This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft File: nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft (raw, json) Hash identifier: RvSVOhieiYhNUos6IV7tSC1fk0p5QGl0wER07ZGY8PU= Subject key identifier: 85:D0:28:5D:5D:4E:B3:04:CA:B4:32:F4:90:0F:A9:17:4F:8F:BD:D4 Authority key identifier: 9E:B3:14:3A:2E:73:F2:09:E6:9D:97:C4:B8:F7:8C:DA:5F:43:70:05 Certificate issuer: /CN=9eb3143a2e73f209e69d97c4b8f78cda5f437005 Certificate serial: 019B41DBC5C6A8E4AECD6C1C0B4364027510 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrMUOi5z8gnmnZfEuPeM2l9DcAU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft Manifest number: 07DC Signing time: Sun 21 Dec 2025 17:01:20 +0000 Manifest this update: Sun 21 Dec 2025 17:01:20 +0000 Manifest next update: Mon 22 Dec 2025 17:01:20 +0000 Files and hashes: 1: I0hxWmi1uukEvqwKPfe9SQ5b_IA.roa (hash: J5yFqxN1A9HSh1h4LfTcY/5BgexCgptY4Dax8tjW9X4=) 2: nrMUOi5z8gnmnZfEuPeM2l9DcAU.crl (hash: zTeykqOVn+66YVAZoiisiKabEvJTQQJsTUJmXMeQXZo=) 3: wu74ellxTR1URudwGeXbUef_Mc4.roa (hash: moXgOfjz6lSXZnPmCRWJ8GgkWq4qK3fy/l+GxzPvtEA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft rsync://rpki.ripe.net/repository/DEFAULT/nrMUOi5z8gnmnZfEuPeM2l9DcAU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:db:c5:c6:a8:e4:ae:cd:6c:1c:0b:43:64:02:75:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9eb3143a2e73f209e69d97c4b8f78cda5f437005 Validity Not Before: Dec 21 17:01:20 2025 GMT Not After : Dec 22 17:01:20 2025 GMT Subject: CN=85d0285d5d4eb304cab432f4900fa9174f8fbdd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:f5:60:16:d0:39:bc:69:f0:ab:47:8c:ab:07: e1:87:b9:af:ac:07:a7:4b:3d:3f:12:fa:09:71:88: 8e:79:79:3a:00:52:26:30:63:6b:6e:a1:f2:66:3c: 79:21:08:bf:74:3a:b0:66:f5:6a:4d:64:b9:38:2f: d6:77:67:e7:7b:8f:28:2a:16:72:cb:4c:0d:8b:24: f6:61:82:bf:98:80:ef:a5:da:bf:86:62:65:2f:63: 7e:38:17:bc:c1:eb:41:5c:82:7a:53:45:69:47:b0: 29:4d:b4:00:40:76:0a:a7:69:e9:f5:d1:3a:5d:92: 62:a0:aa:7d:11:8e:52:af:08:cd:14:e1:8c:c3:ac: ba:d0:69:bb:8b:18:83:e4:fe:4a:24:5b:81:12:5c: c4:ed:3f:5e:e8:d7:86:f5:16:bc:44:a0:df:67:8e: 72:7b:ae:b8:4a:e6:c3:66:16:90:16:71:92:8d:c9: 5f:11:d2:80:0e:76:46:46:90:9e:4c:66:d1:b5:64: e0:de:e8:3c:0f:5c:89:9e:62:f2:89:c0:e8:62:94: 95:f4:85:4b:ae:28:18:35:fd:5c:3a:59:b7:99:bf: 76:fc:28:39:2b:c3:a0:ce:e8:17:6c:05:ed:24:76: 72:b1:ff:d9:d6:93:7c:80:3b:59:a6:66:47:4d:86: d5:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:D0:28:5D:5D:4E:B3:04:CA:B4:32:F4:90:0F:A9:17:4F:8F:BD:D4 X509v3 Authority Key Identifier: keyid:9E:B3:14:3A:2E:73:F2:09:E6:9D:97:C4:B8:F7:8C:DA:5F:43:70:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrMUOi5z8gnmnZfEuPeM2l9DcAU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:07:ec:89:97:3d:64:54:d0:74:6d:1d:38:c0:3a:7b:54:1a: 48:84:5a:b1:d6:31:f9:b0:75:c0:96:d8:4b:67:2b:57:dd:e4: 00:77:4b:d1:ea:86:ab:12:16:59:32:1e:df:3d:2e:22:30:94: 8b:b6:73:c1:c6:db:e3:b6:4a:01:02:49:82:d6:bd:88:d9:50: 30:61:d3:a9:17:f6:32:5c:52:63:c9:ed:fb:e0:58:47:7e:d4: 25:17:ba:38:ef:f6:b7:0e:5e:eb:a4:81:7c:9c:39:1b:84:f6: 24:e9:43:b9:e8:b3:e8:68:b7:4f:83:9f:c1:57:a0:38:e4:fe: 80:0e:27:5d:01:46:0a:d0:50:c5:3d:12:ed:47:b8:8d:08:a8: 95:41:45:47:36:03:27:e0:cb:19:0e:a0:36:d0:4e:84:28:82: 01:29:19:2e:43:20:1b:68:09:0a:63:f3:15:20:57:09:0e:f4: c8:cf:9f:24:70:d5:93:04:e9:bc:6e:fa:c9:54:f5:e4:20:ee: 3e:96:4f:ac:50:45:c4:4a:f4:3c:3e:a2:7f:00:83:64:d8:f2: 06:8f:ef:a7:2b:55:35:13:73:cb:41:d0:8e:85:a2:1a:1e:5a: 76:4d:03:d1:48:ca:f2:f9:70:50:25:00:34:b3:c9:83:a6:16: 70:2a:48:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtB28XGqOSuzWwcC0NkAnUQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllYjMxNDNhMmU3M2YyMDllNjlkOTdjNGI4Zjc4Y2RhNWY0 MzcwMDUwHhcNMjUxMjIxMTcwMTIwWhcNMjUxMjIyMTcwMTIwWjAzMTEwLwYDVQQD Eyg4NWQwMjg1ZDVkNGViMzA0Y2FiNDMyZjQ5MDBmYTkxNzRmOGZiZGQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4PVgFtA5vGnwq0eMqwfhh7mvrAen Sz0/EvoJcYiOeXk6AFImMGNrbqHyZjx5IQi/dDqwZvVqTWS5OC/Wd2fne48oKhZy y0wNiyT2YYK/mIDvpdq/hmJlL2N+OBe8wetBXIJ6U0VpR7ApTbQAQHYKp2np9dE6 XZJioKp9EY5SrwjNFOGMw6y60Gm7ixiD5P5KJFuBElzE7T9e6NeG9Ra8RKDfZ45y e664SubDZhaQFnGSjclfEdKADnZGRpCeTGbRtWTg3ug8D1yJnmLyicDoYpSV9IVL rigYNf1cOlm3mb92/Cg5K8OgzugXbAXtJHZysf/Z1pN8gDtZpmZHTYbVkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIXQKF1dTrMEyrQy9JAPqRdPj73UMB8GA1UdIwQY MBaAFJ6zFDouc/IJ5p2XxLj3jNpfQ3AFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnJNVU9pNXo4Z25tblpmRXVQZU0ybDlEY0FVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85ZmFmMjQtMDVlMS00ZGI5LTlhYWYt NTAxNjE4NDExYzc2LzEvbnJNVU9pNXo4Z25tblpmRXVQZU0ybDlEY0FVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi85ZmFmMjQtMDVlMS00ZGI5LTlhYWYtNTAxNjE4NDExYzc2 LzEvbnJNVU9pNXo4Z25tblpmRXVQZU0ybDlEY0FVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAAfsiZc9 ZFTQdG0dOMA6e1QaSIRasdYx+bB1wJbYS2crV93kAHdL0eqGqxIWWTIe3z0uIjCU i7Zzwcbb47ZKAQJJgta9iNlQMGHTqRf2MlxSY8nt++BYR37UJRe6OO/2tw5e66SB fJw5G4T2JOlDueiz6Gi3T4OfwVegOOT+gA4nXQFGCtBQxT0S7Ue4jQiolUFFRzYD J+DLGQ6gNtBOhCiCASkZLkMgG2gJCmPzFSBXCQ70yM+fJHDVkwTpvG76yVT15CDu PpZPrFBFxEr0PD6ifwCDZNjyBo/vpytVNRNzy0HQjoWiGh5adk0D0UjK8vlwUCUA NLPJg6YWcCpIZQ== -----END CERTIFICATE-----Generated at Sun Dec 21 22:08:02 2025 by rpki-client