This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft File: NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft (raw, json) Hash identifier: 74rc5nCag5hap+x2J9ZFSKmxlZbAGJ0XJTc+FNQ4ctE= Subject key identifier: EC:C5:98:53:1B:AC:8F:EA:9E:F7:5C:1D:7A:DD:1E:17:D7:DD:35:15 Authority key identifier: 35:45:A7:20:01:64:91:20:41:BB:93:1E:FB:1F:EA:C1:23:B4:3A:18 Certificate issuer: /CN=3545a7200164912041bb931efb1feac123b43a18 Certificate serial: 019AF31B6E527276BBF591B4F957A78D6405 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft Manifest number: 1768 Signing time: Sat 06 Dec 2025 10:00:52 +0000 Manifest this update: Sat 06 Dec 2025 10:00:52 +0000 Manifest next update: Sun 07 Dec 2025 10:00:52 +0000 Files and hashes: 1: 8s1U0KmUYb897VvjMdVaiCCBr8Y.roa (hash: 5qEC8e4y3KYPBzPpD5dv/300fB0lSnNjSuXLoow+Q8w=) 2: LaYkRMNeto2OFZ9VBnU48w_HGgs.roa (hash: 16B1JfqcXDvmz5pVWUS+KsHYpQRrCgD9R9Tg6uXacIA=) 3: NUWnIAFkkSBBu5Me-x_qwSO0Ohg.crl (hash: RHnorkfrEH784T7jCL21IbLDwQtuCuH+yJLb67wAgGg=) 4: W8oJrry2382XyDpwYu9d1fRM57k.roa (hash: vgOtreWyL8SSvp1wiImWd0ZzLXQJtP4n+ctgbIbJd6I=) 5: ZPnSp5toQpthOZvn7vrTi1PIJ0A.roa (hash: 2xJoiopsp/aP4IfMiv71h2CCh2maxmce9cHqGdAd1jM=) 6: hDuQO-2O-6Lo8qgrhYqNM0G4P24.roa (hash: WUDxmKQLeVQHlfqkPeKYvZqVqvTuBp11Xfwh/S2zHnQ=) 7: rJESdqv17knzJ4wNzfBk8WWWnw0.roa (hash: BdHgAA5eA1A53dV1mMcPmgdF0S7eP4oFR6WHvpTEZ/k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:6e:52:72:76:bb:f5:91:b4:f9:57:a7:8d:64:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3545a7200164912041bb931efb1feac123b43a18 Validity Not Before: Dec 6 10:00:52 2025 GMT Not After : Dec 7 10:00:52 2025 GMT Subject: CN=ecc598531bac8fea9ef75c1d7add1e17d7dd3515 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:10:b0:13:9f:7c:14:74:00:58:32:0e:63:1b: 92:df:36:7b:23:8b:b2:bf:09:e5:07:bb:c6:e7:34: 8a:fd:47:9f:96:b5:c3:de:9b:30:04:0a:b4:3b:34: af:63:89:68:24:69:c1:81:5a:d2:05:53:b9:e9:8f: 87:97:3f:84:ce:42:45:b3:75:16:cf:c0:88:30:bd: de:d9:f2:c7:d0:ce:cb:5f:d8:b7:7f:cf:02:d8:7d: 32:c5:35:a9:03:28:83:98:88:38:fe:33:c8:01:16: 82:e3:65:cb:8d:95:4e:15:e9:7c:6b:35:05:f1:5d: 3b:82:5b:3a:77:c6:3d:78:15:41:12:21:1c:24:8c: c0:58:b3:3e:01:09:cf:67:a7:55:fd:82:99:5e:f6: da:29:a7:f6:5f:e5:ff:4f:8c:fd:c9:fe:71:e0:d8: 17:0d:6b:8e:3f:e2:31:3e:29:1a:c7:0d:30:44:7f: 02:4b:52:41:d2:fe:94:8a:fc:8f:f7:77:b2:0f:26: 11:24:e5:3f:41:24:5f:be:be:24:0b:72:a3:13:63: f4:aa:64:df:21:d8:14:b6:99:00:c9:4d:e0:1f:7f: 14:a5:ce:51:f0:39:ea:d1:dc:a9:be:81:27:ad:a9: cf:5c:ae:97:fb:be:a5:f7:ee:72:18:90:df:69:bf: fe:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:C5:98:53:1B:AC:8F:EA:9E:F7:5C:1D:7A:DD:1E:17:D7:DD:35:15 X509v3 Authority Key Identifier: keyid:35:45:A7:20:01:64:91:20:41:BB:93:1E:FB:1F:EA:C1:23:B4:3A:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:13:6a:30:04:60:96:f0:0e:4d:19:41:03:7b:17:17:a2:00: ca:bc:a9:50:f9:f4:02:04:cc:4e:c0:73:b8:09:f9:12:8a:e6: 69:bb:46:66:80:c7:83:e0:f4:02:87:d3:6a:31:f9:9e:1d:08: 11:67:3a:9c:bf:f0:c5:a5:b3:c8:71:fd:6f:06:6b:02:f8:1b: f0:3c:d5:5d:09:84:9d:b1:85:84:02:20:6e:cf:99:15:ed:f9: b4:de:24:bf:8f:48:21:44:f2:f7:13:54:4c:05:cc:8c:03:ce: 5e:47:e5:18:62:1f:b5:f1:d9:b3:37:86:3f:20:c8:16:58:1b: 59:57:ec:92:6b:5d:d0:01:e9:9e:46:16:ab:af:50:bf:43:6f: 0b:51:fe:d8:d4:52:d1:d5:67:b3:ca:72:4a:b6:e6:9a:32:4b: 98:2b:d0:1b:9b:af:b3:42:3f:24:70:26:90:b2:ce:aa:d9:42: c3:13:b1:a1:4d:58:7f:81:40:59:87:47:ec:74:6d:1f:dd:8a: 32:9c:95:23:19:38:50:65:2e:09:4b:3d:5b:4e:16:23:14:27: d1:5f:b0:c3:6f:2a:13:48:11:f3:2b:fd:7f:fd:4a:d3:66:49: a5:89:28:f4:06:2c:41:a7:ab:1f:35:ce:21:97:cc:98:5d:93: ae:31:99:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG25Scna79ZG0+VenjWQFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NDVhNzIwMDE2NDkxMjA0MWJiOTMxZWZiMWZlYWMxMjNi NDNhMTgwHhcNMjUxMjA2MTAwMDUyWhcNMjUxMjA3MTAwMDUyWjAzMTEwLwYDVQQD EyhlY2M1OTg1MzFiYWM4ZmVhOWVmNzVjMWQ3YWRkMWUxN2Q3ZGQzNTE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBCwE598FHQAWDIOYxuS3zZ7I4uy vwnlB7vG5zSK/UeflrXD3pswBAq0OzSvY4loJGnBgVrSBVO56Y+Hlz+EzkJFs3UW z8CIML3e2fLH0M7LX9i3f88C2H0yxTWpAyiDmIg4/jPIARaC42XLjZVOFel8azUF 8V07gls6d8Y9eBVBEiEcJIzAWLM+AQnPZ6dV/YKZXvbaKaf2X+X/T4z9yf5x4NgX DWuOP+IxPikaxw0wRH8CS1JB0v6UivyP93eyDyYRJOU/QSRfvr4kC3KjE2P0qmTf IdgUtpkAyU3gH38Upc5R8Dnq0dypvoEnranPXK6X+76l9+5yGJDfab/+IQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOzFmFMbrI/qnvdcHXrdHhfX3TUVMB8GA1UdIwQY MBaAFDVFpyABZJEgQbuTHvsf6sEjtDoYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlVXbklBRmtrU0JCdTVNZS14X3F3U08wT2hnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy81OWM0YjgtODdmNC00ZjJmLWE0NDkt YWFiYjA2MmU0MGRiLzEvTlVXbklBRmtrU0JCdTVNZS14X3F3U08wT2hnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy81OWM0YjgtODdmNC00ZjJmLWE0NDktYWFiYjA2MmU0MGRi LzEvTlVXbklBRmtrU0JCdTVNZS14X3F3U08wT2hnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjBNqMARg lvAOTRlBA3sXF6IAyrypUPn0AgTMTsBzuAn5EormabtGZoDHg+D0AofTajH5nh0I EWc6nL/wxaWzyHH9bwZrAvgb8DzVXQmEnbGFhAIgbs+ZFe35tN4kv49IIUTy9xNU TAXMjAPOXkflGGIftfHZszeGPyDIFlgbWVfskmtd0AHpnkYWq69Qv0NvC1H+2NRS 0dVns8pySrbmmjJLmCvQG5uvs0I/JHAmkLLOqtlCwxOxoU1Yf4FAWYdH7HRtH92K MpyVIxk4UGUuCUs9W04WIxQn0V+ww28qE0gR8yv9f/1K02ZJpYko9AYsQaerHzXO IZfMmF2TrjGZPg== -----END CERTIFICATE-----Generated at Sat Dec 6 18:34:16 2025 by rpki-client