This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/741872-a425-4367-9ac2-dcd937fd07a7/1/nU-b-Hr_AP1dshWFeBtG82-eNiY.mft File: nU-b-Hr_AP1dshWFeBtG82-eNiY.mft (raw, json) Hash identifier: z/tFhvS4ArVEwNurTj419HxXRA+fbDcyUvIkT3cAvQY= Subject key identifier: 67:98:0E:21:45:98:87:FF:85:C6:B9:59:FD:46:0D:94:F5:FC:45:14 Authority key identifier: 9D:4F:9B:F8:7A:FF:00:FD:5D:B2:15:85:78:1B:46:F3:6F:9E:36:26 Certificate issuer: /CN=9d4f9bf87aff00fd5db21585781b46f36f9e3626 Certificate serial: 019AF42DD8ED59BD43BBFB2387432278368E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nU-b-Hr_AP1dshWFeBtG82-eNiY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/741872-a425-4367-9ac2-dcd937fd07a7/1/nU-b-Hr_AP1dshWFeBtG82-eNiY.mft Manifest number: 03FE Signing time: Sat 06 Dec 2025 15:00:36 +0000 Manifest this update: Sat 06 Dec 2025 15:00:36 +0000 Manifest next update: Sun 07 Dec 2025 15:00:36 +0000 Files and hashes: 1: cThp0KEND3BT4KvCeUid-rjEug4.roa (hash: ImpSaegWwcNvwqQ9pHSgJ6wWRXJrvYa1vES4AMD51Qc=) 2: nU-b-Hr_AP1dshWFeBtG82-eNiY.crl (hash: L6WXdNEk9ozB3NPUp+eAzHX9jUAeyb1QqT/sL8k8myQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/741872-a425-4367-9ac2-dcd937fd07a7/1/nU-b-Hr_AP1dshWFeBtG82-eNiY.crl rsync://rpki.ripe.net/repository/DEFAULT/81/741872-a425-4367-9ac2-dcd937fd07a7/1/nU-b-Hr_AP1dshWFeBtG82-eNiY.mft rsync://rpki.ripe.net/repository/DEFAULT/nU-b-Hr_AP1dshWFeBtG82-eNiY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2d:d8:ed:59:bd:43:bb:fb:23:87:43:22:78:36:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d4f9bf87aff00fd5db21585781b46f36f9e3626 Validity Not Before: Dec 6 15:00:36 2025 GMT Not After : Dec 7 15:00:36 2025 GMT Subject: CN=67980e21459887ff85c6b959fd460d94f5fc4514 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:88:46:fc:e0:2f:d5:68:3e:47:f2:9c:0e:9b: 81:58:84:13:e8:66:f4:81:9c:cc:67:ea:4b:34:90: 24:70:9a:59:0f:61:ea:16:a8:ac:ba:8b:1e:22:99: e7:a7:58:ae:85:b9:3c:09:57:60:9a:11:26:9c:7a: 88:69:45:e8:2e:f3:b9:8b:90:ef:eb:56:6b:e0:88: 67:0f:2c:69:f1:e7:c7:7f:dd:5c:8e:fa:33:ca:57: b1:bf:74:18:c1:3f:b8:bf:42:8f:d2:dd:5b:b0:ab: 61:c1:d1:9b:b9:5d:cc:a4:d7:1f:f7:26:de:55:59: 91:0c:5a:d7:6e:73:03:30:64:15:90:66:90:c8:d4: 4d:2f:c4:41:e7:7a:54:a4:58:02:0a:15:7a:8d:64: 0e:e0:8b:f3:e7:53:25:6b:2a:20:4c:7b:a1:58:2e: b2:11:00:6e:55:84:71:30:bd:be:5e:06:58:d8:86: c2:2a:4a:f3:a6:70:ac:e8:ed:99:12:65:09:35:99: 43:3f:3f:01:b3:ae:a4:35:e6:c5:bb:03:c5:48:cf: 05:9c:38:93:07:3b:16:00:38:99:68:bc:e2:5f:35: aa:2a:51:5c:61:59:f6:fd:58:6a:ac:93:4e:f8:43: cc:32:65:30:f1:63:86:b6:5c:85:bd:69:a0:b9:63: 36:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:98:0E:21:45:98:87:FF:85:C6:B9:59:FD:46:0D:94:F5:FC:45:14 X509v3 Authority Key Identifier: keyid:9D:4F:9B:F8:7A:FF:00:FD:5D:B2:15:85:78:1B:46:F3:6F:9E:36:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nU-b-Hr_AP1dshWFeBtG82-eNiY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/741872-a425-4367-9ac2-dcd937fd07a7/1/nU-b-Hr_AP1dshWFeBtG82-eNiY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/741872-a425-4367-9ac2-dcd937fd07a7/1/nU-b-Hr_AP1dshWFeBtG82-eNiY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:91:94:78:b1:b8:32:e3:0d:90:99:07:5d:9b:5a:02:0a:67: dc:2a:9a:21:23:fc:a1:c2:ba:7d:83:9f:2c:ed:d0:db:e9:53: 75:81:99:58:e8:a8:b1:3e:55:df:3a:3b:e4:66:80:77:75:57: 72:0c:e1:5a:c9:7b:b1:ae:3f:cc:2f:d2:8d:b2:b6:2a:40:79: 4e:2e:85:37:43:f9:0f:07:35:bb:8e:90:f6:e1:3c:78:0c:49: 1e:1c:ad:d4:29:2d:77:7a:80:47:5d:32:e3:c0:db:7e:f1:66: 7b:68:c0:3f:4e:05:2d:5c:4f:8f:2f:55:28:b0:10:d5:e1:ed: b0:83:76:f1:71:2f:cb:87:ec:ec:72:8e:24:b6:8d:7b:51:ff: 5b:0e:1e:0a:36:3b:40:ad:05:4e:95:67:fb:dc:dd:2c:66:b4: 1f:f1:20:7b:aa:7d:f8:c1:e7:76:74:b6:d5:0d:c4:b1:1c:1d: 4d:c2:9c:a3:37:55:c3:07:e5:f4:e8:1b:a1:c0:a6:1f:f4:17: 10:a3:e4:ee:2d:b4:40:34:d6:bd:f3:a8:f1:1b:8a:f8:b5:7b: 1b:19:e2:eb:79:31:05:04:e3:2e:da:ff:59:15:e1:d8:7f:34: 0b:64:8d:ce:7b:a5:56:a6:12:01:18:e5:53:fb:52:d6:25:4c: f6:44:eb:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LdjtWb1Du/sjh0MieDaOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkNGY5YmY4N2FmZjAwZmQ1ZGIyMTU4NTc4MWI0NmYzNmY5 ZTM2MjYwHhcNMjUxMjA2MTUwMDM2WhcNMjUxMjA3MTUwMDM2WjAzMTEwLwYDVQQD Eyg2Nzk4MGUyMTQ1OTg4N2ZmODVjNmI5NTlmZDQ2MGQ5NGY1ZmM0NTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIhG/OAv1Wg+R/KcDpuBWIQT6Gb0 gZzMZ+pLNJAkcJpZD2HqFqisuoseIpnnp1iuhbk8CVdgmhEmnHqIaUXoLvO5i5Dv 61Zr4IhnDyxp8efHf91cjvozylexv3QYwT+4v0KP0t1bsKthwdGbuV3MpNcf9ybe VVmRDFrXbnMDMGQVkGaQyNRNL8RB53pUpFgCChV6jWQO4Ivz51MlayogTHuhWC6y EQBuVYRxML2+XgZY2IbCKkrzpnCs6O2ZEmUJNZlDPz8Bs66kNebFuwPFSM8FnDiT BzsWADiZaLziXzWqKlFcYVn2/VhqrJNO+EPMMmUw8WOGtlyFvWmguWM2dwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGeYDiFFmIf/hca5Wf1GDZT1/EUUMB8GA1UdIwQY MBaAFJ1Pm/h6/wD9XbIVhXgbRvNvnjYmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblUtYi1Icl9BUDFkc2hXRmVCdEc4Mi1lTmlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS83NDE4NzItYTQyNS00MzY3LTlhYzIt ZGNkOTM3ZmQwN2E3LzEvblUtYi1Icl9BUDFkc2hXRmVCdEc4Mi1lTmlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS83NDE4NzItYTQyNS00MzY3LTlhYzItZGNkOTM3ZmQwN2E3 LzEvblUtYi1Icl9BUDFkc2hXRmVCdEc4Mi1lTmlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD5GUeLG4 MuMNkJkHXZtaAgpn3CqaISP8ocK6fYOfLO3Q2+lTdYGZWOiosT5V3zo75GaAd3VX cgzhWsl7sa4/zC/SjbK2KkB5Ti6FN0P5Dwc1u46Q9uE8eAxJHhyt1Cktd3qAR10y 48DbfvFme2jAP04FLVxPjy9VKLAQ1eHtsIN28XEvy4fs7HKOJLaNe1H/Ww4eCjY7 QK0FTpVn+9zdLGa0H/Ege6p9+MHndnS21Q3EsRwdTcKcozdVwwfl9OgbocCmH/QX EKPk7i20QDTWvfOo8RuK+LV7Gxni63kxBQTjLtr/WRXh2H80C2SNznulVqYSARjl U/tS1iVM9kTrZw== -----END CERTIFICATE-----Generated at Sat Dec 6 19:16:56 2025 by rpki-client