This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft File: nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft (raw, json) Hash identifier: d+EU77bvTLmWvLURfI1Pvw4TKMda1fciWLFtYjdtty4= Subject key identifier: F7:89:06:11:58:93:52:0C:42:C0:AE:57:F1:E1:76:17:B2:A1:A8:55 Authority key identifier: 9C:B9:6C:E5:9C:59:55:75:30:F0:EA:A4:4C:66:45:03:D9:C4:01:ED Certificate issuer: /CN=9cb96ce59c59557530f0eaa44c664503d9c401ed Certificate serial: 019AF3F72E6868E09E2F799DFF226A2B15F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLls5ZxZVXUw8OqkTGZFA9nEAe0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft Manifest number: 0A31 Signing time: Sat 06 Dec 2025 14:00:53 +0000 Manifest this update: Sat 06 Dec 2025 14:00:53 +0000 Manifest next update: Sun 07 Dec 2025 14:00:53 +0000 Files and hashes: 1: 19v0BW9D62wRoBFE5ozFJdwOMQA.roa (hash: YMLiN+GeZBDn6zKwSH23wr8pzSjB9vWlcqgXSCgH65E=) 2: 9JwtlsVNx4_up1QMmZlfBeyOaK4.roa (hash: u78W1NzQkBkN4wGgOZ6ykgdqITqsuyTPVjwEYRW9o4E=) 3: HvZFP08B7xYA2IQmujw7UzbkG0Q.roa (hash: 7DGwHO9AiazjzBsJl92PU2yw56tPjljLpvn/rYKQLdM=) 4: nLls5ZxZVXUw8OqkTGZFA9nEAe0.crl (hash: pnMIMYS3pvbeXHDQjMnNLfG6SEPL0CAJZKlVcCk8ShE=) 5: rzRkpabW392oagemieZb-ufJNvQ.roa (hash: dkk52+Fs1zTx06BhMBDVpZtpxNa2IwHtUDyCEXA1hng=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.crl rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft rsync://rpki.ripe.net/repository/DEFAULT/nLls5ZxZVXUw8OqkTGZFA9nEAe0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:2e:68:68:e0:9e:2f:79:9d:ff:22:6a:2b:15:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cb96ce59c59557530f0eaa44c664503d9c401ed Validity Not Before: Dec 6 14:00:53 2025 GMT Not After : Dec 7 14:00:53 2025 GMT Subject: CN=f78906115893520c42c0ae57f1e17617b2a1a855 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:1f:f3:a2:89:f4:48:a3:f8:46:2e:73:34:65: 5c:4e:36:5b:c1:6c:b4:4f:de:4c:91:a7:1c:ab:ae: 88:92:16:02:9f:d3:ff:ed:34:f4:ac:14:f9:f5:00: ae:06:43:c8:d3:d9:55:55:ad:4a:57:c5:42:c8:b2: 38:11:d1:60:78:3c:50:aa:a0:a8:7b:3c:d8:d9:e8: ba:b2:86:29:27:fd:d3:ac:00:73:51:c3:5b:c9:c3: c2:60:91:f3:cf:c5:7f:0e:d1:e3:1d:8f:9d:cf:7d: 41:19:40:c1:65:c9:50:c6:07:e8:6e:1d:5e:56:c6: 18:10:d1:76:45:c7:78:2a:ec:a0:3a:6d:2f:7b:1e: cf:55:2c:8f:87:9b:9b:15:97:a3:e7:6e:97:ef:df: b3:8c:b5:9a:1b:af:8d:10:7e:97:3a:44:d9:9b:04: b8:c0:b9:ad:5b:79:40:3f:76:7e:0e:d5:6d:b9:2c: 01:12:75:a4:51:ea:e2:1b:99:57:24:26:48:b5:a1: 28:e7:b5:04:98:30:8c:2a:e7:6b:b0:1b:9f:05:14: 5e:8e:46:d9:c2:c7:8b:5b:57:42:18:4f:46:64:01: d8:14:14:35:2c:55:4b:d9:bd:9c:0c:57:9e:45:fa: f7:ac:ce:64:b3:c0:b6:51:5b:d3:25:08:25:8f:81: b1:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:89:06:11:58:93:52:0C:42:C0:AE:57:F1:E1:76:17:B2:A1:A8:55 X509v3 Authority Key Identifier: keyid:9C:B9:6C:E5:9C:59:55:75:30:F0:EA:A4:4C:66:45:03:D9:C4:01:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLls5ZxZVXUw8OqkTGZFA9nEAe0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:fa:b3:ac:92:20:98:46:9d:2a:36:84:40:ac:93:a7:49:3a: 5d:a5:2d:c9:7e:5c:2c:35:4d:7a:64:87:8e:07:cb:af:8a:5a: c5:6a:9e:7a:e1:4a:27:c2:d2:d4:71:03:f3:ba:71:2b:e0:09: ce:9d:b0:43:72:87:a8:18:70:aa:d5:6c:d3:1f:6a:af:5d:73: 2e:df:6b:f8:6d:e3:a4:ef:ae:8a:29:90:e4:84:78:9a:3d:f9: 63:ca:6e:4e:2e:94:50:ec:31:84:ce:ad:f7:bc:eb:bb:2c:3e: c7:4b:ce:86:c5:0d:a1:09:61:8f:71:90:b0:00:36:17:6b:0d: 3d:33:9e:34:34:f7:3a:2f:0a:28:0c:7f:d6:e3:e6:34:70:41: 43:85:8a:ea:ae:2a:14:bb:df:8c:9a:47:00:af:e9:1b:e6:c5: f0:b2:89:6f:46:f9:d3:ec:06:77:ba:f7:cf:06:01:75:44:14: 34:90:5c:87:7b:5e:3c:29:42:cd:2c:7c:10:f2:77:30:74:31: e7:39:c5:15:5f:d8:d1:36:38:aa:c5:e2:15:43:a7:09:a0:02: 19:cb:9a:da:d2:c4:f2:86:98:59:ca:1f:1c:69:fc:59:d5:bd: 24:e2:da:7d:ba:4b:10:40:3e:04:4c:2c:fe:c9:0c:71:5e:62: 4a:8b:f0:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz9y5oaOCeL3md/yJqKxX1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljYjk2Y2U1OWM1OTU1NzUzMGYwZWFhNDRjNjY0NTAzZDlj NDAxZWQwHhcNMjUxMjA2MTQwMDUzWhcNMjUxMjA3MTQwMDUzWjAzMTEwLwYDVQQD EyhmNzg5MDYxMTU4OTM1MjBjNDJjMGFlNTdmMWUxNzYxN2IyYTFhODU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjx/zoon0SKP4Ri5zNGVcTjZbwWy0 T95Mkaccq66IkhYCn9P/7TT0rBT59QCuBkPI09lVVa1KV8VCyLI4EdFgeDxQqqCo ezzY2ei6soYpJ/3TrABzUcNbycPCYJHzz8V/DtHjHY+dz31BGUDBZclQxgfobh1e VsYYENF2Rcd4KuygOm0vex7PVSyPh5ubFZej526X79+zjLWaG6+NEH6XOkTZmwS4 wLmtW3lAP3Z+DtVtuSwBEnWkUeriG5lXJCZItaEo57UEmDCMKudrsBufBRRejkbZ wseLW1dCGE9GZAHYFBQ1LFVL2b2cDFeeRfr3rM5ks8C2UVvTJQglj4GxNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPeJBhFYk1IMQsCuV/HhdheyoahVMB8GA1UdIwQY MBaAFJy5bOWcWVV1MPDqpExmRQPZxAHtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkxsczVaeFpWWFV3OE9xa1RHWkZBOW5FQWUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS81ZGQ3YjEtZTMzNy00MDRkLWI3NjQt ZGRiMGIxNDhlNDZiLzEvbkxsczVaeFpWWFV3OE9xa1RHWkZBOW5FQWUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS81ZGQ3YjEtZTMzNy00MDRkLWI3NjQtZGRiMGIxNDhlNDZi LzEvbkxsczVaeFpWWFV3OE9xa1RHWkZBOW5FQWUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK/qzrJIg mEadKjaEQKyTp0k6XaUtyX5cLDVNemSHjgfLr4paxWqeeuFKJ8LS1HED87pxK+AJ zp2wQ3KHqBhwqtVs0x9qr11zLt9r+G3jpO+uiimQ5IR4mj35Y8puTi6UUOwxhM6t 97zruyw+x0vOhsUNoQlhj3GQsAA2F2sNPTOeNDT3Oi8KKAx/1uPmNHBBQ4WK6q4q FLvfjJpHAK/pG+bF8LKJb0b50+wGd7r3zwYBdUQUNJBch3tePClCzSx8EPJ3MHQx 5znFFV/Y0TY4qsXiFUOnCaACGcua2tLE8oaYWcofHGn8WdW9JOLafbpLEEA+BEws /skMcV5iSovwvA== -----END CERTIFICATE-----Generated at Sat Dec 6 16:44:43 2025 by rpki-client