This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f3bfcf-b0cd-45f1-ae9e-5c3f76d11607/1/Nuoi8EuUB4quAV4AlXsnP_A4zxI.mft File: Nuoi8EuUB4quAV4AlXsnP_A4zxI.mft (raw, json) Hash identifier: DJZBO5b+kprloAV6vwuqCmlI8NVqtJeFNUsyRX5mj/w= Subject key identifier: B6:6E:57:7B:EC:83:B7:5C:E8:75:E7:19:BB:38:0B:27:8B:E9:43:C4 Authority key identifier: 36:EA:22:F0:4B:94:07:8A:AE:01:5E:00:95:7B:27:3F:F0:38:CF:12 Certificate issuer: /CN=36ea22f04b94078aae015e00957b273ff038cf12 Certificate serial: 019AF27719D466D4EC360F671FFFB8984737 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nuoi8EuUB4quAV4AlXsnP_A4zxI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/f3bfcf-b0cd-45f1-ae9e-5c3f76d11607/1/Nuoi8EuUB4quAV4AlXsnP_A4zxI.mft Manifest number: F6 Signing time: Sat 06 Dec 2025 07:01:22 +0000 Manifest this update: Sat 06 Dec 2025 07:01:22 +0000 Manifest next update: Sun 07 Dec 2025 07:01:22 +0000 Files and hashes: 1: Nuoi8EuUB4quAV4AlXsnP_A4zxI.crl (hash: JOAOSFhJgwdMA26jmTIHB/bzJ6x24BPOk/zJ/IhR2k4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/f3bfcf-b0cd-45f1-ae9e-5c3f76d11607/1/Nuoi8EuUB4quAV4AlXsnP_A4zxI.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/f3bfcf-b0cd-45f1-ae9e-5c3f76d11607/1/Nuoi8EuUB4quAV4AlXsnP_A4zxI.mft rsync://rpki.ripe.net/repository/DEFAULT/Nuoi8EuUB4quAV4AlXsnP_A4zxI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:19:d4:66:d4:ec:36:0f:67:1f:ff:b8:98:47:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36ea22f04b94078aae015e00957b273ff038cf12 Validity Not Before: Dec 6 07:01:22 2025 GMT Not After : Dec 7 07:01:22 2025 GMT Subject: CN=b66e577bec83b75ce875e719bb380b278be943c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:6e:bb:e6:48:7b:0c:24:27:b8:b8:d1:30:c3: 7d:ae:f5:e1:51:a6:a1:86:ae:56:0a:b5:08:cb:22: c8:83:c8:57:00:5e:9b:5d:d6:bf:4b:fb:d9:73:a0: 92:3d:65:7b:15:83:4d:d5:dc:0b:da:1e:db:5d:db: 24:f0:0e:64:61:b1:52:79:16:a9:44:58:d8:86:59: 43:88:c5:ea:60:55:c1:bd:2d:2c:5f:78:01:d9:1f: 79:db:d7:d5:12:04:fc:0d:9b:36:cd:e2:9c:66:7a: c2:e1:81:0e:fc:43:56:b2:7b:94:c1:9e:5b:3e:62: 6d:42:14:79:d7:bf:38:2b:b4:34:9d:73:e0:3c:0a: 63:a6:ed:c8:2e:bb:2b:36:3d:9a:73:23:e9:92:c8: 2b:09:11:ca:7f:54:2d:b5:5b:28:75:29:39:68:88: 77:91:79:9e:e5:f2:b8:19:f4:a5:ba:c2:12:36:17: d8:b7:a2:07:5c:18:f8:23:f5:63:c6:41:ba:dc:ed: 8b:1c:72:67:bb:82:d9:df:ee:1c:8b:29:4b:8a:84: 89:44:89:eb:b9:7f:e2:db:ff:71:d6:c7:85:9d:0b: 74:08:b7:86:2a:2f:cd:bc:90:1c:70:e5:70:79:ab: b0:82:b0:1d:5c:61:c5:d2:29:77:50:d9:35:67:03: c2:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:6E:57:7B:EC:83:B7:5C:E8:75:E7:19:BB:38:0B:27:8B:E9:43:C4 X509v3 Authority Key Identifier: keyid:36:EA:22:F0:4B:94:07:8A:AE:01:5E:00:95:7B:27:3F:F0:38:CF:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nuoi8EuUB4quAV4AlXsnP_A4zxI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f3bfcf-b0cd-45f1-ae9e-5c3f76d11607/1/Nuoi8EuUB4quAV4AlXsnP_A4zxI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f3bfcf-b0cd-45f1-ae9e-5c3f76d11607/1/Nuoi8EuUB4quAV4AlXsnP_A4zxI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:b8:fb:b7:7d:37:65:65:9c:d7:54:32:7d:b9:08:e7:bc:59: 71:17:dc:41:f5:43:78:e3:f3:14:23:f8:67:91:ac:8f:d2:c8: ad:5d:20:77:54:a1:ad:51:13:03:84:bb:d4:ad:e6:34:c1:cf: df:4a:6c:df:95:96:8e:e1:8c:bc:75:8d:a8:28:89:8d:05:58: fa:47:b0:70:08:c2:8d:2e:54:47:78:7e:88:fa:86:36:50:9a: 7d:81:9e:b8:d1:57:ad:50:7b:28:d2:3f:84:09:d1:00:08:df: 34:06:fe:04:45:ef:d2:bb:f7:4f:b8:3a:20:6b:dd:24:cf:9a: 26:86:4e:69:3a:5e:bd:b6:ce:37:40:6d:53:1e:65:78:ba:8c: a8:8e:23:67:14:df:e1:11:35:28:54:4c:17:cd:e5:23:7b:b3: 1b:e1:09:aa:2f:aa:41:cf:a0:e4:1c:1d:38:75:74:d3:06:9a: 3f:4d:9c:5c:2b:cf:d4:57:58:07:c6:0d:77:f6:cd:69:7e:71: 99:9c:51:15:5a:50:83:74:17:ac:1d:5b:9c:c6:9f:ec:b6:a9: 9f:1b:4d:07:ef:87:95:5c:0a:3a:cc:d1:40:65:84:05:92:ae: e5:f9:cb:32:86:36:03:35:4f:2a:7b:78:29:d7:81:ee:19:88: 7c:1d:81:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydxnUZtTsNg9nH/+4mEc3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2ZWEyMmYwNGI5NDA3OGFhZTAxNWUwMDk1N2IyNzNmZjAz OGNmMTIwHhcNMjUxMjA2MDcwMTIyWhcNMjUxMjA3MDcwMTIyWjAzMTEwLwYDVQQD EyhiNjZlNTc3YmVjODNiNzVjZTg3NWU3MTliYjM4MGIyNzhiZTk0M2M0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApW675kh7DCQnuLjRMMN9rvXhUaah hq5WCrUIyyLIg8hXAF6bXda/S/vZc6CSPWV7FYNN1dwL2h7bXdsk8A5kYbFSeRap RFjYhllDiMXqYFXBvS0sX3gB2R9529fVEgT8DZs2zeKcZnrC4YEO/ENWsnuUwZ5b PmJtQhR51784K7Q0nXPgPApjpu3ILrsrNj2acyPpksgrCRHKf1QttVsodSk5aIh3 kXme5fK4GfSlusISNhfYt6IHXBj4I/VjxkG63O2LHHJnu4LZ3+4ciylLioSJRInr uX/i2/9x1seFnQt0CLeGKi/NvJAccOVweauwgrAdXGHF0il3UNk1ZwPCewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLZuV3vsg7dc6HXnGbs4CyeL6UPEMB8GA1UdIwQY MBaAFDbqIvBLlAeKrgFeAJV7Jz/wOM8SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnVvaThFdVVCNHF1QVY0QWxYc25QX0E0enhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9mM2JmY2YtYjBjZC00NWYxLWFlOWUt NWMzZjc2ZDExNjA3LzEvTnVvaThFdVVCNHF1QVY0QWxYc25QX0E0enhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9mM2JmY2YtYjBjZC00NWYxLWFlOWUtNWMzZjc2ZDExNjA3 LzEvTnVvaThFdVVCNHF1QVY0QWxYc25QX0E0enhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqLj7t303 ZWWc11QyfbkI57xZcRfcQfVDeOPzFCP4Z5Gsj9LIrV0gd1ShrVETA4S71K3mNMHP 30ps35WWjuGMvHWNqCiJjQVY+kewcAjCjS5UR3h+iPqGNlCafYGeuNFXrVB7KNI/ hAnRAAjfNAb+BEXv0rv3T7g6IGvdJM+aJoZOaTpevbbON0BtUx5leLqMqI4jZxTf 4RE1KFRMF83lI3uzG+EJqi+qQc+g5BwdOHV00waaP02cXCvP1FdYB8YNd/bNaX5x mZxRFVpQg3QXrB1bnMaf7LapnxtNB++HlVwKOszRQGWEBZKu5fnLMoY2AzVPKnt4 KdeB7hmIfB2BeQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:32:47 2025 by rpki-client