This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/ee3fdd-ad81-49b2-b680-ab0933ac9af5/1/nUxyfODk4Wasa-ME__JRgW1RpEI.mft File: nUxyfODk4Wasa-ME__JRgW1RpEI.mft (raw, json) Hash identifier: ah2LxNYoQCeVt7D4k1D+zLMhTEBO00CBM+jzw2dNpNA= Subject key identifier: BA:F2:2C:58:91:D7:86:51:A1:A0:B9:80:4A:69:7E:24:E0:12:06:07 Authority key identifier: 9D:4C:72:7C:E0:E4:E1:66:AC:6B:E3:04:FF:F2:51:81:6D:51:A4:42 Certificate issuer: /CN=9d4c727ce0e4e166ac6be304fff251816d51a442 Certificate serial: 019AF12E14C22D9680DBD5D08F7ACE3FB6E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nUxyfODk4Wasa-ME__JRgW1RpEI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/ee3fdd-ad81-49b2-b680-ab0933ac9af5/1/nUxyfODk4Wasa-ME__JRgW1RpEI.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 01:02:00 +0000 Manifest this update: Sat 06 Dec 2025 01:02:00 +0000 Manifest next update: Sun 07 Dec 2025 01:02:00 +0000 Files and hashes: 1: nUxyfODk4Wasa-ME__JRgW1RpEI.crl (hash: zj8c4n3VdKrty85ecrQY50qEXiWBUWO07u+sq0jc9K4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/ee3fdd-ad81-49b2-b680-ab0933ac9af5/1/nUxyfODk4Wasa-ME__JRgW1RpEI.crl rsync://rpki.ripe.net/repository/DEFAULT/82/ee3fdd-ad81-49b2-b680-ab0933ac9af5/1/nUxyfODk4Wasa-ME__JRgW1RpEI.mft rsync://rpki.ripe.net/repository/DEFAULT/nUxyfODk4Wasa-ME__JRgW1RpEI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:14:c2:2d:96:80:db:d5:d0:8f:7a:ce:3f:b6:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d4c727ce0e4e166ac6be304fff251816d51a442 Validity Not Before: Dec 6 01:02:00 2025 GMT Not After : Dec 7 01:02:00 2025 GMT Subject: CN=baf22c5891d78651a1a0b9804a697e24e0120607 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:3f:16:86:db:d9:dc:0b:cc:4d:9e:0f:22:2f: d3:95:40:e5:5c:a5:8b:74:cb:0f:6f:22:ff:21:e9: 88:43:b1:65:f0:93:30:e7:0b:d2:23:45:85:22:a5: 0f:ba:26:fd:38:de:2b:17:c3:6a:2c:82:0d:66:09: 59:37:ce:7b:5a:6d:21:67:9f:e7:33:0d:21:25:61: a5:0d:da:ca:4a:63:a8:25:f4:84:76:af:48:7b:ee: a0:8e:f4:fa:34:6e:0f:56:19:ba:18:9f:ec:35:4b: 1b:33:53:f6:c1:aa:3d:22:f6:b9:d0:72:bc:de:2b: 89:51:a3:5f:a9:62:0a:fe:72:f1:1a:85:25:80:34: 71:ac:4d:89:95:37:82:03:f7:f5:d0:7c:16:a0:20: 65:a7:44:01:58:5b:58:48:aa:35:ea:2a:c1:da:13: f4:96:3b:3e:48:39:5b:a3:8d:c6:f4:4d:1e:d9:5e: 24:a9:77:71:c1:4e:08:32:88:c5:64:56:54:cc:01: 63:d3:89:b2:53:9a:56:39:31:4f:e4:48:83:07:df: f5:dd:19:33:c3:5c:c0:0a:97:80:4b:c1:87:8b:98: 33:84:d0:5c:b6:01:3c:bc:79:b1:cb:3a:ab:bf:64: 83:3d:ee:41:20:67:ba:36:c9:d5:20:e9:87:3c:0a: bd:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:F2:2C:58:91:D7:86:51:A1:A0:B9:80:4A:69:7E:24:E0:12:06:07 X509v3 Authority Key Identifier: keyid:9D:4C:72:7C:E0:E4:E1:66:AC:6B:E3:04:FF:F2:51:81:6D:51:A4:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nUxyfODk4Wasa-ME__JRgW1RpEI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ee3fdd-ad81-49b2-b680-ab0933ac9af5/1/nUxyfODk4Wasa-ME__JRgW1RpEI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ee3fdd-ad81-49b2-b680-ab0933ac9af5/1/nUxyfODk4Wasa-ME__JRgW1RpEI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:b0:16:67:ca:df:57:d0:2d:2e:5d:89:3f:4f:3c:31:ab:e8: bd:2d:e5:e2:52:ca:dd:2c:28:74:7e:93:33:05:9d:ed:aa:16: b5:fa:72:98:62:bd:53:a3:45:ce:48:a3:9e:7f:c6:30:e5:10: d5:89:0b:b1:13:87:a6:dd:b1:46:38:a3:ec:50:97:88:80:ff: d1:37:c4:b5:b5:ad:4d:2f:a6:f9:8b:f3:ee:af:d5:ef:75:25: dc:62:60:2b:69:f9:7e:76:4b:de:36:c3:21:a6:fe:e0:27:de: fe:71:14:40:64:7b:35:29:bf:42:48:32:d3:c5:29:6f:22:e3: 5b:df:87:e5:dd:9f:64:e7:7c:d7:27:ab:39:23:4a:2f:c4:fd: 52:38:04:bf:6f:4b:d6:55:6f:80:fe:84:68:f9:9e:c2:e0:a9: ae:ed:56:8f:f2:f1:22:6b:63:c1:5a:40:1c:2a:1c:c7:aa:dd: 9d:ff:c9:50:47:b8:ee:bf:9d:3c:a5:d4:87:d5:a8:a7:83:10: 73:80:55:6b:fd:f2:be:ef:cc:2c:30:aa:6b:fd:06:3d:5b:a1: 30:ec:de:76:b3:b6:0f:be:f1:49:56:b3:5b:02:df:d1:bd:90: 51:eb:ac:20:5f:5f:78:92:54:b2:c0:12:94:b4:de:11:65:91: fe:01:f4:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLhTCLZaA29XQj3rOP7bmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkNGM3MjdjZTBlNGUxNjZhYzZiZTMwNGZmZjI1MTgxNmQ1 MWE0NDIwHhcNMjUxMjA2MDEwMjAwWhcNMjUxMjA3MDEwMjAwWjAzMTEwLwYDVQQD EyhiYWYyMmM1ODkxZDc4NjUxYTFhMGI5ODA0YTY5N2UyNGUwMTIwNjA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyD8WhtvZ3AvMTZ4PIi/TlUDlXKWL dMsPbyL/IemIQ7Fl8JMw5wvSI0WFIqUPuib9ON4rF8NqLIINZglZN857Wm0hZ5/n Mw0hJWGlDdrKSmOoJfSEdq9Ie+6gjvT6NG4PVhm6GJ/sNUsbM1P2wao9Iva50HK8 3iuJUaNfqWIK/nLxGoUlgDRxrE2JlTeCA/f10HwWoCBlp0QBWFtYSKo16irB2hP0 ljs+SDlbo43G9E0e2V4kqXdxwU4IMojFZFZUzAFj04myU5pWOTFP5EiDB9/13Rkz w1zACpeAS8GHi5gzhNBctgE8vHmxyzqrv2SDPe5BIGe6NsnVIOmHPAq9PwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLryLFiR14ZRoaC5gEppfiTgEgYHMB8GA1UdIwQY MBaAFJ1Mcnzg5OFmrGvjBP/yUYFtUaRCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblV4eWZPRGs0V2FzYS1NRV9fSlJnVzFScEVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9lZTNmZGQtYWQ4MS00OWIyLWI2ODAt YWIwOTMzYWM5YWY1LzEvblV4eWZPRGs0V2FzYS1NRV9fSlJnVzFScEVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi9lZTNmZGQtYWQ4MS00OWIyLWI2ODAtYWIwOTMzYWM5YWY1 LzEvblV4eWZPRGs0V2FzYS1NRV9fSlJnVzFScEVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAErAWZ8rf V9AtLl2JP088MavovS3l4lLK3SwodH6TMwWd7aoWtfpymGK9U6NFzkijnn/GMOUQ 1YkLsROHpt2xRjij7FCXiID/0TfEtbWtTS+m+Yvz7q/V73Ul3GJgK2n5fnZL3jbD Iab+4Cfe/nEUQGR7NSm/Qkgy08UpbyLjW9+H5d2fZOd81yerOSNKL8T9UjgEv29L 1lVvgP6EaPmewuCpru1Wj/LxImtjwVpAHCocx6rdnf/JUEe47r+dPKXUh9Wop4MQ c4BVa/3yvu/MLDCqa/0GPVuhMOzedrO2D77xSVazWwLf0b2QUeusIF9feJJUssAS lLTeEWWR/gH0mA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:37:43 2025 by rpki-client