This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a30360-0329-4cf1-a37f-db7498dade0c/1/nlaYDUienFO8gp8-jWPTg_ONDeM.mft File: nlaYDUienFO8gp8-jWPTg_ONDeM.mft (raw, json) Hash identifier: aneObcClmyJSbklq2VC5ja5ugEwL91gFQelpRrAcya8= Subject key identifier: B3:B7:F0:C9:B3:80:A0:4F:3D:14:A6:9D:BF:0C:9C:D6:40:A6:A0:54 Authority key identifier: 9E:56:98:0D:48:9E:9C:53:BC:82:9F:3E:8D:63:D3:83:F3:8D:0D:E3 Certificate issuer: /CN=9e56980d489e9c53bc829f3e8d63d383f38d0de3 Certificate serial: 019B285292A8E7BDF4431A777039B39E2346 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nlaYDUienFO8gp8-jWPTg_ONDeM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/a30360-0329-4cf1-a37f-db7498dade0c/1/nlaYDUienFO8gp8-jWPTg_ONDeM.mft Manifest number: 16DA Signing time: Tue 16 Dec 2025 18:00:58 +0000 Manifest this update: Tue 16 Dec 2025 18:00:58 +0000 Manifest next update: Wed 17 Dec 2025 18:00:58 +0000 Files and hashes: 1: 5LKnYfYeN0M1IwSjOCfaAZydc0E.roa (hash: R6rY8mHoFXXwwf30CLdp4brLxdq1SUoGP6TPbyDWGN8=) 2: nlaYDUienFO8gp8-jWPTg_ONDeM.crl (hash: bUBla4mK3GHVGORGwz5XASIVe5t2CCvIorfmcKfJE0A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/a30360-0329-4cf1-a37f-db7498dade0c/1/nlaYDUienFO8gp8-jWPTg_ONDeM.crl rsync://rpki.ripe.net/repository/DEFAULT/16/a30360-0329-4cf1-a37f-db7498dade0c/1/nlaYDUienFO8gp8-jWPTg_ONDeM.mft rsync://rpki.ripe.net/repository/DEFAULT/nlaYDUienFO8gp8-jWPTg_ONDeM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:52:92:a8:e7:bd:f4:43:1a:77:70:39:b3:9e:23:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e56980d489e9c53bc829f3e8d63d383f38d0de3 Validity Not Before: Dec 16 18:00:58 2025 GMT Not After : Dec 17 18:00:58 2025 GMT Subject: CN=b3b7f0c9b380a04f3d14a69dbf0c9cd640a6a054 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ed:49:28:08:38:3f:e3:bd:67:e8:9b:68:2f: 2c:a7:6f:56:58:7a:cc:56:b0:94:19:c5:97:6e:4d: 72:0b:85:59:ca:b9:a7:1a:54:a5:c0:c1:41:ce:e0: a3:6f:0e:f4:9c:69:d4:c6:fc:2e:96:73:3f:1e:3c: 1f:ab:28:17:65:2a:58:e5:2a:c6:c1:7d:84:32:e8: 96:a9:19:f9:4d:b2:31:ab:cd:1b:1f:6c:fd:56:27: 06:a6:48:0a:9b:f0:2b:f7:98:64:82:d1:ab:f6:a6: 95:99:00:f6:4f:18:ed:ce:27:8a:a7:8d:da:e1:f1: 71:7a:1e:d3:61:63:ad:40:f6:f6:9e:de:ed:73:06: 20:00:18:25:ea:bd:b6:66:b2:23:3d:d4:95:0f:dd: 88:68:06:72:ef:5a:35:ef:69:b5:1e:39:e0:22:0e: 3e:c5:4b:74:e1:ae:ad:db:45:75:1d:29:8f:4d:57: 43:85:f6:9f:ef:03:83:9d:8b:55:d5:a3:2d:0e:18: aa:7a:80:4c:23:ea:ce:38:bb:a0:93:24:e2:cf:cf: 77:29:2a:23:79:16:79:10:b5:59:ed:78:b8:03:f8: 59:9e:86:37:3d:7e:7a:1a:4a:48:aa:69:e9:44:c1: 2a:47:63:10:83:1d:03:b5:11:8b:fc:24:8d:7d:ee: fd:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:B7:F0:C9:B3:80:A0:4F:3D:14:A6:9D:BF:0C:9C:D6:40:A6:A0:54 X509v3 Authority Key Identifier: keyid:9E:56:98:0D:48:9E:9C:53:BC:82:9F:3E:8D:63:D3:83:F3:8D:0D:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlaYDUienFO8gp8-jWPTg_ONDeM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a30360-0329-4cf1-a37f-db7498dade0c/1/nlaYDUienFO8gp8-jWPTg_ONDeM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a30360-0329-4cf1-a37f-db7498dade0c/1/nlaYDUienFO8gp8-jWPTg_ONDeM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:73:3e:2c:e6:bd:42:39:56:f7:83:67:bb:32:e2:73:3a:70: 14:57:00:bd:c9:56:c8:cb:87:98:b0:31:75:95:cd:f3:24:7b: f8:5c:df:45:77:2b:35:c0:10:e7:ab:1c:5a:82:11:3e:38:d4: 17:f7:e8:f4:4a:21:32:1f:7a:08:69:c8:b6:36:34:c6:f1:95: 1d:ab:f8:22:0e:ca:57:ef:a2:98:da:a6:a6:b3:79:0d:16:fc: ac:d0:6c:f4:8c:3f:77:1f:8b:ad:39:0d:77:5e:6e:b7:3a:de: f6:84:7f:8c:0a:65:3f:62:ff:36:d5:a2:ff:7b:32:ef:3a:72: 27:68:b9:46:32:09:95:ad:5a:a5:52:4e:13:6f:0d:3c:38:3f: 18:8d:92:e4:3b:73:5a:f3:a0:86:dd:39:38:28:5e:4b:44:45: cf:c9:82:c1:2f:77:3c:bc:e5:f3:3b:30:b9:fb:b3:30:60:07: 60:06:bc:a4:8f:5a:0a:67:12:fe:91:b7:03:de:ca:76:f3:c9: ab:b9:36:6d:ce:27:cb:aa:21:9c:88:50:39:f1:c1:9c:cc:b6: 9e:0c:25:45:8d:b0:b2:20:5c:db:0e:69:f0:f2:d2:e9:7e:d8: ae:85:b3:01:41:c9:62:e1:c5:69:15:42:a3:48:ad:03:c3:92: a1:84:bb:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsoUpKo5730Qxp3cDmzniNGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNTY5ODBkNDg5ZTljNTNiYzgyOWYzZThkNjNkMzgzZjM4 ZDBkZTMwHhcNMjUxMjE2MTgwMDU4WhcNMjUxMjE3MTgwMDU4WjAzMTEwLwYDVQQD EyhiM2I3ZjBjOWIzODBhMDRmM2QxNGE2OWRiZjBjOWNkNjQwYTZhMDU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+1JKAg4P+O9Z+ibaC8sp29WWHrM VrCUGcWXbk1yC4VZyrmnGlSlwMFBzuCjbw70nGnUxvwulnM/HjwfqygXZSpY5SrG wX2EMuiWqRn5TbIxq80bH2z9VicGpkgKm/Ar95hkgtGr9qaVmQD2TxjtzieKp43a 4fFxeh7TYWOtQPb2nt7tcwYgABgl6r22ZrIjPdSVD92IaAZy71o172m1HjngIg4+ xUt04a6t20V1HSmPTVdDhfaf7wODnYtV1aMtDhiqeoBMI+rOOLugkyTiz893KSoj eRZ5ELVZ7Xi4A/hZnoY3PX56GkpIqmnpRMEqR2MQgx0DtRGL/CSNfe797wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLO38MmzgKBPPRSmnb8MnNZApqBUMB8GA1UdIwQY MBaAFJ5WmA1InpxTvIKfPo1j04PzjQ3jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmxhWURVaWVuRk84Z3A4LWpXUFRnX09ORGVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9hMzAzNjAtMDMyOS00Y2YxLWEzN2Yt ZGI3NDk4ZGFkZTBjLzEvbmxhWURVaWVuRk84Z3A4LWpXUFRnX09ORGVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9hMzAzNjAtMDMyOS00Y2YxLWEzN2YtZGI3NDk4ZGFkZTBj LzEvbmxhWURVaWVuRk84Z3A4LWpXUFRnX09ORGVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgHM+LOa9 QjlW94NnuzLiczpwFFcAvclWyMuHmLAxdZXN8yR7+FzfRXcrNcAQ56scWoIRPjjU F/fo9EohMh96CGnItjY0xvGVHav4Ig7KV++imNqmprN5DRb8rNBs9Iw/dx+LrTkN d15utzre9oR/jAplP2L/NtWi/3sy7zpyJ2i5RjIJla1apVJOE28NPDg/GI2S5Dtz WvOght05OCheS0RFz8mCwS93PLzl8zswufuzMGAHYAa8pI9aCmcS/pG3A97KdvPJ q7k2bc4ny6ohnIhQOfHBnMy2ngwlRY2wsiBc2w5p8PLS6X7YroWzAUHJYuHFaRVC o0itA8OSoYS7+g== -----END CERTIFICATE-----Generated at Tue Dec 16 23:35:17 2025 by rpki-client