This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/26c675-def7-4232-811b-8f76c3291fbc/1/NutRbqkC2WStsqptytmh3A9bfv4.mft File: NutRbqkC2WStsqptytmh3A9bfv4.mft (raw, json) Hash identifier: jco4fZeZmE1CUnhjQcR69p12FD31YWQCUykieQr1o3o= Subject key identifier: A3:3B:4C:AA:1C:D5:AF:10:D5:8C:59:67:16:48:1F:7E:1B:D0:AA:02 Authority key identifier: 36:EB:51:6E:A9:02:D9:64:AD:B2:AA:6D:CA:D9:A1:DC:0F:5B:7E:FE Certificate issuer: /CN=36eb516ea902d964adb2aa6dcad9a1dc0f5b7efe Certificate serial: 019B360E076316A04492EB04E76EE382648D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NutRbqkC2WStsqptytmh3A9bfv4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/26c675-def7-4232-811b-8f76c3291fbc/1/NutRbqkC2WStsqptytmh3A9bfv4.mft Manifest number: 1716 Signing time: Fri 19 Dec 2025 10:00:47 +0000 Manifest this update: Fri 19 Dec 2025 10:00:47 +0000 Manifest next update: Sat 20 Dec 2025 10:00:47 +0000 Files and hashes: 1: NutRbqkC2WStsqptytmh3A9bfv4.crl (hash: K3gru1QKsk5Jw3UZTUQeoMoYgfYLHjE2v8Ya3WAsaPQ=) 2: XdAh2iIkdXAUuE10m0pcdADM_3Q.roa (hash: lEtjV/lSmPRly69ux6s/y/s94dr1ooRNJ7kAyfLCuys=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/26c675-def7-4232-811b-8f76c3291fbc/1/NutRbqkC2WStsqptytmh3A9bfv4.crl rsync://rpki.ripe.net/repository/DEFAULT/55/26c675-def7-4232-811b-8f76c3291fbc/1/NutRbqkC2WStsqptytmh3A9bfv4.mft rsync://rpki.ripe.net/repository/DEFAULT/NutRbqkC2WStsqptytmh3A9bfv4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:0e:07:63:16:a0:44:92:eb:04:e7:6e:e3:82:64:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36eb516ea902d964adb2aa6dcad9a1dc0f5b7efe Validity Not Before: Dec 19 10:00:47 2025 GMT Not After : Dec 20 10:00:47 2025 GMT Subject: CN=a33b4caa1cd5af10d58c596716481f7e1bd0aa02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:0c:ae:c0:e3:80:90:96:58:0c:88:b7:54:1b: f6:dd:73:a1:25:77:f4:f0:93:97:bd:0e:2e:d1:1d: 4b:8b:37:de:31:35:f4:e6:28:9c:58:da:67:a6:09: 56:0f:af:cd:8c:10:c9:1a:53:54:3e:29:b7:55:8d: d0:aa:ac:fc:64:34:c3:1e:cf:3d:36:46:23:29:0c: f9:f3:52:57:85:25:60:0d:0c:1e:d1:a6:aa:87:e5: b9:d8:5e:30:25:ff:f6:2c:0a:c9:23:80:57:de:fa: c4:a8:00:ed:fb:b7:e2:c1:d5:17:17:f7:ef:ea:3a: b4:e8:63:78:96:06:8e:a3:8b:ae:b5:3c:db:70:79: 5f:59:22:21:6b:a0:58:79:d1:f0:59:a1:52:62:43: 71:f3:41:5f:e1:33:c8:2c:34:64:33:36:08:95:07: a0:73:95:7d:f9:eb:f3:e8:45:60:12:ee:0c:69:36: 2c:7b:97:6e:7e:0f:3c:95:3c:29:51:c5:29:cb:24: b1:e4:c5:e7:cf:c7:e1:c4:91:2c:9e:2b:67:12:a3: cb:71:67:a8:8b:ca:38:d1:7b:da:00:ed:1d:e8:a3: b9:9f:5c:88:7e:9b:b3:10:0b:b5:48:e5:26:d0:2f: f9:fa:a5:5a:ea:95:4d:f5:9e:de:7f:53:7d:8a:76: ca:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:3B:4C:AA:1C:D5:AF:10:D5:8C:59:67:16:48:1F:7E:1B:D0:AA:02 X509v3 Authority Key Identifier: keyid:36:EB:51:6E:A9:02:D9:64:AD:B2:AA:6D:CA:D9:A1:DC:0F:5B:7E:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NutRbqkC2WStsqptytmh3A9bfv4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/26c675-def7-4232-811b-8f76c3291fbc/1/NutRbqkC2WStsqptytmh3A9bfv4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/26c675-def7-4232-811b-8f76c3291fbc/1/NutRbqkC2WStsqptytmh3A9bfv4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:39:77:db:d0:c5:e3:e8:e6:fb:ec:0f:5f:6b:45:04:a8:f2: 8d:c5:37:c0:04:aa:f4:c4:dd:ab:48:d2:dd:ac:91:26:c1:49: e6:0a:6f:8e:5e:72:26:b5:cc:15:19:d8:d5:03:c5:a4:60:87: 14:a9:0e:fe:9c:91:9f:64:80:bf:a3:f2:af:9c:2f:85:5b:97: d7:1e:2c:c2:c8:11:88:5b:44:9f:3d:de:73:b5:84:df:5e:e5: 3d:00:e2:e4:cd:65:17:b1:ca:02:d1:b7:9c:aa:bf:ff:cd:12: 5a:8b:da:f3:cf:9f:4d:4c:48:cb:c7:7b:c9:43:d8:94:1c:c4: 4a:de:7c:a4:48:00:e2:9d:1f:bb:fe:7f:ae:7b:d8:18:80:1e: 37:64:b4:65:1c:af:27:3f:63:09:75:af:82:71:9b:3b:cf:27: 78:b1:3f:34:29:82:b6:a3:0e:84:c9:84:a1:06:79:88:dd:8d: 6b:d8:db:84:78:2d:67:e0:42:dc:5e:75:18:9c:e1:70:bc:be: b5:8c:30:d7:33:4b:82:a7:d2:39:11:f4:03:e9:f8:b7:7d:a4: c1:0e:c0:c6:2d:95:b5:63:b2:f4:44:b2:9e:fa:2d:2a:86:cc: a3:5c:7a:7f:d6:1d:1c:9d:22:ac:2e:a0:d5:26:c1:1f:59:a9: 11:19:fd:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2DgdjFqBEkusE527jgmSNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2ZWI1MTZlYTkwMmQ5NjRhZGIyYWE2ZGNhZDlhMWRjMGY1 YjdlZmUwHhcNMjUxMjE5MTAwMDQ3WhcNMjUxMjIwMTAwMDQ3WjAzMTEwLwYDVQQD EyhhMzNiNGNhYTFjZDVhZjEwZDU4YzU5NjcxNjQ4MWY3ZTFiZDBhYTAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgyuwOOAkJZYDIi3VBv23XOhJXf0 8JOXvQ4u0R1LizfeMTX05iicWNpnpglWD6/NjBDJGlNUPim3VY3Qqqz8ZDTDHs89 NkYjKQz581JXhSVgDQwe0aaqh+W52F4wJf/2LArJI4BX3vrEqADt+7fiwdUXF/fv 6jq06GN4lgaOo4uutTzbcHlfWSIha6BYedHwWaFSYkNx80Ff4TPILDRkMzYIlQeg c5V9+evz6EVgEu4MaTYse5dufg88lTwpUcUpyySx5MXnz8fhxJEsnitnEqPLcWeo i8o40XvaAO0d6KO5n1yIfpuzEAu1SOUm0C/5+qVa6pVN9Z7ef1N9inbKnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKM7TKoc1a8Q1YxZZxZIH34b0KoCMB8GA1UdIwQY MBaAFDbrUW6pAtlkrbKqbcrZodwPW37+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnV0UmJxa0MyV1N0c3FwdHl0bWgzQTliZnY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8yNmM2NzUtZGVmNy00MjMyLTgxMWIt OGY3NmMzMjkxZmJjLzEvTnV0UmJxa0MyV1N0c3FwdHl0bWgzQTliZnY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS8yNmM2NzUtZGVmNy00MjMyLTgxMWItOGY3NmMzMjkxZmJj LzEvTnV0UmJxa0MyV1N0c3FwdHl0bWgzQTliZnY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUzl329DF 4+jm++wPX2tFBKjyjcU3wASq9MTdq0jS3ayRJsFJ5gpvjl5yJrXMFRnY1QPFpGCH FKkO/pyRn2SAv6Pyr5wvhVuX1x4swsgRiFtEnz3ec7WE317lPQDi5M1lF7HKAtG3 nKq//80SWova88+fTUxIy8d7yUPYlBzESt58pEgA4p0fu/5/rnvYGIAeN2S0ZRyv Jz9jCXWvgnGbO88neLE/NCmCtqMOhMmEoQZ5iN2Na9jbhHgtZ+BC3F51GJzhcLy+ tYww1zNLgqfSORH0A+n4t32kwQ7Axi2VtWOy9ESynvotKobMo1x6f9YdHJ0irC6g 1SbBH1mpERn9qw== -----END CERTIFICATE-----Generated at Fri Dec 19 15:10:12 2025 by rpki-client