This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft File: nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft (raw, json) Hash identifier: f6lynqw0AfwBAEtxn/j3nF12yY2qWRd0PTp93LvjkDo= Subject key identifier: 6B:71:74:64:3D:BE:9C:BD:5E:D3:EF:F5:D3:D0:60:52:D7:90:DF:C9 Authority key identifier: 9E:B3:14:3A:2E:73:F2:09:E6:9D:97:C4:B8:F7:8C:DA:5F:43:70:05 Certificate issuer: /CN=9eb3143a2e73f209e69d97c4b8f78cda5f437005 Certificate serial: 019AF0BF8165A1D97EC76993C3F75F24F140 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrMUOi5z8gnmnZfEuPeM2l9DcAU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft Manifest number: 07B2 Signing time: Fri 05 Dec 2025 23:01:13 +0000 Manifest this update: Fri 05 Dec 2025 23:01:13 +0000 Manifest next update: Sat 06 Dec 2025 23:01:13 +0000 Files and hashes: 1: I0hxWmi1uukEvqwKPfe9SQ5b_IA.roa (hash: J5yFqxN1A9HSh1h4LfTcY/5BgexCgptY4Dax8tjW9X4=) 2: nrMUOi5z8gnmnZfEuPeM2l9DcAU.crl (hash: E1rLcgp3aeBGYCtv/pNBhr50qCGAbhJ9aA3zGK3cAog=) 3: wu74ellxTR1URudwGeXbUef_Mc4.roa (hash: moXgOfjz6lSXZnPmCRWJ8GgkWq4qK3fy/l+GxzPvtEA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft rsync://rpki.ripe.net/repository/DEFAULT/nrMUOi5z8gnmnZfEuPeM2l9DcAU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:81:65:a1:d9:7e:c7:69:93:c3:f7:5f:24:f1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9eb3143a2e73f209e69d97c4b8f78cda5f437005 Validity Not Before: Dec 5 23:01:13 2025 GMT Not After : Dec 6 23:01:13 2025 GMT Subject: CN=6b7174643dbe9cbd5ed3eff5d3d06052d790dfc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:db:eb:62:93:7e:d2:ed:67:32:67:7d:ee:4f: 6e:76:ae:8c:20:63:81:10:ae:aa:f8:1c:b1:00:ae: 3d:12:5c:e8:76:a3:f7:59:28:2a:16:f4:21:ac:66: 89:5f:99:23:05:bd:b2:29:f5:69:17:da:f1:35:a7: aa:66:ba:93:6f:73:62:b3:fc:6f:a5:f5:c9:6a:ea: 96:fa:40:43:c2:6c:0f:0a:91:bb:22:c2:3a:fd:69: 8f:85:85:52:b0:72:8b:2c:e0:9f:e2:2e:cd:ea:ab: 02:48:15:26:df:24:0c:8c:98:09:f8:31:3b:74:1f: b7:eb:d5:87:43:11:64:3a:a6:ea:bf:75:e9:97:49: 9f:a4:88:89:c3:93:00:4d:ca:c8:15:d6:fa:92:07: ba:ae:f6:63:92:6f:3b:b4:24:a3:1c:c0:b7:da:1e: 57:29:5d:e8:6b:28:4c:af:0e:ab:7e:3f:fd:66:90: aa:b4:66:96:43:5f:92:43:83:52:43:12:3f:8c:2c: 4d:39:07:34:4d:73:b3:14:e0:7f:69:48:71:32:c7: 9b:b7:e8:1b:f7:01:3f:e9:49:37:d4:26:27:39:d5: c4:93:b5:e0:87:22:d1:01:08:77:b6:ac:49:d1:6d: f8:c1:9b:45:44:19:ac:e2:c3:99:7a:c4:9a:64:0f: 28:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:71:74:64:3D:BE:9C:BD:5E:D3:EF:F5:D3:D0:60:52:D7:90:DF:C9 X509v3 Authority Key Identifier: keyid:9E:B3:14:3A:2E:73:F2:09:E6:9D:97:C4:B8:F7:8C:DA:5F:43:70:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrMUOi5z8gnmnZfEuPeM2l9DcAU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:dd:71:f3:dd:ac:d2:d9:25:03:9a:cb:70:03:8e:8c:c6:6f: b8:e1:2d:f4:2e:04:7f:50:08:e0:3d:20:74:55:d0:5c:92:da: 4d:ed:97:32:42:4a:30:da:cb:77:ae:38:08:33:ed:59:67:1e: 5f:ec:31:f7:b6:48:3e:01:ca:74:c0:26:9e:7a:c3:5a:7a:73: 39:2b:ef:3b:be:4f:56:67:b5:20:20:93:c3:dc:e4:3f:e4:d1: 23:66:b9:f3:6e:3e:a8:fd:40:22:20:27:27:11:cc:0b:8a:02: 41:c0:48:a4:6b:dc:20:95:d7:e9:13:39:b8:ca:f6:84:c9:5c: c4:87:95:40:ef:c2:fd:fd:e0:84:b0:27:91:83:12:4b:34:04: cf:62:c2:59:c4:00:65:f3:6a:14:14:a4:56:9e:0a:e2:c4:77: 46:ea:10:ee:0a:7c:f7:cd:1f:ac:d2:bd:90:62:5b:7a:5d:f4: ac:ae:2d:c1:2b:92:10:1c:9b:2c:04:d6:71:fb:3a:ea:68:99: 84:f5:6d:4c:67:61:18:eb:f4:3e:38:12:af:3a:14:40:66:fb: 1b:98:ac:c7:2c:7a:a0:42:d1:cd:e0:6a:6c:a4:22:0c:84:f3: 14:5c:9b:2c:3c:58:1f:42:d1:39:0d:41:1d:7a:85:b5:10:3e: ec:d5:db:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv4Flodl+x2mTw/dfJPFAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllYjMxNDNhMmU3M2YyMDllNjlkOTdjNGI4Zjc4Y2RhNWY0 MzcwMDUwHhcNMjUxMjA1MjMwMTEzWhcNMjUxMjA2MjMwMTEzWjAzMTEwLwYDVQQD Eyg2YjcxNzQ2NDNkYmU5Y2JkNWVkM2VmZjVkM2QwNjA1MmQ3OTBkZmM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidvrYpN+0u1nMmd97k9udq6MIGOB EK6q+ByxAK49ElzodqP3WSgqFvQhrGaJX5kjBb2yKfVpF9rxNaeqZrqTb3Nis/xv pfXJauqW+kBDwmwPCpG7IsI6/WmPhYVSsHKLLOCf4i7N6qsCSBUm3yQMjJgJ+DE7 dB+369WHQxFkOqbqv3Xpl0mfpIiJw5MATcrIFdb6kge6rvZjkm87tCSjHMC32h5X KV3oayhMrw6rfj/9ZpCqtGaWQ1+SQ4NSQxI/jCxNOQc0TXOzFOB/aUhxMsebt+gb 9wE/6Uk31CYnOdXEk7XghyLRAQh3tqxJ0W34wZtFRBms4sOZesSaZA8oZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGtxdGQ9vpy9XtPv9dPQYFLXkN/JMB8GA1UdIwQY MBaAFJ6zFDouc/IJ5p2XxLj3jNpfQ3AFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnJNVU9pNXo4Z25tblpmRXVQZU0ybDlEY0FVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85ZmFmMjQtMDVlMS00ZGI5LTlhYWYt NTAxNjE4NDExYzc2LzEvbnJNVU9pNXo4Z25tblpmRXVQZU0ybDlEY0FVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi85ZmFmMjQtMDVlMS00ZGI5LTlhYWYtNTAxNjE4NDExYzc2 LzEvbnJNVU9pNXo4Z25tblpmRXVQZU0ybDlEY0FVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQN1x892s 0tklA5rLcAOOjMZvuOEt9C4Ef1AI4D0gdFXQXJLaTe2XMkJKMNrLd644CDPtWWce X+wx97ZIPgHKdMAmnnrDWnpzOSvvO75PVme1ICCTw9zkP+TRI2a5824+qP1AIiAn JxHMC4oCQcBIpGvcIJXX6RM5uMr2hMlcxIeVQO/C/f3ghLAnkYMSSzQEz2LCWcQA ZfNqFBSkVp4K4sR3RuoQ7gp8980frNK9kGJbel30rK4twSuSEBybLATWcfs66miZ hPVtTGdhGOv0PjgSrzoUQGb7G5isxyx6oELRzeBqbKQiDITzFFybLDxYH0LROQ1B HXqFtRA+7NXb3Q== -----END CERTIFICATE-----Generated at Sat Dec 6 07:08:43 2025 by rpki-client