This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.mft File: nUZUJyZmhDb6k-dX_u9NReJM1uM.mft (raw, json) Hash identifier: e52iA0LX00R9jpslehqNcYyIejC4w6EFlYylCLLGdSM= Subject key identifier: B4:48:D9:FC:83:8D:91:41:75:2A:CB:83:32:23:3A:CD:DD:A4:AE:3B Authority key identifier: 9D:46:54:27:26:66:84:36:FA:93:E7:57:FE:EF:4D:45:E2:4C:D6:E3 Certificate issuer: /CN=9d46542726668436fa93e757feef4d45e24cd6e3 Certificate serial: 019B4A71595C2A504E834CF4B8FEBB208F5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nUZUJyZmhDb6k-dX_u9NReJM1uM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.mft Manifest number: 14D1 Signing time: Tue 23 Dec 2025 09:01:40 +0000 Manifest this update: Tue 23 Dec 2025 09:01:40 +0000 Manifest next update: Wed 24 Dec 2025 09:01:40 +0000 Files and hashes: 1: _1ZVUyiWiKcUkDQ7d9MEjN-Qxjg.roa (hash: B9N8iWkGu9FMB4JofKmJJULgTYSFoSVSwpeNEHQNG3o=) 2: nUZUJyZmhDb6k-dX_u9NReJM1uM.crl (hash: 6bzPvU7B+TD4AWKok5vjduZrl58VoF5pctBVyT4eYT4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.mft rsync://rpki.ripe.net/repository/DEFAULT/nUZUJyZmhDb6k-dX_u9NReJM1uM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:71:59:5c:2a:50:4e:83:4c:f4:b8:fe:bb:20:8f:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d46542726668436fa93e757feef4d45e24cd6e3 Validity Not Before: Dec 23 09:01:40 2025 GMT Not After : Dec 24 09:01:40 2025 GMT Subject: CN=b448d9fc838d9141752acb8332233acddda4ae3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3d:c6:c0:27:3f:e1:0b:c8:34:ad:ed:95:bc: 06:5d:9b:7d:18:18:cf:6b:9e:1f:91:bc:96:e0:49: 70:93:0d:8f:dd:d2:ed:4a:24:ac:29:b2:f3:56:e1: 47:d9:00:a6:5b:68:82:17:e0:f9:bc:a4:43:d7:bd: 1d:15:b7:fe:84:00:17:fc:89:7c:75:80:4f:7c:30: ed:96:56:31:46:cd:15:85:25:b9:66:93:b1:e4:29: 24:49:3c:d7:38:0e:a1:34:6f:54:49:fc:d6:aa:ed: 18:3e:b3:b8:2a:7e:46:86:32:ff:a5:eb:04:ae:78: cd:f4:64:4a:6b:db:8a:15:be:f2:33:da:bd:0a:42: 30:32:51:86:8b:38:8f:95:b8:ad:e9:1c:1f:04:13: 4d:63:ff:11:25:2c:b3:47:d8:81:b9:c0:58:fc:3a: b5:a2:e3:c2:6b:31:3a:37:0b:63:72:df:38:51:3a: 5d:09:61:d5:d0:80:70:93:8e:4b:01:b0:49:15:36: 35:cb:0e:1e:a1:e6:c2:f4:0f:07:ac:53:30:91:93: f3:12:dd:b5:bb:52:40:4e:fd:3a:f6:12:9e:e2:15: 65:48:9b:d7:72:82:30:2f:30:07:c3:e2:44:72:90: a6:74:b3:13:27:63:fa:8b:dc:4b:05:93:c5:63:a5: e7:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:48:D9:FC:83:8D:91:41:75:2A:CB:83:32:23:3A:CD:DD:A4:AE:3B X509v3 Authority Key Identifier: keyid:9D:46:54:27:26:66:84:36:FA:93:E7:57:FE:EF:4D:45:E2:4C:D6:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nUZUJyZmhDb6k-dX_u9NReJM1uM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:45:68:f7:6b:c4:8b:4f:ef:28:da:91:e0:95:20:65:fd:12: ad:ad:9b:bd:a9:0d:21:a6:80:11:f7:38:4b:9e:b2:44:fc:9e: 5b:64:2c:b8:87:4b:fb:a3:8f:8e:b6:be:eb:fc:0f:bb:48:d3: df:67:37:1b:79:d9:43:5f:84:de:9f:35:1f:ed:38:a9:6c:a0: ba:1d:7d:15:13:eb:a1:16:f2:d8:a9:b7:0f:0c:73:bb:a1:a1: 6a:8c:44:bc:29:b7:4a:c8:fb:69:bd:b6:74:c6:d2:3b:12:89: 09:2b:f2:3a:90:4e:91:1b:14:64:62:46:b0:13:3a:b7:2f:9b: 9d:c8:f8:66:30:e2:35:5b:56:26:b6:b8:6e:be:d5:02:35:bd: 6f:53:80:6e:3c:da:a9:d4:bd:1e:9c:92:b3:bf:87:d1:5c:cb: 14:1a:4d:9c:ac:06:9b:de:49:7b:3b:00:57:6f:d8:08:07:0c: 21:7b:d7:c6:9c:e9:f9:8b:10:29:f1:6b:10:b2:9f:0c:8b:26: 3a:ff:90:85:0a:70:03:f3:f7:a8:ab:80:02:45:20:73:41:9a: 70:2d:f1:6b:4e:13:c9:61:02:a6:95:ca:f4:1f:75:30:c5:9f: 57:1f:8a:03:af:44:dd:21:de:96:f8:16:01:57:a6:77:36:db: a1:fa:e0:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKcVlcKlBOg0z0uP67II9eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkNDY1NDI3MjY2Njg0MzZmYTkzZTc1N2ZlZWY0ZDQ1ZTI0 Y2Q2ZTMwHhcNMjUxMjIzMDkwMTQwWhcNMjUxMjI0MDkwMTQwWjAzMTEwLwYDVQQD EyhiNDQ4ZDlmYzgzOGQ5MTQxNzUyYWNiODMzMjIzM2FjZGRkYTRhZTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtz3GwCc/4QvINK3tlbwGXZt9GBjP a54fkbyW4Elwkw2P3dLtSiSsKbLzVuFH2QCmW2iCF+D5vKRD170dFbf+hAAX/Il8 dYBPfDDtllYxRs0VhSW5ZpOx5CkkSTzXOA6hNG9USfzWqu0YPrO4Kn5GhjL/pesE rnjN9GRKa9uKFb7yM9q9CkIwMlGGiziPlbit6RwfBBNNY/8RJSyzR9iBucBY/Dq1 ouPCazE6Nwtjct84UTpdCWHV0IBwk45LAbBJFTY1yw4eoebC9A8HrFMwkZPzEt21 u1JATv069hKe4hVlSJvXcoIwLzAHw+JEcpCmdLMTJ2P6i9xLBZPFY6XnpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLRI2fyDjZFBdSrLgzIjOs3dpK47MB8GA1UdIwQY MBaAFJ1GVCcmZoQ2+pPnV/7vTUXiTNbjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblVaVUp5Wm1oRGI2ay1kWF91OU5SZUpNMXVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS81ODAwNWEtNTIzMy00ODQ0LWIwMjQt MjllMzVhZTkxMmRhLzEvblVaVUp5Wm1oRGI2ay1kWF91OU5SZUpNMXVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS81ODAwNWEtNTIzMy00ODQ0LWIwMjQtMjllMzVhZTkxMmRh LzEvblVaVUp5Wm1oRGI2ay1kWF91OU5SZUpNMXVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC0Vo92vE i0/vKNqR4JUgZf0Sra2bvakNIaaAEfc4S56yRPyeW2QsuIdL+6OPjra+6/wPu0jT 32c3G3nZQ1+E3p81H+04qWyguh19FRProRby2Km3Dwxzu6GhaoxEvCm3Ssj7ab22 dMbSOxKJCSvyOpBOkRsUZGJGsBM6ty+bncj4ZjDiNVtWJra4br7VAjW9b1OAbjza qdS9HpySs7+H0VzLFBpNnKwGm95JezsAV2/YCAcMIXvXxpzp+YsQKfFrELKfDIsm Ov+QhQpwA/P3qKuAAkUgc0GacC3xa04TyWECppXK9B91MMWfVx+KA69E3SHelvgW AVemdzbbofrgtg== -----END CERTIFICATE-----Generated at Tue Dec 23 10:54:44 2025 by rpki-client