This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/791963-af47-4c4c-88b7-a30e96db49c4/1/nMHPS2otJ73LJqeD6Ddu5uspX9g.mft File: nMHPS2otJ73LJqeD6Ddu5uspX9g.mft (raw, json) Hash identifier: 6ZYtZe1zHlxppI9XIum6A/52sl229+wQkNZfhNrwAtQ= Subject key identifier: 53:74:AC:58:30:EF:C4:4F:56:B9:B1:C8:0E:DE:5E:05:F3:A9:6C:C1 Authority key identifier: 9C:C1:CF:4B:6A:2D:27:BD:CB:26:A7:83:E8:37:6E:E6:EB:29:5F:D8 Certificate issuer: /CN=9cc1cf4b6a2d27bdcb26a783e8376ee6eb295fd8 Certificate serial: 019AF12D11B21459701076DF99482E5F2732 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nMHPS2otJ73LJqeD6Ddu5uspX9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/791963-af47-4c4c-88b7-a30e96db49c4/1/nMHPS2otJ73LJqeD6Ddu5uspX9g.mft Manifest number: 0D8A Signing time: Sat 06 Dec 2025 01:00:53 +0000 Manifest this update: Sat 06 Dec 2025 01:00:53 +0000 Manifest next update: Sun 07 Dec 2025 01:00:53 +0000 Files and hashes: 1: nMHPS2otJ73LJqeD6Ddu5uspX9g.crl (hash: f99ksVG7YlU2NaPws+rb+PbNhUmhPYXbPG6P1lElV4I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/791963-af47-4c4c-88b7-a30e96db49c4/1/nMHPS2otJ73LJqeD6Ddu5uspX9g.crl rsync://rpki.ripe.net/repository/DEFAULT/51/791963-af47-4c4c-88b7-a30e96db49c4/1/nMHPS2otJ73LJqeD6Ddu5uspX9g.mft rsync://rpki.ripe.net/repository/DEFAULT/nMHPS2otJ73LJqeD6Ddu5uspX9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:11:b2:14:59:70:10:76:df:99:48:2e:5f:27:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cc1cf4b6a2d27bdcb26a783e8376ee6eb295fd8 Validity Not Before: Dec 6 01:00:53 2025 GMT Not After : Dec 7 01:00:53 2025 GMT Subject: CN=5374ac5830efc44f56b9b1c80ede5e05f3a96cc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:3c:ad:7f:d5:ff:06:00:8d:d6:cc:f7:3b:92: 86:2f:16:47:0c:ca:de:95:78:30:61:64:30:cb:02: a9:79:4d:18:e2:e6:5e:a3:38:35:6a:17:da:4e:ba: 14:d3:7d:db:7b:71:4e:2c:f6:dc:67:ae:37:2c:2c: 73:19:45:4f:c7:49:6a:f5:3b:86:5e:aa:3b:86:bf: c3:09:3e:39:ad:59:d9:91:8c:e6:d7:52:9f:a4:b5: f4:39:7e:12:c5:2b:0f:67:05:6e:cf:34:42:c3:38: 11:c9:67:01:68:34:3e:82:5e:a7:d4:9c:17:1b:8b: e5:a6:f6:91:e1:52:c1:40:92:6b:d7:d4:5e:04:1d: 93:a3:1d:24:d5:e0:e7:31:50:0f:97:3f:7e:bb:05: fa:48:6f:bc:71:dc:93:03:00:f0:a6:cf:be:86:bc: 4e:21:2e:ed:17:bc:91:31:a8:41:71:52:5e:a7:d1: 02:d1:3f:14:e5:dd:44:ff:a7:fa:8a:32:0e:45:89: 4d:65:82:90:3c:9d:22:6a:b3:dd:42:35:83:b4:00: bf:e9:a7:17:1c:20:7f:6e:9d:cb:76:da:d1:e0:e6: 95:ba:e6:28:12:6e:2f:19:c8:0d:f9:3c:4b:6b:40: 68:58:d3:71:30:ef:b4:dc:44:3d:cf:db:5b:b6:bb: 42:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:74:AC:58:30:EF:C4:4F:56:B9:B1:C8:0E:DE:5E:05:F3:A9:6C:C1 X509v3 Authority Key Identifier: keyid:9C:C1:CF:4B:6A:2D:27:BD:CB:26:A7:83:E8:37:6E:E6:EB:29:5F:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nMHPS2otJ73LJqeD6Ddu5uspX9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/791963-af47-4c4c-88b7-a30e96db49c4/1/nMHPS2otJ73LJqeD6Ddu5uspX9g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/791963-af47-4c4c-88b7-a30e96db49c4/1/nMHPS2otJ73LJqeD6Ddu5uspX9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:8c:1c:b2:ff:1b:7a:d3:24:66:33:d6:b5:28:d9:53:81:78: 88:aa:8c:2f:af:90:f8:d7:3b:2b:86:b5:61:25:8a:84:8f:b4: 66:ee:76:bf:51:a9:b4:95:b2:c0:b8:16:93:5d:b2:7c:a7:04: 73:d1:31:cc:0e:27:e2:19:a3:80:d3:17:f4:9f:1e:c4:86:c0: c4:4a:9a:84:d2:f4:f7:5e:f8:99:f0:46:9c:5a:ba:c8:60:53: da:20:54:4d:b5:90:84:6a:87:ad:15:ef:48:ae:e7:d9:a2:50: 26:b3:92:17:ad:46:3e:12:a3:63:fb:ae:ec:b2:c8:19:bc:02: 2a:ff:9a:4a:4c:7a:cd:80:90:49:d0:c7:6f:2e:a9:8a:98:85: 37:86:01:9b:5d:76:6c:c8:be:a3:99:8b:fe:bb:20:93:31:79: 4d:5e:56:c5:3b:55:a0:96:b2:4b:10:9e:54:8e:5d:d2:af:0a: 04:ea:32:0e:84:66:a0:12:bf:3a:9f:f1:7f:19:0c:82:75:14: 6d:06:78:45:65:e3:ea:92:49:53:ec:82:3f:fa:5d:7f:82:c9: a4:95:e6:2a:9f:02:41:24:35:78:c1:78:7c:e9:f5:ab:0d:61: 25:b9:01:52:dd:f3:fd:d7:c6:74:74:4e:87:85:8c:0f:79:25: 56:e7:35:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLRGyFFlwEHbfmUguXycyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljYzFjZjRiNmEyZDI3YmRjYjI2YTc4M2U4Mzc2ZWU2ZWIy OTVmZDgwHhcNMjUxMjA2MDEwMDUzWhcNMjUxMjA3MDEwMDUzWjAzMTEwLwYDVQQD Eyg1Mzc0YWM1ODMwZWZjNDRmNTZiOWIxYzgwZWRlNWUwNWYzYTk2Y2MxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Tytf9X/BgCN1sz3O5KGLxZHDMre lXgwYWQwywKpeU0Y4uZeozg1ahfaTroU033be3FOLPbcZ643LCxzGUVPx0lq9TuG Xqo7hr/DCT45rVnZkYzm11KfpLX0OX4SxSsPZwVuzzRCwzgRyWcBaDQ+gl6n1JwX G4vlpvaR4VLBQJJr19ReBB2Tox0k1eDnMVAPlz9+uwX6SG+8cdyTAwDwps++hrxO IS7tF7yRMahBcVJep9EC0T8U5d1E/6f6ijIORYlNZYKQPJ0iarPdQjWDtAC/6acX HCB/bp3LdtrR4OaVuuYoEm4vGcgN+TxLa0BoWNNxMO+03EQ9z9tbtrtCSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFN0rFgw78RPVrmxyA7eXgXzqWzBMB8GA1UdIwQY MBaAFJzBz0tqLSe9yyang+g3bubrKV/YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbk1IUFMyb3RKNzNMSnFlRDZEZHU1dXNwWDlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS83OTE5NjMtYWY0Ny00YzRjLTg4Yjct YTMwZTk2ZGI0OWM0LzEvbk1IUFMyb3RKNzNMSnFlRDZEZHU1dXNwWDlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS83OTE5NjMtYWY0Ny00YzRjLTg4YjctYTMwZTk2ZGI0OWM0 LzEvbk1IUFMyb3RKNzNMSnFlRDZEZHU1dXNwWDlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqYwcsv8b etMkZjPWtSjZU4F4iKqML6+Q+Nc7K4a1YSWKhI+0Zu52v1GptJWywLgWk12yfKcE c9ExzA4n4hmjgNMX9J8exIbAxEqahNL09174mfBGnFq6yGBT2iBUTbWQhGqHrRXv SK7n2aJQJrOSF61GPhKjY/uu7LLIGbwCKv+aSkx6zYCQSdDHby6pipiFN4YBm112 bMi+o5mL/rsgkzF5TV5WxTtVoJaySxCeVI5d0q8KBOoyDoRmoBK/Op/xfxkMgnUU bQZ4RWXj6pJJU+yCP/pdf4LJpJXmKp8CQSQ1eMF4fOn1qw1hJbkBUt3z/dfGdHRO h4WMD3klVuc1nQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:07:43 2025 by rpki-client