This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/002716-a257-4568-bf07-ded3862b7631/1/nSBC44DWR2UTrMCPtU-8xzYm7D0.mft File: nSBC44DWR2UTrMCPtU-8xzYm7D0.mft (raw, json) Hash identifier: jI6wi22Lc3VVHMIL2kaqHqqAVO8vZKrDZ228cBwQAN0= Subject key identifier: 57:2B:AD:9F:9A:42:F9:7F:05:C7:75:00:CE:DB:EC:7E:BD:29:70:A7 Authority key identifier: 9D:20:42:E3:80:D6:47:65:13:AC:C0:8F:B5:4F:BC:C7:36:26:EC:3D Certificate issuer: /CN=9d2042e380d6476513acc08fb54fbcc73626ec3d Certificate serial: 019AF08810075F851B8C5005BDA6C473C1EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSBC44DWR2UTrMCPtU-8xzYm7D0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/002716-a257-4568-bf07-ded3862b7631/1/nSBC44DWR2UTrMCPtU-8xzYm7D0.mft Manifest number: 028F Signing time: Fri 05 Dec 2025 22:00:40 +0000 Manifest this update: Fri 05 Dec 2025 22:00:40 +0000 Manifest next update: Sat 06 Dec 2025 22:00:40 +0000 Files and hashes: 1: nSBC44DWR2UTrMCPtU-8xzYm7D0.crl (hash: PslwaG3R4BN0f694pTtDIU//Bxisi3m9tRlIMQSGn4E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/002716-a257-4568-bf07-ded3862b7631/1/nSBC44DWR2UTrMCPtU-8xzYm7D0.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/002716-a257-4568-bf07-ded3862b7631/1/nSBC44DWR2UTrMCPtU-8xzYm7D0.mft rsync://rpki.ripe.net/repository/DEFAULT/nSBC44DWR2UTrMCPtU-8xzYm7D0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:10:07:5f:85:1b:8c:50:05:bd:a6:c4:73:c1:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d2042e380d6476513acc08fb54fbcc73626ec3d Validity Not Before: Dec 5 22:00:40 2025 GMT Not After : Dec 6 22:00:40 2025 GMT Subject: CN=572bad9f9a42f97f05c77500cedbec7ebd2970a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:05:9b:81:3c:25:7a:03:52:6b:2e:45:6c:00: 46:4e:70:e6:7a:9b:2a:82:de:e0:a8:eb:98:4c:f9: c4:3b:b4:f6:dd:c6:b4:db:81:88:2e:7f:33:80:1b: 25:3e:ea:7a:aa:d9:4a:b5:88:70:22:f7:59:51:08: 35:8b:71:24:98:45:84:b3:42:46:bd:8c:b4:ad:0b: dd:5c:51:a0:33:95:8d:a5:11:29:03:f2:fe:5a:4e: 49:5a:03:17:93:26:7d:4a:de:c9:93:01:2e:ad:6a: 5a:f9:a2:f2:65:96:ea:39:a5:12:67:b3:0c:78:7b: 35:90:41:78:de:c8:4c:32:63:7e:51:c6:60:49:d5: ab:24:ff:d5:19:56:68:b4:6d:d5:ab:3b:85:ea:3d: 60:ee:e1:62:dc:34:4f:72:f5:08:d1:7d:5e:68:b7: 9d:34:d3:3b:2e:c8:18:bd:5a:f5:a9:1a:04:35:41: 26:20:15:43:33:cb:ac:45:fc:24:71:a7:aa:54:b3: c4:cc:aa:cc:e6:78:1d:a7:fd:00:c7:b4:0c:06:7c: e1:89:8c:34:ce:99:56:89:a7:73:44:d3:1d:bc:20: 08:3d:a8:ce:af:11:08:81:84:23:db:be:55:11:97: e3:02:3d:b1:b4:91:e4:51:37:f3:a4:b0:24:19:ed: 5b:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:2B:AD:9F:9A:42:F9:7F:05:C7:75:00:CE:DB:EC:7E:BD:29:70:A7 X509v3 Authority Key Identifier: keyid:9D:20:42:E3:80:D6:47:65:13:AC:C0:8F:B5:4F:BC:C7:36:26:EC:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSBC44DWR2UTrMCPtU-8xzYm7D0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/002716-a257-4568-bf07-ded3862b7631/1/nSBC44DWR2UTrMCPtU-8xzYm7D0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/002716-a257-4568-bf07-ded3862b7631/1/nSBC44DWR2UTrMCPtU-8xzYm7D0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:ce:77:9e:93:fa:e3:e5:74:a2:9f:fe:27:57:36:6f:90:24: 87:2b:e1:78:67:cf:df:55:f7:f8:fa:40:49:b1:16:c1:27:ee: 88:75:b1:c2:a5:3f:4f:bd:cd:b2:b8:3b:37:da:1b:b1:b2:2c: 2c:66:6b:1b:52:36:34:c8:61:45:c3:2f:4b:c9:ea:33:8e:9f: 7a:a6:09:b3:1f:7c:cc:40:30:b1:30:bc:98:e8:af:33:ed:32: 4d:f5:db:91:b9:f1:57:74:6b:64:f0:67:59:f3:29:3e:ac:b6: 41:59:75:8b:e9:70:52:ac:59:70:7e:92:25:6f:0f:47:6d:e1: f0:c2:75:b7:a2:88:a3:3e:c3:50:fb:9a:c6:cb:b1:f8:e5:6a: 6b:6e:36:65:6a:a0:7a:b9:a4:6c:9a:28:61:5a:c3:b9:33:7f: ff:87:32:fc:40:44:fb:2c:78:04:cc:71:e5:db:0f:a0:20:b2: db:40:34:ba:5c:ff:67:3a:1b:07:03:4f:46:10:15:9f:b9:7b: f2:57:b1:bb:4e:e7:6b:95:d1:f6:e8:2b:35:6f:c1:e3:0c:8d: 52:a5:16:c9:f5:be:1e:8b:5c:f3:7a:a2:d6:f9:27:38:a7:f4: 7b:30:6d:f7:c6:13:40:f7:88:93:00:0a:e3:bf:82:48:81:2c: bf:22:9f:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiBAHX4UbjFAFvabEc8HqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMjA0MmUzODBkNjQ3NjUxM2FjYzA4ZmI1NGZiY2M3MzYy NmVjM2QwHhcNMjUxMjA1MjIwMDQwWhcNMjUxMjA2MjIwMDQwWjAzMTEwLwYDVQQD Eyg1NzJiYWQ5ZjlhNDJmOTdmMDVjNzc1MDBjZWRiZWM3ZWJkMjk3MGE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwWbgTwlegNSay5FbABGTnDmepsq gt7gqOuYTPnEO7T23ca024GILn8zgBslPup6qtlKtYhwIvdZUQg1i3EkmEWEs0JG vYy0rQvdXFGgM5WNpREpA/L+Wk5JWgMXkyZ9St7JkwEurWpa+aLyZZbqOaUSZ7MM eHs1kEF43shMMmN+UcZgSdWrJP/VGVZotG3VqzuF6j1g7uFi3DRPcvUI0X1eaLed NNM7LsgYvVr1qRoENUEmIBVDM8usRfwkcaeqVLPEzKrM5ngdp/0Ax7QMBnzhiYw0 zplWiadzRNMdvCAIPajOrxEIgYQj275VEZfjAj2xtJHkUTfzpLAkGe1bdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFcrrZ+aQvl/Bcd1AM7b7H69KXCnMB8GA1UdIwQY MBaAFJ0gQuOA1kdlE6zAj7VPvMc2Juw9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblNCQzQ0RFdSMlVUck1DUHRVLTh4elltN0QwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS8wMDI3MTYtYTI1Ny00NTY4LWJmMDct ZGVkMzg2MmI3NjMxLzEvblNCQzQ0RFdSMlVUck1DUHRVLTh4elltN0QwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS8wMDI3MTYtYTI1Ny00NTY4LWJmMDctZGVkMzg2MmI3NjMx LzEvblNCQzQ0RFdSMlVUck1DUHRVLTh4elltN0QwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeM53npP6 4+V0op/+J1c2b5AkhyvheGfP31X3+PpASbEWwSfuiHWxwqU/T73Nsrg7N9obsbIs LGZrG1I2NMhhRcMvS8nqM46feqYJsx98zEAwsTC8mOivM+0yTfXbkbnxV3RrZPBn WfMpPqy2QVl1i+lwUqxZcH6SJW8PR23h8MJ1t6KIoz7DUPuaxsux+OVqa242ZWqg ermkbJooYVrDuTN//4cy/EBE+yx4BMxx5dsPoCCy20A0ulz/ZzobBwNPRhAVn7l7 8lexu07na5XR9ugrNW/B4wyNUqUWyfW+Hotc83qi1vknOKf0ezBt98YTQPeIkwAK 47+CSIEsvyKflg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:49:09 2025 by rpki-client