This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.mft File: nAqubUXQbffEJ4708hjkLbgHCUw.mft (raw, json) Hash identifier: NMNfi7oogELLzYQk0qTHrNRiaZwTCPVKuo9MzX5z7rM= Subject key identifier: DB:53:41:0C:86:A4:D7:3F:89:46:BE:F0:C5:DF:F2:AF:6F:94:55:46 Authority key identifier: 9C:0A:AE:6D:45:D0:6D:F7:C4:27:8E:F4:F2:18:E4:2D:B8:07:09:4C Certificate issuer: /CN=9c0aae6d45d06df7c4278ef4f218e42db807094c Certificate serial: 019AF16421D12A5A7B579D5C75936C0BC8ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nAqubUXQbffEJ4708hjkLbgHCUw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 02:01:02 +0000 Manifest this update: Sat 06 Dec 2025 02:01:02 +0000 Manifest next update: Sun 07 Dec 2025 02:01:02 +0000 Files and hashes: 1: MJMdhZnjDE7HHdif7jOifgXeBWw.roa (hash: OAM+4dNU25EOni1NCJmygQc3McNUoy2zZaTz7W6MCZg=) 2: nAqubUXQbffEJ4708hjkLbgHCUw.crl (hash: 0m5F8KMQhodKl/Xt9H9PHgLc/rEJHy7yrUHFZQjRD2w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.crl rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.mft rsync://rpki.ripe.net/repository/DEFAULT/nAqubUXQbffEJ4708hjkLbgHCUw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:21:d1:2a:5a:7b:57:9d:5c:75:93:6c:0b:c8:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c0aae6d45d06df7c4278ef4f218e42db807094c Validity Not Before: Dec 6 02:01:02 2025 GMT Not After : Dec 7 02:01:02 2025 GMT Subject: CN=db53410c86a4d73f8946bef0c5dff2af6f945546 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:21:35:43:8c:37:92:8b:69:da:9d:35:96:b2: dd:0f:0b:8f:cb:39:8b:d2:65:b2:ea:35:1c:da:2a: 44:ea:bf:8e:4c:ed:fd:17:46:80:55:4e:24:09:63: b1:46:b4:1c:80:e1:c4:08:14:54:ea:22:4a:16:ad: 98:db:4f:33:49:80:08:7c:97:3a:07:ae:6b:3d:93: 47:24:0b:70:1d:18:c2:97:22:dc:bf:c8:3a:20:a3: 8b:ef:19:23:91:19:1a:cd:2f:a7:2c:88:0f:66:d3: 66:e5:d5:79:6a:e0:7f:cc:b5:e9:fd:79:af:8a:7c: 3e:d5:0d:50:32:62:db:a8:c0:1f:24:f5:54:19:9a: c7:0f:ce:df:bd:67:79:8a:3d:84:65:9b:72:3b:05: d3:11:fa:98:6f:bd:5e:5b:33:8c:1f:8b:19:28:7d: 6a:fc:ba:99:0b:5b:71:f2:d5:bb:25:c5:54:c7:56: e5:b1:ec:de:77:64:17:88:e8:37:b1:6c:f7:29:91: 22:d5:2d:79:b8:c8:d6:b4:71:02:e9:fb:c9:18:75: 6d:68:bb:93:ae:4f:c6:8f:54:75:6b:d4:26:af:fe: b8:bb:26:29:8f:e8:89:ed:26:cf:34:0b:56:ac:8a: 0a:ba:07:b3:dd:34:3d:64:56:68:8d:a1:b4:85:17: 10:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:53:41:0C:86:A4:D7:3F:89:46:BE:F0:C5:DF:F2:AF:6F:94:55:46 X509v3 Authority Key Identifier: keyid:9C:0A:AE:6D:45:D0:6D:F7:C4:27:8E:F4:F2:18:E4:2D:B8:07:09:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAqubUXQbffEJ4708hjkLbgHCUw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:aa:f7:35:ca:14:6a:04:2f:8e:a5:1a:be:42:25:77:ea:3d: d2:68:73:25:72:5f:b4:dd:38:47:3b:a2:11:8b:17:d4:2f:5a: 37:7e:f8:dc:5e:e6:31:10:f9:ad:7c:44:92:92:89:89:c5:f6: 1b:80:29:7d:33:73:19:34:5c:de:d9:52:5d:83:a2:bd:70:c3: e3:a8:55:bc:fe:4c:94:73:9b:7a:e2:e1:87:c5:58:9b:39:59: 0e:66:85:0e:5c:b4:0e:84:c9:e2:11:9c:4a:51:b3:c3:b0:56: 24:5a:9a:67:4f:40:5e:1c:e6:ae:ab:80:cf:c6:d9:39:f7:1e: f5:a1:0a:6c:04:4b:bc:16:6a:83:a0:5e:10:0c:da:ac:82:2e: ca:43:b6:51:64:00:95:bb:9a:27:04:29:cb:ff:61:a5:61:84: 31:0f:f4:d2:1b:93:c6:04:51:9e:49:b9:2a:17:04:27:3c:64: 75:9d:79:e0:79:8c:eb:1f:69:96:98:b4:c3:94:dd:12:64:68: 24:60:3b:88:c1:a4:17:9a:2b:15:91:70:af:89:22:9c:3b:0e: 98:6b:c1:7a:e7:e9:a3:f0:e6:7c:dc:0c:10:06:28:e8:39:da: fb:96:1e:c3:28:36:e7:81:f4:1a:34:8f:bf:db:64:e8:02:f9: 44:e2:c3:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZCHRKlp7V51cdZNsC8jtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljMGFhZTZkNDVkMDZkZjdjNDI3OGVmNGYyMThlNDJkYjgw NzA5NGMwHhcNMjUxMjA2MDIwMTAyWhcNMjUxMjA3MDIwMTAyWjAzMTEwLwYDVQQD EyhkYjUzNDEwYzg2YTRkNzNmODk0NmJlZjBjNWRmZjJhZjZmOTQ1NTQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryE1Q4w3kotp2p01lrLdDwuPyzmL 0mWy6jUc2ipE6r+OTO39F0aAVU4kCWOxRrQcgOHECBRU6iJKFq2Y208zSYAIfJc6 B65rPZNHJAtwHRjClyLcv8g6IKOL7xkjkRkazS+nLIgPZtNm5dV5auB/zLXp/Xmv inw+1Q1QMmLbqMAfJPVUGZrHD87fvWd5ij2EZZtyOwXTEfqYb71eWzOMH4sZKH1q /LqZC1tx8tW7JcVUx1blsezed2QXiOg3sWz3KZEi1S15uMjWtHEC6fvJGHVtaLuT rk/Gj1R1a9Qmr/64uyYpj+iJ7SbPNAtWrIoKugez3TQ9ZFZojaG0hRcQ0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNtTQQyGpNc/iUa+8MXf8q9vlFVGMB8GA1UdIwQY MBaAFJwKrm1F0G33xCeO9PIY5C24BwlMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkFxdWJVWFFiZmZFSjQ3MDhoamtMYmdIQ1V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9jOTIwZWMtMDdkYy00NjlkLWI4ODQt Yjk4YmJiMTYzN2MwLzEvbkFxdWJVWFFiZmZFSjQ3MDhoamtMYmdIQ1V3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi9jOTIwZWMtMDdkYy00NjlkLWI4ODQtYjk4YmJiMTYzN2Mw LzEvbkFxdWJVWFFiZmZFSjQ3MDhoamtMYmdIQ1V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN6r3NcoU agQvjqUavkIld+o90mhzJXJftN04RzuiEYsX1C9aN3743F7mMRD5rXxEkpKJicX2 G4ApfTNzGTRc3tlSXYOivXDD46hVvP5MlHObeuLhh8VYmzlZDmaFDly0DoTJ4hGc SlGzw7BWJFqaZ09AXhzmrquAz8bZOfce9aEKbARLvBZqg6BeEAzarIIuykO2UWQA lbuaJwQpy/9hpWGEMQ/00huTxgRRnkm5KhcEJzxkdZ154HmM6x9plpi0w5TdEmRo JGA7iMGkF5orFZFwr4kinDsOmGvBeufpo/DmfNwMEAYo6Dna+5Yewyg254H0GjSP v9tk6AL5ROLDvQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:20:04 2025 by rpki-client