This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.mft File: nUZUJyZmhDb6k-dX_u9NReJM1uM.mft (raw, json) Hash identifier: KPsCHA4IGCPj9SMASHtMi078hohXUawKmMHrRb9vZpY= Subject key identifier: 15:C0:D0:E4:B4:10:58:A4:92:13:5B:5A:87:2F:64:C0:CB:09:7C:90 Authority key identifier: 9D:46:54:27:26:66:84:36:FA:93:E7:57:FE:EF:4D:45:E2:4C:D6:E3 Certificate issuer: /CN=9d46542726668436fa93e757feef4d45e24cd6e3 Certificate serial: 019AF38960D79C80CB3F4D624F27DB481DF7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nUZUJyZmhDb6k-dX_u9NReJM1uM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.mft Manifest number: 14A4 Signing time: Sat 06 Dec 2025 12:00:57 +0000 Manifest this update: Sat 06 Dec 2025 12:00:57 +0000 Manifest next update: Sun 07 Dec 2025 12:00:57 +0000 Files and hashes: 1: _1ZVUyiWiKcUkDQ7d9MEjN-Qxjg.roa (hash: B9N8iWkGu9FMB4JofKmJJULgTYSFoSVSwpeNEHQNG3o=) 2: nUZUJyZmhDb6k-dX_u9NReJM1uM.crl (hash: YHZKQLLiA5YGo+0SFk/QRbADggAVnDKULJMHMxkWYNE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.mft rsync://rpki.ripe.net/repository/DEFAULT/nUZUJyZmhDb6k-dX_u9NReJM1uM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:60:d7:9c:80:cb:3f:4d:62:4f:27:db:48:1d:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d46542726668436fa93e757feef4d45e24cd6e3 Validity Not Before: Dec 6 12:00:57 2025 GMT Not After : Dec 7 12:00:57 2025 GMT Subject: CN=15c0d0e4b41058a492135b5a872f64c0cb097c90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:65:5f:4d:77:a6:14:77:ad:a1:c8:bc:4f:b7: 5c:6c:70:a4:9f:2f:c2:38:b3:a8:fc:57:31:8b:f4: fd:92:f3:85:85:a7:23:90:da:e6:c2:db:96:a5:d3: 6c:28:97:02:b8:46:59:83:a3:1e:22:c3:40:da:23: ed:b7:2d:1e:1a:bf:af:08:bb:f6:e0:18:9e:dc:9a: 98:68:08:ac:45:4b:f9:db:1d:3c:db:7e:26:d3:a9: f9:45:71:93:e6:f6:d7:76:7f:7d:1f:de:f7:16:d1: 73:5b:4d:73:37:3c:36:e3:40:6b:eb:39:95:58:46: 48:27:e8:b3:0f:4b:ad:27:d5:67:f8:4b:ee:e6:a5: c4:0a:9d:6b:fb:27:04:b8:2a:ad:1e:df:84:b5:3c: 7e:ee:c5:02:4b:73:4e:0e:c9:7d:bd:58:de:36:c2: 83:2c:39:9a:35:1d:bd:12:e2:49:1d:3e:79:7c:0d: e5:2e:83:fa:da:b6:3b:63:5b:cb:61:6a:d7:8d:9b: fa:39:2d:f7:4f:2b:cd:ca:61:c4:a2:0b:da:88:d0: 11:3d:1e:9b:e4:58:df:a9:1a:36:62:21:95:94:32: 60:8c:a7:7d:2c:fb:ef:50:89:35:c8:c6:55:de:66: 23:97:ce:85:1e:65:e5:16:94:ea:95:e2:c6:ec:2b: a4:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:C0:D0:E4:B4:10:58:A4:92:13:5B:5A:87:2F:64:C0:CB:09:7C:90 X509v3 Authority Key Identifier: keyid:9D:46:54:27:26:66:84:36:FA:93:E7:57:FE:EF:4D:45:E2:4C:D6:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nUZUJyZmhDb6k-dX_u9NReJM1uM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:2c:cb:e7:62:77:7e:25:8f:50:d1:0d:23:8d:82:ba:88:63: 2b:f7:18:6c:e0:fe:e2:f8:17:80:ff:0e:51:2f:46:d7:08:7d: 43:74:3b:84:7b:3a:af:a7:ea:28:d2:b4:33:81:df:18:d7:9b: c0:21:44:84:9b:57:28:10:94:e5:7c:5c:21:22:66:93:fc:9c: 04:1b:fe:f6:ce:69:2a:84:10:80:77:0f:62:c2:68:a1:fc:04: d2:91:de:8d:d4:4e:25:eb:0e:83:df:be:92:4d:45:a8:3d:a6: ec:95:dd:1b:3c:e4:98:31:37:aa:55:89:30:2a:17:0b:2e:b5: 74:e0:29:5c:aa:92:ad:fa:f8:4e:51:c8:42:2d:bf:54:c9:20: 00:6e:7e:10:53:5b:2e:3f:06:50:fc:1f:ee:83:fd:f4:55:93: 30:a7:7b:ba:d3:ac:e5:c8:d4:cc:27:63:ef:3a:21:31:6e:fb: e0:8f:c1:9e:44:69:d2:56:b8:08:d0:03:a4:37:ae:03:78:6d: 5a:29:a4:4b:77:57:b3:be:ca:ff:3b:5b:01:2b:de:14:f2:5d: 92:02:cf:c3:7e:ba:00:2b:1d:f4:48:76:d4:70:d4:d3:ba:ac: 24:be:f8:e8:e2:ce:09:5a:40:d6:ae:92:c1:35:f5:0a:79:62: 7c:54:ff:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziWDXnIDLP01iTyfbSB33MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkNDY1NDI3MjY2Njg0MzZmYTkzZTc1N2ZlZWY0ZDQ1ZTI0 Y2Q2ZTMwHhcNMjUxMjA2MTIwMDU3WhcNMjUxMjA3MTIwMDU3WjAzMTEwLwYDVQQD EygxNWMwZDBlNGI0MTA1OGE0OTIxMzViNWE4NzJmNjRjMGNiMDk3YzkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWVfTXemFHetoci8T7dcbHCkny/C OLOo/Fcxi/T9kvOFhacjkNrmwtuWpdNsKJcCuEZZg6MeIsNA2iPtty0eGr+vCLv2 4Bie3JqYaAisRUv52x08234m06n5RXGT5vbXdn99H973FtFzW01zNzw240Br6zmV WEZIJ+izD0utJ9Vn+Evu5qXECp1r+ycEuCqtHt+EtTx+7sUCS3NODsl9vVjeNsKD LDmaNR29EuJJHT55fA3lLoP62rY7Y1vLYWrXjZv6OS33TyvNymHEogvaiNARPR6b 5FjfqRo2YiGVlDJgjKd9LPvvUIk1yMZV3mYjl86FHmXlFpTqleLG7CukUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBXA0OS0EFikkhNbWocvZMDLCXyQMB8GA1UdIwQY MBaAFJ1GVCcmZoQ2+pPnV/7vTUXiTNbjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblVaVUp5Wm1oRGI2ay1kWF91OU5SZUpNMXVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS81ODAwNWEtNTIzMy00ODQ0LWIwMjQt MjllMzVhZTkxMmRhLzEvblVaVUp5Wm1oRGI2ay1kWF91OU5SZUpNMXVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS81ODAwNWEtNTIzMy00ODQ0LWIwMjQtMjllMzVhZTkxMmRh LzEvblVaVUp5Wm1oRGI2ay1kWF91OU5SZUpNMXVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYSzL52J3 fiWPUNENI42CuohjK/cYbOD+4vgXgP8OUS9G1wh9Q3Q7hHs6r6fqKNK0M4HfGNeb wCFEhJtXKBCU5XxcISJmk/ycBBv+9s5pKoQQgHcPYsJoofwE0pHejdROJesOg9++ kk1FqD2m7JXdGzzkmDE3qlWJMCoXCy61dOApXKqSrfr4TlHIQi2/VMkgAG5+EFNb Lj8GUPwf7oP99FWTMKd7utOs5cjUzCdj7zohMW774I/BnkRp0la4CNADpDeuA3ht WimkS3dXs77K/ztbASveFPJdkgLPw366ACsd9Eh21HDU07qsJL746OLOCVpA1q6S wTX1CnlifFT/jg== -----END CERTIFICATE-----Generated at Sat Dec 6 22:29:50 2025 by rpki-client