This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/bdd17a-fad4-4249-ac0f-edfbab3361bb/1/nuC9T-woxBx9-CFI8JHsPzkb23A.mft File: nuC9T-woxBx9-CFI8JHsPzkb23A.mft (raw, json) Hash identifier: BaBdBQ+DetVVn8v8KStrZ4hG/f/U7W7O3WclKhAYXpk= Subject key identifier: 1D:10:DF:94:C4:E6:53:53:7D:61:56:E9:5C:68:7D:16:A5:40:73:FF Authority key identifier: 9E:E0:BD:4F:EC:28:C4:1C:7D:F8:21:48:F0:91:EC:3F:39:1B:DB:70 Certificate issuer: /CN=9ee0bd4fec28c41c7df82148f091ec3f391bdb70 Certificate serial: 019AF12DB4DEA18E5F6F1C608267403A11C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nuC9T-woxBx9-CFI8JHsPzkb23A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/bdd17a-fad4-4249-ac0f-edfbab3361bb/1/nuC9T-woxBx9-CFI8JHsPzkb23A.mft Manifest number: 090F Signing time: Sat 06 Dec 2025 01:01:35 +0000 Manifest this update: Sat 06 Dec 2025 01:01:35 +0000 Manifest next update: Sun 07 Dec 2025 01:01:35 +0000 Files and hashes: 1: nuC9T-woxBx9-CFI8JHsPzkb23A.crl (hash: 9Jshng/0kAjAQOJVq/3AMWWS+uVh4UOOjtYCHGhzVKA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/bdd17a-fad4-4249-ac0f-edfbab3361bb/1/nuC9T-woxBx9-CFI8JHsPzkb23A.crl rsync://rpki.ripe.net/repository/DEFAULT/26/bdd17a-fad4-4249-ac0f-edfbab3361bb/1/nuC9T-woxBx9-CFI8JHsPzkb23A.mft rsync://rpki.ripe.net/repository/DEFAULT/nuC9T-woxBx9-CFI8JHsPzkb23A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:b4:de:a1:8e:5f:6f:1c:60:82:67:40:3a:11:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ee0bd4fec28c41c7df82148f091ec3f391bdb70 Validity Not Before: Dec 6 01:01:35 2025 GMT Not After : Dec 7 01:01:35 2025 GMT Subject: CN=1d10df94c4e653537d6156e95c687d16a54073ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:11:18:2f:89:45:3c:e3:51:45:7e:75:a2:1b: 39:ed:ef:81:87:6f:1c:4c:f4:bd:98:bd:9b:7d:81: 46:30:c8:f2:02:a8:20:5a:08:3d:45:39:ce:99:fa: c1:83:5b:4a:01:9a:d3:b6:7d:19:1e:20:ac:55:0c: 64:66:62:4f:cc:c2:f6:8c:08:21:3f:68:b7:c5:8a: c7:d3:e6:8c:6a:66:1a:a5:7f:6c:65:0f:08:d0:c3: ed:43:27:53:df:83:f2:59:66:80:12:a1:90:ee:b7: f9:c0:fd:ab:03:58:70:b5:4d:9d:46:fd:5f:7e:18: 5a:34:74:a8:96:8f:bb:09:1f:b0:1e:72:e7:cb:b6: 8e:09:a0:e9:a3:44:86:3c:f9:81:8d:f7:90:5d:ec: 67:cf:57:5f:2a:35:1a:82:25:1f:1c:cf:fb:81:d3: 47:ae:82:25:fa:b8:4c:fd:22:59:56:7c:b6:b2:42: e7:90:78:62:5f:da:c6:57:ed:8c:e1:25:6a:e5:a7: 18:1f:b2:06:66:bd:1b:5f:8e:68:2b:78:cc:0b:fe: 3e:42:9f:c1:7e:f5:cb:f3:c2:fb:44:ae:a8:d9:1b: fb:53:55:e2:9a:32:51:4f:4e:0e:51:a2:52:03:75: d5:ca:b8:7a:5c:03:4c:e4:94:a5:00:4f:c7:b2:63: e0:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:10:DF:94:C4:E6:53:53:7D:61:56:E9:5C:68:7D:16:A5:40:73:FF X509v3 Authority Key Identifier: keyid:9E:E0:BD:4F:EC:28:C4:1C:7D:F8:21:48:F0:91:EC:3F:39:1B:DB:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nuC9T-woxBx9-CFI8JHsPzkb23A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/bdd17a-fad4-4249-ac0f-edfbab3361bb/1/nuC9T-woxBx9-CFI8JHsPzkb23A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/bdd17a-fad4-4249-ac0f-edfbab3361bb/1/nuC9T-woxBx9-CFI8JHsPzkb23A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:27:f7:90:5d:f5:3f:e1:d7:af:32:81:1e:80:82:01:c2:4a: a8:14:41:59:02:b7:c9:5a:dd:0c:02:06:6a:67:1f:82:2d:3b: d5:a5:ab:2d:7e:2d:ed:81:da:b5:dc:9d:14:12:4c:a6:61:d3: d6:57:71:0a:cc:83:ef:f1:b4:0c:36:62:3f:dc:81:14:89:18: 84:78:7f:35:74:58:df:d2:b5:d3:53:42:0a:3d:1e:57:77:14: e6:40:4b:e6:20:81:cf:5e:b3:33:76:11:e6:cc:a5:90:4a:ad: 41:ad:75:32:fe:ce:69:2e:cb:3b:a1:1e:69:ca:d0:22:5b:b0: 87:09:ba:d3:c7:20:01:3e:91:7f:0e:cc:2d:7b:00:17:ab:4e: f2:0c:73:58:03:bd:f6:63:13:b3:c3:2a:c3:25:9a:88:86:27: f4:09:e6:b0:0b:ed:70:15:2a:0c:63:48:7c:94:75:4a:a0:eb: dc:be:05:84:43:6b:30:a9:9d:0b:fb:3d:c8:b5:15:74:07:81: bc:ee:1a:eb:f4:c0:07:d6:68:ac:1c:d7:9e:a2:52:ec:88:51: e5:c0:05:cb:6d:1e:36:04:db:07:da:92:d6:1e:70:83:6a:37: f8:63:b6:db:88:a8:da:c6:34:8d:62:49:f4:97:b9:ca:b3:d3: 22:5d:46:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLbTeoY5fbxxggmdAOhHFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllZTBiZDRmZWMyOGM0MWM3ZGY4MjE0OGYwOTFlYzNmMzkx YmRiNzAwHhcNMjUxMjA2MDEwMTM1WhcNMjUxMjA3MDEwMTM1WjAzMTEwLwYDVQQD EygxZDEwZGY5NGM0ZTY1MzUzN2Q2MTU2ZTk1YzY4N2QxNmE1NDA3M2ZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xEYL4lFPONRRX51ohs57e+Bh28c TPS9mL2bfYFGMMjyAqggWgg9RTnOmfrBg1tKAZrTtn0ZHiCsVQxkZmJPzML2jAgh P2i3xYrH0+aMamYapX9sZQ8I0MPtQydT34PyWWaAEqGQ7rf5wP2rA1hwtU2dRv1f fhhaNHSolo+7CR+wHnLny7aOCaDpo0SGPPmBjfeQXexnz1dfKjUagiUfHM/7gdNH roIl+rhM/SJZVny2skLnkHhiX9rGV+2M4SVq5acYH7IGZr0bX45oK3jMC/4+Qp/B fvXL88L7RK6o2Rv7U1XimjJRT04OUaJSA3XVyrh6XANM5JSlAE/HsmPgBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB0Q35TE5lNTfWFW6VxofRalQHP/MB8GA1UdIwQY MBaAFJ7gvU/sKMQcffghSPCR7D85G9twMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnVDOVQtd294Qng5LUNGSThKSHNQemtiMjNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9iZGQxN2EtZmFkNC00MjQ5LWFjMGYt ZWRmYmFiMzM2MWJiLzEvbnVDOVQtd294Qng5LUNGSThKSHNQemtiMjNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi9iZGQxN2EtZmFkNC00MjQ5LWFjMGYtZWRmYmFiMzM2MWJi LzEvbnVDOVQtd294Qng5LUNGSThKSHNQemtiMjNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANyf3kF31 P+HXrzKBHoCCAcJKqBRBWQK3yVrdDAIGamcfgi071aWrLX4t7YHatdydFBJMpmHT 1ldxCsyD7/G0DDZiP9yBFIkYhHh/NXRY39K101NCCj0eV3cU5kBL5iCBz16zM3YR 5sylkEqtQa11Mv7OaS7LO6EeacrQIluwhwm608cgAT6Rfw7MLXsAF6tO8gxzWAO9 9mMTs8MqwyWaiIYn9AnmsAvtcBUqDGNIfJR1SqDr3L4FhENrMKmdC/s9yLUVdAeB vO4a6/TAB9ZorBzXnqJS7IhR5cAFy20eNgTbB9qS1h5wg2o3+GO224io2sY0jWJJ 9Je5yrPTIl1GLw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:42:31 2025 by rpki-client