This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft File: nrUOU4bICaD65lMKpejZglJR3tA.mft (raw, json) Hash identifier: w2nKz5hfumh/PoyD/XPwu3uQyhw9udhiqUxm1E1VoeM= Subject key identifier: 22:8F:64:8E:14:F4:3B:DC:49:25:C9:71:AF:5E:5A:FB:7D:53:9A:40 Authority key identifier: 9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0 Certificate issuer: /CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0 Certificate serial: 019AF35281B2CCA4F706ECBAFB97B892007F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft Manifest number: 0BA7 Signing time: Sat 06 Dec 2025 11:01:01 +0000 Manifest this update: Sat 06 Dec 2025 11:01:01 +0000 Manifest next update: Sun 07 Dec 2025 11:01:01 +0000 Files and hashes: 1: LUnk__H52Ka1UZQ74SFwt2XYOA0.roa (hash: STMUNAtIYTQ2D1f5QvDk6ta50/b1jlAx1bvn490hmQY=) 2: hvH1lUFj1VAFusb_pQJRTraQJ4U.roa (hash: AJ2AV5CVSEoSqNl0zVVSMcCjH1TLixfyv1cSlmQnkz0=) 3: j1xgO_hIvyN1bDBzOqYS6suNPzQ.roa (hash: nD3squlase6LCY8dCz/RdkZ25qLuoWJZ9yqzIv/Hk64=) 4: nrUOU4bICaD65lMKpejZglJR3tA.crl (hash: rUnf7TwwU+cmOjTXfiXbsVwaynG7KGbXmEFlOpasJuw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:81:b2:cc:a4:f7:06:ec:ba:fb:97:b8:92:00:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0 Validity Not Before: Dec 6 11:01:01 2025 GMT Not After : Dec 7 11:01:01 2025 GMT Subject: CN=228f648e14f43bdc4925c971af5e5afb7d539a40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f3:6a:c6:2d:6d:4e:22:8b:62:0c:26:1b:67: d0:84:16:88:a1:ba:df:e8:cb:b7:ca:2f:04:08:99: d0:9f:bd:d8:d7:5f:0a:4f:7a:08:0c:b4:8b:7f:da: 1c:39:6b:cb:69:eb:c3:37:13:3b:6b:59:be:71:7e: fc:d3:e7:e8:f0:17:5b:ab:bf:1b:5d:1f:b5:72:8b: df:d8:32:3b:93:96:7c:0c:94:ea:fc:b7:23:65:be: ff:2a:81:9d:6d:b0:b0:d9:ca:eb:69:eb:ef:5a:1a: ae:3c:72:54:3e:7f:79:cd:ae:31:23:5a:01:7e:09: 01:53:a9:dc:20:72:1e:71:dd:65:a3:fa:eb:16:9a: 1d:df:06:d1:0f:f9:46:db:ac:6c:6a:2e:9f:9c:2f: 59:f7:9c:d7:53:b9:36:b2:f9:17:e9:19:cc:66:c3: ad:12:92:68:25:0c:a4:77:b0:10:59:9e:12:83:6f: dc:23:d9:e1:18:eb:16:b3:9d:91:67:c4:43:f3:a2: 39:ee:62:69:79:ef:9d:d9:86:76:5c:33:8d:6f:f0: bd:7c:1e:6c:0e:9c:00:aa:88:ae:48:47:1c:66:51: 59:7d:39:32:22:8a:d2:62:6c:27:ed:93:f7:64:a4: 9f:b4:d4:3f:4c:5d:96:94:e1:04:9e:63:32:6d:0a: cf:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:8F:64:8E:14:F4:3B:DC:49:25:C9:71:AF:5E:5A:FB:7D:53:9A:40 X509v3 Authority Key Identifier: keyid:9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:68:b9:8e:a8:61:7b:4c:0c:c3:4a:c1:f0:c8:2a:f6:12:54: 96:3a:5b:25:c0:8c:1f:5d:15:0f:a0:b0:00:37:d1:26:95:21: e8:48:01:53:c3:80:32:06:72:e4:3a:9c:a8:2d:8c:e4:27:b3: f1:2b:d8:ef:07:da:74:ce:66:f7:b3:c8:dc:1e:8d:04:d4:d4: fd:70:ab:07:dc:bc:38:45:11:5e:8b:4d:52:03:90:02:74:18: 32:f5:fa:e0:aa:95:b6:fd:02:05:95:f2:d0:e9:fc:e7:77:b2: f1:c2:34:95:85:f7:1d:8d:11:4a:ff:08:6e:da:c6:b7:2e:d9: 7c:a4:0d:ec:f7:6b:fe:b9:e6:91:7b:bf:e2:40:12:69:da:bc: 63:d7:db:1c:09:1a:a7:57:df:4a:7c:45:56:14:f7:d8:64:60: d6:46:81:8e:66:1a:4d:66:f4:90:1a:7a:79:3c:a5:f0:9e:74: 35:0f:7c:e5:1e:32:70:b6:93:ad:30:b8:96:46:f7:3b:f3:72: a6:fa:6c:b4:aa:7b:ca:29:66:a1:88:95:ff:dc:4f:ff:d7:21: 38:5b:56:b5:75:d3:72:2d:f6:1a:db:86:30:a8:58:66:17:0c: d0:d6:d9:d2:99:5c:94:7c:d2:cf:57:f5:db:80:16:3d:4e:23: 21:db:00:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUoGyzKT3Buy6+5e4kgB/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllYjUwZTUzODZjODA5YTBmYWU2NTMwYWE1ZThkOTgyNTI1 MWRlZDAwHhcNMjUxMjA2MTEwMTAxWhcNMjUxMjA3MTEwMTAxWjAzMTEwLwYDVQQD EygyMjhmNjQ4ZTE0ZjQzYmRjNDkyNWM5NzFhZjVlNWFmYjdkNTM5YTQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfNqxi1tTiKLYgwmG2fQhBaIobrf 6Mu3yi8ECJnQn73Y118KT3oIDLSLf9ocOWvLaevDNxM7a1m+cX780+fo8Bdbq78b XR+1covf2DI7k5Z8DJTq/LcjZb7/KoGdbbCw2crraevvWhquPHJUPn95za4xI1oB fgkBU6ncIHIecd1lo/rrFpod3wbRD/lG26xsai6fnC9Z95zXU7k2svkX6RnMZsOt EpJoJQykd7AQWZ4Sg2/cI9nhGOsWs52RZ8RD86I57mJpee+d2YZ2XDONb/C9fB5s DpwAqoiuSEccZlFZfTkyIorSYmwn7ZP3ZKSftNQ/TF2WlOEEnmMybQrPhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCKPZI4U9DvcSSXJca9eWvt9U5pAMB8GA1UdIwQY MBaAFJ61DlOGyAmg+uZTCqXo2YJSUd7QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnJVT1U0YklDYUQ2NWxNS3BlalpnbEpSM3RBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9iNTQ2NDEtYTk1YS00YWRkLWE0NWUt MWNhZGE2ZThiMWE5LzEvbnJVT1U0YklDYUQ2NWxNS3BlalpnbEpSM3RBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy9iNTQ2NDEtYTk1YS00YWRkLWE0NWUtMWNhZGE2ZThiMWE5 LzEvbnJVT1U0YklDYUQ2NWxNS3BlalpnbEpSM3RBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP2i5jqhh e0wMw0rB8Mgq9hJUljpbJcCMH10VD6CwADfRJpUh6EgBU8OAMgZy5DqcqC2M5Cez 8SvY7wfadM5m97PI3B6NBNTU/XCrB9y8OEURXotNUgOQAnQYMvX64KqVtv0CBZXy 0On853ey8cI0lYX3HY0RSv8IbtrGty7ZfKQN7Pdr/rnmkXu/4kASadq8Y9fbHAka p1ffSnxFVhT32GRg1kaBjmYaTWb0kBp6eTyl8J50NQ985R4ycLaTrTC4lkb3O/Ny pvpstKp7yilmoYiV/9xP/9chOFtWtXXTci32GtuGMKhYZhcM0NbZ0plclHzSz1f1 24AWPU4jIdsAGQ== -----END CERTIFICATE-----Generated at Sat Dec 6 21:34:35 2025 by rpki-client