This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/26c675-def7-4232-811b-8f76c3291fbc/1/NutRbqkC2WStsqptytmh3A9bfv4.mft File: NutRbqkC2WStsqptytmh3A9bfv4.mft (raw, json) Hash identifier: Y15rcgWj6EcR61lrTWcxrxQYD4U317MBv04KnHtZNro= Subject key identifier: 87:E2:E9:CC:F7:63:C8:C6:FB:05:A1:BB:D5:0C:21:01:5C:3F:43:3E Authority key identifier: 36:EB:51:6E:A9:02:D9:64:AD:B2:AA:6D:CA:D9:A1:DC:0F:5B:7E:FE Certificate issuer: /CN=36eb516ea902d964adb2aa6dcad9a1dc0f5b7efe Certificate serial: 019AF276EC7892A7FF6EBA5AD2C8ABCFD00D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NutRbqkC2WStsqptytmh3A9bfv4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/26c675-def7-4232-811b-8f76c3291fbc/1/NutRbqkC2WStsqptytmh3A9bfv4.mft Manifest number: 16F3 Signing time: Sat 06 Dec 2025 07:01:11 +0000 Manifest this update: Sat 06 Dec 2025 07:01:11 +0000 Manifest next update: Sun 07 Dec 2025 07:01:11 +0000 Files and hashes: 1: NutRbqkC2WStsqptytmh3A9bfv4.crl (hash: KpNwKWiRqK2BWRXePa+tGES98eBCEaBN7udn7/7A6Jo=) 2: XdAh2iIkdXAUuE10m0pcdADM_3Q.roa (hash: lEtjV/lSmPRly69ux6s/y/s94dr1ooRNJ7kAyfLCuys=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/26c675-def7-4232-811b-8f76c3291fbc/1/NutRbqkC2WStsqptytmh3A9bfv4.crl rsync://rpki.ripe.net/repository/DEFAULT/55/26c675-def7-4232-811b-8f76c3291fbc/1/NutRbqkC2WStsqptytmh3A9bfv4.mft rsync://rpki.ripe.net/repository/DEFAULT/NutRbqkC2WStsqptytmh3A9bfv4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:ec:78:92:a7:ff:6e:ba:5a:d2:c8:ab:cf:d0:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36eb516ea902d964adb2aa6dcad9a1dc0f5b7efe Validity Not Before: Dec 6 07:01:11 2025 GMT Not After : Dec 7 07:01:11 2025 GMT Subject: CN=87e2e9ccf763c8c6fb05a1bbd50c21015c3f433e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:7b:ff:4b:5c:3b:68:b4:24:17:78:70:99:d4: 10:da:d2:65:1d:74:91:f3:65:61:7c:33:9c:ea:c0: 8a:7c:11:c5:89:f9:f6:2e:c9:7b:89:63:4d:a8:67: 64:58:21:24:80:f0:1d:50:c5:44:c5:a1:0a:1a:eb: 84:33:4e:92:4f:66:1e:61:9d:a0:8d:cb:cc:7b:51: 78:b3:0a:24:82:13:a1:72:00:e2:70:55:c5:b6:06: d8:be:f4:1d:8e:5a:61:68:fe:d4:62:6b:3b:ee:05: 6b:d6:98:c6:df:67:cd:88:39:bb:36:6e:d4:fd:47: a2:90:a3:2e:e3:6e:1c:4a:25:6b:dd:3d:7d:db:48: d7:0e:86:c8:f1:38:ce:48:3e:be:86:69:46:51:c6: e0:5e:5b:dd:1d:01:f5:ed:9a:eb:8c:c6:96:06:9a: 08:dc:b9:f5:67:bf:fd:b8:a3:30:3d:ac:62:06:ab: 56:88:e4:66:d8:c5:03:b0:24:22:45:93:0e:f2:4c: a9:22:b7:81:a0:ea:ec:40:5f:fd:29:73:36:0c:fd: 30:f3:60:cf:fe:4e:80:b5:ae:62:78:2b:04:46:5e: 9a:10:db:bb:34:60:33:90:e9:88:02:0c:fd:f8:58: ab:2b:04:11:d7:31:c6:b8:df:91:9c:1f:82:a8:2d: 40:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:E2:E9:CC:F7:63:C8:C6:FB:05:A1:BB:D5:0C:21:01:5C:3F:43:3E X509v3 Authority Key Identifier: keyid:36:EB:51:6E:A9:02:D9:64:AD:B2:AA:6D:CA:D9:A1:DC:0F:5B:7E:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NutRbqkC2WStsqptytmh3A9bfv4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/26c675-def7-4232-811b-8f76c3291fbc/1/NutRbqkC2WStsqptytmh3A9bfv4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/26c675-def7-4232-811b-8f76c3291fbc/1/NutRbqkC2WStsqptytmh3A9bfv4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:f2:ab:83:dd:31:04:c5:fc:63:65:f5:92:97:08:91:a9:ff: 70:c0:5f:00:d9:41:6f:0e:2d:b6:94:7f:c8:c8:36:a9:1c:03: 9c:1f:f2:dd:6b:d7:5b:b0:49:b6:a6:27:36:58:82:23:da:c7: 9a:d0:fc:ef:8d:d9:28:89:c9:2e:c3:ec:5d:ca:56:ea:4f:50: a0:db:fc:8e:b5:4e:32:ca:84:84:5a:b3:28:0f:98:60:f7:84: 1c:0f:3a:87:72:f3:ca:22:5b:38:af:99:bf:6b:9e:80:0a:85: 57:46:d5:08:46:8d:da:4a:bd:9a:e5:75:1b:2d:ab:8b:e5:1e: 8c:4b:87:2e:c4:ba:c1:f4:d2:3e:ce:42:56:55:f8:ef:77:3c: f4:ed:26:33:da:22:d8:bf:a0:81:54:3f:76:32:97:6f:86:3a: e8:44:fe:e7:8a:ee:2f:6d:64:2f:02:22:d4:4a:b8:a5:ad:a0: 04:5a:19:bf:b3:dd:01:f2:6f:5d:57:f2:19:28:7b:b9:79:52: 00:bb:ea:61:b7:ed:18:f1:b8:00:4a:30:27:e5:ff:e6:e8:50: f2:14:ec:a7:f0:50:b3:3b:69:9e:a9:ff:e4:3c:79:b2:ca:c7: 68:76:d5:5e:3a:d3:9e:f0:3e:c8:69:ca:df:b4:92:10:e4:ad: d2:8b:65:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydux4kqf/brpa0sirz9ANMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2ZWI1MTZlYTkwMmQ5NjRhZGIyYWE2ZGNhZDlhMWRjMGY1 YjdlZmUwHhcNMjUxMjA2MDcwMTExWhcNMjUxMjA3MDcwMTExWjAzMTEwLwYDVQQD Eyg4N2UyZTljY2Y3NjNjOGM2ZmIwNWExYmJkNTBjMjEwMTVjM2Y0MzNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHv/S1w7aLQkF3hwmdQQ2tJlHXSR 82VhfDOc6sCKfBHFifn2Lsl7iWNNqGdkWCEkgPAdUMVExaEKGuuEM06ST2YeYZ2g jcvMe1F4swokghOhcgDicFXFtgbYvvQdjlphaP7UYms77gVr1pjG32fNiDm7Nm7U /UeikKMu424cSiVr3T1920jXDobI8TjOSD6+hmlGUcbgXlvdHQH17ZrrjMaWBpoI 3Ln1Z7/9uKMwPaxiBqtWiORm2MUDsCQiRZMO8kypIreBoOrsQF/9KXM2DP0w82DP /k6Ata5ieCsERl6aENu7NGAzkOmIAgz9+FirKwQR1zHGuN+RnB+CqC1AVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIfi6cz3Y8jG+wWhu9UMIQFcP0M+MB8GA1UdIwQY MBaAFDbrUW6pAtlkrbKqbcrZodwPW37+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnV0UmJxa0MyV1N0c3FwdHl0bWgzQTliZnY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8yNmM2NzUtZGVmNy00MjMyLTgxMWIt OGY3NmMzMjkxZmJjLzEvTnV0UmJxa0MyV1N0c3FwdHl0bWgzQTliZnY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS8yNmM2NzUtZGVmNy00MjMyLTgxMWItOGY3NmMzMjkxZmJj LzEvTnV0UmJxa0MyV1N0c3FwdHl0bWgzQTliZnY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXPKrg90x BMX8Y2X1kpcIkan/cMBfANlBbw4ttpR/yMg2qRwDnB/y3WvXW7BJtqYnNliCI9rH mtD8743ZKInJLsPsXcpW6k9QoNv8jrVOMsqEhFqzKA+YYPeEHA86h3LzyiJbOK+Z v2uegAqFV0bVCEaN2kq9muV1Gy2ri+UejEuHLsS6wfTSPs5CVlX473c89O0mM9oi 2L+ggVQ/djKXb4Y66ET+54ruL21kLwIi1Eq4pa2gBFoZv7PdAfJvXVfyGSh7uXlS ALvqYbftGPG4AEowJ+X/5uhQ8hTsp/BQsztpnqn/5Dx5ssrHaHbVXjrTnvA+yGnK 37SSEOSt0otlhg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:26:44 2025 by rpki-client