This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/bd9e02-c424-4e14-aab7-39461aaa5be7/1/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.mft File: nUMDoKmZ2BGLvH6WrTjvuxRJbqI.mft (raw, json) Hash identifier: PwHwn9NtoPLvfW8eGSPkS1z1EjjbIzGkvq35Ld1Uy5M= Subject key identifier: 31:81:BD:D3:04:70:94:1B:79:35:79:35:8C:B1:2B:1F:A5:68:4E:D3 Authority key identifier: 9D:43:03:A0:A9:99:D8:11:8B:BC:7E:96:AD:38:EF:BB:14:49:6E:A2 Certificate issuer: /CN=9d4303a0a999d8118bbc7e96ad38efbb14496ea2 Certificate serial: 019AF19B19BBFED6D973821BE522D0EF48E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/bd9e02-c424-4e14-aab7-39461aaa5be7/1/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.mft Manifest number: 08F5 Signing time: Sat 06 Dec 2025 03:01:04 +0000 Manifest this update: Sat 06 Dec 2025 03:01:04 +0000 Manifest next update: Sun 07 Dec 2025 03:01:04 +0000 Files and hashes: 1: bre9O2wrDggeCO-gClQtVcXHgMs.roa (hash: TZRQyZuvSyRj0lGzf2b/FG9R/6ZAoSht1L/fXzqCZUg=) 2: nUMDoKmZ2BGLvH6WrTjvuxRJbqI.crl (hash: O/abo5jhtLjTOKleG1yQpinyZCsiaqJDHHV54kIkEOc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/bd9e02-c424-4e14-aab7-39461aaa5be7/1/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.crl rsync://rpki.ripe.net/repository/DEFAULT/12/bd9e02-c424-4e14-aab7-39461aaa5be7/1/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.mft rsync://rpki.ripe.net/repository/DEFAULT/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:19:bb:fe:d6:d9:73:82:1b:e5:22:d0:ef:48:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d4303a0a999d8118bbc7e96ad38efbb14496ea2 Validity Not Before: Dec 6 03:01:04 2025 GMT Not After : Dec 7 03:01:04 2025 GMT Subject: CN=3181bdd30470941b793579358cb12b1fa5684ed3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:5f:4d:71:0d:a2:e0:b4:17:00:5b:8a:9c:53: 2f:46:07:1e:6a:ed:57:f0:d4:d1:35:0d:b0:17:22: 6b:e0:49:4c:62:4d:ca:cf:20:d4:f5:05:53:e3:0e: ca:c9:0b:bc:5b:ca:9c:70:31:7b:e5:5c:ee:c4:62: 64:94:38:93:79:47:2e:2c:8c:14:75:00:2b:3c:23: 3c:e0:c1:c5:25:a8:b6:bb:26:9d:05:58:18:ac:62: 52:b2:f4:93:dd:01:e1:e9:a8:ce:ef:4e:bb:94:ae: 86:94:ed:7b:20:bb:ee:9c:c5:1d:17:59:a0:12:b7: 17:8e:30:5c:af:d1:ea:6b:ad:a3:3b:8d:71:e4:27: 32:dc:2a:de:45:4b:09:48:a0:67:14:f7:8a:93:72: 69:09:89:a2:1b:2f:ef:7e:f9:64:0e:c6:02:df:e1: 66:e5:67:38:57:fc:de:31:b5:20:46:a1:30:cf:db: 6f:04:4f:d1:ef:34:6c:f2:ea:7e:71:96:c5:ca:e2: 2b:a1:b3:a8:b0:18:56:d7:39:05:88:04:1e:a6:16: 87:28:12:3e:90:9d:62:cf:c5:73:90:12:3d:ba:2f: 57:37:2a:8e:c7:65:db:e4:7f:78:87:6c:ad:70:42: c3:61:92:60:30:77:cc:0d:2e:a8:17:2c:8b:ff:05: b6:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:81:BD:D3:04:70:94:1B:79:35:79:35:8C:B1:2B:1F:A5:68:4E:D3 X509v3 Authority Key Identifier: keyid:9D:43:03:A0:A9:99:D8:11:8B:BC:7E:96:AD:38:EF:BB:14:49:6E:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bd9e02-c424-4e14-aab7-39461aaa5be7/1/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bd9e02-c424-4e14-aab7-39461aaa5be7/1/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:37:3f:dc:21:6d:19:9d:15:ad:f6:73:15:08:82:c5:ee:8d: dc:39:66:8c:13:9a:1e:84:95:62:3f:ce:44:a8:7a:56:9d:74: d4:cc:18:51:0f:84:38:c0:8d:ff:30:76:a5:f0:71:ae:39:b0: 0a:06:b2:5c:03:7d:24:14:36:15:d2:4c:20:b3:43:a2:74:9f: 8a:f7:36:ab:f6:00:c7:f7:a4:ce:79:d0:48:d4:b1:04:25:0a: 37:e1:c4:be:e5:b6:1a:e6:96:b0:84:c5:64:f2:fc:46:05:88: 06:bc:8e:d2:22:f9:a3:dc:e3:35:5a:d5:02:bc:81:1f:be:74: cb:c1:41:3f:b6:a5:ca:5f:b1:61:c8:3d:05:49:db:6b:be:e8: 77:c9:b2:f2:db:c3:71:40:9b:eb:9c:d9:55:f8:48:bc:47:17: f3:3c:e5:6f:26:91:d0:5e:cf:95:77:25:44:ec:5a:56:2f:6e: e2:1b:45:7d:38:93:2f:a6:f7:50:5e:8c:5d:4e:f8:4a:5b:35: 65:79:9e:94:d8:53:7c:16:c8:50:2a:7a:07:fa:b6:27:06:32: a3:a5:6e:e0:2b:82:b7:73:b6:2c:59:d7:f1:94:01:37:08:6f: 50:15:de:b4:1c:02:42:7a:85:22:05:5a:a2:34:f8:97:ff:0b: 3a:39:a5:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmxm7/tbZc4Ib5SLQ70jlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkNDMwM2EwYTk5OWQ4MTE4YmJjN2U5NmFkMzhlZmJiMTQ0 OTZlYTIwHhcNMjUxMjA2MDMwMTA0WhcNMjUxMjA3MDMwMTA0WjAzMTEwLwYDVQQD EygzMTgxYmRkMzA0NzA5NDFiNzkzNTc5MzU4Y2IxMmIxZmE1Njg0ZWQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6F9NcQ2i4LQXAFuKnFMvRgceau1X 8NTRNQ2wFyJr4ElMYk3KzyDU9QVT4w7KyQu8W8qccDF75VzuxGJklDiTeUcuLIwU dQArPCM84MHFJai2uyadBVgYrGJSsvST3QHh6ajO7067lK6GlO17ILvunMUdF1mg ErcXjjBcr9Hqa62jO41x5Ccy3CreRUsJSKBnFPeKk3JpCYmiGy/vfvlkDsYC3+Fm 5Wc4V/zeMbUgRqEwz9tvBE/R7zRs8up+cZbFyuIrobOosBhW1zkFiAQephaHKBI+ kJ1iz8VzkBI9ui9XNyqOx2Xb5H94h2ytcELDYZJgMHfMDS6oFyyL/wW2EQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDGBvdMEcJQbeTV5NYyxKx+laE7TMB8GA1UdIwQY MBaAFJ1DA6CpmdgRi7x+lq0477sUSW6iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblVNRG9LbVoyQkdMdkg2V3JUanZ1eFJKYnFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9iZDllMDItYzQyNC00ZTE0LWFhYjct Mzk0NjFhYWE1YmU3LzEvblVNRG9LbVoyQkdMdkg2V3JUanZ1eFJKYnFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9iZDllMDItYzQyNC00ZTE0LWFhYjctMzk0NjFhYWE1YmU3 LzEvblVNRG9LbVoyQkdMdkg2V3JUanZ1eFJKYnFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdzc/3CFt GZ0VrfZzFQiCxe6N3DlmjBOaHoSVYj/ORKh6Vp101MwYUQ+EOMCN/zB2pfBxrjmw CgayXAN9JBQ2FdJMILNDonSfivc2q/YAx/ekznnQSNSxBCUKN+HEvuW2GuaWsITF ZPL8RgWIBryO0iL5o9zjNVrVAryBH750y8FBP7alyl+xYcg9BUnba77od8my8tvD cUCb65zZVfhIvEcX8zzlbyaR0F7PlXclROxaVi9u4htFfTiTL6b3UF6MXU74Sls1 ZXmelNhTfBbIUCp6B/q2JwYyo6Vu4CuCt3O2LFnX8ZQBNwhvUBXetBwCQnqFIgVa ojT4l/8LOjmlHQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:00:40 2025 by rpki-client