This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft File: nlUyAHdpaUSxYTwujJxgah4G63k.mft (raw, json) Hash identifier: aOMfWcyFuSCV/1BdXIjMp/mtbyMCdzU//HwChiJy2VY= Subject key identifier: DF:D8:F8:8E:E4:3D:E5:C0:11:5B:29:C9:05:68:9E:67:47:AD:CE:75 Authority key identifier: 9E:55:32:00:77:69:69:44:B1:61:3C:2E:8C:9C:60:6A:1E:06:EB:79 Certificate issuer: /CN=9e55320077696944b1613c2e8c9c606a1e06eb79 Certificate serial: 019AF3C0AF89171FFA6BDA9A91D9E2DCDF42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft Manifest number: 1781 Signing time: Sat 06 Dec 2025 13:01:22 +0000 Manifest this update: Sat 06 Dec 2025 13:01:22 +0000 Manifest next update: Sun 07 Dec 2025 13:01:22 +0000 Files and hashes: 1: MWa5Dj5_kmbgw0j6IBXQLJfi3UE.roa (hash: IKx6KdWK7MMrT+DuoPdaDD+mZCI7VV+oe8XMrptTZ1w=) 2: QjtWj02YBmI5Jv7YvgwRw2CvoyA.roa (hash: xzR/aqYGTG/UIUSP1rL50ozgA3zAN0ypP0J4BQa6rSk=) 3: T1_pchNqlq7DTDdnnhWMYLChBoU.roa (hash: 3peIpL8l/Rnx3wWmXa0H7Vz2+9XZpZaFvAX9xROlB/s=) 4: crvEgPTpcYjRSHsrYeLgXXEBKUk.roa (hash: 7eXEVTxEH/UTzDacXKPIjatCFJu/CB4kzr15IvQwXDk=) 5: hvCCVUZ3vm78utey9zVykeFfmZg.roa (hash: 8LKNeWR/ydRJi6I0838T1dU97Q8jY2cXv/vQVdAuDbQ=) 6: nlUyAHdpaUSxYTwujJxgah4G63k.crl (hash: nzgbiypMJEGJc9FmWim5MGDdCvuEZHAM0AqUZZylwgs=) 7: oGavUwYGf9k8hmqppcV6OhAR0l8.roa (hash: xxSUypsCBzVEfCKjWpeRgbmsfcja4p6HlyrSFwzu1Eo=) 8: ofJM-BOf8d42dE82c9Ub9dgl42A.roa (hash: 5Kr1/Loqh5IoZ9YAjtlJKKCAtdpo/Xrh4HBNFY8lq58=) 9: qealtEqMLJg3Xy2LvZJt_teWrWQ.roa (hash: jUDg3WMKq6N0QAPZM0fHhLPl0mZhBgxm/pe95LVDZy0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.crl rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:af:89:17:1f:fa:6b:da:9a:91:d9:e2:dc:df:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e55320077696944b1613c2e8c9c606a1e06eb79 Validity Not Before: Dec 6 13:01:22 2025 GMT Not After : Dec 7 13:01:22 2025 GMT Subject: CN=dfd8f88ee43de5c0115b29c905689e6747adce75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:96:e3:bb:d8:6f:f8:55:7b:ca:f2:df:3e:dd: 3a:f8:8d:f4:fc:bc:9e:ca:4e:88:bb:3d:de:95:26: d4:58:f3:d7:d9:e6:93:14:02:96:80:a5:4f:d3:b9: f1:48:b9:38:68:c2:4d:a8:30:1c:26:41:09:f1:fa: 69:65:4a:bc:45:44:4b:18:57:71:d8:fd:6f:98:24: ed:11:77:61:1e:10:fa:ad:15:51:bf:18:f8:c3:3d: 16:96:a6:bb:29:04:f2:86:99:f2:b1:97:6a:39:04: 3f:25:f4:89:7d:4b:e2:18:47:50:0b:b0:d3:90:c1: 56:63:69:01:64:a9:f0:4d:20:28:05:af:53:73:ca: 3d:8f:36:e5:f9:db:8f:ab:5b:49:78:78:a1:49:51: 3b:a9:1e:32:a9:98:41:f3:40:0b:e2:94:b8:d2:bf: 22:c9:56:24:d1:78:75:e4:b7:a7:23:73:c1:fd:58: ee:2c:6a:c4:c6:b5:7a:c6:05:aa:b6:dd:59:a6:1d: 3d:0a:a8:6f:9d:40:fa:49:d1:62:a0:e9:b2:9c:ed: cb:46:3f:99:dd:53:cb:c0:b0:ed:a7:5c:4d:92:4d: 2d:79:1a:c5:c8:2e:07:6c:af:2b:cd:44:9f:c1:89: 64:5f:f0:12:b2:fe:ec:83:4f:1a:ef:85:29:c7:ea: ce:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:D8:F8:8E:E4:3D:E5:C0:11:5B:29:C9:05:68:9E:67:47:AD:CE:75 X509v3 Authority Key Identifier: keyid:9E:55:32:00:77:69:69:44:B1:61:3C:2E:8C:9C:60:6A:1E:06:EB:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:7f:9b:09:e2:47:e6:f3:b5:71:44:30:f9:38:e7:ae:b7:f2: 83:ca:97:85:5a:71:fc:7c:c3:87:1e:54:04:e5:97:72:78:52: fe:93:ee:33:f4:e9:fe:a6:48:38:1c:1b:95:59:76:1e:18:ce: f2:5e:f4:3e:40:52:f6:5e:55:2d:86:2a:28:90:69:d1:b6:93: fe:e4:ac:41:6b:b2:db:4e:97:76:84:27:ee:6b:48:3f:f8:f3: 75:84:15:48:2f:bc:24:b2:c3:39:c1:cb:3a:18:b2:00:5e:47: a9:90:de:83:63:e1:c9:1f:d9:62:ed:56:bf:a6:c7:ff:62:1b: 24:0d:4e:88:bb:b6:82:60:94:a9:fb:a6:e3:2c:2e:12:50:66: 4d:6c:4b:a7:d6:da:a4:cb:0f:8e:ac:e8:51:58:fd:f8:51:46: 3b:82:67:1b:9e:08:7e:23:16:e4:a4:4e:f5:8b:8b:54:a1:6c: 61:ec:35:99:34:21:8c:35:d2:34:ea:54:50:85:6f:18:31:f5: aa:03:86:91:40:7a:5c:ff:0d:b0:08:e8:9d:c7:cd:e8:c2:29: a2:3d:30:51:eb:c7:39:c2:d8:1c:6c:c3:b0:8b:4c:c5:10:7f: 85:0e:d0:2d:60:d0:68:b2:2b:82:c6:a6:10:b3:42:f0:40:ef: 9c:d6:c1:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwK+JFx/6a9qakdni3N9CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNTUzMjAwNzc2OTY5NDRiMTYxM2MyZThjOWM2MDZhMWUw NmViNzkwHhcNMjUxMjA2MTMwMTIyWhcNMjUxMjA3MTMwMTIyWjAzMTEwLwYDVQQD EyhkZmQ4Zjg4ZWU0M2RlNWMwMTE1YjI5YzkwNTY4OWU2NzQ3YWRjZTc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZbju9hv+FV7yvLfPt06+I30/Lye yk6Iuz3elSbUWPPX2eaTFAKWgKVP07nxSLk4aMJNqDAcJkEJ8fppZUq8RURLGFdx 2P1vmCTtEXdhHhD6rRVRvxj4wz0Wlqa7KQTyhpnysZdqOQQ/JfSJfUviGEdQC7DT kMFWY2kBZKnwTSAoBa9Tc8o9jzbl+duPq1tJeHihSVE7qR4yqZhB80AL4pS40r8i yVYk0Xh15LenI3PB/VjuLGrExrV6xgWqtt1Zph09CqhvnUD6SdFioOmynO3LRj+Z 3VPLwLDtp1xNkk0teRrFyC4HbK8rzUSfwYlkX/ASsv7sg08a74Upx+rOfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN/Y+I7kPeXAEVspyQVonmdHrc51MB8GA1UdIwQY MBaAFJ5VMgB3aWlEsWE8LoycYGoeBut5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmxVeUFIZHBhVVN4WVR3dWpKeGdhaDRHNjNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8yNjBiNjEtYTM0OC00ZDQ3LTkyZjYt MWUwZThiOTA5ZTM0LzEvbmxVeUFIZHBhVVN4WVR3dWpKeGdhaDRHNjNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC8yNjBiNjEtYTM0OC00ZDQ3LTkyZjYtMWUwZThiOTA5ZTM0 LzEvbmxVeUFIZHBhVVN4WVR3dWpKeGdhaDRHNjNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANn+bCeJH 5vO1cUQw+Tjnrrfyg8qXhVpx/HzDhx5UBOWXcnhS/pPuM/Tp/qZIOBwblVl2HhjO 8l70PkBS9l5VLYYqKJBp0baT/uSsQWuy206XdoQn7mtIP/jzdYQVSC+8JLLDOcHL OhiyAF5HqZDeg2PhyR/ZYu1Wv6bH/2IbJA1OiLu2gmCUqfum4ywuElBmTWxLp9ba pMsPjqzoUVj9+FFGO4JnG54IfiMW5KRO9YuLVKFsYew1mTQhjDXSNOpUUIVvGDH1 qgOGkUB6XP8NsAjoncfN6MIpoj0wUevHOcLYHGzDsItMxRB/hQ7QLWDQaLIrgsam ELNC8EDvnNbBWw== -----END CERTIFICATE-----Generated at Sat Dec 6 20:29:57 2025 by rpki-client