This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/29098b-f0f2-4b10-b2e2-1fb3d554fed5/1/1-0NLMrn7496VvHcdbSs8eaoBS_U.mft File: 1-0NLMrn7496VvHcdbSs8eaoBS_U.mft (raw, json) Hash identifier: vy2sJiL7XNiFXpSWY7jTBHqlcl7AatG6Hcrvw/7brdU= Subject key identifier: 4C:99:09:4D:47:43:E9:65:E1:32:F8:79:F1:E4:96:E1:2C:47:3D:39 Authority key identifier: FB:43:4B:32:B9:FB:E3:DE:95:BC:77:1D:6D:2B:3C:79:AA:01:4B:F5 Certificate issuer: /CN=fb434b32b9fbe3de95bc771d6d2b3c79aa014bf5 Certificate serial: 019AF1641F6CF1BF4AB048D6BAD068678B6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-0NLMrn7496VvHcdbSs8eaoBS_U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/29098b-f0f2-4b10-b2e2-1fb3d554fed5/1/1-0NLMrn7496VvHcdbSs8eaoBS_U.mft Manifest number: 53 Signing time: Sat 06 Dec 2025 02:01:01 +0000 Manifest this update: Sat 06 Dec 2025 02:01:01 +0000 Manifest next update: Sun 07 Dec 2025 02:01:01 +0000 Files and hashes: 1: 1-0NLMrn7496VvHcdbSs8eaoBS_U.crl (hash: NwiMgvnDFFZELGaqz/cBzaNAJKOuG//fNZ7uZUFgZQo=) 2: oszO5cRy_bT24vbGygYagfAt25M.roa (hash: jZ3tdldk6JjFlin4RDbE9w6pyZh5JE76rT/riu50Cpw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/29098b-f0f2-4b10-b2e2-1fb3d554fed5/1/1-0NLMrn7496VvHcdbSs8eaoBS_U.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/29098b-f0f2-4b10-b2e2-1fb3d554fed5/1/1-0NLMrn7496VvHcdbSs8eaoBS_U.mft rsync://rpki.ripe.net/repository/DEFAULT/1-0NLMrn7496VvHcdbSs8eaoBS_U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:1f:6c:f1:bf:4a:b0:48:d6:ba:d0:68:67:8b:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb434b32b9fbe3de95bc771d6d2b3c79aa014bf5 Validity Not Before: Dec 6 02:01:01 2025 GMT Not After : Dec 7 02:01:01 2025 GMT Subject: CN=4c99094d4743e965e132f879f1e496e12c473d39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f8:e1:cb:30:aa:ea:ff:8c:47:77:83:2f:5c: f3:f7:a1:ee:b9:ab:42:bb:88:a2:ea:49:92:1c:3a: 15:b3:84:37:b9:c7:3d:03:3b:d1:5e:2b:cb:f1:b7: 29:7e:9a:f3:02:3c:6e:38:bb:61:f8:fa:3c:eb:24: 0a:2d:61:35:06:36:1a:ed:a9:3e:f6:5a:ec:f1:66: 38:42:d8:79:00:eb:71:4b:50:40:c5:a1:ce:36:54: 23:b1:e7:01:2f:71:56:d2:ea:5c:04:29:ed:16:05: 90:4a:6f:7f:d7:49:4b:9c:c4:dd:af:f0:58:7e:38: 56:06:97:50:64:b5:a4:fe:a5:52:0b:3e:60:e4:fb: d9:09:46:0b:a6:19:c0:ce:c8:f7:5e:da:bb:e3:a0: ce:ac:98:c6:cf:7d:79:82:73:83:ee:4a:6e:a6:ce: e5:be:3b:39:a1:d4:bd:e1:fa:3b:af:31:ed:cf:68: d3:b1:78:78:1e:26:7a:ca:a7:32:7a:33:59:45:1c: 4f:2e:71:fb:a1:81:f9:1a:f7:7a:e5:ae:db:e9:95: da:57:97:ba:89:ac:a9:da:db:5e:0a:0f:f1:b4:a1: 9e:e6:c2:20:af:19:d3:23:9b:3f:ad:03:27:bf:6b: e7:2a:9b:49:13:7b:00:e2:10:1a:3e:b5:d3:0c:f1: 88:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:99:09:4D:47:43:E9:65:E1:32:F8:79:F1:E4:96:E1:2C:47:3D:39 X509v3 Authority Key Identifier: keyid:FB:43:4B:32:B9:FB:E3:DE:95:BC:77:1D:6D:2B:3C:79:AA:01:4B:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-0NLMrn7496VvHcdbSs8eaoBS_U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/29098b-f0f2-4b10-b2e2-1fb3d554fed5/1/1-0NLMrn7496VvHcdbSs8eaoBS_U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/29098b-f0f2-4b10-b2e2-1fb3d554fed5/1/1-0NLMrn7496VvHcdbSs8eaoBS_U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:6d:d4:d8:c9:7d:0c:9e:0f:4a:c0:e1:ec:5a:aa:97:0c:3a: 01:04:1b:ec:21:e1:4b:08:d5:6a:55:61:4f:00:3b:ce:99:79: 0b:02:08:7e:01:9d:fa:cc:56:de:34:b1:ef:68:09:e6:ce:e6: cb:7f:ba:42:9f:68:ed:a4:dd:aa:1a:ee:ee:29:66:3d:b9:de: d5:57:30:92:b4:8a:34:d8:db:41:89:38:bb:76:e3:f1:f2:45: 20:8d:b4:9a:20:b9:3e:f6:1b:0e:ff:a7:3c:a2:06:e4:67:c4: b2:94:7c:59:ca:af:1f:33:f1:05:0e:75:7f:1b:50:cc:35:40: fc:9f:bf:90:32:16:fd:5b:c6:78:8b:c7:70:ed:d9:75:40:0f: e3:f0:e6:45:e7:7a:b4:37:0b:7f:72:47:43:ff:62:05:69:1e: 61:30:7a:f3:ef:8b:a0:0c:b9:04:6a:ff:0a:5b:e4:8e:ae:e6: 3e:9b:57:9d:d8:21:b2:eb:52:eb:32:47:3a:75:8d:17:da:ce: 8a:2a:86:c9:9e:d3:aa:18:4c:84:45:dd:6b:a7:58:6d:5b:4b: c3:a4:ef:1c:69:4e:89:26:4c:b4:02:e0:c2:49:2e:35:6f:1f: 1b:ff:c4:32:8a:90:c7:00:da:cc:f4:c6:a1:b4:de:42:84:0e: c4:9c:b8:6a -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrxZB9s8b9KsEjWutBoZ4tsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiNDM0YjMyYjlmYmUzZGU5NWJjNzcxZDZkMmIzYzc5YWEw MTRiZjUwHhcNMjUxMjA2MDIwMTAxWhcNMjUxMjA3MDIwMTAxWjAzMTEwLwYDVQQD Eyg0Yzk5MDk0ZDQ3NDNlOTY1ZTEzMmY4NzlmMWU0OTZlMTJjNDczZDM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPjhyzCq6v+MR3eDL1zz96HuuatC u4ii6kmSHDoVs4Q3ucc9AzvRXivL8bcpfprzAjxuOLth+Po86yQKLWE1BjYa7ak+ 9lrs8WY4Qth5AOtxS1BAxaHONlQjsecBL3FW0upcBCntFgWQSm9/10lLnMTdr/BY fjhWBpdQZLWk/qVSCz5g5PvZCUYLphnAzsj3Xtq746DOrJjGz315gnOD7kpups7l vjs5odS94fo7rzHtz2jTsXh4HiZ6yqcyejNZRRxPLnH7oYH5Gvd65a7b6ZXaV5e6 iayp2tteCg/xtKGe5sIgrxnTI5s/rQMnv2vnKptJE3sA4hAaPrXTDPGIrwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFEyZCU1HQ+ll4TL4efHkluEsRz05MB8GA1UdIwQY MBaAFPtDSzK5++Pelbx3HW0rPHmqAUv1MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS0wTkxNcm43NDk2VnZIY2RiU3M4ZWFvQlNfVS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjcvMjkwOThiLWYwZjItNGIxMC1iMmUy LTFmYjNkNTU0ZmVkNS8xLzEtME5MTXJuNzQ5NlZ2SGNkYlNzOGVhb0JTX1UubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2Y3LzI5MDk4Yi1mMGYyLTRiMTAtYjJlMi0xZmIzZDU1NGZl ZDUvMS8xLTBOTE1ybjc0OTZWdkhjZGJTczhlYW9CU19VLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACG3U 2Ml9DJ4PSsDh7Fqqlww6AQQb7CHhSwjValVhTwA7zpl5CwIIfgGd+sxW3jSx72gJ 5s7my3+6Qp9o7aTdqhru7ilmPbne1VcwkrSKNNjbQYk4u3bj8fJFII20miC5PvYb Dv+nPKIG5GfEspR8WcqvHzPxBQ51fxtQzDVA/J+/kDIW/VvGeIvHcO3ZdUAP4/Dm Red6tDcLf3JHQ/9iBWkeYTB68++LoAy5BGr/Clvkjq7mPptXndghsutS6zJHOnWN F9rOiiqGyZ7TqhhMhEXda6dYbVtLw6TvHGlOiSZMtALgwkkuNW8fG//EMoqQxwDa zPTGobTeQoQOxJy4ag== -----END CERTIFICATE-----Generated at Sat Dec 6 07:41:57 2025 by rpki-client