This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/04a223-e1c0-4e12-91fd-d198f010b15a/1/Nu5z8S3iK2NAaNLOi3pvriKRhio.mft File: Nu5z8S3iK2NAaNLOi3pvriKRhio.mft (raw, json) Hash identifier: 4uGw6JVH2zVhpIh3ig/gX1FIfUqDygrr10jgqCFtSXs= Subject key identifier: 26:F5:92:99:7A:EA:4C:80:68:18:48:15:23:A8:62:24:13:EF:53:AB Authority key identifier: 36:EE:73:F1:2D:E2:2B:63:40:68:D2:CE:8B:7A:6F:AE:22:91:86:2A Certificate issuer: /CN=36ee73f12de22b634068d2ce8b7a6fae2291862a Certificate serial: 019AF1D1C1CF410F6DD592EE51426A123A09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nu5z8S3iK2NAaNLOi3pvriKRhio.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/04a223-e1c0-4e12-91fd-d198f010b15a/1/Nu5z8S3iK2NAaNLOi3pvriKRhio.mft Manifest number: 038B Signing time: Sat 06 Dec 2025 04:00:46 +0000 Manifest this update: Sat 06 Dec 2025 04:00:46 +0000 Manifest next update: Sun 07 Dec 2025 04:00:46 +0000 Files and hashes: 1: JzGs8inn7txEGMEMBRCVzNZdRVg.roa (hash: gvrw7Emqkgw3IJnnGKeYcShf4Bw5yVCq/dWSjUTjfvI=) 2: Nu5z8S3iK2NAaNLOi3pvriKRhio.crl (hash: mraVLI/3l+wdy0MobYZ37e4gPRLFFqtAMUmdzCBQxLk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/04a223-e1c0-4e12-91fd-d198f010b15a/1/Nu5z8S3iK2NAaNLOi3pvriKRhio.crl rsync://rpki.ripe.net/repository/DEFAULT/62/04a223-e1c0-4e12-91fd-d198f010b15a/1/Nu5z8S3iK2NAaNLOi3pvriKRhio.mft rsync://rpki.ripe.net/repository/DEFAULT/Nu5z8S3iK2NAaNLOi3pvriKRhio.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:c1:cf:41:0f:6d:d5:92:ee:51:42:6a:12:3a:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36ee73f12de22b634068d2ce8b7a6fae2291862a Validity Not Before: Dec 6 04:00:46 2025 GMT Not After : Dec 7 04:00:46 2025 GMT Subject: CN=26f592997aea4c806818481523a8622413ef53ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:d5:5d:03:98:26:df:1a:8d:51:de:9c:5d:29: 10:99:f9:98:91:00:87:01:0b:6a:23:6c:18:28:4b: 00:a9:cd:62:ed:51:67:94:2f:97:c5:c8:ca:01:49: 80:1d:d1:c5:29:78:00:9e:d3:97:07:53:7d:6a:26: 24:01:43:f8:bf:94:b7:58:1c:44:b6:ed:6b:0e:85: bb:b1:3c:6a:ec:00:ca:95:76:2b:99:ba:3c:e9:c8: 19:af:b7:18:16:4b:8b:c9:44:55:12:fe:6f:cb:cd: d0:f3:4d:5f:b9:90:93:74:2f:1e:a6:40:d4:ba:1e: bb:c1:ff:a6:c7:f2:36:b1:9e:f0:7a:ae:1d:7d:0e: da:31:7f:46:b4:f2:e4:83:bd:86:d5:32:a4:26:1c: a3:c9:97:06:a5:2f:41:27:9b:96:e6:d6:fe:45:49: c0:0c:29:19:37:d1:90:78:f1:fe:4a:02:ed:3a:aa: 5c:a7:6c:ba:a8:2e:01:0a:94:73:23:cd:85:25:da: 97:12:30:e6:3a:45:16:0d:97:19:04:2a:de:2d:9a: c9:2d:3d:b4:b6:fc:e0:40:bb:8b:c6:79:d1:38:51: a4:7a:b6:f6:50:3b:4c:29:79:04:79:87:fc:77:3c: 94:f7:8b:0d:e6:f5:74:4d:c9:14:72:f8:28:a9:e3: 92:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:F5:92:99:7A:EA:4C:80:68:18:48:15:23:A8:62:24:13:EF:53:AB X509v3 Authority Key Identifier: keyid:36:EE:73:F1:2D:E2:2B:63:40:68:D2:CE:8B:7A:6F:AE:22:91:86:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nu5z8S3iK2NAaNLOi3pvriKRhio.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/04a223-e1c0-4e12-91fd-d198f010b15a/1/Nu5z8S3iK2NAaNLOi3pvriKRhio.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/04a223-e1c0-4e12-91fd-d198f010b15a/1/Nu5z8S3iK2NAaNLOi3pvriKRhio.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:0b:f3:2d:9b:4f:12:68:41:5f:39:11:5c:78:ea:4d:17:10: 87:53:59:9f:2e:f5:76:80:26:b5:39:fb:99:3c:be:1b:a4:2b: 4e:fa:21:9e:98:ca:60:29:59:33:06:3f:f4:44:be:14:8c:05: 9c:03:81:8b:b1:d4:45:ee:13:67:54:3b:39:df:c2:32:de:58: 9c:f5:c8:9f:db:be:fc:0c:36:f7:fe:fc:c9:fc:38:1e:39:d0: 71:f9:17:2d:43:50:dd:64:7c:fe:52:06:ce:22:80:52:23:0b: 70:cf:8f:bc:5b:c8:0f:c6:42:29:3c:06:03:3a:04:3c:df:14: eb:70:52:e6:07:e3:7e:d4:5f:e1:fe:5f:e6:7e:99:9c:b2:a6: 53:0f:79:a4:9b:92:52:f6:1b:96:4e:88:01:01:6e:36:a9:b2: bc:ba:10:56:0d:c3:91:97:89:01:c5:de:57:c0:5a:16:08:5a: ca:00:b8:d6:49:95:ad:5c:a7:84:8b:5b:da:e1:e0:3a:95:90: 2e:d6:4e:70:ac:42:21:0d:ae:f7:0f:74:6c:9c:7b:88:68:86: 16:98:ad:51:e5:ce:43:63:df:d4:86:12:e1:ab:dc:da:0e:85: d1:4d:76:64:3c:2b:9b:de:0c:7f:9a:a5:02:e7:d1:64:2c:7d: 95:89:b3:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0cHPQQ9t1ZLuUUJqEjoJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2ZWU3M2YxMmRlMjJiNjM0MDY4ZDJjZThiN2E2ZmFlMjI5 MTg2MmEwHhcNMjUxMjA2MDQwMDQ2WhcNMjUxMjA3MDQwMDQ2WjAzMTEwLwYDVQQD EygyNmY1OTI5OTdhZWE0YzgwNjgxODQ4MTUyM2E4NjIyNDEzZWY1M2FiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3dVdA5gm3xqNUd6cXSkQmfmYkQCH AQtqI2wYKEsAqc1i7VFnlC+XxcjKAUmAHdHFKXgAntOXB1N9aiYkAUP4v5S3WBxE tu1rDoW7sTxq7ADKlXYrmbo86cgZr7cYFkuLyURVEv5vy83Q801fuZCTdC8epkDU uh67wf+mx/I2sZ7weq4dfQ7aMX9GtPLkg72G1TKkJhyjyZcGpS9BJ5uW5tb+RUnA DCkZN9GQePH+SgLtOqpcp2y6qC4BCpRzI82FJdqXEjDmOkUWDZcZBCreLZrJLT20 tvzgQLuLxnnROFGkerb2UDtMKXkEeYf8dzyU94sN5vV0TckUcvgoqeOSawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCb1kpl66kyAaBhIFSOoYiQT71OrMB8GA1UdIwQY MBaAFDbuc/Et4itjQGjSzot6b64ikYYqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnU1ejhTM2lLMk5BYU5MT2kzcHZyaUtSaGlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8wNGEyMjMtZTFjMC00ZTEyLTkxZmQt ZDE5OGYwMTBiMTVhLzEvTnU1ejhTM2lLMk5BYU5MT2kzcHZyaUtSaGlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi8wNGEyMjMtZTFjMC00ZTEyLTkxZmQtZDE5OGYwMTBiMTVh LzEvTnU1ejhTM2lLMk5BYU5MT2kzcHZyaUtSaGlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZQvzLZtP EmhBXzkRXHjqTRcQh1NZny71doAmtTn7mTy+G6QrTvohnpjKYClZMwY/9ES+FIwF nAOBi7HURe4TZ1Q7Od/CMt5YnPXIn9u+/Aw29/78yfw4HjnQcfkXLUNQ3WR8/lIG ziKAUiMLcM+PvFvID8ZCKTwGAzoEPN8U63BS5gfjftRf4f5f5n6ZnLKmUw95pJuS UvYblk6IAQFuNqmyvLoQVg3DkZeJAcXeV8BaFghaygC41kmVrVynhItb2uHgOpWQ LtZOcKxCIQ2u9w90bJx7iGiGFpitUeXOQ2Pf1IYS4avc2g6F0U12ZDwrm94Mf5ql AufRZCx9lYmzXA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:55:15 2025 by rpki-client