This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/47e609-b6b7-443b-8a04-e285cd8cad12/1/nurBz77ElK6UV8hm5jYYZcTzAEg.mft File: nurBz77ElK6UV8hm5jYYZcTzAEg.mft (raw, json) Hash identifier: sdSE2+2ZA4f5rrvKH5CDDfmMUBHmg3HSPPwUoJmiO0I= Subject key identifier: 0E:5D:30:01:9B:3A:4C:C8:CB:2F:15:92:50:D5:43:AB:08:7F:78:D7 Authority key identifier: 9E:EA:C1:CF:BE:C4:94:AE:94:57:C8:66:E6:36:18:65:C4:F3:00:48 Certificate issuer: /CN=9eeac1cfbec494ae9457c866e6361865c4f30048 Certificate serial: 019AF2AD655371F884B3C3E61AAA8C44591F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nurBz77ElK6UV8hm5jYYZcTzAEg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/47e609-b6b7-443b-8a04-e285cd8cad12/1/nurBz77ElK6UV8hm5jYYZcTzAEg.mft Manifest number: 0D5D Signing time: Sat 06 Dec 2025 08:00:41 +0000 Manifest this update: Sat 06 Dec 2025 08:00:41 +0000 Manifest next update: Sun 07 Dec 2025 08:00:41 +0000 Files and hashes: 1: mmnZOOh4xZoAyB6ozP7dMz0vpOQ.roa (hash: MPgwr3P3oOg7+ut0sMgX1kiy6aK0r7pykdMfFbGH85I=) 2: nurBz77ElK6UV8hm5jYYZcTzAEg.crl (hash: Kmws3BqfDpPlBXDwCz/T/maR24r52r8ZxgspAfN2BoA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/47e609-b6b7-443b-8a04-e285cd8cad12/1/nurBz77ElK6UV8hm5jYYZcTzAEg.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/47e609-b6b7-443b-8a04-e285cd8cad12/1/nurBz77ElK6UV8hm5jYYZcTzAEg.mft rsync://rpki.ripe.net/repository/DEFAULT/nurBz77ElK6UV8hm5jYYZcTzAEg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:65:53:71:f8:84:b3:c3:e6:1a:aa:8c:44:59:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9eeac1cfbec494ae9457c866e6361865c4f30048 Validity Not Before: Dec 6 08:00:41 2025 GMT Not After : Dec 7 08:00:41 2025 GMT Subject: CN=0e5d30019b3a4cc8cb2f159250d543ab087f78d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:fc:21:70:ae:ac:12:98:dc:2e:b7:24:dc:22: 1f:21:1f:24:37:ab:81:73:d1:0b:c3:15:25:c3:57: 75:b1:c1:c5:12:5f:4e:e2:b6:6f:98:58:6a:81:f6: 05:be:88:df:4e:7c:68:25:e2:97:85:fb:83:72:53: ee:e5:7c:44:7b:08:ea:64:08:e4:58:de:60:12:9d: 0a:75:17:c6:d3:10:65:e4:e6:eb:64:03:02:ab:6b: 5e:33:3a:f2:9b:69:a1:16:8b:e1:ea:62:5e:da:eb: 96:9b:7f:33:da:6c:aa:1d:3c:ab:26:4d:28:d6:a7: 93:64:eb:61:15:15:be:ef:dc:3d:9d:a3:e5:3a:ba: c6:aa:82:61:e0:a7:e4:74:97:ad:52:4b:71:a9:e6: 95:0f:cf:a1:14:f3:6e:cb:05:ea:87:86:a6:c2:6c: 1c:9b:42:ea:f8:0b:09:70:c1:cd:06:91:4a:d1:cf: dd:fa:e3:8b:c8:68:15:3f:2f:a7:7e:d0:da:f3:e8: 19:c3:cd:3d:47:87:d9:77:40:ae:5d:07:c5:13:74: ca:ca:ab:51:02:50:d8:5b:b9:04:79:a4:cc:eb:6b: a5:86:db:2d:58:e9:e6:e7:4e:d5:4a:bc:be:f5:8e: 92:24:66:36:84:4a:0a:ef:94:fa:6c:cb:ad:09:44: 2e:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:5D:30:01:9B:3A:4C:C8:CB:2F:15:92:50:D5:43:AB:08:7F:78:D7 X509v3 Authority Key Identifier: keyid:9E:EA:C1:CF:BE:C4:94:AE:94:57:C8:66:E6:36:18:65:C4:F3:00:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nurBz77ElK6UV8hm5jYYZcTzAEg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/47e609-b6b7-443b-8a04-e285cd8cad12/1/nurBz77ElK6UV8hm5jYYZcTzAEg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/47e609-b6b7-443b-8a04-e285cd8cad12/1/nurBz77ElK6UV8hm5jYYZcTzAEg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:04:38:48:b6:3c:b7:4d:6d:fe:e1:33:b4:1a:1a:d8:eb:48: ac:cf:ae:84:54:62:04:f3:c9:0a:d1:25:e1:ee:21:7f:f4:71: 94:c8:18:3b:99:27:0a:7c:0f:51:0e:43:c7:1b:f1:10:67:57: b6:33:78:9c:b6:82:d2:48:73:34:91:b2:d7:f8:11:01:03:a5: 7b:7e:57:0e:43:75:aa:2c:7b:90:13:5d:f5:7e:93:64:69:72: 49:d4:7b:d3:cc:92:a5:38:e3:0e:32:9d:26:9b:8d:ca:d0:b6: ec:6a:e7:23:d5:39:8b:04:72:98:23:7c:49:a1:62:70:e3:ed: 3d:48:3f:38:26:36:63:06:58:3f:de:f5:45:a4:02:57:08:09: 18:c2:0b:7b:dd:c4:fd:6f:a8:e4:41:fc:c4:e9:5f:ff:80:34: 51:4d:db:81:dd:a4:a8:02:fe:d8:30:d0:8f:b0:ce:2e:4e:aa: 9f:04:18:1f:5d:81:91:f3:e9:f9:27:93:f9:b0:08:cb:0b:79: 53:01:38:a9:d3:44:9b:90:46:8f:ed:33:e7:64:be:5d:67:ae: 8d:8f:9a:d0:cc:81:8f:73:04:f5:f2:d0:d4:dd:1a:56:60:03: 3c:cb:9d:24:25:8f:e0:f4:30:82:81:0d:32:6a:05:24:36:5e: f5:1e:11:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrWVTcfiEs8PmGqqMRFkfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllZWFjMWNmYmVjNDk0YWU5NDU3Yzg2NmU2MzYxODY1YzRm MzAwNDgwHhcNMjUxMjA2MDgwMDQxWhcNMjUxMjA3MDgwMDQxWjAzMTEwLwYDVQQD EygwZTVkMzAwMTliM2E0Y2M4Y2IyZjE1OTI1MGQ1NDNhYjA4N2Y3OGQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfwhcK6sEpjcLrck3CIfIR8kN6uB c9ELwxUlw1d1scHFEl9O4rZvmFhqgfYFvojfTnxoJeKXhfuDclPu5XxEewjqZAjk WN5gEp0KdRfG0xBl5ObrZAMCq2teMzrym2mhFovh6mJe2uuWm38z2myqHTyrJk0o 1qeTZOthFRW+79w9naPlOrrGqoJh4KfkdJetUktxqeaVD8+hFPNuywXqh4amwmwc m0Lq+AsJcMHNBpFK0c/d+uOLyGgVPy+nftDa8+gZw809R4fZd0CuXQfFE3TKyqtR AlDYW7kEeaTM62ulhtstWOnm507VSry+9Y6SJGY2hEoK75T6bMutCUQuPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA5dMAGbOkzIyy8VklDVQ6sIf3jXMB8GA1UdIwQY MBaAFJ7qwc++xJSulFfIZuY2GGXE8wBIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnVyQno3N0VsSzZVVjhobTVqWVlaY1R6QUVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS80N2U2MDktYjZiNy00NDNiLThhMDQt ZTI4NWNkOGNhZDEyLzEvbnVyQno3N0VsSzZVVjhobTVqWVlaY1R6QUVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS80N2U2MDktYjZiNy00NDNiLThhMDQtZTI4NWNkOGNhZDEy LzEvbnVyQno3N0VsSzZVVjhobTVqWVlaY1R6QUVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArAQ4SLY8 t01t/uEztBoa2OtIrM+uhFRiBPPJCtEl4e4hf/RxlMgYO5knCnwPUQ5DxxvxEGdX tjN4nLaC0khzNJGy1/gRAQOle35XDkN1qix7kBNd9X6TZGlySdR708ySpTjjDjKd JpuNytC27GrnI9U5iwRymCN8SaFicOPtPUg/OCY2YwZYP971RaQCVwgJGMILe93E /W+o5EH8xOlf/4A0UU3bgd2kqAL+2DDQj7DOLk6qnwQYH12BkfPp+SeT+bAIywt5 UwE4qdNEm5BGj+0z52S+XWeujY+a0MyBj3ME9fLQ1N0aVmADPMudJCWP4PQwgoEN MmoFJDZe9R4Ruw== -----END CERTIFICATE-----Generated at Sat Dec 6 14:25:51 2025 by rpki-client