This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft File: nynoVUAgve-hfFVhQ4-0uvWDH1I.mft (raw, json) Hash identifier: Nz0uJxCgaBwBLrD+/T5imYM96s569EpmsTqbhsDuIOM= Subject key identifier: DB:88:A3:1E:29:D4:72:F0:26:14:78:27:DB:00:F9:54:14:D1:C1:FA Authority key identifier: 9F:29:E8:55:40:20:BD:EF:A1:7C:55:61:43:8F:B4:BA:F5:83:1F:52 Certificate issuer: /CN=9f29e8554020bdefa17c5561438fb4baf5831f52 Certificate serial: 019AF50B1D3A7E87B53B9C5EDC840945D33D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nynoVUAgve-hfFVhQ4-0uvWDH1I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft Manifest number: 0A7C Signing time: Sat 06 Dec 2025 19:02:17 +0000 Manifest this update: Sat 06 Dec 2025 19:02:17 +0000 Manifest next update: Sun 07 Dec 2025 19:02:17 +0000 Files and hashes: 1: ZcSRf0HxnWHQIw5MIAf_WL9oY6A.roa (hash: cP2ZkY5lLDgrJYkw2lqKqOmENJRMWCl82XCDZbZfylY=) 2: dk4GVxnPxj9mrIWRHBmkYZR_RAY.roa (hash: eaMuW15awNbcED9U+mZfT6o28nxoJ9RTD5vuUNkkC90=) 3: nynoVUAgve-hfFVhQ4-0uvWDH1I.crl (hash: ehGa5J4ZkAhbjolHnvBOFDULFQSOZegv2/idFW6Wlvo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft rsync://rpki.ripe.net/repository/DEFAULT/nynoVUAgve-hfFVhQ4-0uvWDH1I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:02:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:1d:3a:7e:87:b5:3b:9c:5e:dc:84:09:45:d3:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f29e8554020bdefa17c5561438fb4baf5831f52 Validity Not Before: Dec 6 19:02:17 2025 GMT Not After : Dec 7 19:02:17 2025 GMT Subject: CN=db88a31e29d472f026147827db00f95414d1c1fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:4a:b0:9d:56:bc:81:a5:88:88:76:36:cd:13: a2:36:d6:2e:b6:0b:28:c6:e7:00:b1:a0:a3:9f:f4: b5:e4:27:1a:34:90:a7:5f:aa:92:2b:33:68:d2:c4: e1:38:3e:3f:5e:0e:11:89:c4:3e:cc:1c:fe:6a:b5: 42:17:b4:87:bf:c9:16:d6:03:db:0c:fd:45:f5:e0: b1:21:40:20:a2:87:aa:98:4c:fd:5e:b6:1d:e7:18: d7:09:c5:03:56:d3:09:e9:0f:49:f9:03:3f:26:1a: bc:3c:b2:c0:65:98:f4:8a:3d:f1:e3:13:a9:8f:d3: 23:2f:22:b7:d3:57:53:42:a6:2f:7e:2f:a1:3a:3b: 5a:6e:77:23:c0:d8:cd:03:1a:95:29:93:d1:71:e9: 62:5e:bb:71:3d:d3:7f:5a:9a:20:1e:7a:05:16:87: d6:32:da:8e:de:17:7b:b4:9c:0d:a0:5c:a9:a2:32: d3:06:d5:98:09:ad:cd:23:ac:6f:f6:a9:63:fc:04: 1e:cc:e6:47:97:0b:77:85:25:1b:dc:03:33:bc:5b: 7d:9c:bd:d8:ee:97:c7:42:da:d4:83:4a:3d:79:80: 9d:4f:3d:a3:70:5a:79:59:1b:df:78:cc:b3:34:40: 7b:9a:47:2d:67:94:55:b8:72:f2:cc:29:be:52:3b: eb:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:88:A3:1E:29:D4:72:F0:26:14:78:27:DB:00:F9:54:14:D1:C1:FA X509v3 Authority Key Identifier: keyid:9F:29:E8:55:40:20:BD:EF:A1:7C:55:61:43:8F:B4:BA:F5:83:1F:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nynoVUAgve-hfFVhQ4-0uvWDH1I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2dbe04-43a8-4963-8e86-3fe8f896e551/1/nynoVUAgve-hfFVhQ4-0uvWDH1I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:06:c7:1b:af:92:5d:8d:72:cb:1f:99:68:1a:5b:d9:7d:d8: f3:01:60:62:76:1d:67:04:86:31:8f:11:17:08:c4:70:20:3b: 1b:58:54:a9:b2:e0:6d:ae:64:fb:2d:a0:86:81:93:24:63:c1: a4:78:98:84:4b:b5:09:ef:64:b4:24:41:06:81:e5:43:ec:89: 50:c9:e7:32:c9:3b:85:66:bd:c0:9c:64:f8:1d:76:84:27:fd: 7e:1f:b2:f2:94:e4:06:e4:96:b1:f2:de:17:56:e3:20:50:fa: 1a:38:52:eb:57:40:45:6f:e0:97:fe:d7:0b:2e:46:16:ac:28: 87:fd:b8:fe:b2:3f:de:4e:d4:20:ab:57:c8:0b:de:86:24:07: 6f:8c:44:c5:e3:af:b4:2d:9e:58:7e:57:17:6f:41:f5:37:9f: 92:fa:63:2c:be:cf:86:d6:b9:91:bb:03:b5:c0:01:6b:7a:17: 27:b4:fd:56:52:35:b0:78:f6:3b:01:28:d0:e5:f4:69:9d:05: 42:3f:28:02:3d:23:8e:bf:ec:0d:a4:bf:91:f5:7a:d9:51:fc: f5:7a:4f:93:2f:70:83:e2:65:b5:f4:24:24:44:b2:7a:fd:e3: 01:a9:a0:0a:19:ac:a1:30:06:d5:0f:24:07:23:1d:d3:1c:71: ba:f7:12:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Cx06foe1O5xe3IQJRdM9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmMjllODU1NDAyMGJkZWZhMTdjNTU2MTQzOGZiNGJhZjU4 MzFmNTIwHhcNMjUxMjA2MTkwMjE3WhcNMjUxMjA3MTkwMjE3WjAzMTEwLwYDVQQD EyhkYjg4YTMxZTI5ZDQ3MmYwMjYxNDc4MjdkYjAwZjk1NDE0ZDFjMWZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6EqwnVa8gaWIiHY2zROiNtYutgso xucAsaCjn/S15CcaNJCnX6qSKzNo0sThOD4/Xg4RicQ+zBz+arVCF7SHv8kW1gPb DP1F9eCxIUAgooeqmEz9XrYd5xjXCcUDVtMJ6Q9J+QM/Jhq8PLLAZZj0ij3x4xOp j9MjLyK301dTQqYvfi+hOjtabncjwNjNAxqVKZPRceliXrtxPdN/WpogHnoFFofW MtqO3hd7tJwNoFypojLTBtWYCa3NI6xv9qlj/AQezOZHlwt3hSUb3AMzvFt9nL3Y 7pfHQtrUg0o9eYCdTz2jcFp5WRvfeMyzNEB7mkctZ5RVuHLyzCm+UjvrtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNuIox4p1HLwJhR4J9sA+VQU0cH6MB8GA1UdIwQY MBaAFJ8p6FVAIL3voXxVYUOPtLr1gx9SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnlub1ZVQWd2ZS1oZkZWaFE0LTB1dldESDFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8yZGJlMDQtNDNhOC00OTYzLThlODYt M2ZlOGY4OTZlNTUxLzEvbnlub1ZVQWd2ZS1oZkZWaFE0LTB1dldESDFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy8yZGJlMDQtNDNhOC00OTYzLThlODYtM2ZlOGY4OTZlNTUx LzEvbnlub1ZVQWd2ZS1oZkZWaFE0LTB1dldESDFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkQbHG6+S XY1yyx+ZaBpb2X3Y8wFgYnYdZwSGMY8RFwjEcCA7G1hUqbLgba5k+y2ghoGTJGPB pHiYhEu1Ce9ktCRBBoHlQ+yJUMnnMsk7hWa9wJxk+B12hCf9fh+y8pTkBuSWsfLe F1bjIFD6GjhS61dARW/gl/7XCy5GFqwoh/24/rI/3k7UIKtXyAvehiQHb4xExeOv tC2eWH5XF29B9TefkvpjLL7Phta5kbsDtcABa3oXJ7T9VlI1sHj2OwEo0OX0aZ0F Qj8oAj0jjr/sDaS/kfV62VH89XpPky9wg+JltfQkJESyev3jAamgChmsoTAG1Q8k ByMd0xxxuvcSHg== -----END CERTIFICATE-----Generated at Sun Dec 7 03:13:55 2025 by rpki-client