This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft File: nynoVUAgve-hfFVhQ4-0uvWDH1I.mft (raw, json) Hash identifier: hXVydTwbd6+DIk6wc3PPKUT6+IIvBId2JBpguQj84uY= Subject key identifier: C5:26:48:CA:AA:A5:60:0E:3D:C7:08:94:D3:C2:4A:C5:65:D3:EB:A2 Authority key identifier: 9F:29:E8:55:40:20:BD:EF:A1:7C:55:61:43:8F:B4:BA:F5:83:1F:52 Certificate issuer: /CN=9f29e8554020bdefa17c5561438fb4baf5831f52 Certificate serial: 019B32D6C785DEF2DF551A5BA3B53EFD4B42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nynoVUAgve-hfFVhQ4-0uvWDH1I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft Manifest number: 0A9C Signing time: Thu 18 Dec 2025 19:01:35 +0000 Manifest this update: Thu 18 Dec 2025 19:01:35 +0000 Manifest next update: Fri 19 Dec 2025 19:01:35 +0000 Files and hashes: 1: ZcSRf0HxnWHQIw5MIAf_WL9oY6A.roa (hash: cP2ZkY5lLDgrJYkw2lqKqOmENJRMWCl82XCDZbZfylY=) 2: dk4GVxnPxj9mrIWRHBmkYZR_RAY.roa (hash: eaMuW15awNbcED9U+mZfT6o28nxoJ9RTD5vuUNkkC90=) 3: nynoVUAgve-hfFVhQ4-0uvWDH1I.crl (hash: s3u5QLlISSCGSVaD5a1aSKH2j+k3BIsP5mu0Siqtgqk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft rsync://rpki.ripe.net/repository/DEFAULT/nynoVUAgve-hfFVhQ4-0uvWDH1I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d6:c7:85:de:f2:df:55:1a:5b:a3:b5:3e:fd:4b:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f29e8554020bdefa17c5561438fb4baf5831f52 Validity Not Before: Dec 18 19:01:35 2025 GMT Not After : Dec 19 19:01:35 2025 GMT Subject: CN=c52648caaaa5600e3dc70894d3c24ac565d3eba2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:ac:a2:53:a2:3e:fc:af:42:bb:3b:ea:92:c3: 32:c8:58:8a:5f:9a:01:a6:18:c4:8c:d1:2a:46:4d: 4e:93:c3:83:8c:3d:47:63:3d:92:46:b0:f1:d4:e8: 51:a6:10:9d:3a:06:ef:82:1c:ef:f3:d2:e2:17:5b: c3:0f:22:5f:3e:68:3a:ba:42:de:08:43:a4:3f:a0: e3:22:26:53:fa:b3:9d:de:65:df:a7:db:ed:77:ee: f0:d0:f8:34:98:cc:68:72:5f:4b:4e:91:95:74:fb: 92:e7:40:92:d3:e4:b8:5f:a4:76:66:b1:79:17:a0: 43:ca:7b:c6:89:48:53:4d:18:74:d4:d5:07:0a:d6: d0:76:24:b0:6a:91:a6:bb:3d:de:85:a6:32:5c:06: ca:f2:0d:8c:23:b2:13:79:ef:5c:3c:da:23:14:22: 89:56:5e:e8:d9:1d:f4:a7:fd:9b:b5:2e:b7:49:47: 16:ce:4b:23:a0:7f:7a:46:a9:96:80:f4:b4:91:50: 69:1d:30:c9:f0:32:38:55:eb:a9:74:4e:9d:4d:a9: 67:48:62:8d:39:5d:f0:46:8e:89:cb:85:f9:f6:af: ab:03:20:9b:9c:fc:d9:06:3d:e5:8e:a4:09:5a:59: ec:f3:f1:01:05:84:60:b7:73:77:58:3b:88:e2:5a: 40:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:26:48:CA:AA:A5:60:0E:3D:C7:08:94:D3:C2:4A:C5:65:D3:EB:A2 X509v3 Authority Key Identifier: keyid:9F:29:E8:55:40:20:BD:EF:A1:7C:55:61:43:8F:B4:BA:F5:83:1F:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nynoVUAgve-hfFVhQ4-0uvWDH1I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:3c:e6:70:4a:fb:95:76:17:85:85:ac:09:24:60:80:0f:24: ba:82:01:c1:27:4e:0c:6e:3c:0c:1c:6e:ba:98:a6:7e:c6:5f: f7:93:3f:98:cf:d0:ff:af:30:8a:15:e8:40:1c:ce:4a:a4:70: 83:bc:17:ca:73:50:68:2c:a0:3c:9f:af:43:f8:74:80:21:9f: fb:5e:94:8c:f7:cc:f4:86:71:c9:2e:3a:5e:e0:1a:bf:f4:dc: 76:8f:3d:81:c9:0b:b9:fa:14:51:a5:7d:71:c7:40:1a:d8:3c: 6e:7e:9e:8d:7a:6f:d5:90:70:36:60:24:76:43:82:24:cd:28: 69:b9:eb:f9:ca:52:43:e6:ae:9c:86:be:8b:6a:ec:01:08:d9: 55:45:7f:ea:df:92:a1:bb:bf:cb:95:d7:28:a0:2e:64:03:f9: 5c:97:f4:8f:34:3a:15:50:c2:4d:c2:5d:72:a6:bc:7a:64:86: a5:c0:94:1b:16:08:07:17:07:4d:d1:ab:0c:1b:9a:bc:34:03: e8:bc:4c:1b:09:8e:73:59:c0:87:a8:44:28:3e:18:84:09:55: 54:9c:a8:64:8d:52:a3:a7:d7:c0:a6:40:f0:35:32:5a:d1:2c: d8:4b:f3:6c:8c:23:60:a2:e1:f9:9f:42:3f:af:47:03:2c:25: 7d:5a:7a:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1seF3vLfVRpbo7U+/UtCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmMjllODU1NDAyMGJkZWZhMTdjNTU2MTQzOGZiNGJhZjU4 MzFmNTIwHhcNMjUxMjE4MTkwMTM1WhcNMjUxMjE5MTkwMTM1WjAzMTEwLwYDVQQD EyhjNTI2NDhjYWFhYTU2MDBlM2RjNzA4OTRkM2MyNGFjNTY1ZDNlYmEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA56yiU6I+/K9CuzvqksMyyFiKX5oB phjEjNEqRk1Ok8ODjD1HYz2SRrDx1OhRphCdOgbvghzv89LiF1vDDyJfPmg6ukLe CEOkP6DjIiZT+rOd3mXfp9vtd+7w0Pg0mMxocl9LTpGVdPuS50CS0+S4X6R2ZrF5 F6BDynvGiUhTTRh01NUHCtbQdiSwapGmuz3ehaYyXAbK8g2MI7ITee9cPNojFCKJ Vl7o2R30p/2btS63SUcWzksjoH96RqmWgPS0kVBpHTDJ8DI4VeupdE6dTalnSGKN OV3wRo6Jy4X59q+rAyCbnPzZBj3ljqQJWlns8/EBBYRgt3N3WDuI4lpAtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMUmSMqqpWAOPccIlNPCSsVl0+uiMB8GA1UdIwQY MBaAFJ8p6FVAIL3voXxVYUOPtLr1gx9SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnlub1ZVQWd2ZS1oZkZWaFE0LTB1dldESDFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8yZGJlMDQtNDNhOC00OTYzLThlODYt M2ZlOGY4OTZlNTUxLzEvbnlub1ZVQWd2ZS1oZkZWaFE0LTB1dldESDFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy8yZGJlMDQtNDNhOC00OTYzLThlODYtM2ZlOGY4OTZlNTUx LzEvbnlub1ZVQWd2ZS1oZkZWaFE0LTB1dldESDFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARjzmcEr7 lXYXhYWsCSRggA8kuoIBwSdODG48DBxuupimfsZf95M/mM/Q/68wihXoQBzOSqRw g7wXynNQaCygPJ+vQ/h0gCGf+16UjPfM9IZxyS46XuAav/Tcdo89gckLufoUUaV9 ccdAGtg8bn6ejXpv1ZBwNmAkdkOCJM0oabnr+cpSQ+aunIa+i2rsAQjZVUV/6t+S obu/y5XXKKAuZAP5XJf0jzQ6FVDCTcJdcqa8emSGpcCUGxYIBxcHTdGrDBuavDQD 6LxMGwmOc1nAh6hEKD4YhAlVVJyoZI1So6fXwKZA8DUyWtEs2EvzbIwjYKLh+Z9C P69HAywlfVp6/g== -----END CERTIFICATE-----Generated at Fri Dec 19 02:59:36 2025 by rpki-client