This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/7181a6-7ff4-40ba-93df-7885b7b8371c/1/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.mft File: nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.mft (raw, json) Hash identifier: Q2hpSn4oLB/o2iPyGkeioXcOmDtagX2tq/s44ww6tW8= Subject key identifier: C2:06:D3:E2:51:0E:7E:A0:96:66:68:08:DF:BB:5F:6B:29:D7:EA:02 Authority key identifier: 9D:4E:F2:0B:B6:A8:67:EC:CD:87:FA:0A:CA:E2:2C:5B:F6:34:D5:1B Certificate issuer: /CN=9d4ef20bb6a867eccd87fa0acae22c5bf634d51b Certificate serial: 019AF1D20A39BEA65C7BF8EAE454C1146F0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/7181a6-7ff4-40ba-93df-7885b7b8371c/1/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.mft Manifest number: 1422 Signing time: Sat 06 Dec 2025 04:01:05 +0000 Manifest this update: Sat 06 Dec 2025 04:01:05 +0000 Manifest next update: Sun 07 Dec 2025 04:01:05 +0000 Files and hashes: 1: H8-POwHizkmBcV_QJ_0-Jxyzw5E.roa (hash: vyyHUtBQsEXAg98AdmKq411tDHnSJnqHMROP1JZFAyQ=) 2: nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.crl (hash: NOHNvk7lXC6QOACRBBnRvf2GQGTqLNOEY4gq1Wq4W6E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/7181a6-7ff4-40ba-93df-7885b7b8371c/1/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.crl rsync://rpki.ripe.net/repository/DEFAULT/46/7181a6-7ff4-40ba-93df-7885b7b8371c/1/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.mft rsync://rpki.ripe.net/repository/DEFAULT/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:0a:39:be:a6:5c:7b:f8:ea:e4:54:c1:14:6f:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d4ef20bb6a867eccd87fa0acae22c5bf634d51b Validity Not Before: Dec 6 04:01:05 2025 GMT Not After : Dec 7 04:01:05 2025 GMT Subject: CN=c206d3e2510e7ea096666808dfbb5f6b29d7ea02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:fa:fc:e2:bb:b8:4b:69:c0:33:d6:8c:7a:bc: 5a:9a:7b:83:b7:28:49:79:6e:d2:af:dd:15:75:f7: 93:ed:e8:c4:54:6d:91:73:3e:b7:f0:84:c0:4f:f5: fe:8d:60:a8:1e:47:e1:f2:4d:dc:5f:43:33:70:08: f2:4a:31:21:d2:da:6a:44:df:e7:2e:ce:9f:d9:71: 1d:1a:f1:f2:b9:8b:0b:ea:43:e5:30:80:4e:7e:c3: b0:4e:a1:b9:85:f8:36:0c:c9:ea:bf:91:97:c6:98: 76:a4:69:ec:4f:a7:d4:6b:98:c7:ab:0c:f0:4c:a6: eb:06:46:07:ab:84:cc:06:bc:6e:0d:e7:0b:5a:60: e2:c4:ef:51:27:86:6a:77:e1:99:10:f4:6e:fe:13: 3b:13:cd:6d:78:8b:cf:c5:54:30:48:ec:75:24:50: 20:f0:24:d9:d3:53:78:2c:82:83:b4:eb:b4:1f:65: 65:d5:8f:1e:61:80:a9:82:73:80:e7:72:a1:f9:de: 06:2b:16:49:c4:2e:50:8f:90:61:5a:50:ab:da:fb: ac:15:75:7f:f7:44:8d:74:6e:18:30:83:86:4a:13: 67:53:e4:54:be:48:41:b3:93:2d:3b:61:d6:43:aa: ed:f8:ef:5a:64:6a:75:3c:e0:de:d3:c3:fd:ce:26: d4:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:06:D3:E2:51:0E:7E:A0:96:66:68:08:DF:BB:5F:6B:29:D7:EA:02 X509v3 Authority Key Identifier: keyid:9D:4E:F2:0B:B6:A8:67:EC:CD:87:FA:0A:CA:E2:2C:5B:F6:34:D5:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7181a6-7ff4-40ba-93df-7885b7b8371c/1/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7181a6-7ff4-40ba-93df-7885b7b8371c/1/nU7yC7aoZ-zNh_oKyuIsW_Y01Rs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:25:65:f6:f8:6a:18:be:ba:c2:81:7a:c6:75:38:f8:b6:02: b1:f7:66:ac:e3:93:c7:3a:81:5c:17:ed:b2:94:2e:6d:67:a9: 44:91:6a:19:79:c9:88:bb:37:e1:09:8b:78:8e:3b:ed:6e:d6: 5a:fd:d3:66:b8:1e:45:47:ce:a8:2b:17:1c:ed:49:6f:84:62: e8:18:e0:9b:1c:f0:96:ce:64:e8:e2:68:7c:32:18:73:31:80: 17:ce:a6:25:48:7b:48:5a:8a:54:b7:b2:68:ea:60:4d:ae:c0: 1f:1c:a2:8f:1b:52:3d:11:28:0a:bb:28:19:15:9e:35:b8:d1: ae:bf:c3:af:47:78:e9:64:61:00:e2:d7:34:c3:69:94:a0:ff: 9a:17:47:99:2a:06:98:b5:fc:5e:b2:46:d0:47:98:4c:92:ad: f1:23:a0:91:16:a6:a9:a7:4e:11:f5:96:82:92:c6:ba:72:89: c5:78:e4:41:c1:52:33:89:e8:c2:02:a2:dc:50:cf:13:76:24: a5:9a:fd:96:de:43:f3:17:c0:d7:b6:36:3f:d3:52:05:48:d7: 57:53:3b:5c:19:6f:2b:d9:1b:d0:ea:dc:b1:64:cb:af:ce:7a: 75:5f:c1:7c:e4:20:4e:60:e4:02:4a:19:f7:7c:74:ac:c5:50: fa:23:34:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0go5vqZce/jq5FTBFG8MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkNGVmMjBiYjZhODY3ZWNjZDg3ZmEwYWNhZTIyYzViZjYz NGQ1MWIwHhcNMjUxMjA2MDQwMTA1WhcNMjUxMjA3MDQwMTA1WjAzMTEwLwYDVQQD EyhjMjA2ZDNlMjUxMGU3ZWEwOTY2NjY4MDhkZmJiNWY2YjI5ZDdlYTAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfr84ru4S2nAM9aMerxamnuDtyhJ eW7Sr90VdfeT7ejEVG2Rcz638ITAT/X+jWCoHkfh8k3cX0MzcAjySjEh0tpqRN/n Ls6f2XEdGvHyuYsL6kPlMIBOfsOwTqG5hfg2DMnqv5GXxph2pGnsT6fUa5jHqwzw TKbrBkYHq4TMBrxuDecLWmDixO9RJ4Zqd+GZEPRu/hM7E81teIvPxVQwSOx1JFAg 8CTZ01N4LIKDtOu0H2Vl1Y8eYYCpgnOA53Kh+d4GKxZJxC5Qj5BhWlCr2vusFXV/ 90SNdG4YMIOGShNnU+RUvkhBs5MtO2HWQ6rt+O9aZGp1PODe08P9zibUqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMIG0+JRDn6glmZoCN+7X2sp1+oCMB8GA1UdIwQY MBaAFJ1O8gu2qGfszYf6CsriLFv2NNUbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblU3eUM3YW9aLXpOaF9vS3l1SXNXX1kwMVJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni83MTgxYTYtN2ZmNC00MGJhLTkzZGYt Nzg4NWI3YjgzNzFjLzEvblU3eUM3YW9aLXpOaF9vS3l1SXNXX1kwMVJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni83MTgxYTYtN2ZmNC00MGJhLTkzZGYtNzg4NWI3YjgzNzFj LzEvblU3eUM3YW9aLXpOaF9vS3l1SXNXX1kwMVJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASCVl9vhq GL66woF6xnU4+LYCsfdmrOOTxzqBXBftspQubWepRJFqGXnJiLs34QmLeI477W7W Wv3TZrgeRUfOqCsXHO1Jb4Ri6Bjgmxzwls5k6OJofDIYczGAF86mJUh7SFqKVLey aOpgTa7AHxyijxtSPREoCrsoGRWeNbjRrr/Dr0d46WRhAOLXNMNplKD/mhdHmSoG mLX8XrJG0EeYTJKt8SOgkRamqadOEfWWgpLGunKJxXjkQcFSM4nowgKi3FDPE3Yk pZr9lt5D8xfA17Y2P9NSBUjXV1M7XBlvK9kb0OrcsWTLr856dV/BfOQgTmDkAkoZ 93x0rMVQ+iM0hw== -----END CERTIFICATE-----Generated at Sat Dec 6 15:29:45 2025 by rpki-client