This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.mft File: NUb_Rc5QVX7cTAMG4fhpSCrUI-A.mft (raw, json) Hash identifier: S9DleUNG2iAfYrOaiGqRKeqmkm38cnrNDOSRWOP0TWs= Subject key identifier: 32:B6:73:42:54:AF:98:DD:B8:13:D6:64:F8:B2:AA:3C:53:62:0E:87 Authority key identifier: 35:46:FF:45:CE:50:55:7E:DC:4C:03:06:E1:F8:69:48:2A:D4:23:E0 Certificate issuer: /CN=3546ff45ce50557edc4c0306e1f869482ad423e0 Certificate serial: 019AF1D1AE8F24A978AF0615B574BA63516E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.mft Manifest number: 091C Signing time: Sat 06 Dec 2025 04:00:42 +0000 Manifest this update: Sat 06 Dec 2025 04:00:42 +0000 Manifest next update: Sun 07 Dec 2025 04:00:42 +0000 Files and hashes: 1: NUb_Rc5QVX7cTAMG4fhpSCrUI-A.crl (hash: mD0Wmm1FOL+vUSWT3ksVB74cYr/Q5owHDQUN3nOTXd0=) 2: Rv1036YGXSxZ-LNtEMTG-yB-cpE.roa (hash: 9hIhakYU1jL8ELRanjY68hTQVJc33GMXNtFCdw91hfI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.mft rsync://rpki.ripe.net/repository/DEFAULT/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:ae:8f:24:a9:78:af:06:15:b5:74:ba:63:51:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3546ff45ce50557edc4c0306e1f869482ad423e0 Validity Not Before: Dec 6 04:00:42 2025 GMT Not After : Dec 7 04:00:42 2025 GMT Subject: CN=32b6734254af98ddb813d664f8b2aa3c53620e87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:57:a7:3f:be:4b:26:f3:d8:fb:09:f2:c2:5a: f0:ee:2d:b8:55:6b:f8:1e:0e:73:4a:15:6a:34:4c: 7f:5a:56:11:4b:c9:d5:0e:c0:20:ba:88:fa:bd:a4: 7d:19:8e:9a:fb:98:90:a4:4a:7f:a2:67:93:9c:18: dc:27:16:5b:5b:8d:18:0c:bc:ea:b8:83:80:aa:50: 49:53:97:99:51:c5:18:49:85:29:90:e0:c5:99:62: 8f:37:fb:20:29:3d:5d:52:85:10:6f:42:01:57:fc: e9:5f:84:0b:bf:56:c0:d3:19:fd:ad:0a:b3:ba:46: b8:64:17:6e:11:52:d9:7b:97:55:87:2a:cc:d5:89: 66:df:d5:44:e4:9f:7b:3f:ba:fc:e3:2f:47:b3:8a: 5f:d2:8a:71:30:28:e0:f7:a2:d4:a6:12:1b:be:ce: ba:1b:c1:45:84:70:55:26:84:5f:be:bf:46:e8:60: 24:06:56:91:c8:86:bc:5e:a3:79:2e:62:75:a1:e3: 65:d1:26:63:d1:3f:d3:7b:3d:f0:5c:6d:6e:21:de: 2a:6a:53:85:57:e9:0f:db:0d:0f:e6:ae:be:90:6b: be:cb:ea:73:f6:7b:e3:72:8b:79:e2:25:de:f9:c6: 5e:08:c1:b9:9e:db:f4:fd:93:5f:1e:1e:ce:22:82: 24:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:B6:73:42:54:AF:98:DD:B8:13:D6:64:F8:B2:AA:3C:53:62:0E:87 X509v3 Authority Key Identifier: keyid:35:46:FF:45:CE:50:55:7E:DC:4C:03:06:E1:F8:69:48:2A:D4:23:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:37:6d:0c:54:24:3e:a2:74:2a:1f:fb:03:1e:c1:08:85:8a: cd:f9:50:46:dd:41:f8:c9:36:c4:c8:3a:a5:fd:60:4d:a2:b8: 7a:08:7d:44:66:25:d1:69:49:42:54:3d:3a:96:61:51:63:d2: bb:14:d2:14:2d:b0:c0:67:f6:a1:ba:0f:f0:32:6f:03:42:a0: 43:83:d8:05:df:33:a7:f4:6c:6b:93:af:8d:57:c0:48:d3:fb: 96:ea:ca:64:27:9d:9c:4b:97:b3:17:d4:c5:50:f3:d8:7a:90: 0a:78:77:86:ea:29:45:60:9e:6c:00:dd:88:f7:d6:a3:27:62: fa:1e:be:1d:f6:13:f6:83:a4:1d:3a:1c:23:76:84:b1:19:0a: 63:58:38:cb:a2:9c:e1:a4:f4:94:a5:3b:88:3f:22:cd:84:a9: 31:ec:e8:fc:e2:36:ad:6c:f9:36:9a:0d:78:95:e8:1e:bb:39: 41:21:24:75:73:84:45:ab:38:37:3d:80:a0:50:70:2d:0b:a2: b4:e3:1d:34:fb:ea:b7:af:1b:3a:c8:ae:f4:69:1e:42:70:51: 25:2b:a9:fc:85:26:05:c7:d4:1f:97:3b:c1:b2:3d:d8:06:27: 2f:1b:82:d3:23:2d:66:6b:f6:49:f0:31:00:af:9e:ff:46:33: 0e:7a:35:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0a6PJKl4rwYVtXS6Y1FuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NDZmZjQ1Y2U1MDU1N2VkYzRjMDMwNmUxZjg2OTQ4MmFk NDIzZTAwHhcNMjUxMjA2MDQwMDQyWhcNMjUxMjA3MDQwMDQyWjAzMTEwLwYDVQQD EygzMmI2NzM0MjU0YWY5OGRkYjgxM2Q2NjRmOGIyYWEzYzUzNjIwZTg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6VenP75LJvPY+wnywlrw7i24VWv4 Hg5zShVqNEx/WlYRS8nVDsAguoj6vaR9GY6a+5iQpEp/omeTnBjcJxZbW40YDLzq uIOAqlBJU5eZUcUYSYUpkODFmWKPN/sgKT1dUoUQb0IBV/zpX4QLv1bA0xn9rQqz uka4ZBduEVLZe5dVhyrM1Ylm39VE5J97P7r84y9Hs4pf0opxMCjg96LUphIbvs66 G8FFhHBVJoRfvr9G6GAkBlaRyIa8XqN5LmJ1oeNl0SZj0T/Tez3wXG1uId4qalOF V+kP2w0P5q6+kGu+y+pz9nvjcot54iXe+cZeCMG5ntv0/ZNfHh7OIoIkZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDK2c0JUr5jduBPWZPiyqjxTYg6HMB8GA1UdIwQY MBaAFDVG/0XOUFV+3EwDBuH4aUgq1CPgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlViX1JjNVFWWDdjVEFNRzRmaHBTQ3JVSS1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9jOTA4NjktZWUyMC00OTM5LTg0MGUt NjQwYzc0YTk0Y2M2LzEvTlViX1JjNVFWWDdjVEFNRzRmaHBTQ3JVSS1BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9jOTA4NjktZWUyMC00OTM5LTg0MGUtNjQwYzc0YTk0Y2M2 LzEvTlViX1JjNVFWWDdjVEFNRzRmaHBTQ3JVSS1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvjdtDFQk PqJ0Kh/7Ax7BCIWKzflQRt1B+Mk2xMg6pf1gTaK4egh9RGYl0WlJQlQ9OpZhUWPS uxTSFC2wwGf2oboP8DJvA0KgQ4PYBd8zp/Rsa5OvjVfASNP7lurKZCednEuXsxfU xVDz2HqQCnh3huopRWCebADdiPfWoydi+h6+HfYT9oOkHTocI3aEsRkKY1g4y6Kc 4aT0lKU7iD8izYSpMezo/OI2rWz5NpoNeJXoHrs5QSEkdXOERas4Nz2AoFBwLQui tOMdNPvqt68bOsiu9GkeQnBRJSup/IUmBcfUH5c7wbI92AYnLxuC0yMtZmv2SfAx AK+e/0YzDno1xQ== -----END CERTIFICATE-----Generated at Sat Dec 6 06:57:21 2025 by rpki-client