This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/229182-4bdc-4234-a989-90d58c603256/1/nLt3urQ4qT002dXAqOC57zKuXaA.mft File: nLt3urQ4qT002dXAqOC57zKuXaA.mft (raw, json) Hash identifier: a7TWfMpHSUGcCOK+UgilOC0imHAdAkG1a07cqOZ7Tz0= Subject key identifier: A8:D3:18:74:E6:07:33:22:F8:F6:4E:34:3D:CA:16:A1:52:BE:9F:7F Authority key identifier: 9C:BB:77:BA:B4:38:A9:3D:34:D9:D5:C0:A8:E0:B9:EF:32:AE:5D:A0 Certificate issuer: /CN=9cbb77bab438a93d34d9d5c0a8e0b9ef32ae5da0 Certificate serial: 019AF12E4A81BD872A1433A9003755FA77D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLt3urQ4qT002dXAqOC57zKuXaA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/229182-4bdc-4234-a989-90d58c603256/1/nLt3urQ4qT002dXAqOC57zKuXaA.mft Manifest number: 08E7 Signing time: Sat 06 Dec 2025 01:02:14 +0000 Manifest this update: Sat 06 Dec 2025 01:02:14 +0000 Manifest next update: Sun 07 Dec 2025 01:02:14 +0000 Files and hashes: 1: TAsOnRZq8fiVm7IgWJUxtwQKXQw.roa (hash: uvW+4Cm/xTtLLngk0h3md/Re7mjqyVC2fS5xyiOuuj4=) 2: nLt3urQ4qT002dXAqOC57zKuXaA.crl (hash: 1Q/Qm+MdnMBZmx4PUdZJ+9j4axc1sx9/ZKH34IDCeoI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/229182-4bdc-4234-a989-90d58c603256/1/nLt3urQ4qT002dXAqOC57zKuXaA.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/229182-4bdc-4234-a989-90d58c603256/1/nLt3urQ4qT002dXAqOC57zKuXaA.mft rsync://rpki.ripe.net/repository/DEFAULT/nLt3urQ4qT002dXAqOC57zKuXaA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:4a:81:bd:87:2a:14:33:a9:00:37:55:fa:77:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cbb77bab438a93d34d9d5c0a8e0b9ef32ae5da0 Validity Not Before: Dec 6 01:02:14 2025 GMT Not After : Dec 7 01:02:14 2025 GMT Subject: CN=a8d31874e6073322f8f64e343dca16a152be9f7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:30:68:d4:34:b7:db:06:70:03:e9:4c:f9:4d: 48:7c:c1:2e:fa:08:a3:3e:0d:a8:bf:4c:9c:cd:ce: bb:60:34:21:22:e0:34:f2:99:f3:2b:26:6d:e0:fc: f4:4d:a4:9c:e0:5a:29:58:a5:70:55:2c:31:1d:c7: 1c:3a:a9:24:2a:45:71:eb:20:f1:66:ac:9b:32:bb: cb:00:c3:89:a3:cd:45:ea:5b:12:d1:29:3d:a4:85: 89:2c:58:13:58:dc:39:09:88:de:e8:6e:15:9e:31: 18:d5:bf:42:03:12:a1:c0:1c:f5:ce:b3:ed:08:c1: 38:12:4c:8c:8a:a2:4b:fb:42:7f:2a:97:df:59:7d: 48:4c:87:8c:9a:b5:54:3e:66:27:45:48:77:05:ee: c5:18:fc:e0:ba:7a:44:75:4c:e6:ae:85:08:bc:cc: 0b:ab:57:50:96:05:05:26:3c:85:9d:3b:ac:86:6d: fa:2c:64:df:70:0b:3d:e7:b3:4c:c0:70:f8:a5:d9: 55:0b:09:9d:a2:25:79:32:65:f4:3e:63:7f:39:d3: ea:79:33:30:37:76:9e:05:83:2b:4c:d3:58:f1:34: e4:ef:37:b7:dd:a4:70:0b:e7:b2:b5:e5:63:4e:da: 04:0a:ba:c0:e9:a4:96:24:81:fd:a2:76:4f:eb:94: 14:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:D3:18:74:E6:07:33:22:F8:F6:4E:34:3D:CA:16:A1:52:BE:9F:7F X509v3 Authority Key Identifier: keyid:9C:BB:77:BA:B4:38:A9:3D:34:D9:D5:C0:A8:E0:B9:EF:32:AE:5D:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLt3urQ4qT002dXAqOC57zKuXaA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/229182-4bdc-4234-a989-90d58c603256/1/nLt3urQ4qT002dXAqOC57zKuXaA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/229182-4bdc-4234-a989-90d58c603256/1/nLt3urQ4qT002dXAqOC57zKuXaA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:ea:35:e1:ff:19:e9:ba:df:e6:01:0c:08:c6:3e:78:ad:9d: ab:b1:9d:e7:68:2a:33:78:d8:bc:9b:40:df:60:aa:10:0d:1e: 5a:f2:02:18:e2:dd:89:ec:8b:f6:d6:52:7d:5f:94:c7:f2:06: 0b:97:2b:f7:f3:d0:d8:d3:30:05:78:7e:55:51:51:05:fd:6c: 12:ca:73:8a:9b:34:71:20:4f:fd:43:8a:fa:1f:43:dc:60:4b: 0d:a5:6f:8d:3d:73:11:fa:02:53:d4:59:ad:20:8d:69:84:f4: 57:06:99:7c:04:3b:10:e4:9b:21:ff:1e:6f:55:22:83:4d:3f: 78:98:b8:3f:5e:74:a5:34:04:9f:12:26:0b:f2:a1:06:13:31: fc:94:f5:81:eb:a7:1e:71:d3:95:e5:c2:cb:44:97:41:49:9d: 2b:11:b8:6f:d0:4c:f1:69:7d:b9:06:11:3a:c6:d5:10:e3:88: f8:55:ae:22:93:63:16:9f:3d:e7:d1:4f:1b:ac:60:62:4b:68: 1a:35:4a:3f:14:b9:c1:ec:da:a9:9f:3c:d4:10:f3:1c:72:81: b1:5e:de:e4:76:09:53:4e:e0:83:0d:23:b9:81:79:4c:97:64: 63:b5:1f:ef:18:e2:ba:6c:22:2c:a8:5a:53:06:87:99:de:3e: de:74:1e:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLkqBvYcqFDOpADdV+nfRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljYmI3N2JhYjQzOGE5M2QzNGQ5ZDVjMGE4ZTBiOWVmMzJh ZTVkYTAwHhcNMjUxMjA2MDEwMjE0WhcNMjUxMjA3MDEwMjE0WjAzMTEwLwYDVQQD EyhhOGQzMTg3NGU2MDczMzIyZjhmNjRlMzQzZGNhMTZhMTUyYmU5ZjdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6zBo1DS32wZwA+lM+U1IfMEu+gij Pg2ov0yczc67YDQhIuA08pnzKyZt4Pz0TaSc4FopWKVwVSwxHcccOqkkKkVx6yDx ZqybMrvLAMOJo81F6lsS0Sk9pIWJLFgTWNw5CYje6G4VnjEY1b9CAxKhwBz1zrPt CME4EkyMiqJL+0J/KpffWX1ITIeMmrVUPmYnRUh3Be7FGPzgunpEdUzmroUIvMwL q1dQlgUFJjyFnTushm36LGTfcAs957NMwHD4pdlVCwmdoiV5MmX0PmN/OdPqeTMw N3aeBYMrTNNY8TTk7ze33aRwC+eyteVjTtoECrrA6aSWJIH9onZP65QUWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKjTGHTmBzMi+PZOND3KFqFSvp9/MB8GA1UdIwQY MBaAFJy7d7q0OKk9NNnVwKjgue8yrl2gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkx0M3VyUTRxVDAwMmRYQXFPQzU3ekt1WGFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8yMjkxODItNGJkYy00MjM0LWE5ODkt OTBkNThjNjAzMjU2LzEvbkx0M3VyUTRxVDAwMmRYQXFPQzU3ekt1WGFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS8yMjkxODItNGJkYy00MjM0LWE5ODktOTBkNThjNjAzMjU2 LzEvbkx0M3VyUTRxVDAwMmRYQXFPQzU3ekt1WGFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABuo14f8Z 6brf5gEMCMY+eK2dq7Gd52gqM3jYvJtA32CqEA0eWvICGOLdieyL9tZSfV+Ux/IG C5cr9/PQ2NMwBXh+VVFRBf1sEspzips0cSBP/UOK+h9D3GBLDaVvjT1zEfoCU9RZ rSCNaYT0VwaZfAQ7EOSbIf8eb1Uig00/eJi4P150pTQEnxImC/KhBhMx/JT1geun HnHTleXCy0SXQUmdKxG4b9BM8Wl9uQYROsbVEOOI+FWuIpNjFp8959FPG6xgYkto GjVKPxS5wezaqZ881BDzHHKBsV7e5HYJU07ggw0juYF5TJdkY7Uf7xjiumwiLKha UwaHmd4+3nQeew== -----END CERTIFICATE-----Generated at Sat Dec 6 09:29:43 2025 by rpki-client