This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/nRfZOI52MabRmvsrJkJ5WiTIQIE.mft File: nRfZOI52MabRmvsrJkJ5WiTIQIE.mft (raw, json) Hash identifier: /hniUNlYbe08XPBED3gSLE/njRENcWDHjF3a6kD83fg= Subject key identifier: 55:4D:04:05:C7:1B:8C:E7:F2:BB:15:73:39:5A:BA:C6:D6:60:A9:89 Authority key identifier: 9D:17:D9:38:8E:76:31:A6:D1:9A:FB:2B:26:42:79:5A:24:C8:40:81 Certificate issuer: /CN=9d17d9388e7631a6d19afb2b2642795a24c84081 Certificate serial: 019B390FAF0C9C9FDD71C7185D13DC9E3029 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nRfZOI52MabRmvsrJkJ5WiTIQIE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/nRfZOI52MabRmvsrJkJ5WiTIQIE.mft Manifest number: 178B Signing time: Sat 20 Dec 2025 00:01:27 +0000 Manifest this update: Sat 20 Dec 2025 00:01:27 +0000 Manifest next update: Sun 21 Dec 2025 00:01:27 +0000 Files and hashes: 1: nRfZOI52MabRmvsrJkJ5WiTIQIE.crl (hash: 2WtdY2GOlBwTpcw/wQVpshmhOwRdGYL69lTlM5T5iWI=) 2: u2BNAAC7Dm0euPOTB8HOX-QylyE.roa (hash: GNqBAmVB3is0CDKmPUm0vfs8TWmU1YL168pv/EKk5Z4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/nRfZOI52MabRmvsrJkJ5WiTIQIE.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/nRfZOI52MabRmvsrJkJ5WiTIQIE.mft rsync://rpki.ripe.net/repository/DEFAULT/nRfZOI52MabRmvsrJkJ5WiTIQIE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 00:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:0f:af:0c:9c:9f:dd:71:c7:18:5d:13:dc:9e:30:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d17d9388e7631a6d19afb2b2642795a24c84081 Validity Not Before: Dec 20 00:01:27 2025 GMT Not After : Dec 21 00:01:27 2025 GMT Subject: CN=554d0405c71b8ce7f2bb1573395abac6d660a989 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:94:39:2d:52:b8:60:c6:aa:7e:6a:6d:2a:61: d3:29:cd:4b:b4:8e:da:09:78:fc:7a:2b:b5:07:a7: 0f:23:10:7a:cb:31:e4:63:8a:86:ef:7e:61:11:ba: c9:d4:6f:f2:d9:9a:2f:f1:05:89:d0:da:e6:b8:bf: 40:6d:85:d8:08:7e:91:7a:8c:6d:74:3e:3e:10:e2: 41:56:52:19:68:5d:1c:23:b2:e1:aa:a5:54:f6:e4: 40:c4:40:12:96:10:d9:5b:ad:09:ad:6e:80:80:07: 73:cc:a6:7f:fa:6a:d3:d3:5a:42:15:11:90:09:bd: ab:48:2b:8d:ca:60:f0:82:8a:88:7d:2f:f1:83:61: 5d:15:d2:da:96:e9:7e:0a:6c:55:e3:8d:56:96:9e: c0:48:37:03:48:f2:53:0e:db:75:de:6a:3b:19:44: 22:58:c6:16:d5:80:09:76:05:1e:07:46:c5:da:0e: 2e:73:82:83:0e:4a:ca:22:2b:cf:85:e8:de:3c:02: c4:3a:ee:33:56:02:32:e2:25:7a:40:22:e7:a8:b7: c0:41:f8:db:60:e8:df:7c:30:3c:e3:e0:74:96:a6: a2:af:ee:cd:a4:42:99:67:0a:08:04:65:42:a0:a4: 66:8e:dd:7d:90:a2:02:5e:62:a1:4d:1d:d8:2f:7f: e2:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:4D:04:05:C7:1B:8C:E7:F2:BB:15:73:39:5A:BA:C6:D6:60:A9:89 X509v3 Authority Key Identifier: keyid:9D:17:D9:38:8E:76:31:A6:D1:9A:FB:2B:26:42:79:5A:24:C8:40:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nRfZOI52MabRmvsrJkJ5WiTIQIE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/nRfZOI52MabRmvsrJkJ5WiTIQIE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/nRfZOI52MabRmvsrJkJ5WiTIQIE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:5f:42:a4:36:b1:2d:f7:f3:a1:75:0c:8c:75:33:64:7f:ff: e2:04:0c:39:ce:7c:9d:c1:f7:15:eb:7e:ac:33:3e:80:3b:82: 3b:5a:65:e7:b3:ed:87:d0:e0:28:90:83:af:4a:4c:26:88:5d: 0a:49:f6:75:5d:e9:bc:bb:eb:f1:34:15:d0:08:da:45:03:06: 13:30:01:58:c0:ac:13:79:d3:92:4e:40:d8:71:3d:7b:96:8b: 41:58:20:38:2f:12:21:57:c1:c6:a5:57:01:a9:4a:90:54:ad: 5e:d0:ce:72:65:df:f9:2f:49:45:89:61:62:71:28:bb:c6:81: bf:68:37:33:ad:a0:3e:44:ea:a1:ec:61:29:49:52:18:06:93: a1:43:c3:58:46:90:2f:da:76:67:98:9f:7a:61:50:40:af:91: 6d:a0:75:02:df:32:0d:ff:f6:13:58:bb:69:f8:33:df:16:b1: e6:6d:a2:c8:e4:e1:6b:f1:86:16:d6:85:3d:79:80:fa:c7:b6: 81:c1:70:93:7e:b6:e9:59:12:93:7c:3d:29:72:15:1e:d1:02: 62:b5:06:c1:29:7b:79:4c:6d:f5:16:6b:90:f7:30:4b:77:20: a6:78:36:97:5c:78:d1:ca:08:41:9f:22:bb:cb:a0:5d:9b:66: d9:cd:36:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5D68MnJ/dcccYXRPcnjApMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMTdkOTM4OGU3NjMxYTZkMTlhZmIyYjI2NDI3OTVhMjRj ODQwODEwHhcNMjUxMjIwMDAwMTI3WhcNMjUxMjIxMDAwMTI3WjAzMTEwLwYDVQQD Eyg1NTRkMDQwNWM3MWI4Y2U3ZjJiYjE1NzMzOTVhYmFjNmQ2NjBhOTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJQ5LVK4YMaqfmptKmHTKc1LtI7a CXj8eiu1B6cPIxB6yzHkY4qG735hEbrJ1G/y2Zov8QWJ0NrmuL9AbYXYCH6Reoxt dD4+EOJBVlIZaF0cI7LhqqVU9uRAxEASlhDZW60JrW6AgAdzzKZ/+mrT01pCFRGQ Cb2rSCuNymDwgoqIfS/xg2FdFdLalul+CmxV441Wlp7ASDcDSPJTDtt13mo7GUQi WMYW1YAJdgUeB0bF2g4uc4KDDkrKIivPhejePALEOu4zVgIy4iV6QCLnqLfAQfjb YOjffDA84+B0lqair+7NpEKZZwoIBGVCoKRmjt19kKICXmKhTR3YL3/itwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFVNBAXHG4zn8rsVczlausbWYKmJMB8GA1UdIwQY MBaAFJ0X2TiOdjGm0Zr7KyZCeVokyECBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblJmWk9JNTJNYWJSbXZzckprSjVXaVRJUUlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC82ZTg0NDQtOGRhNS00NjZiLTg0MDAt N2JkOTZkOWM2Mjg2LzEvblJmWk9JNTJNYWJSbXZzckprSjVXaVRJUUlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC82ZTg0NDQtOGRhNS00NjZiLTg0MDAtN2JkOTZkOWM2Mjg2 LzEvblJmWk9JNTJNYWJSbXZzckprSjVXaVRJUUlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANV9CpDax LffzoXUMjHUzZH//4gQMOc58ncH3Fet+rDM+gDuCO1pl57Pth9DgKJCDr0pMJohd Ckn2dV3pvLvr8TQV0AjaRQMGEzABWMCsE3nTkk5A2HE9e5aLQVggOC8SIVfBxqVX AalKkFStXtDOcmXf+S9JRYlhYnEou8aBv2g3M62gPkTqoexhKUlSGAaToUPDWEaQ L9p2Z5ifemFQQK+RbaB1At8yDf/2E1i7afgz3xax5m2iyOTha/GGFtaFPXmA+se2 gcFwk3626VkSk3w9KXIVHtECYrUGwSl7eUxt9RZrkPcwS3cgpng2l1x40coIQZ8i u8ugXZtm2c02NQ== -----END CERTIFICATE-----Generated at Sat Dec 20 09:47:53 2025 by rpki-client