This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.mft File: nu_LEgXreVVHHlyPVDSpIHKtPd0.mft (raw, json) Hash identifier: LoPALl9IkKf4SwMlahPo72GRlQe0nLPg2imNzS2gyZA= Subject key identifier: 03:A8:7E:B3:46:C8:E3:D0:43:E7:A8:05:D3:6A:B9:A2:15:BA:37:58 Authority key identifier: 9E:EF:CB:12:05:EB:79:55:47:1E:5C:8F:54:34:A9:20:72:AD:3D:DD Certificate issuer: /CN=9eefcb1205eb7955471e5c8f5434a92072ad3ddd Certificate serial: 019AF23FB2E15DBB3EE6CB62D25DB61473F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nu_LEgXreVVHHlyPVDSpIHKtPd0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.mft Manifest number: 0F96 Signing time: Sat 06 Dec 2025 06:00:52 +0000 Manifest this update: Sat 06 Dec 2025 06:00:52 +0000 Manifest next update: Sun 07 Dec 2025 06:00:52 +0000 Files and hashes: 1: 9ZobQzUYHfXp-yMAZxRbAV5EiZE.roa (hash: SI8rvZn5cQ6+WJdvUqlPbbCYAcBbQc6oDM3iBm6911w=) 2: nu_LEgXreVVHHlyPVDSpIHKtPd0.crl (hash: zTh8DdMHBMP65/UGLIXhS8l28EIfa46tZOniKNRdu3E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.crl rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.mft rsync://rpki.ripe.net/repository/DEFAULT/nu_LEgXreVVHHlyPVDSpIHKtPd0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:b2:e1:5d:bb:3e:e6:cb:62:d2:5d:b6:14:73:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9eefcb1205eb7955471e5c8f5434a92072ad3ddd Validity Not Before: Dec 6 06:00:52 2025 GMT Not After : Dec 7 06:00:52 2025 GMT Subject: CN=03a87eb346c8e3d043e7a805d36ab9a215ba3758 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:5d:74:43:a4:68:ec:e3:6a:35:75:68:35:7b: 7e:2e:c0:39:5d:df:fa:d6:63:e6:20:55:84:56:65: 64:60:30:a5:13:ae:90:d0:e1:7d:78:72:0f:aa:3f: d7:12:90:4a:37:30:4b:c6:d8:85:e4:34:79:01:2e: b3:00:85:24:e2:a6:32:00:0f:92:6b:44:6e:1a:94: dd:8b:5e:09:d9:06:12:4f:99:91:3e:ad:cd:fd:1d: 47:aa:97:d2:ba:24:51:07:c0:a0:10:67:13:e2:3f: a4:5b:2d:f6:5b:27:60:0c:e3:40:da:f3:79:87:b8: 9c:a4:1c:be:d8:fc:75:83:aa:5c:53:3f:bf:42:d0: a6:bf:27:7b:86:bf:c6:b7:1a:a4:aa:bb:df:8e:34: 39:ad:0c:4f:c0:27:0e:a8:87:41:0c:cc:af:35:db: 63:eb:1c:d5:4f:c4:54:9e:4b:56:c5:ac:6c:e3:6c: a2:3c:e9:bf:38:4d:36:17:ad:f9:f9:76:ba:88:e9: 86:fa:df:b7:7f:6a:fd:17:d1:a7:78:08:e5:79:06: 9a:a7:be:3b:fa:97:f2:e1:e7:2d:9a:31:e2:d6:c7: 76:df:be:fa:39:3c:ef:95:55:e3:1f:62:7c:40:6b: a1:f4:48:15:af:f3:60:65:36:ce:76:c8:a2:82:bb: b6:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:A8:7E:B3:46:C8:E3:D0:43:E7:A8:05:D3:6A:B9:A2:15:BA:37:58 X509v3 Authority Key Identifier: keyid:9E:EF:CB:12:05:EB:79:55:47:1E:5C:8F:54:34:A9:20:72:AD:3D:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nu_LEgXreVVHHlyPVDSpIHKtPd0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/921609-58a5-4306-b82b-4b7dcd8777de/1/nu_LEgXreVVHHlyPVDSpIHKtPd0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:1e:89:b7:84:ab:64:7d:30:10:36:01:12:e2:ab:03:0e:e6: 97:bb:ea:a2:b8:c6:63:fd:2e:b5:22:8d:ec:65:d1:6a:9d:4e: 00:7b:35:9d:1f:9d:a0:c2:1c:c7:da:50:56:87:84:3c:3d:20: ef:cd:cc:67:76:a4:26:c7:5e:09:6a:11:b8:57:39:74:d4:8e: 92:3d:bb:24:f4:a6:d0:b7:70:04:ed:f1:45:e7:4a:97:c7:b9: 1e:e9:4d:00:bc:3c:d0:55:60:7c:73:bf:f4:79:2d:4f:13:78: f6:69:3c:d6:4e:c8:b4:37:6f:49:ad:b8:27:95:79:e5:b3:60: fb:fa:7d:33:73:cb:f2:40:55:d7:92:0c:d3:f2:65:6d:4a:22: 5d:95:74:fd:ec:af:6e:2b:96:cc:b3:4a:7c:7e:af:fe:cd:8c: 84:fd:e3:df:ea:8c:ac:be:4d:ed:09:2d:41:e5:b1:1d:ba:07: 41:5f:26:49:f6:18:ad:a5:ff:29:6a:dd:9d:fd:7c:8b:80:88: 30:6f:4d:8c:37:c4:b2:71:16:f3:5d:25:cd:e9:a6:9a:9b:fe: 81:26:a6:b3:79:31:9c:1c:11:0c:ec:1b:2e:19:ee:3e:d5:38: 61:58:43:c4:70:49:23:b8:80:00:f3:e3:f3:3c:3a:47:c0:b1: 5b:eb:c8:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP7LhXbs+5sti0l22FHPwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllZWZjYjEyMDVlYjc5NTU0NzFlNWM4ZjU0MzRhOTIwNzJh ZDNkZGQwHhcNMjUxMjA2MDYwMDUyWhcNMjUxMjA3MDYwMDUyWjAzMTEwLwYDVQQD EygwM2E4N2ViMzQ2YzhlM2QwNDNlN2E4MDVkMzZhYjlhMjE1YmEzNzU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj110Q6Ro7ONqNXVoNXt+LsA5Xd/6 1mPmIFWEVmVkYDClE66Q0OF9eHIPqj/XEpBKNzBLxtiF5DR5AS6zAIUk4qYyAA+S a0RuGpTdi14J2QYST5mRPq3N/R1HqpfSuiRRB8CgEGcT4j+kWy32WydgDONA2vN5 h7icpBy+2Px1g6pcUz+/QtCmvyd7hr/GtxqkqrvfjjQ5rQxPwCcOqIdBDMyvNdtj 6xzVT8RUnktWxaxs42yiPOm/OE02F635+Xa6iOmG+t+3f2r9F9GneAjleQaap747 +pfy4ectmjHi1sd23776OTzvlVXjH2J8QGuh9EgVr/NgZTbOdsiigru23wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAOofrNGyOPQQ+eoBdNquaIVujdYMB8GA1UdIwQY MBaAFJ7vyxIF63lVRx5cj1Q0qSByrT3dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnVfTEVnWHJlVlZISGx5UFZEU3BJSEt0UGQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS85MjE2MDktNThhNS00MzA2LWI4MmIt NGI3ZGNkODc3N2RlLzEvbnVfTEVnWHJlVlZISGx5UFZEU3BJSEt0UGQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS85MjE2MDktNThhNS00MzA2LWI4MmItNGI3ZGNkODc3N2Rl LzEvbnVfTEVnWHJlVlZISGx5UFZEU3BJSEt0UGQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiR6Jt4Sr ZH0wEDYBEuKrAw7ml7vqorjGY/0utSKN7GXRap1OAHs1nR+doMIcx9pQVoeEPD0g 783MZ3akJsdeCWoRuFc5dNSOkj27JPSm0LdwBO3xRedKl8e5HulNALw80FVgfHO/ 9HktTxN49mk81k7ItDdvSa24J5V55bNg+/p9M3PL8kBV15IM0/JlbUoiXZV0/eyv biuWzLNKfH6v/s2MhP3j3+qMrL5N7QktQeWxHboHQV8mSfYYraX/KWrdnf18i4CI MG9NjDfEsnEW810lzemmmpv+gSams3kxnBwRDOwbLhnuPtU4YVhDxHBJI7iAAPPj 8zw6R8CxW+vIcQ== -----END CERTIFICATE-----Generated at Sat Dec 6 14:49:30 2025 by rpki-client