This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.mft File: 1NhufQc6nk1p7HFcNiMXaAWJTVo.mft (raw, json) Hash identifier: C5TuGeDZfsuvxwWij9BXahwEraV56fNQ4kv5pVSnq08= Subject key identifier: AD:06:CF:70:84:E9:37:20:0A:B2:80:67:7E:3F:04:71:B1:2B:23:EC Authority key identifier: D4:D8:6E:7D:07:3A:9E:4D:69:EC:71:5C:36:23:17:68:05:89:4D:5A Certificate issuer: /CN=d4d86e7d073a9e4d69ec715c3623176805894d5a Certificate serial: 019AF276EDE1E4F294CE6564671AB962D47A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1NhufQc6nk1p7HFcNiMXaAWJTVo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.mft Manifest number: 0E54 Signing time: Sat 06 Dec 2025 07:01:11 +0000 Manifest this update: Sat 06 Dec 2025 07:01:11 +0000 Manifest next update: Sun 07 Dec 2025 07:01:11 +0000 Files and hashes: 1: 1NhufQc6nk1p7HFcNiMXaAWJTVo.crl (hash: 8CTin9XcPUABQNVF3N9OzeZF0CorX7toAxIY2jZG3ZU=) 2: yVOuH9GnWiOJ4T0Bjcul16G_CUI.roa (hash: cYY3QuLeMs+0RKKYLhzyVIgFcgFYuNr0hEZcjUsKwaU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.mft rsync://rpki.ripe.net/repository/DEFAULT/1NhufQc6nk1p7HFcNiMXaAWJTVo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:ed:e1:e4:f2:94:ce:65:64:67:1a:b9:62:d4:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4d86e7d073a9e4d69ec715c3623176805894d5a Validity Not Before: Dec 6 07:01:11 2025 GMT Not After : Dec 7 07:01:11 2025 GMT Subject: CN=ad06cf7084e937200ab280677e3f0471b12b23ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:33:af:69:09:a4:68:a7:cc:0f:35:6f:03:dd: 5d:22:be:9b:9f:70:b9:c8:d6:0f:85:cb:51:12:97: f9:eb:0e:32:c5:db:b4:74:04:1e:0b:e8:46:36:ff: 01:34:cb:ad:21:60:f5:7d:e8:ad:05:f1:05:26:85: 34:56:3e:fa:15:b4:3f:75:a8:c8:db:63:89:19:e9: 8a:aa:e8:47:08:af:d7:4a:99:3a:cc:7b:d5:d8:e4: 1c:52:eb:a7:42:07:fe:1b:88:e1:30:c1:f4:58:92: 57:08:fa:16:ce:6f:57:d7:72:da:f2:4c:63:26:71: 11:41:2c:81:80:f6:34:28:bc:79:54:8c:db:04:7a: 8b:20:75:86:82:3a:89:52:4a:83:b9:5d:c3:b5:24: 2d:2a:6b:ef:ea:48:08:48:82:02:40:32:f4:6f:f7: 1b:fa:fb:be:94:a6:8d:2c:c3:f5:30:72:e2:53:ee: 06:22:03:a2:aa:21:93:0e:ad:94:7c:f1:95:4f:3f: 66:ea:44:59:71:31:9f:f1:0e:1b:76:21:8b:6e:87: e6:fd:35:d5:63:e4:65:ab:de:ae:cf:f6:49:5b:9f: a6:6c:95:55:d4:84:d1:91:8f:bb:92:14:8a:f7:32: d7:16:c2:1b:0c:48:f2:03:47:e4:79:84:68:71:3c: 57:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:06:CF:70:84:E9:37:20:0A:B2:80:67:7E:3F:04:71:B1:2B:23:EC X509v3 Authority Key Identifier: keyid:D4:D8:6E:7D:07:3A:9E:4D:69:EC:71:5C:36:23:17:68:05:89:4D:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1NhufQc6nk1p7HFcNiMXaAWJTVo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:14:81:61:cb:ff:9d:e9:fd:ce:e2:40:cf:ff:8f:8a:f1:77: 83:11:fe:65:60:13:c4:de:1b:49:fc:d0:0f:62:f2:c8:c7:bd: 8a:a6:23:e9:72:8a:73:67:f5:f1:36:c7:52:52:af:93:4a:67: d6:b0:14:fe:09:d6:84:2e:90:88:e1:2f:d9:75:27:55:93:61: 4b:a4:bb:d5:41:18:4e:73:fe:50:82:88:26:9e:c5:f9:b5:f9: c2:f4:97:f7:59:78:26:4d:e0:da:f7:a0:4e:69:4d:fd:5d:b8: a5:e2:67:1f:e7:87:74:c1:79:52:ba:bc:bd:61:d1:fe:3d:5e: fc:4a:80:0b:06:8b:38:e0:70:94:73:82:56:8c:82:9e:61:cf: fe:f8:fc:69:d3:4b:34:d6:c6:f5:eb:74:e7:84:31:d5:9a:4d: 03:75:ef:99:36:fe:2a:46:d5:86:0b:01:cf:6e:71:b5:d6:49: 51:53:f2:f8:20:54:c8:bc:3f:52:2a:2a:d8:03:cd:8a:c8:72: f3:42:c2:4b:7e:51:af:7f:52:93:15:f1:b2:27:f2:75:54:a2: 88:5f:fe:eb:7f:de:44:d3:1d:82:7a:e4:a9:4c:67:63:e0:41: fe:bd:67:c9:d7:bc:bd:1a:04:50:8d:02:39:6e:19:a0:72:df: 51:0c:52:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydu3h5PKUzmVkZxq5YtR6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0ZDg2ZTdkMDczYTllNGQ2OWVjNzE1YzM2MjMxNzY4MDU4 OTRkNWEwHhcNMjUxMjA2MDcwMTExWhcNMjUxMjA3MDcwMTExWjAzMTEwLwYDVQQD EyhhZDA2Y2Y3MDg0ZTkzNzIwMGFiMjgwNjc3ZTNmMDQ3MWIxMmIyM2VjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjOvaQmkaKfMDzVvA91dIr6bn3C5 yNYPhctREpf56w4yxdu0dAQeC+hGNv8BNMutIWD1feitBfEFJoU0Vj76FbQ/dajI 22OJGemKquhHCK/XSpk6zHvV2OQcUuunQgf+G4jhMMH0WJJXCPoWzm9X13La8kxj JnERQSyBgPY0KLx5VIzbBHqLIHWGgjqJUkqDuV3DtSQtKmvv6kgISIICQDL0b/cb +vu+lKaNLMP1MHLiU+4GIgOiqiGTDq2UfPGVTz9m6kRZcTGf8Q4bdiGLbofm/TXV Y+Rlq96uz/ZJW5+mbJVV1ITRkY+7khSK9zLXFsIbDEjyA0fkeYRocTxXPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK0Gz3CE6TcgCrKAZ34/BHGxKyPsMB8GA1UdIwQY MBaAFNTYbn0HOp5NaexxXDYjF2gFiU1aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMU5odWZRYzZuazFwN0hGY05pTVhhQVdKVFZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC84MmQ2NWEtNDVlMi00ZWZiLWIyM2Mt OTU1YWQ3OGJjYjA3LzEvMU5odWZRYzZuazFwN0hGY05pTVhhQVdKVFZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC84MmQ2NWEtNDVlMi00ZWZiLWIyM2MtOTU1YWQ3OGJjYjA3 LzEvMU5odWZRYzZuazFwN0hGY05pTVhhQVdKVFZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxBSBYcv/ nen9zuJAz/+PivF3gxH+ZWATxN4bSfzQD2LyyMe9iqYj6XKKc2f18TbHUlKvk0pn 1rAU/gnWhC6QiOEv2XUnVZNhS6S71UEYTnP+UIKIJp7F+bX5wvSX91l4Jk3g2veg TmlN/V24peJnH+eHdMF5Urq8vWHR/j1e/EqACwaLOOBwlHOCVoyCnmHP/vj8adNL NNbG9et054Qx1ZpNA3XvmTb+KkbVhgsBz25xtdZJUVPy+CBUyLw/Uioq2APNishy 80LCS35Rr39SkxXxsifydVSiiF/+63/eRNMdgnrkqUxnY+BB/r1nyde8vRoEUI0C OW4ZoHLfUQxSBw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:27:26 2025 by rpki-client