97:13:4c:22:e6:a4:35:1e:65:62:a7: ff:6d:1e:40:ab:f6:98:22:54:81:0e:e6:f9:8b:64:12:aa:54: be:1b:0f:b1:35:85:16:66:eb:1e:38:06:74:43:e4:47:34:e1: 82:68:97:44:1b:0d:99:9b:6e:62:a1:09:72:b0:3a:45:87:76: 05:19:25:1d:be:18:bd:4d:f8:2f:eb:e8:1d:ec:21:2d:60:fb: b1:bf:03:4c:8e:32:00:cc:50:9f:dc:a9:5e:5a:cb:9e:a4:95: 2c:d9:76:92:f1:7e:59:ce:87:1d:bb:4c:22:f5:5d:01:5d:33: f2:16:4d:7d:51:fe:3f:2b:25:6c:6c:a0:d8:b2:68:70:e8:4e: 1b:b2:6e:09:e9:58:e9:dd:d7:b3:84:20:1b:0e:2a:21:d2:18: 4f:c0:3b:84:a6:c7:fc:ec:99:f3:84:a0:4a:50:4a:69:2e:70: 73:f4:fb:fc:07:e2:ba:be:2d:b6:2b:4d:38:6e:97:82:79:07: 68:14:f5:ab:f8:1f:3c:44:91:4a:41:59:6a:4d:2b:64:6f:84: 57:8c:38:de:f2:b7:f4:d9:60:4a:95:e7:fe:18:fd:fa:c7:db: 76:cf:40:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY/fau1bupeEKDGe9onysMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllMTUzM2M0NzAyYzJjY2I1YTllMGU4N2FiMjdhZDU2YjE1 ZjJjNzYwHhcNMjUxMjA2MDIwMDUxWhcNMjUxMjA3MDIwMDUxWjAzMTEwLwYDVQQD EyhjMTY1NmEzMjYzZDc5Y2UxYjMzNTU3OGJmNWYwNzM1M2M2N2U4MWFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAraAf38e6qhfHo/bQnXTxEVkvUt84 1UF4s3YHmNlJNuf+NPFrARoHslKaZn1aNugU5lF8adRsjn2ZyubjCEIBQ98tbN1O YVXdf6qH/URMbzpsca+/bwTyPYhBMacScs7BVZ2Hn3Tocb5wvtcu8ZW3TLeeANH6 KKvs0LaSSr5kza/8FwncbTmcvDLUzXlllE8aCAI1wJWI2Sky1BUrG2Aqh361FgFm KtULGrB5jz8waw1NeicdvuzoPnIx7kpMVlXRO4mG/iS47LlQzUFUp2oWGpjlVzKw tXh2Kv+z4Z3oHn9Yyi2LCyPC0SoTre5khEOkbYwpgVF16r4UopU/WmZdnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMFlajJj15zhszVXi/Xwc1PGfoGuMB8GA1UdIwQY MBaAFJ4VM8RwLCzLWp4Oh6snrVaxXyx2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmhVenhIQXNMTXRhbmc2SHF5ZXRWckZmTEhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8yNjg4YjYtZGE3MC00YWJkLThmNTkt MWE4MzFiNTk5YzE4LzEvbmhVenhIQXNMTXRhbmc2SHF5ZXRWckZmTEhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS8yNjg4YjYtZGE3MC00YWJkLThmNTktMWE4MzFiNTk5YzE4 LzEvbmhVenhIQXNMTXRhbmc2SHF5ZXRWckZmTEhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAboYSDfbF YwUcpjYJ9Q7fyM2jYr5hisi7FJcTTCLmpDUeZWKn/20eQKv2mCJUgQ7m+YtkEqpU vhsPsTWFFmbrHjgGdEPkRzThgmiXRBsNmZtuYqEJcrA6RYd2BRklHb4YvU34L+vo HewhLWD7sb8DTI4yAMxQn9ypXlrLnqSVLNl2kvF+Wc6HHbtMIvVdAV0z8hZNfVH+ PyslbGyg2LJocOhOG7JuCelY6d3Xs4QgGw4qIdIYT8A7hKbH/OyZ84SgSlBKaS5w c/T7/Afiur4ttitNOG6XgnkHaBT1q/gfPESRSkFZak0rZG+EV4w43vK39NlgSpXn /hj9+sfbds9Aeg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:18:02 2025 by rpki-client