This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b9467c-84af-493a-9db9-4dd59c7c6305/1/nu5GafwIpNQzdQkRBhOGKzFPGsc.mft File: nu5GafwIpNQzdQkRBhOGKzFPGsc.mft (raw, json) Hash identifier: nAPEYQrDPknTuLR+feWLgjydzGXdKZGVN76GBsZmUlE= Subject key identifier: 0F:81:09:47:1A:32:81:52:32:E5:F6:81:E8:82:04:BF:FE:72:08:44 Authority key identifier: 9E:EE:46:69:FC:08:A4:D4:33:75:09:11:06:13:86:2B:31:4F:1A:C7 Certificate issuer: /CN=9eee4669fc08a4d4337509110613862b314f1ac7 Certificate serial: 019AF3896011ECE53FDBAB19503CF324E87D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nu5GafwIpNQzdQkRBhOGKzFPGsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b9467c-84af-493a-9db9-4dd59c7c6305/1/nu5GafwIpNQzdQkRBhOGKzFPGsc.mft Manifest number: 0D2E Signing time: Sat 06 Dec 2025 12:00:57 +0000 Manifest this update: Sat 06 Dec 2025 12:00:57 +0000 Manifest next update: Sun 07 Dec 2025 12:00:57 +0000 Files and hashes: 1: nu5GafwIpNQzdQkRBhOGKzFPGsc.crl (hash: hl7JV+alaItYl/uRt92X1EE85kqNQMNqR8H9KiZGllo=) 2: vzUoCVHRR9ZHE2kigNi06PdimLU.roa (hash: a4CslL3J1RRiTZFOjWgZdX3HIAOzGd5qiCR9i0+UhrY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/b9467c-84af-493a-9db9-4dd59c7c6305/1/nu5GafwIpNQzdQkRBhOGKzFPGsc.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/b9467c-84af-493a-9db9-4dd59c7c6305/1/nu5GafwIpNQzdQkRBhOGKzFPGsc.mft rsync://rpki.ripe.net/repository/DEFAULT/nu5GafwIpNQzdQkRBhOGKzFPGsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:60:11:ec:e5:3f:db:ab:19:50:3c:f3:24:e8:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9eee4669fc08a4d4337509110613862b314f1ac7 Validity Not Before: Dec 6 12:00:57 2025 GMT Not After : Dec 7 12:00:57 2025 GMT Subject: CN=0f8109471a32815232e5f681e88204bffe720844 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:90:2f:32:49:72:ec:43:66:53:d8:9f:96:b9: 98:df:c6:47:c9:e8:71:6a:74:ab:ad:79:d3:29:a7: af:5a:69:72:c6:a3:4c:2f:08:9b:b2:3a:f3:0e:81: f5:3e:e2:ea:95:ef:3a:54:03:3e:63:69:d5:03:3e: 01:b1:31:b1:08:00:de:d6:3a:8e:c0:e2:11:4f:78: 63:52:a0:47:07:72:8d:eb:59:a1:f2:e5:04:f4:d5: cf:2e:15:58:b9:4f:5f:6d:2c:09:9d:fc:1f:23:75: 50:c5:02:03:c6:89:82:6a:0d:89:88:5a:29:d8:d5: 9b:20:fa:cd:2b:5f:4d:11:b6:4a:a7:2d:c8:ec:72: a3:9e:32:c9:06:4d:f0:da:59:9d:58:26:85:ef:88: 42:a4:7d:05:c1:1b:cc:66:24:ab:1c:53:a3:47:44: a9:54:f1:45:63:03:cd:8f:c9:95:7b:f7:40:a7:93: ff:4f:9b:db:54:b7:e1:49:a7:04:c2:fb:1b:10:68: ca:1d:77:3e:cf:98:bd:a7:5d:74:05:d0:42:e6:4c: a9:9d:61:3a:5e:76:0c:0e:5a:82:07:d2:f2:b1:f0: d9:4b:6b:22:87:62:ed:08:15:23:3f:b5:bc:81:4e: ae:4f:b4:3c:e4:75:be:ff:11:7e:03:ee:d1:81:7a: 43:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:81:09:47:1A:32:81:52:32:E5:F6:81:E8:82:04:BF:FE:72:08:44 X509v3 Authority Key Identifier: keyid:9E:EE:46:69:FC:08:A4:D4:33:75:09:11:06:13:86:2B:31:4F:1A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nu5GafwIpNQzdQkRBhOGKzFPGsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b9467c-84af-493a-9db9-4dd59c7c6305/1/nu5GafwIpNQzdQkRBhOGKzFPGsc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b9467c-84af-493a-9db9-4dd59c7c6305/1/nu5GafwIpNQzdQkRBhOGKzFPGsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:5c:f3:e2:da:9e:79:30:8a:d3:36:89:fe:3e:f4:80:50:a3: 52:f3:76:5c:1e:4b:2b:4d:3d:6d:7b:b2:6d:25:ef:7f:7c:41: 89:aa:c1:44:ea:30:a8:5e:95:c3:ab:bf:17:43:64:58:19:b2: 0c:8f:f7:3b:15:18:0c:a4:d4:dd:f1:f8:70:d7:1f:f6:c8:7a: ec:8c:f2:98:94:be:18:61:13:fc:ea:88:1c:75:35:63:80:5d: 8a:11:f3:d1:73:1b:66:4c:98:09:2a:11:5e:62:e6:ab:13:ab: c5:d9:0a:ab:d1:7d:1e:4d:ff:6b:ca:0f:99:78:16:b2:6f:5c: 73:1e:5d:a3:2a:03:7c:f7:8a:f2:31:ff:2b:4f:6b:0e:17:fe: 33:85:e9:65:72:83:8d:ad:de:b1:01:7c:92:ef:94:8c:6f:1a: e2:7a:68:9c:1f:31:32:9a:5f:66:1e:6d:f3:a5:2f:3d:b0:64: 8b:01:4b:4c:5d:0f:14:38:46:35:8f:eb:3d:98:5a:e5:a9:ad: 09:b4:d5:24:3b:83:02:00:c3:be:e2:8b:4d:a0:e5:33:9b:b6: df:38:85:60:2a:fc:1b:5b:2e:fa:14:ff:75:e8:25:7a:10:0b: f3:15:5f:2c:a0:fd:0f:86:fb:58:f6:39:07:ce:61:12:bc:f6: 4d:f2:4a:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziWAR7OU/26sZUDzzJOh9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllZWU0NjY5ZmMwOGE0ZDQzMzc1MDkxMTA2MTM4NjJiMzE0 ZjFhYzcwHhcNMjUxMjA2MTIwMDU3WhcNMjUxMjA3MTIwMDU3WjAzMTEwLwYDVQQD EygwZjgxMDk0NzFhMzI4MTUyMzJlNWY2ODFlODgyMDRiZmZlNzIwODQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZAvMkly7ENmU9iflrmY38ZHyehx anSrrXnTKaevWmlyxqNMLwibsjrzDoH1PuLqle86VAM+Y2nVAz4BsTGxCADe1jqO wOIRT3hjUqBHB3KN61mh8uUE9NXPLhVYuU9fbSwJnfwfI3VQxQIDxomCag2JiFop 2NWbIPrNK19NEbZKpy3I7HKjnjLJBk3w2lmdWCaF74hCpH0FwRvMZiSrHFOjR0Sp VPFFYwPNj8mVe/dAp5P/T5vbVLfhSacEwvsbEGjKHXc+z5i9p110BdBC5kypnWE6 XnYMDlqCB9LysfDZS2sih2LtCBUjP7W8gU6uT7Q85HW+/xF+A+7RgXpDBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA+BCUcaMoFSMuX2geiCBL/+cghEMB8GA1UdIwQY MBaAFJ7uRmn8CKTUM3UJEQYThisxTxrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnU1R2Fmd0lwTlF6ZFFrUkJoT0dLekZQR3NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9iOTQ2N2MtODRhZi00OTNhLTlkYjkt NGRkNTljN2M2MzA1LzEvbnU1R2Fmd0lwTlF6ZFFrUkJoT0dLekZQR3NjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi9iOTQ2N2MtODRhZi00OTNhLTlkYjktNGRkNTljN2M2MzA1 LzEvbnU1R2Fmd0lwTlF6ZFFrUkJoT0dLekZQR3NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlVzz4tqe eTCK0zaJ/j70gFCjUvN2XB5LK009bXuybSXvf3xBiarBROowqF6Vw6u/F0NkWBmy DI/3OxUYDKTU3fH4cNcf9sh67IzymJS+GGET/OqIHHU1Y4BdihHz0XMbZkyYCSoR XmLmqxOrxdkKq9F9Hk3/a8oPmXgWsm9ccx5doyoDfPeK8jH/K09rDhf+M4XpZXKD ja3esQF8ku+UjG8a4nponB8xMppfZh5t86UvPbBkiwFLTF0PFDhGNY/rPZha5amt CbTVJDuDAgDDvuKLTaDlM5u23ziFYCr8G1su+hT/deglehAL8xVfLKD9D4b7WPY5 B85hErz2TfJKEA== -----END CERTIFICATE-----Generated at Sat Dec 6 16:32:04 2025 by rpki-client