This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.mft File: nYHLUEMmdDsX02SiBIdcOcbtvAk.mft (raw, json) Hash identifier: BAsyUqhzTZ02QAncaSO7dC4htd8WIDZUskBuKWYNS/A= Subject key identifier: D2:7D:19:70:7E:E6:FD:D1:D9:4A:66:80:90:EB:28:C7:5A:B7:81:6B Authority key identifier: 9D:81:CB:50:43:26:74:3B:17:D3:64:A2:04:87:5C:39:C6:ED:BC:09 Certificate issuer: /CN=9d81cb504326743b17d364a204875c39c6edbc09 Certificate serial: 019AF19B3EF6F91547B8AD9D8A6BCB548910 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nYHLUEMmdDsX02SiBIdcOcbtvAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.mft Manifest number: 10F8 Signing time: Sat 06 Dec 2025 03:01:14 +0000 Manifest this update: Sat 06 Dec 2025 03:01:14 +0000 Manifest next update: Sun 07 Dec 2025 03:01:14 +0000 Files and hashes: 1: JP_mk9oH8p5bvlYYSWGek7KXox0.roa (hash: QozdhhJZu+Cfz+XSJNvXYpnVEpaUzqrN6lM64Dbcl70=) 2: nYHLUEMmdDsX02SiBIdcOcbtvAk.crl (hash: F60vNB0Xp1R8wy1zWlkxMne7WByrcOOSa9B0UjS6Vdo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.mft rsync://rpki.ripe.net/repository/DEFAULT/nYHLUEMmdDsX02SiBIdcOcbtvAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:3e:f6:f9:15:47:b8:ad:9d:8a:6b:cb:54:89:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d81cb504326743b17d364a204875c39c6edbc09 Validity Not Before: Dec 6 03:01:14 2025 GMT Not After : Dec 7 03:01:14 2025 GMT Subject: CN=d27d19707ee6fdd1d94a668090eb28c75ab7816b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:85:72:b3:ca:65:be:98:f3:19:16:50:86:43: c5:ee:a5:47:27:a3:08:4c:52:9e:34:18:fc:7d:73: 38:2f:68:3c:93:24:5c:3d:24:e4:5c:17:d2:a0:3e: e0:5f:a3:28:34:ae:33:d1:db:d6:32:69:b3:56:b5: c8:c1:c9:d0:96:cd:96:9c:47:6c:1a:ab:b2:63:a8: 28:46:d1:7a:f6:09:00:ab:f4:ea:5d:4f:ae:d9:ee: b6:7f:98:67:2d:19:06:3d:7c:c8:f3:49:f6:c8:85: 21:bc:de:97:5b:7d:de:a1:91:36:83:fe:77:26:ea: 4f:99:c1:af:6b:4c:8a:4c:1c:1a:c6:35:a7:89:ca: 1d:2f:59:ba:99:44:ba:44:f3:75:0c:88:82:37:c1: 4f:f4:bf:49:7d:6e:6b:4c:2f:26:4f:d1:37:c4:98: fe:21:31:3e:7c:cd:93:11:be:79:c6:b2:3e:e5:91: 48:cb:61:c3:2c:2f:69:1b:bf:71:33:ca:36:c0:61: 2a:77:cf:52:f2:77:32:73:3f:8c:02:47:3e:96:46: f8:da:d4:cb:65:12:0f:4e:ae:32:d3:e7:4d:5b:34: 17:c4:d3:33:f7:f1:83:7a:a4:2f:f0:46:09:14:52: b7:7e:3e:aa:18:e3:f2:b5:c6:3d:10:54:84:c7:40: 7f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:7D:19:70:7E:E6:FD:D1:D9:4A:66:80:90:EB:28:C7:5A:B7:81:6B X509v3 Authority Key Identifier: keyid:9D:81:CB:50:43:26:74:3B:17:D3:64:A2:04:87:5C:39:C6:ED:BC:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nYHLUEMmdDsX02SiBIdcOcbtvAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:1c:d0:0e:7e:bd:67:8b:50:6c:dc:28:43:e9:5f:cf:f4:71: 4a:11:ca:72:ca:d7:17:6b:6e:dc:06:d9:94:a5:61:7d:74:be: 1f:6a:d5:a5:70:ee:29:62:d7:b6:77:88:5d:ff:bc:60:d8:bb: 97:de:e9:4f:35:54:b9:de:fd:e5:88:20:f0:6c:30:66:2b:68: a9:78:b7:65:a5:9d:63:fb:48:9a:af:4c:ed:9c:31:6f:4f:e3: de:61:c7:bf:a5:d8:1a:69:42:be:4d:4b:38:73:80:93:62:46: bf:f1:2d:6e:c3:18:cd:f3:d1:99:11:67:1b:22:04:88:d0:84: bc:28:9f:4c:2c:a0:1d:7f:e2:f7:f7:ef:9e:a6:c8:77:67:55: da:43:e6:0d:de:63:3c:9c:d6:e5:5d:1d:81:20:59:ff:4b:b1: 91:f6:62:42:87:22:6d:94:79:55:cf:fa:2a:be:05:bb:fd:d5: 39:c8:c4:85:c6:26:c7:81:a0:7a:51:1a:b1:57:d3:f5:80:99: 3a:0c:cc:90:14:b4:98:19:0a:58:4a:a9:8f:b8:28:47:6c:9b: 5d:66:4f:24:50:31:4d:08:94:6d:72:30:71:67:f0:a0:88:c0: 65:17:ba:72:a1:e5:c5:5d:bf:bc:1d:df:77:14:78:7a:30:c1: 74:0b:62:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmz72+RVHuK2dimvLVIkQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkODFjYjUwNDMyNjc0M2IxN2QzNjRhMjA0ODc1YzM5YzZl ZGJjMDkwHhcNMjUxMjA2MDMwMTE0WhcNMjUxMjA3MDMwMTE0WjAzMTEwLwYDVQQD EyhkMjdkMTk3MDdlZTZmZGQxZDk0YTY2ODA5MGViMjhjNzVhYjc4MTZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIVys8plvpjzGRZQhkPF7qVHJ6MI TFKeNBj8fXM4L2g8kyRcPSTkXBfSoD7gX6MoNK4z0dvWMmmzVrXIwcnQls2WnEds GquyY6goRtF69gkAq/TqXU+u2e62f5hnLRkGPXzI80n2yIUhvN6XW33eoZE2g/53 JupPmcGva0yKTBwaxjWnicodL1m6mUS6RPN1DIiCN8FP9L9JfW5rTC8mT9E3xJj+ ITE+fM2TEb55xrI+5ZFIy2HDLC9pG79xM8o2wGEqd89S8ncycz+MAkc+lkb42tTL ZRIPTq4y0+dNWzQXxNMz9/GDeqQv8EYJFFK3fj6qGOPytcY9EFSEx0B/FwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNJ9GXB+5v3R2UpmgJDrKMdat4FrMB8GA1UdIwQY MBaAFJ2By1BDJnQ7F9NkogSHXDnG7bwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbllITFVFTW1kRHNYMDJTaUJJZGNPY2J0dkFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8zMzlkMjktNzEyYS00Yzg2LTk1MTAt ZTRkNmJjZjMzNmI3LzEvbllITFVFTW1kRHNYMDJTaUJJZGNPY2J0dkFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy8zMzlkMjktNzEyYS00Yzg2LTk1MTAtZTRkNmJjZjMzNmI3 LzEvbllITFVFTW1kRHNYMDJTaUJJZGNPY2J0dkFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjxzQDn69 Z4tQbNwoQ+lfz/RxShHKcsrXF2tu3AbZlKVhfXS+H2rVpXDuKWLXtneIXf+8YNi7 l97pTzVUud795Ygg8GwwZitoqXi3ZaWdY/tImq9M7Zwxb0/j3mHHv6XYGmlCvk1L OHOAk2JGv/EtbsMYzfPRmRFnGyIEiNCEvCifTCygHX/i9/fvnqbId2dV2kPmDd5j PJzW5V0dgSBZ/0uxkfZiQocibZR5Vc/6Kr4Fu/3VOcjEhcYmx4GgelEasVfT9YCZ OgzMkBS0mBkKWEqpj7goR2ybXWZPJFAxTQiUbXIwcWfwoIjAZRe6cqHlxV2/vB3f dxR4ejDBdAti1g== -----END CERTIFICATE-----Generated at Sat Dec 6 09:30:03 2025 by rpki-client