This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f974e9-4743-46db-a348-1d1989f06618/1/nL6cQ-51mJYAORlQhzRyM0a_cBY.mft File: nL6cQ-51mJYAORlQhzRyM0a_cBY.mft (raw, json) Hash identifier: vutvP7hdyiF+o3LcDJwKpCGNClltsTQrsB0jpHVoP/Q= Subject key identifier: 45:82:76:0C:92:79:76:D0:AC:9A:F3:15:32:DB:49:4E:35:F9:2B:B2 Authority key identifier: 9C:BE:9C:43:EE:75:98:96:00:39:19:50:87:34:72:33:46:BF:70:16 Certificate issuer: /CN=9cbe9c43ee759896003919508734723346bf7016 Certificate serial: 019B5976816A4AA2B4BF6FF9BAB67F01E41F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nL6cQ-51mJYAORlQhzRyM0a_cBY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f974e9-4743-46db-a348-1d1989f06618/1/nL6cQ-51mJYAORlQhzRyM0a_cBY.mft Manifest number: 135A Signing time: Fri 26 Dec 2025 07:01:37 +0000 Manifest this update: Fri 26 Dec 2025 07:01:37 +0000 Manifest next update: Sat 27 Dec 2025 07:01:37 +0000 Files and hashes: 1: UZ53Oxv_ea1DJibe26VPgv4-Vpo.roa (hash: hiy12f2VyI89A+R22FhEyFKlin2hs0EKoXos1apn778=) 2: nL6cQ-51mJYAORlQhzRyM0a_cBY.crl (hash: ufSkdqmClm9ZkxPTL5XYfuvMPYG81CF2Ih2YJdMZYSo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f974e9-4743-46db-a348-1d1989f06618/1/nL6cQ-51mJYAORlQhzRyM0a_cBY.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f974e9-4743-46db-a348-1d1989f06618/1/nL6cQ-51mJYAORlQhzRyM0a_cBY.mft rsync://rpki.ripe.net/repository/DEFAULT/nL6cQ-51mJYAORlQhzRyM0a_cBY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:81:6a:4a:a2:b4:bf:6f:f9:ba:b6:7f:01:e4:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cbe9c43ee759896003919508734723346bf7016 Validity Not Before: Dec 26 07:01:37 2025 GMT Not After : Dec 27 07:01:37 2025 GMT Subject: CN=4582760c927976d0ac9af31532db494e35f92bb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e2:d9:85:bf:9e:2f:26:06:56:f5:13:59:72: c6:99:59:3e:17:46:1e:83:fd:c3:3e:15:25:c6:07: cf:13:54:62:bc:72:c7:b2:e9:54:96:58:fb:fa:68: c7:5a:4b:4a:21:b1:e2:30:24:51:2d:e8:e9:08:b6: c2:9d:62:3e:7e:b1:b2:31:c0:3b:54:4f:ea:37:f9: 1a:45:ee:9c:3f:75:07:7d:f7:d6:ef:79:fd:91:0a: 2f:a3:14:37:8f:58:11:86:45:c5:b2:11:05:c3:18: d0:99:bd:6a:62:f6:69:20:06:98:62:97:58:6a:4e: 99:bb:6d:83:37:65:2f:6f:33:32:26:be:54:5a:e6: 4b:5d:3b:47:39:12:f5:44:28:0e:c2:18:8e:60:56: c4:e8:b0:c7:4e:c0:85:11:36:21:d2:82:9b:a1:b5: 95:99:eb:18:ad:a2:5a:c0:d7:84:87:fd:d9:2b:68: 88:f1:65:92:2c:b0:85:ea:74:29:06:66:80:32:30: 8a:18:00:2a:fa:da:5a:e1:ef:9b:8b:4f:2d:6c:ff: f3:ee:3a:7b:f9:66:9f:4a:2d:be:f3:03:8f:44:63: dd:bd:2d:18:37:84:23:8b:e7:6a:6e:bc:a3:e9:0c: 7f:12:2e:29:7a:db:c2:b5:92:2e:53:7e:4a:79:7a: 74:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:82:76:0C:92:79:76:D0:AC:9A:F3:15:32:DB:49:4E:35:F9:2B:B2 X509v3 Authority Key Identifier: keyid:9C:BE:9C:43:EE:75:98:96:00:39:19:50:87:34:72:33:46:BF:70:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nL6cQ-51mJYAORlQhzRyM0a_cBY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f974e9-4743-46db-a348-1d1989f06618/1/nL6cQ-51mJYAORlQhzRyM0a_cBY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f974e9-4743-46db-a348-1d1989f06618/1/nL6cQ-51mJYAORlQhzRyM0a_cBY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:bc:48:4e:e8:5a:69:a9:38:f0:79:03:af:99:3e:66:73:f2: 4f:5e:15:92:7a:05:5e:1e:99:eb:3e:c9:89:4e:e6:4f:ed:f6: f6:b1:1d:22:39:8a:50:7f:1d:a3:4d:81:8d:f7:d9:9f:d3:12: 9c:46:73:d1:9f:be:5e:4c:f7:30:7a:0b:de:c6:43:47:15:50: 19:3e:c7:c8:7f:5e:63:7c:43:2d:20:0a:89:25:24:2a:40:96: d2:a4:aa:43:be:c7:0b:ca:c6:95:17:90:4a:87:66:7d:6e:09: 65:d9:b9:96:df:3f:e6:23:b7:67:73:0a:b7:25:a3:fc:d8:2b: 63:83:6c:7e:74:34:74:0f:da:e7:55:8d:cf:1a:1f:3c:91:fc: c0:96:b5:64:06:b8:fd:e0:cd:c4:0f:4b:c3:92:9d:de:2a:13: 61:1c:3e:8b:5d:5b:3e:60:a9:ca:2a:33:99:fa:ce:34:15:1c: bb:ee:6f:2c:a9:6a:c3:1f:6b:b4:24:20:70:55:d6:91:27:0a: 4e:56:5a:92:ba:cb:45:3e:59:7e:64:ca:00:c1:ec:fb:05:38: 67:3d:17:f3:3d:a9:40:93:c4:78:c4:03:64:42:e2:10:e6:9b: 9e:9c:4f:73:bf:33:04:3c:d5:eb:74:33:f0:1d:ca:ad:f5:97: c7:f4:d8:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdoFqSqK0v2/5urZ/AeQfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljYmU5YzQzZWU3NTk4OTYwMDM5MTk1MDg3MzQ3MjMzNDZi ZjcwMTYwHhcNMjUxMjI2MDcwMTM3WhcNMjUxMjI3MDcwMTM3WjAzMTEwLwYDVQQD Eyg0NTgyNzYwYzkyNzk3NmQwYWM5YWYzMTUzMmRiNDk0ZTM1ZjkyYmIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOLZhb+eLyYGVvUTWXLGmVk+F0Ye g/3DPhUlxgfPE1RivHLHsulUllj7+mjHWktKIbHiMCRRLejpCLbCnWI+frGyMcA7 VE/qN/kaRe6cP3UHfffW73n9kQovoxQ3j1gRhkXFshEFwxjQmb1qYvZpIAaYYpdY ak6Zu22DN2UvbzMyJr5UWuZLXTtHORL1RCgOwhiOYFbE6LDHTsCFETYh0oKbobWV mesYraJawNeEh/3ZK2iI8WWSLLCF6nQpBmaAMjCKGAAq+tpa4e+bi08tbP/z7jp7 +WafSi2+8wOPRGPdvS0YN4Qji+dqbryj6Qx/Ei4petvCtZIuU35KeXp0swIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEWCdgySeXbQrJrzFTLbSU41+SuyMB8GA1UdIwQY MBaAFJy+nEPudZiWADkZUIc0cjNGv3AWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkw2Y1EtNTFtSllBT1JsUWh6UnlNMGFfY0JZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTc0ZTktNDc0My00NmRiLWEzNDgt MWQxOTg5ZjA2NjE4LzEvbkw2Y1EtNTFtSllBT1JsUWh6UnlNMGFfY0JZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTc0ZTktNDc0My00NmRiLWEzNDgtMWQxOTg5ZjA2NjE4 LzEvbkw2Y1EtNTFtSllBT1JsUWh6UnlNMGFfY0JZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmLxITuha aak48HkDr5k+ZnPyT14VknoFXh6Z6z7JiU7mT+329rEdIjmKUH8do02BjffZn9MS nEZz0Z++Xkz3MHoL3sZDRxVQGT7HyH9eY3xDLSAKiSUkKkCW0qSqQ77HC8rGlReQ SodmfW4JZdm5lt8/5iO3Z3MKtyWj/NgrY4NsfnQ0dA/a51WNzxofPJH8wJa1ZAa4 /eDNxA9Lw5Kd3ioTYRw+i11bPmCpyiozmfrONBUcu+5vLKlqwx9rtCQgcFXWkScK TlZakrrLRT5ZfmTKAMHs+wU4Zz0X8z2pQJPEeMQDZELiEOabnpxPc78zBDzV63Qz 8B3KrfWXx/TYqQ== -----END CERTIFICATE-----Generated at Fri Dec 26 15:46:31 2025 by rpki-client