This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.mft File: Nm-mTCu6pyWsJqT_YYAmb67SCKM.mft (raw, json) Hash identifier: 5GOl9M6b4M/AdP2ZOnQnLn+uBhSQJvyGeMk2ASb819c= Subject key identifier: A4:33:E7:F2:2A:D2:7D:A4:60:26:F7:36:20:30:12:2C:64:E4:FF:68 Authority key identifier: 36:6F:A6:4C:2B:BA:A7:25:AC:26:A4:FF:61:80:26:6F:AE:D2:08:A3 Certificate issuer: /CN=366fa64c2bbaa725ac26a4ff6180266faed208a3 Certificate serial: 019B3CEBF38E38EDD8A03A244994E59B9084 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nm-mTCu6pyWsJqT_YYAmb67SCKM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.mft Manifest number: 1786 Signing time: Sat 20 Dec 2025 18:00:54 +0000 Manifest this update: Sat 20 Dec 2025 18:00:54 +0000 Manifest next update: Sun 21 Dec 2025 18:00:54 +0000 Files and hashes: 1: Nm-mTCu6pyWsJqT_YYAmb67SCKM.crl (hash: B092nS7BMMkfM2yMtcs4Ya/lMh2zE3r0QReG9ravcYo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.mft rsync://rpki.ripe.net/repository/DEFAULT/Nm-mTCu6pyWsJqT_YYAmb67SCKM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:eb:f3:8e:38:ed:d8:a0:3a:24:49:94:e5:9b:90:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=366fa64c2bbaa725ac26a4ff6180266faed208a3 Validity Not Before: Dec 20 18:00:54 2025 GMT Not After : Dec 21 18:00:54 2025 GMT Subject: CN=a433e7f22ad27da46026f7362030122c64e4ff68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:90:8e:68:32:d0:00:eb:8d:d6:e2:23:b6:2a: 0f:73:aa:ea:90:ea:4d:49:aa:12:dd:6e:d4:cb:b0: 6e:1f:ba:12:a4:d7:0e:b9:07:e5:77:53:0a:45:d3: f0:c4:aa:54:0d:93:ed:bf:fb:d9:9d:6e:a4:dc:51: b6:67:68:12:b5:6f:4b:b6:39:27:49:e8:fa:21:9a: d3:21:7a:4a:e0:1b:77:ad:5f:f9:27:c3:e8:f3:9b: 25:10:86:0e:9f:8b:ca:b7:ec:05:10:2e:86:1a:c2: c3:4d:ef:41:a3:51:e0:06:73:b0:1c:11:38:e0:e3: 7e:ce:eb:95:82:b7:81:64:51:19:e0:8b:3d:86:54: 77:4b:a0:e2:cd:b6:56:80:95:76:19:05:4f:78:c9: 7b:0d:d7:81:ca:ee:24:6d:b9:da:45:10:06:23:fe: 5a:cf:a6:1b:54:15:04:33:2a:a1:82:ba:58:63:6b: b1:e7:c6:b5:c5:21:73:28:b0:f9:3c:2f:1b:a7:07: 6c:08:2a:bf:7b:a4:15:ce:ae:f4:c9:b7:56:af:4e: 4e:45:33:78:13:29:85:f9:5c:fe:96:83:0d:ec:01: 6e:ab:56:f3:50:62:0d:a1:0a:c2:c5:7c:6c:9f:3b: 75:d0:fe:c2:58:61:e1:40:e0:d1:b4:f5:f1:a8:5a: 44:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:33:E7:F2:2A:D2:7D:A4:60:26:F7:36:20:30:12:2C:64:E4:FF:68 X509v3 Authority Key Identifier: keyid:36:6F:A6:4C:2B:BA:A7:25:AC:26:A4:FF:61:80:26:6F:AE:D2:08:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nm-mTCu6pyWsJqT_YYAmb67SCKM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:b1:09:3d:0d:0f:06:3f:a6:bb:4b:25:5e:2b:d5:f5:f1:8d: b5:e3:b2:c2:82:49:25:c6:65:0b:1c:3b:11:e4:41:76:fe:e5: 7a:92:9f:d9:53:49:c6:70:a9:3e:ce:7e:99:ec:e9:b6:fc:db: 35:1f:05:10:9d:6e:0e:c3:25:20:39:82:2e:b1:5b:5a:7c:e6: 39:31:00:1d:d3:8b:f2:df:66:47:64:0b:2c:1c:da:a1:ab:cb: 48:3d:ed:36:29:dd:cc:78:e5:16:56:bb:8a:c8:23:3e:70:f0: e2:48:13:ee:e2:b1:36:be:15:b1:92:ae:42:e6:4c:76:62:0b: 46:38:a3:0e:e4:35:c1:9d:09:80:95:b8:ab:c2:34:2d:39:42: 2b:ce:34:70:2f:22:d7:57:b0:d8:be:e2:1e:1d:dd:8c:21:8c: 08:df:9a:46:15:2a:d9:46:28:47:e8:66:a1:bb:f1:c0:aa:a3: d7:50:41:c6:8a:14:32:21:9e:27:5b:19:6c:9c:b1:17:ec:8b: 64:23:2c:27:53:bd:5e:ab:02:5a:dc:28:3e:4b:47:42:00:89: cb:55:5e:08:97:ce:f7:33:6d:6c:02:b3:f4:9d:57:d4:fe:1a: bc:8d:ae:56:14:ff:64:f5:4e:be:49:bf:58:53:ed:54:97:bd: c7:da:d7:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs86/OOOO3YoDokSZTlm5CEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2NmZhNjRjMmJiYWE3MjVhYzI2YTRmZjYxODAyNjZmYWVk MjA4YTMwHhcNMjUxMjIwMTgwMDU0WhcNMjUxMjIxMTgwMDU0WjAzMTEwLwYDVQQD EyhhNDMzZTdmMjJhZDI3ZGE0NjAyNmY3MzYyMDMwMTIyYzY0ZTRmZjY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJCOaDLQAOuN1uIjtioPc6rqkOpN SaoS3W7Uy7BuH7oSpNcOuQfld1MKRdPwxKpUDZPtv/vZnW6k3FG2Z2gStW9Ltjkn Sej6IZrTIXpK4Bt3rV/5J8Po85slEIYOn4vKt+wFEC6GGsLDTe9Bo1HgBnOwHBE4 4ON+zuuVgreBZFEZ4Is9hlR3S6DizbZWgJV2GQVPeMl7DdeByu4kbbnaRRAGI/5a z6YbVBUEMyqhgrpYY2ux58a1xSFzKLD5PC8bpwdsCCq/e6QVzq70ybdWr05ORTN4 EymF+Vz+loMN7AFuq1bzUGINoQrCxXxsnzt10P7CWGHhQODRtPXxqFpE3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKQz5/Iq0n2kYCb3NiAwEixk5P9oMB8GA1UdIwQY MBaAFDZvpkwruqclrCak/2GAJm+u0gijMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTm0tbVRDdTZweVdzSnFUX1lZQW1iNjdTQ0tNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC83M2U1MWUtOTg5NC00ZTc4LWJjMjIt OGRkODIxZmFjNmM4LzEvTm0tbVRDdTZweVdzSnFUX1lZQW1iNjdTQ0tNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC83M2U1MWUtOTg5NC00ZTc4LWJjMjItOGRkODIxZmFjNmM4 LzEvTm0tbVRDdTZweVdzSnFUX1lZQW1iNjdTQ0tNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC7EJPQ0P Bj+mu0slXivV9fGNteOywoJJJcZlCxw7EeRBdv7lepKf2VNJxnCpPs5+mezptvzb NR8FEJ1uDsMlIDmCLrFbWnzmOTEAHdOL8t9mR2QLLBzaoavLSD3tNindzHjlFla7 isgjPnDw4kgT7uKxNr4VsZKuQuZMdmILRjijDuQ1wZ0JgJW4q8I0LTlCK840cC8i 11ew2L7iHh3djCGMCN+aRhUq2UYoR+hmobvxwKqj11BBxooUMiGeJ1sZbJyxF+yL ZCMsJ1O9XqsCWtwoPktHQgCJy1VeCJfO9zNtbAKz9J1X1P4avI2uVhT/ZPVOvkm/ WFPtVJe9x9rXjg== -----END CERTIFICATE-----Generated at Sun Dec 21 00:15:49 2025 by rpki-client