This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft File: nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft (raw, json) Hash identifier: 1148bJmd3e8E6sHyEiSMRq1zjxcFWid3U9W1xhmYosg= Subject key identifier: E6:00:08:34:69:38:A4:E1:8E:0D:56:E1:4C:9A:F5:40:DA:09:6B:40 Authority key identifier: 9E:6F:26:22:E6:5C:2E:E8:63:50:1D:77:21:47:5A:05:EF:53:43:FB Certificate issuer: /CN=9e6f2622e65c2ee863501d7721475a05ef5343fb Certificate serial: 019AF464DEF23B4C04288CF61383B90856B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nm8mIuZcLuhjUB13IUdaBe9TQ_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft Manifest number: 0358 Signing time: Sat 06 Dec 2025 16:00:42 +0000 Manifest this update: Sat 06 Dec 2025 16:00:42 +0000 Manifest next update: Sun 07 Dec 2025 16:00:42 +0000 Files and hashes: 1: cuJe5r6PJPS-jv29DbSoyr1BYdg.roa (hash: 2tGiauvihDEwDBBUXD4gVcgWbpgeD9AUpt2tKQwt6ew=) 2: nm8mIuZcLuhjUB13IUdaBe9TQ_s.crl (hash: o410OOJ8K5uC/snsHw/qNbZ7SYadlGxxOElV+apHrY0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft rsync://rpki.ripe.net/repository/DEFAULT/nm8mIuZcLuhjUB13IUdaBe9TQ_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:64:de:f2:3b:4c:04:28:8c:f6:13:83:b9:08:56:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e6f2622e65c2ee863501d7721475a05ef5343fb Validity Not Before: Dec 6 16:00:42 2025 GMT Not After : Dec 7 16:00:42 2025 GMT Subject: CN=e60008346938a4e18e0d56e14c9af540da096b40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:39:f3:ef:b7:49:57:1e:15:d8:30:25:79:be: 91:f3:a6:de:ab:6a:52:36:6c:f0:22:4d:2f:2f:7e: 75:de:c3:5a:d3:38:6a:f4:45:1d:72:16:a1:6c:9a: 84:4a:2a:c1:6d:33:2a:77:c2:73:c6:dd:68:43:07: 14:15:c4:a3:3d:b7:e9:1e:ce:7a:19:96:2a:e5:f0: 7e:12:a6:26:84:96:88:b8:a4:11:b3:d1:eb:e9:64: 44:e1:c9:d5:5b:3d:ac:c4:ba:d2:45:be:9b:21:09: 02:4d:ae:2b:d0:32:71:b5:d0:f4:83:16:87:bc:90: 52:07:fa:a1:01:61:8a:20:78:23:4d:09:54:00:c7: bf:31:89:a3:cf:ae:ac:60:80:a8:fa:77:60:d1:c1: 45:87:0f:72:db:b9:bf:be:76:1b:ab:7d:e7:2e:2e: 46:b4:d2:ff:0c:63:24:ae:de:4c:6e:b9:41:25:55: 69:3f:29:e0:d5:77:84:7d:8f:63:4a:5d:f5:bf:02: 8b:b1:8d:7f:bf:5d:b1:ca:80:8b:2d:a4:37:34:41: 0d:51:aa:c9:c2:a9:30:b2:32:52:2b:93:b5:b0:ad: 48:1c:cf:46:a1:82:e2:09:7b:9a:9a:23:8f:67:e1: 3d:9e:f2:13:25:35:d0:bb:52:9e:57:9a:5f:e0:e4: 67:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:00:08:34:69:38:A4:E1:8E:0D:56:E1:4C:9A:F5:40:DA:09:6B:40 X509v3 Authority Key Identifier: keyid:9E:6F:26:22:E6:5C:2E:E8:63:50:1D:77:21:47:5A:05:EF:53:43:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nm8mIuZcLuhjUB13IUdaBe9TQ_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:29:fc:eb:5c:7b:be:80:61:6f:59:f9:1c:ab:bd:06:d6:51: 3d:b1:d7:af:3c:56:fa:07:2b:93:d8:38:b6:5c:0f:31:8c:78: a0:c2:00:43:be:69:1a:02:ea:5a:8b:83:cd:4e:e8:9e:ee:0c: b1:0f:4f:bf:d5:4b:43:cb:91:04:9f:0a:56:ed:50:81:1f:73: 0a:e8:b0:f4:84:f1:26:12:f0:92:c0:ff:48:1a:9b:56:a1:a5: 5a:7d:a6:2f:05:30:11:24:d1:ae:82:8a:a9:3c:7d:4e:1f:55: 4b:a5:3c:4e:95:98:d2:c9:09:08:be:10:84:0d:63:69:b7:b1: 01:f9:37:0c:2a:11:77:66:67:3f:3b:be:5f:22:ab:3f:ef:3c: ad:35:a3:68:13:87:f5:e6:f3:36:0d:7c:de:45:45:49:cf:ad: 57:c1:4e:99:f1:46:b7:7d:b3:6d:b9:57:e5:08:80:3a:f1:6b: 84:fe:ef:b7:a1:4a:45:81:5b:b4:e6:e2:75:03:c4:33:1f:49: 01:a5:74:43:58:b8:a5:0c:b6:00:40:6e:bb:2c:f1:70:b3:7d: 2a:db:4d:24:72:ac:6b:d7:67:fa:26:29:d4:bf:c5:fa:05:a5: 64:45:94:a4:39:ce:5d:59:b7:de:d6:6f:dc:6e:28:95:43:07: f5:b0:f9:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZN7yO0wEKIz2E4O5CFazMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNmYyNjIyZTY1YzJlZTg2MzUwMWQ3NzIxNDc1YTA1ZWY1 MzQzZmIwHhcNMjUxMjA2MTYwMDQyWhcNMjUxMjA3MTYwMDQyWjAzMTEwLwYDVQQD EyhlNjAwMDgzNDY5MzhhNGUxOGUwZDU2ZTE0YzlhZjU0MGRhMDk2YjQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2znz77dJVx4V2DAleb6R86beq2pS NmzwIk0vL3513sNa0zhq9EUdchahbJqESirBbTMqd8Jzxt1oQwcUFcSjPbfpHs56 GZYq5fB+EqYmhJaIuKQRs9Hr6WRE4cnVWz2sxLrSRb6bIQkCTa4r0DJxtdD0gxaH vJBSB/qhAWGKIHgjTQlUAMe/MYmjz66sYICo+ndg0cFFhw9y27m/vnYbq33nLi5G tNL/DGMkrt5MbrlBJVVpPyng1XeEfY9jSl31vwKLsY1/v12xyoCLLaQ3NEENUarJ wqkwsjJSK5O1sK1IHM9GoYLiCXuamiOPZ+E9nvITJTXQu1KeV5pf4ORndwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOYACDRpOKThjg1W4Uya9UDaCWtAMB8GA1UdIwQY MBaAFJ5vJiLmXC7oY1AddyFHWgXvU0P7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbm04bUl1WmNMdWhqVUIxM0lVZGFCZTlUUV9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS81OTNkZDUtYjkwNy00ZGU4LTgwY2Qt YjFkYjcwMDcxZGRlLzEvbm04bUl1WmNMdWhqVUIxM0lVZGFCZTlUUV9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS81OTNkZDUtYjkwNy00ZGU4LTgwY2QtYjFkYjcwMDcxZGRl LzEvbm04bUl1WmNMdWhqVUIxM0lVZGFCZTlUUV9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALyn861x7 voBhb1n5HKu9BtZRPbHXrzxW+gcrk9g4tlwPMYx4oMIAQ75pGgLqWouDzU7onu4M sQ9Pv9VLQ8uRBJ8KVu1QgR9zCuiw9ITxJhLwksD/SBqbVqGlWn2mLwUwESTRroKK qTx9Th9VS6U8TpWY0skJCL4QhA1jabexAfk3DCoRd2ZnPzu+XyKrP+88rTWjaBOH 9ebzNg183kVFSc+tV8FOmfFGt32zbblX5QiAOvFrhP7vt6FKRYFbtObidQPEMx9J AaV0Q1i4pQy2AEBuuyzxcLN9KttNJHKsa9dn+iYp1L/F+gWlZEWUpDnOXVm33tZv 3G4olUMH9bD5Jg== -----END CERTIFICATE-----Generated at Sat Dec 6 20:18:41 2025 by rpki-client