This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/5ced25-9096-4750-8219-0b31c332d50d/1/nD_Ua11gbBzKtVixc24mIaS8BAM.mft File: nD_Ua11gbBzKtVixc24mIaS8BAM.mft (raw, json) Hash identifier: GWsVgxojQ+Mb7mrU/PUmqKRW7DK4SUd//iZLMR/8H4Q= Subject key identifier: C7:DE:18:DE:62:03:CB:09:36:6D:CA:79:CB:DF:9E:4C:21:1C:32:B3 Authority key identifier: 9C:3F:D4:6B:5D:60:6C:1C:CA:B5:58:B1:73:6E:26:21:A4:BC:04:03 Certificate issuer: /CN=9c3fd46b5d606c1ccab558b1736e2621a4bc0403 Certificate serial: 019B4A39D0344B1D4258CE50D9BCEEC9DF25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nD_Ua11gbBzKtVixc24mIaS8BAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/5ced25-9096-4750-8219-0b31c332d50d/1/nD_Ua11gbBzKtVixc24mIaS8BAM.mft Manifest number: 0A1C Signing time: Tue 23 Dec 2025 08:01:01 +0000 Manifest this update: Tue 23 Dec 2025 08:01:01 +0000 Manifest next update: Wed 24 Dec 2025 08:01:01 +0000 Files and hashes: 1: nD_Ua11gbBzKtVixc24mIaS8BAM.crl (hash: /PkOCxN9RjjgzEdrNMbCQb7WDNXs/mHnW1gZgfAaLRw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/5ced25-9096-4750-8219-0b31c332d50d/1/nD_Ua11gbBzKtVixc24mIaS8BAM.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/5ced25-9096-4750-8219-0b31c332d50d/1/nD_Ua11gbBzKtVixc24mIaS8BAM.mft rsync://rpki.ripe.net/repository/DEFAULT/nD_Ua11gbBzKtVixc24mIaS8BAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 08:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:39:d0:34:4b:1d:42:58:ce:50:d9:bc:ee:c9:df:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c3fd46b5d606c1ccab558b1736e2621a4bc0403 Validity Not Before: Dec 23 08:01:01 2025 GMT Not After : Dec 24 08:01:01 2025 GMT Subject: CN=c7de18de6203cb09366dca79cbdf9e4c211c32b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c2:b7:a4:d8:5f:17:24:8b:1b:44:af:24:a5: b9:2c:b0:fc:6f:35:2b:51:93:b2:93:f9:91:8c:54: d3:ba:28:b9:0f:26:79:cd:4d:38:c9:b8:1a:4d:c7: 8b:e0:d9:05:fb:45:b4:af:3d:67:30:8b:c4:90:71: df:5a:d9:84:fd:33:34:2d:34:21:47:2c:fd:24:4e: e5:d5:e7:f0:b9:3d:11:e1:bb:de:d6:59:03:e3:47: 57:d6:d6:e5:73:24:c0:07:68:59:28:04:64:4b:63: 08:8f:23:24:6f:a6:78:3d:4a:1d:fd:c0:14:e4:90: d2:3b:d5:f9:e2:2a:7f:b3:f5:e7:cf:12:22:4f:2d: d5:5d:1e:4f:f4:3e:46:67:c1:47:ce:b2:9f:7b:0b: fa:06:a5:f6:2a:02:e3:e6:c6:81:01:55:46:ae:6b: 4e:f5:ad:eb:f2:93:54:ae:9a:78:09:e1:4c:fa:7e: b0:1c:ba:c0:58:bc:12:e1:42:1d:d0:87:c1:00:c0: 28:32:20:67:7d:0a:c2:08:32:01:48:2d:be:61:8d: d9:9e:82:1b:38:f6:64:b7:8e:db:ea:50:70:e5:85: 06:1e:48:08:4c:20:4c:07:cb:66:a0:c9:23:14:50: 62:c9:c5:f7:b9:f0:aa:cb:e0:a5:bd:1a:17:05:ef: 0b:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:DE:18:DE:62:03:CB:09:36:6D:CA:79:CB:DF:9E:4C:21:1C:32:B3 X509v3 Authority Key Identifier: keyid:9C:3F:D4:6B:5D:60:6C:1C:CA:B5:58:B1:73:6E:26:21:A4:BC:04:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nD_Ua11gbBzKtVixc24mIaS8BAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/5ced25-9096-4750-8219-0b31c332d50d/1/nD_Ua11gbBzKtVixc24mIaS8BAM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/5ced25-9096-4750-8219-0b31c332d50d/1/nD_Ua11gbBzKtVixc24mIaS8BAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:91:f7:7b:cf:db:d9:28:a2:d2:ff:63:db:4e:0d:13:26:0e: 47:9a:39:46:b3:78:1c:76:92:6d:1a:61:92:e6:95:57:0b:78: e3:bd:2f:9e:dd:d6:dd:c6:a0:29:a9:c5:90:e2:6a:3a:51:7b: 6f:72:23:f8:24:12:e4:7e:d9:65:07:0a:80:86:24:11:a5:c6: c4:da:9a:1f:8b:b2:57:34:ad:e8:d9:af:76:e8:eb:cd:d9:7e: 1a:db:41:c2:b0:5d:ce:6d:01:bb:44:21:7d:49:cb:1f:33:1b: 06:8b:40:b0:58:e5:fe:da:d9:aa:27:b7:ec:44:e2:04:26:b4: bb:73:fe:10:01:3b:93:7d:00:db:b2:d7:8d:51:fc:df:28:d9: a2:8c:99:3f:93:ad:f0:a4:ed:ed:29:8b:85:69:b7:d4:3a:99: a0:99:37:1f:45:1b:fd:ab:12:09:03:a9:ad:8b:96:f3:12:5a: d1:81:1d:9b:57:cc:2e:5e:4e:78:3b:e6:99:df:95:ec:ed:5a: 62:86:36:87:85:b0:f9:b6:30:e6:4d:ab:36:cb:b1:21:22:33: 7b:3f:ff:51:9f:2c:8b:7d:2f:c9:90:aa:1c:03:67:fe:76:f7: f3:2b:d6:f5:c2:67:5e:ba:85:81:7a:17:67:fc:d9:c3:91:c7: 2b:37:7a:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKOdA0Sx1CWM5Q2bzuyd8lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljM2ZkNDZiNWQ2MDZjMWNjYWI1NThiMTczNmUyNjIxYTRi YzA0MDMwHhcNMjUxMjIzMDgwMTAxWhcNMjUxMjI0MDgwMTAxWjAzMTEwLwYDVQQD EyhjN2RlMThkZTYyMDNjYjA5MzY2ZGNhNzljYmRmOWU0YzIxMWMzMmIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMK3pNhfFySLG0SvJKW5LLD8bzUr UZOyk/mRjFTTuii5DyZ5zU04ybgaTceL4NkF+0W0rz1nMIvEkHHfWtmE/TM0LTQh Ryz9JE7l1efwuT0R4bve1lkD40dX1tblcyTAB2hZKARkS2MIjyMkb6Z4PUod/cAU 5JDSO9X54ip/s/XnzxIiTy3VXR5P9D5GZ8FHzrKfewv6BqX2KgLj5saBAVVGrmtO 9a3r8pNUrpp4CeFM+n6wHLrAWLwS4UId0IfBAMAoMiBnfQrCCDIBSC2+YY3ZnoIb OPZkt47b6lBw5YUGHkgITCBMB8tmoMkjFFBiycX3ufCqy+ClvRoXBe8LlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMfeGN5iA8sJNm3KecvfnkwhHDKzMB8GA1UdIwQY MBaAFJw/1GtdYGwcyrVYsXNuJiGkvAQDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkRfVWExMWdiQnpLdFZpeGMyNG1JYVM4QkFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi81Y2VkMjUtOTA5Ni00NzUwLTgyMTkt MGIzMWMzMzJkNTBkLzEvbkRfVWExMWdiQnpLdFZpeGMyNG1JYVM4QkFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi81Y2VkMjUtOTA5Ni00NzUwLTgyMTktMGIzMWMzMzJkNTBk LzEvbkRfVWExMWdiQnpLdFZpeGMyNG1JYVM4QkFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATZH3e8/b 2Sii0v9j204NEyYOR5o5RrN4HHaSbRphkuaVVwt4470vnt3W3cagKanFkOJqOlF7 b3Ij+CQS5H7ZZQcKgIYkEaXGxNqaH4uyVzSt6Nmvdujrzdl+GttBwrBdzm0Bu0Qh fUnLHzMbBotAsFjl/trZqie37ETiBCa0u3P+EAE7k30A27LXjVH83yjZooyZP5Ot 8KTt7SmLhWm31DqZoJk3H0Ub/asSCQOprYuW8xJa0YEdm1fMLl5OeDvmmd+V7O1a YoY2h4Ww+bYw5k2rNsuxISIzez//UZ8si30vyZCqHANn/nb38yvW9cJnXrqFgXoX Z/zZw5HHKzd6Hw== -----END CERTIFICATE-----Generated at Tue Dec 23 10:54:45 2025 by rpki-client