This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/5ced25-9096-4750-8219-0b31c332d50d/1/nD_Ua11gbBzKtVixc24mIaS8BAM.mft File: nD_Ua11gbBzKtVixc24mIaS8BAM.mft (raw, json) Hash identifier: wGEODdqvsjo6dyCkqvVDQDtFiy/6PoLFSHfHnQOVpWM= Subject key identifier: 66:86:FF:5C:CE:A9:7C:55:2E:D2:28:2F:12:F8:6C:09:0E:B7:66:A5 Authority key identifier: 9C:3F:D4:6B:5D:60:6C:1C:CA:B5:58:B1:73:6E:26:21:A4:BC:04:03 Certificate issuer: /CN=9c3fd46b5d606c1ccab558b1736e2621a4bc0403 Certificate serial: 019AF5408D4F893E9F45C96C2F81D6989313 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nD_Ua11gbBzKtVixc24mIaS8BAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/5ced25-9096-4750-8219-0b31c332d50d/1/nD_Ua11gbBzKtVixc24mIaS8BAM.mft Manifest number: 09F0 Signing time: Sat 06 Dec 2025 20:00:39 +0000 Manifest this update: Sat 06 Dec 2025 20:00:39 +0000 Manifest next update: Sun 07 Dec 2025 20:00:39 +0000 Files and hashes: 1: nD_Ua11gbBzKtVixc24mIaS8BAM.crl (hash: MLkwn7l2TTWklgpIbzVKzpNsnqzF87l20mHEpkMdrO4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/5ced25-9096-4750-8219-0b31c332d50d/1/nD_Ua11gbBzKtVixc24mIaS8BAM.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/5ced25-9096-4750-8219-0b31c332d50d/1/nD_Ua11gbBzKtVixc24mIaS8BAM.mft rsync://rpki.ripe.net/repository/DEFAULT/nD_Ua11gbBzKtVixc24mIaS8BAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:8d:4f:89:3e:9f:45:c9:6c:2f:81:d6:98:93:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c3fd46b5d606c1ccab558b1736e2621a4bc0403 Validity Not Before: Dec 6 20:00:39 2025 GMT Not After : Dec 7 20:00:39 2025 GMT Subject: CN=6686ff5ccea97c552ed2282f12f86c090eb766a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:3a:97:83:a2:91:dd:a0:08:75:77:80:6b:18: 4f:cc:25:65:ac:27:e4:98:63:e0:01:90:f7:62:f2: 41:8e:34:08:ef:c5:20:f9:73:3e:b7:ee:0e:f6:4b: a2:e8:81:c1:d1:73:fe:1a:02:72:0f:3a:d7:1c:55: 4a:e3:97:73:0e:7e:95:04:84:95:b6:b0:f7:35:2d: 4e:6c:9e:23:27:46:b0:43:0e:13:9d:c3:a8:4a:7d: 2b:0e:a2:ec:bd:fc:2d:16:bd:45:ea:b8:00:f4:0b: 5d:55:f0:5c:c0:43:90:53:d4:52:9a:43:95:0d:17: b6:9a:dc:41:96:9a:2e:d9:73:31:81:cb:8d:36:ce: e7:b9:18:2a:29:64:f1:16:be:fa:cc:f0:b0:5b:1b: e3:7b:b9:3f:ec:d6:0d:06:a9:6a:04:0e:7f:f4:7a: 78:50:26:7e:fd:68:05:13:65:ef:ff:19:1b:b7:f0: 8c:95:c0:48:39:07:13:fb:97:63:5b:16:aa:5d:6d: 36:86:7e:e3:15:3f:0e:b4:f1:59:5a:31:5f:04:d4: 47:98:1d:25:a7:2b:8f:bc:e3:6b:ff:58:2f:74:d9: 84:93:34:6e:ca:59:e2:03:3a:39:da:e8:fd:be:6e: e3:e1:13:e8:ae:36:79:2c:f9:8b:a7:5b:4a:16:f8: 4d:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:86:FF:5C:CE:A9:7C:55:2E:D2:28:2F:12:F8:6C:09:0E:B7:66:A5 X509v3 Authority Key Identifier: keyid:9C:3F:D4:6B:5D:60:6C:1C:CA:B5:58:B1:73:6E:26:21:A4:BC:04:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nD_Ua11gbBzKtVixc24mIaS8BAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/5ced25-9096-4750-8219-0b31c332d50d/1/nD_Ua11gbBzKtVixc24mIaS8BAM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/5ced25-9096-4750-8219-0b31c332d50d/1/nD_Ua11gbBzKtVixc24mIaS8BAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:7e:a8:24:51:64:99:73:f9:43:94:e3:82:16:48:3d:5d:88: 83:fd:74:8d:a3:4e:f3:7c:19:b7:90:09:1b:14:f7:ef:17:50: d2:d0:50:b6:2a:01:41:04:11:04:28:df:2e:3d:cd:3e:d5:94: 99:ca:2f:0b:6a:c2:ec:ad:58:3d:55:e7:c5:aa:4b:f6:d5:fb: fd:1b:be:f2:36:43:82:ea:32:aa:bb:f4:49:6d:35:10:8c:63: e3:69:91:e8:6f:b2:ae:71:a4:ba:48:e7:f3:8a:b5:fa:d5:bb: ba:83:8c:63:fa:1a:41:5d:7a:6d:95:9a:6c:f6:ac:5e:d0:67: 6b:61:ce:bb:4e:6b:95:0a:c9:73:68:f1:90:7f:e4:53:81:48: c3:59:f9:8e:57:f3:e2:16:a8:29:ff:33:35:f4:63:c9:fb:05: 43:21:b5:ee:f0:d1:fa:eb:7b:39:75:33:4f:b9:5e:e1:5e:0c: 39:d4:15:61:7a:8e:13:21:04:0d:48:8f:7e:99:96:7b:8b:65: 0f:c1:76:b8:34:68:3a:25:d9:0b:d1:2d:65:b1:db:d9:35:94: 62:d9:13:be:8a:21:91:f5:75:c8:82:de:c3:d1:94:3f:4c:e3: cf:ab:d5:a1:8c:3a:57:bb:3f:bb:72:a1:b4:8e:8f:b7:55:3f: 77:cb:38:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QI1PiT6fRclsL4HWmJMTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljM2ZkNDZiNWQ2MDZjMWNjYWI1NThiMTczNmUyNjIxYTRi YzA0MDMwHhcNMjUxMjA2MjAwMDM5WhcNMjUxMjA3MjAwMDM5WjAzMTEwLwYDVQQD Eyg2Njg2ZmY1Y2NlYTk3YzU1MmVkMjI4MmYxMmY4NmMwOTBlYjc2NmE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1zqXg6KR3aAIdXeAaxhPzCVlrCfk mGPgAZD3YvJBjjQI78Ug+XM+t+4O9kui6IHB0XP+GgJyDzrXHFVK45dzDn6VBISV trD3NS1ObJ4jJ0awQw4TncOoSn0rDqLsvfwtFr1F6rgA9AtdVfBcwEOQU9RSmkOV DRe2mtxBlpou2XMxgcuNNs7nuRgqKWTxFr76zPCwWxvje7k/7NYNBqlqBA5/9Hp4 UCZ+/WgFE2Xv/xkbt/CMlcBIOQcT+5djWxaqXW02hn7jFT8OtPFZWjFfBNRHmB0l pyuPvONr/1gvdNmEkzRuylniAzo52uj9vm7j4RPorjZ5LPmLp1tKFvhNmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGaG/1zOqXxVLtIoLxL4bAkOt2alMB8GA1UdIwQY MBaAFJw/1GtdYGwcyrVYsXNuJiGkvAQDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkRfVWExMWdiQnpLdFZpeGMyNG1JYVM4QkFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi81Y2VkMjUtOTA5Ni00NzUwLTgyMTkt MGIzMWMzMzJkNTBkLzEvbkRfVWExMWdiQnpLdFZpeGMyNG1JYVM4QkFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi81Y2VkMjUtOTA5Ni00NzUwLTgyMTktMGIzMWMzMzJkNTBk LzEvbkRfVWExMWdiQnpLdFZpeGMyNG1JYVM4QkFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc36oJFFk mXP5Q5TjghZIPV2Ig/10jaNO83wZt5AJGxT37xdQ0tBQtioBQQQRBCjfLj3NPtWU mcovC2rC7K1YPVXnxapL9tX7/Ru+8jZDguoyqrv0SW01EIxj42mR6G+yrnGkukjn 84q1+tW7uoOMY/oaQV16bZWabPasXtBna2HOu05rlQrJc2jxkH/kU4FIw1n5jlfz 4haoKf8zNfRjyfsFQyG17vDR+ut7OXUzT7le4V4MOdQVYXqOEyEEDUiPfpmWe4tl D8F2uDRoOiXZC9EtZbHb2TWUYtkTvoohkfV1yILew9GUP0zjz6vVoYw6V7s/u3Kh tI6Pt1U/d8s4Sg== -----END CERTIFICATE-----Generated at Sat Dec 6 22:30:30 2025 by rpki-client