This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft File: nlUyAHdpaUSxYTwujJxgah4G63k.mft (raw, json) Hash identifier: mBcijbPZEpFiL0WNqGXBVIo3CsIzUd3ec21cMLwG9oQ= Subject key identifier: 2D:EC:7A:56:0E:D8:14:D3:B0:4C:83:CB:9F:06:A1:2B:F1:83:73:0E Authority key identifier: 9E:55:32:00:77:69:69:44:B1:61:3C:2E:8C:9C:60:6A:1E:06:EB:79 Certificate issuer: /CN=9e55320077696944b1613c2e8c9c606a1e06eb79 Certificate serial: 019B410032827A2571B2001D89A0A27A33BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft Manifest number: 17A9 Signing time: Sun 21 Dec 2025 13:01:30 +0000 Manifest this update: Sun 21 Dec 2025 13:01:30 +0000 Manifest next update: Mon 22 Dec 2025 13:01:30 +0000 Files and hashes: 1: MWa5Dj5_kmbgw0j6IBXQLJfi3UE.roa (hash: IKx6KdWK7MMrT+DuoPdaDD+mZCI7VV+oe8XMrptTZ1w=) 2: QjtWj02YBmI5Jv7YvgwRw2CvoyA.roa (hash: xzR/aqYGTG/UIUSP1rL50ozgA3zAN0ypP0J4BQa6rSk=) 3: T1_pchNqlq7DTDdnnhWMYLChBoU.roa (hash: 3peIpL8l/Rnx3wWmXa0H7Vz2+9XZpZaFvAX9xROlB/s=) 4: crvEgPTpcYjRSHsrYeLgXXEBKUk.roa (hash: 7eXEVTxEH/UTzDacXKPIjatCFJu/CB4kzr15IvQwXDk=) 5: hvCCVUZ3vm78utey9zVykeFfmZg.roa (hash: 8LKNeWR/ydRJi6I0838T1dU97Q8jY2cXv/vQVdAuDbQ=) 6: nlUyAHdpaUSxYTwujJxgah4G63k.crl (hash: +DdSen2a0zwTZZMaqNB6nDaRBID8rbejA0VH0z2NIIQ=) 7: oGavUwYGf9k8hmqppcV6OhAR0l8.roa (hash: xxSUypsCBzVEfCKjWpeRgbmsfcja4p6HlyrSFwzu1Eo=) 8: ofJM-BOf8d42dE82c9Ub9dgl42A.roa (hash: 5Kr1/Loqh5IoZ9YAjtlJKKCAtdpo/Xrh4HBNFY8lq58=) 9: qealtEqMLJg3Xy2LvZJt_teWrWQ.roa (hash: jUDg3WMKq6N0QAPZM0fHhLPl0mZhBgxm/pe95LVDZy0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.crl rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:00:32:82:7a:25:71:b2:00:1d:89:a0:a2:7a:33:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e55320077696944b1613c2e8c9c606a1e06eb79 Validity Not Before: Dec 21 13:01:30 2025 GMT Not After : Dec 22 13:01:30 2025 GMT Subject: CN=2dec7a560ed814d3b04c83cb9f06a12bf183730e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:bc:07:c5:c5:5b:0d:45:1e:e6:b8:71:c2:56: 76:19:7a:30:22:27:dc:4b:08:b2:e2:e1:70:bc:c6: 66:30:a6:67:61:37:f6:11:98:f4:8a:00:ab:37:7e: ca:26:ae:64:50:07:7b:13:47:39:a0:4d:0a:d6:e6: 74:e5:60:12:88:06:aa:b5:91:7e:3b:a9:0f:a6:a0: 06:bb:27:c1:68:66:b4:73:68:3e:5b:ba:f9:b4:d7: 1b:04:ac:a0:4e:fb:b5:e9:fb:b5:10:4c:a8:83:ca: 8f:51:94:d9:61:5d:74:4c:f9:b9:41:da:e8:0f:42: 51:3b:46:9e:94:d3:b1:1a:58:bf:24:c4:b6:d0:90: 7b:dd:11:6d:d0:fb:00:38:5f:89:6c:59:1a:73:d7: dd:e2:8e:d4:69:ae:e8:df:8c:f6:b1:d4:3d:2c:43: 9f:95:a9:cd:09:9b:80:a3:6c:36:3a:01:94:34:1a: 55:b6:16:94:af:5d:f0:7a:bf:65:c4:c5:38:2b:13: d5:83:d5:78:b7:39:e4:03:cb:f4:ef:ea:88:1c:2b: 97:7f:fd:d0:4d:0c:ba:f7:ce:1d:6d:97:95:9d:54: 8a:a3:c6:2e:91:10:7e:78:56:20:ab:36:79:86:d9: 05:3c:7e:1d:f3:2f:c8:72:db:34:93:89:22:96:16: d3:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:EC:7A:56:0E:D8:14:D3:B0:4C:83:CB:9F:06:A1:2B:F1:83:73:0E X509v3 Authority Key Identifier: keyid:9E:55:32:00:77:69:69:44:B1:61:3C:2E:8C:9C:60:6A:1E:06:EB:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:f3:c2:30:cf:66:7b:bb:cb:0a:5a:58:18:0c:a0:0d:41:9e: 36:40:b2:12:b6:05:0f:0c:d0:24:23:6c:89:97:02:69:ec:30: 36:04:c0:a1:dc:2a:aa:32:bd:58:f3:d5:86:58:88:2c:61:8c: c5:4c:57:46:32:cf:bd:e3:0b:d1:51:ed:91:9a:7d:8a:f6:ba: c0:47:9a:75:e0:a5:9f:f4:67:de:48:53:c9:d8:36:83:5a:1a: b0:22:eb:9b:b0:49:9e:71:c8:41:55:4d:d0:55:1f:88:47:78: ef:c6:c4:50:15:a8:41:9c:a2:b6:67:8c:41:db:b0:72:43:98: 13:ca:e8:8a:c8:0a:6c:40:a8:71:0e:ad:a7:e3:72:ff:d9:61: 14:00:bb:f8:2d:a5:57:fa:de:c0:c8:e3:e3:0c:46:78:31:f8: 84:4f:2b:0c:de:c0:e4:cc:11:76:10:d6:bf:f8:7b:25:2e:39: 82:c1:a5:0e:e1:47:c0:82:03:2c:72:9f:98:67:cb:a0:b2:3a: 4d:fc:23:74:d1:5c:cc:71:69:74:10:3b:65:02:17:9b:ac:c1: 81:61:ac:4d:b2:7b:62:00:49:1e:7b:08:94:4a:97:c4:63:10: 73:ca:13:c7:b2:5e:22:b8:25:c5:cd:56:5f:c7:40:b1:a8:ed: c2:3b:3d:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBADKCeiVxsgAdiaCiejO9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNTUzMjAwNzc2OTY5NDRiMTYxM2MyZThjOWM2MDZhMWUw NmViNzkwHhcNMjUxMjIxMTMwMTMwWhcNMjUxMjIyMTMwMTMwWjAzMTEwLwYDVQQD EygyZGVjN2E1NjBlZDgxNGQzYjA0YzgzY2I5ZjA2YTEyYmYxODM3MzBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7wHxcVbDUUe5rhxwlZ2GXowIifc Swiy4uFwvMZmMKZnYTf2EZj0igCrN37KJq5kUAd7E0c5oE0K1uZ05WASiAaqtZF+ O6kPpqAGuyfBaGa0c2g+W7r5tNcbBKygTvu16fu1EEyog8qPUZTZYV10TPm5Qdro D0JRO0aelNOxGli/JMS20JB73RFt0PsAOF+JbFkac9fd4o7Uaa7o34z2sdQ9LEOf lanNCZuAo2w2OgGUNBpVthaUr13wer9lxMU4KxPVg9V4tznkA8v07+qIHCuXf/3Q TQy6984dbZeVnVSKo8YukRB+eFYgqzZ5htkFPH4d8y/Icts0k4kilhbTWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC3selYO2BTTsEyDy58GoSvxg3MOMB8GA1UdIwQY MBaAFJ5VMgB3aWlEsWE8LoycYGoeBut5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmxVeUFIZHBhVVN4WVR3dWpKeGdhaDRHNjNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8yNjBiNjEtYTM0OC00ZDQ3LTkyZjYt MWUwZThiOTA5ZTM0LzEvbmxVeUFIZHBhVVN4WVR3dWpKeGdhaDRHNjNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC8yNjBiNjEtYTM0OC00ZDQ3LTkyZjYtMWUwZThiOTA5ZTM0 LzEvbmxVeUFIZHBhVVN4WVR3dWpKeGdhaDRHNjNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAevPCMM9m e7vLClpYGAygDUGeNkCyErYFDwzQJCNsiZcCaewwNgTAodwqqjK9WPPVhliILGGM xUxXRjLPveML0VHtkZp9iva6wEeadeCln/Rn3khTydg2g1oasCLrm7BJnnHIQVVN 0FUfiEd478bEUBWoQZyitmeMQduwckOYE8roisgKbECocQ6tp+Ny/9lhFAC7+C2l V/rewMjj4wxGeDH4hE8rDN7A5MwRdhDWv/h7JS45gsGlDuFHwIIDLHKfmGfLoLI6 TfwjdNFczHFpdBA7ZQIXm6zBgWGsTbJ7YgBJHnsIlEqXxGMQc8oTx7JeIrglxc1W X8dAsajtwjs9Pw== -----END CERTIFICATE-----Generated at Sun Dec 21 17:30:14 2025 by rpki-client