This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/a2b8e6-8d54-439b-8ce1-c4974ac2672e/1/NuBUKH2-dgYtF3DYPGoWAADbDX0.mft File: NuBUKH2-dgYtF3DYPGoWAADbDX0.mft (raw, json) Hash identifier: w9c6KKKDRlIe6OeSXbSp1USE+B6vyvNDr48YArE1SI0= Subject key identifier: EB:2D:70:D2:7B:D7:7A:D0:66:D3:33:1B:3F:60:5F:A4:F2:0F:1B:16 Authority key identifier: 36:E0:54:28:7D:BE:76:06:2D:17:70:D8:3C:6A:16:00:00:DB:0D:7D Certificate issuer: /CN=36e054287dbe76062d1770d83c6a160000db0d7d Certificate serial: 019AF12E812B2B6BDEAD9256CA0D1A69CFFC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NuBUKH2-dgYtF3DYPGoWAADbDX0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/a2b8e6-8d54-439b-8ce1-c4974ac2672e/1/NuBUKH2-dgYtF3DYPGoWAADbDX0.mft Manifest number: 070D Signing time: Sat 06 Dec 2025 01:02:27 +0000 Manifest this update: Sat 06 Dec 2025 01:02:27 +0000 Manifest next update: Sun 07 Dec 2025 01:02:27 +0000 Files and hashes: 1: NuBUKH2-dgYtF3DYPGoWAADbDX0.crl (hash: rghv5bMispY+1Vm+Pdto77jv+NiBeS/TUdSRRD0So7w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/a2b8e6-8d54-439b-8ce1-c4974ac2672e/1/NuBUKH2-dgYtF3DYPGoWAADbDX0.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/a2b8e6-8d54-439b-8ce1-c4974ac2672e/1/NuBUKH2-dgYtF3DYPGoWAADbDX0.mft rsync://rpki.ripe.net/repository/DEFAULT/NuBUKH2-dgYtF3DYPGoWAADbDX0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:81:2b:2b:6b:de:ad:92:56:ca:0d:1a:69:cf:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36e054287dbe76062d1770d83c6a160000db0d7d Validity Not Before: Dec 6 01:02:27 2025 GMT Not After : Dec 7 01:02:27 2025 GMT Subject: CN=eb2d70d27bd77ad066d3331b3f605fa4f20f1b16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ef:57:82:e6:29:97:31:75:6d:54:1f:22:17: 6b:e3:15:f6:5b:80:f9:af:bb:39:d5:55:a7:7b:b2: 6c:63:eb:62:a5:f6:f0:1e:1a:c5:61:7c:08:90:c9: 4a:da:ee:b2:0e:ca:39:82:24:d0:94:1f:f5:08:ed: 78:14:db:7f:fc:c2:5b:52:51:5a:79:88:53:a5:4f: 89:c5:53:18:5d:b3:9e:c5:ec:01:b0:2d:e0:01:6a: ec:17:56:0b:cf:a5:17:2f:61:d3:d2:5f:73:a2:cd: f2:cd:ea:df:1f:10:99:12:42:e6:e7:4b:88:71:2f: c1:7e:91:bd:e1:d9:1e:96:a2:89:fd:d5:14:d8:3c: 43:38:7c:87:11:5e:07:f7:db:1b:91:88:e5:d0:17: ab:e4:99:7c:ad:3c:b2:3c:1b:dd:2a:4f:eb:44:60: d8:09:ff:a2:d7:64:01:88:69:39:ab:4a:0b:6f:c9: 4a:93:97:21:94:35:18:9b:a9:66:b6:26:de:b1:88: f8:98:1c:f8:ae:6b:e4:1e:19:e8:65:e0:61:19:ef: 2e:0d:8d:97:07:0b:52:8e:85:29:c6:43:3c:1c:dd: 54:53:1b:ab:dd:0f:d8:7c:5b:e5:26:4a:dc:25:ec: dd:41:0f:d2:5a:ec:c5:9d:e7:22:2d:23:fc:62:13: 71:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:2D:70:D2:7B:D7:7A:D0:66:D3:33:1B:3F:60:5F:A4:F2:0F:1B:16 X509v3 Authority Key Identifier: keyid:36:E0:54:28:7D:BE:76:06:2D:17:70:D8:3C:6A:16:00:00:DB:0D:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NuBUKH2-dgYtF3DYPGoWAADbDX0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a2b8e6-8d54-439b-8ce1-c4974ac2672e/1/NuBUKH2-dgYtF3DYPGoWAADbDX0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a2b8e6-8d54-439b-8ce1-c4974ac2672e/1/NuBUKH2-dgYtF3DYPGoWAADbDX0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:c9:99:88:be:68:03:8e:46:42:98:88:40:74:94:2d:a9:de: d8:1a:ec:e7:a5:41:9c:49:8d:16:d9:b6:66:70:64:f7:55:74: c4:3c:35:75:33:97:a0:b1:2c:dd:0b:9d:2a:f3:c6:30:31:fc: f1:48:a6:a7:be:80:7b:a3:43:a2:59:8b:64:1f:8b:80:6b:9c: 65:f2:e9:93:66:aa:35:c7:51:15:1e:0b:c0:03:01:ad:c8:3f: 54:1b:6e:fc:cd:f1:15:d2:0f:e0:a1:a4:b5:29:be:d1:42:b4: a7:94:90:3b:95:fe:a3:29:f4:f9:51:c2:6b:8b:bf:5d:4b:39: 7b:73:e2:37:c4:e2:8b:e2:f5:32:20:01:ea:17:e2:3b:c1:21: 0b:81:89:10:4c:ca:ba:9d:53:89:52:83:10:4d:a5:66:d7:14: 85:d3:8d:c7:56:9e:03:fe:a7:8b:42:59:dd:df:91:34:81:a7: 74:09:9e:97:35:74:e5:dc:6b:3c:86:9b:e5:6f:7e:f2:f6:15: c3:b2:10:58:f6:ad:ce:82:77:c2:bf:14:ea:56:d4:02:e4:c4: 4f:4e:3e:c1:d1:7c:03:32:0a:5d:5c:59:cc:c9:aa:4e:92:a9: d3:71:94:51:22:d5:04:1d:dd:f1:15:89:f8:67:db:b3:e7:35: ec:f5:11:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLoErK2verZJWyg0aac/8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2ZTA1NDI4N2RiZTc2MDYyZDE3NzBkODNjNmExNjAwMDBk YjBkN2QwHhcNMjUxMjA2MDEwMjI3WhcNMjUxMjA3MDEwMjI3WjAzMTEwLwYDVQQD EyhlYjJkNzBkMjdiZDc3YWQwNjZkMzMzMWIzZjYwNWZhNGYyMGYxYjE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAle9XguYplzF1bVQfIhdr4xX2W4D5 r7s51VWne7JsY+tipfbwHhrFYXwIkMlK2u6yDso5giTQlB/1CO14FNt//MJbUlFa eYhTpU+JxVMYXbOexewBsC3gAWrsF1YLz6UXL2HT0l9zos3yzerfHxCZEkLm50uI cS/BfpG94dkelqKJ/dUU2DxDOHyHEV4H99sbkYjl0Ber5Jl8rTyyPBvdKk/rRGDY Cf+i12QBiGk5q0oLb8lKk5chlDUYm6lmtibesYj4mBz4rmvkHhnoZeBhGe8uDY2X BwtSjoUpxkM8HN1UUxur3Q/YfFvlJkrcJezdQQ/SWuzFneciLSP8YhNxGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOstcNJ713rQZtMzGz9gX6TyDxsWMB8GA1UdIwQY MBaAFDbgVCh9vnYGLRdw2DxqFgAA2w19MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnVCVUtIMi1kZ1l0RjNEWVBHb1dBQURiRFgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9hMmI4ZTYtOGQ1NC00MzliLThjZTEt YzQ5NzRhYzI2NzJlLzEvTnVCVUtIMi1kZ1l0RjNEWVBHb1dBQURiRFgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9hMmI4ZTYtOGQ1NC00MzliLThjZTEtYzQ5NzRhYzI2NzJl LzEvTnVCVUtIMi1kZ1l0RjNEWVBHb1dBQURiRFgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHsmZiL5o A45GQpiIQHSULane2Brs56VBnEmNFtm2ZnBk91V0xDw1dTOXoLEs3QudKvPGMDH8 8Uimp76Ae6NDolmLZB+LgGucZfLpk2aqNcdRFR4LwAMBrcg/VBtu/M3xFdIP4KGk tSm+0UK0p5SQO5X+oyn0+VHCa4u/XUs5e3PiN8Tii+L1MiAB6hfiO8EhC4GJEEzK up1TiVKDEE2lZtcUhdONx1aeA/6ni0JZ3d+RNIGndAmelzV05dxrPIab5W9+8vYV w7IQWPatzoJ3wr8U6lbUAuTET04+wdF8AzIKXVxZzMmqTpKp03GUUSLVBB3d8RWJ +Gfbs+c17PURhQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:14:07 2025 by rpki-client