This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft File: nlUyAHdpaUSxYTwujJxgah4G63k.mft (raw, json) Hash identifier: sAVYjZCqaGTDHAxESM/u2Z8kSsfh7zDX1AuVG7aXf+s= Subject key identifier: B0:9C:14:F9:B6:8D:D5:11:4B:0B:62:84:75:17:59:FA:AD:4A:15:57 Authority key identifier: 9E:55:32:00:77:69:69:44:B1:61:3C:2E:8C:9C:60:6A:1E:06:EB:79 Certificate issuer: /CN=9e55320077696944b1613c2e8c9c606a1e06eb79 Certificate serial: 019B08FED69FB6BA4B3BC9BDFFE63CD0D876 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft Manifest number: 178C Signing time: Wed 10 Dec 2025 16:01:17 +0000 Manifest this update: Wed 10 Dec 2025 16:01:17 +0000 Manifest next update: Thu 11 Dec 2025 16:01:17 +0000 Files and hashes: 1: MWa5Dj5_kmbgw0j6IBXQLJfi3UE.roa (hash: IKx6KdWK7MMrT+DuoPdaDD+mZCI7VV+oe8XMrptTZ1w=) 2: QjtWj02YBmI5Jv7YvgwRw2CvoyA.roa (hash: xzR/aqYGTG/UIUSP1rL50ozgA3zAN0ypP0J4BQa6rSk=) 3: T1_pchNqlq7DTDdnnhWMYLChBoU.roa (hash: 3peIpL8l/Rnx3wWmXa0H7Vz2+9XZpZaFvAX9xROlB/s=) 4: crvEgPTpcYjRSHsrYeLgXXEBKUk.roa (hash: 7eXEVTxEH/UTzDacXKPIjatCFJu/CB4kzr15IvQwXDk=) 5: hvCCVUZ3vm78utey9zVykeFfmZg.roa (hash: 8LKNeWR/ydRJi6I0838T1dU97Q8jY2cXv/vQVdAuDbQ=) 6: nlUyAHdpaUSxYTwujJxgah4G63k.crl (hash: LcTxjr5zCMu3r3AhJCAzuxQxFngEYQ/Z+3ddURouS74=) 7: oGavUwYGf9k8hmqppcV6OhAR0l8.roa (hash: xxSUypsCBzVEfCKjWpeRgbmsfcja4p6HlyrSFwzu1Eo=) 8: ofJM-BOf8d42dE82c9Ub9dgl42A.roa (hash: 5Kr1/Loqh5IoZ9YAjtlJKKCAtdpo/Xrh4HBNFY8lq58=) 9: qealtEqMLJg3Xy2LvZJt_teWrWQ.roa (hash: jUDg3WMKq6N0QAPZM0fHhLPl0mZhBgxm/pe95LVDZy0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.crl rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 16:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:08:fe:d6:9f:b6:ba:4b:3b:c9:bd:ff:e6:3c:d0:d8:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e55320077696944b1613c2e8c9c606a1e06eb79 Validity Not Before: Dec 10 16:01:17 2025 GMT Not After : Dec 11 16:01:17 2025 GMT Subject: CN=b09c14f9b68dd5114b0b6284751759faad4a1557 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:7d:b1:8a:3e:0b:50:8b:41:9b:cd:1c:9d:bb: 88:e8:47:6b:a5:72:e8:31:4d:89:70:e5:c5:31:70: 1b:73:fa:68:ef:92:64:4a:81:c3:cc:ca:6b:14:ea: 30:a6:d4:c4:26:7d:af:43:9c:a4:cc:74:89:e7:21: 80:24:c9:cc:4a:a7:a3:f6:35:96:31:d0:65:3d:e2: cf:0e:fb:18:6e:83:fa:b8:fe:da:71:9f:e0:7c:c9: 57:29:80:14:96:3f:81:80:a0:11:a1:11:2c:f9:af: b5:ff:8b:30:02:6a:d2:f3:c4:6f:6f:a5:f7:1e:f8: 43:8c:c0:56:58:44:ae:48:64:8a:c2:b5:26:3d:b0: 37:6b:92:10:67:3d:a8:d7:74:95:6e:7f:77:67:ae: 77:d1:85:44:3c:f9:d8:b2:76:3d:27:ae:5e:54:06: 6c:10:e8:5c:06:84:6a:8d:1e:a8:eb:37:e5:9a:ae: 28:ca:e2:d2:94:b3:9e:ad:da:65:fd:3c:f0:32:a9: 4d:a3:32:4d:7c:22:2c:2f:5b:02:55:8d:d7:61:37: f5:68:67:36:6c:03:93:ae:67:9d:b8:5c:c3:82:d9: 9a:07:ca:db:78:97:a8:32:95:bf:df:b6:7a:86:67: 68:32:3a:d2:9e:c2:47:19:5e:65:a9:82:86:bc:3b: 93:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:9C:14:F9:B6:8D:D5:11:4B:0B:62:84:75:17:59:FA:AD:4A:15:57 X509v3 Authority Key Identifier: keyid:9E:55:32:00:77:69:69:44:B1:61:3C:2E:8C:9C:60:6A:1E:06:EB:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:90:9c:28:4f:a9:3e:18:02:1a:1a:0f:fe:20:da:bb:d7:77: 32:41:8d:d0:04:76:30:d2:9e:0f:0e:f9:c5:51:bf:b1:ef:72: 02:72:a4:7e:18:50:c4:06:8a:c6:6e:2d:b6:57:14:68:3f:21: 66:1a:32:b1:33:33:ee:bd:16:ce:dc:e1:59:fd:3c:98:3a:48: 5f:c4:a7:d8:3d:18:f4:72:0c:2b:e8:6f:91:86:95:e3:ec:e7: c5:f1:b3:be:70:f8:b5:61:e5:44:99:2e:18:67:7a:11:1f:4d: fc:a4:dc:45:be:02:44:1a:66:7d:bd:33:d9:79:d8:ff:a8:ff: 5f:0d:67:ce:0e:a0:18:3f:55:2f:ff:95:6f:cc:da:91:42:57: c6:82:3f:75:b9:f6:10:2d:44:38:3d:e1:de:74:3a:2f:85:05: 0c:b7:6c:31:d8:4a:23:64:5c:3e:19:3f:0e:2e:e0:00:74:cf: 1d:3a:9c:cc:ea:e6:70:dc:13:79:d8:62:65:00:40:b1:c1:c4: 14:9a:5e:8f:75:3f:39:54:56:75:fb:a6:55:85:3f:cb:41:79: 7b:b6:72:a8:9b:d0:4f:3a:6a:88:a8:9a:a2:a1:4c:1e:9a:63: 78:62:59:1b:15:3a:2d:c0:02:54:2c:e5:d3:6d:7a:1e:98:bc: 09:6d:86:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsI/taftrpLO8m9/+Y80Nh2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNTUzMjAwNzc2OTY5NDRiMTYxM2MyZThjOWM2MDZhMWUw NmViNzkwHhcNMjUxMjEwMTYwMTE3WhcNMjUxMjExMTYwMTE3WjAzMTEwLwYDVQQD EyhiMDljMTRmOWI2OGRkNTExNGIwYjYyODQ3NTE3NTlmYWFkNGExNTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7H2xij4LUItBm80cnbuI6EdrpXLo MU2JcOXFMXAbc/po75JkSoHDzMprFOowptTEJn2vQ5ykzHSJ5yGAJMnMSqej9jWW MdBlPeLPDvsYboP6uP7acZ/gfMlXKYAUlj+BgKARoREs+a+1/4swAmrS88Rvb6X3 HvhDjMBWWESuSGSKwrUmPbA3a5IQZz2o13SVbn93Z6530YVEPPnYsnY9J65eVAZs EOhcBoRqjR6o6zflmq4oyuLSlLOerdpl/TzwMqlNozJNfCIsL1sCVY3XYTf1aGc2 bAOTrmeduFzDgtmaB8rbeJeoMpW/37Z6hmdoMjrSnsJHGV5lqYKGvDuTIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLCcFPm2jdURSwtihHUXWfqtShVXMB8GA1UdIwQY MBaAFJ5VMgB3aWlEsWE8LoycYGoeBut5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmxVeUFIZHBhVVN4WVR3dWpKeGdhaDRHNjNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8yNjBiNjEtYTM0OC00ZDQ3LTkyZjYt MWUwZThiOTA5ZTM0LzEvbmxVeUFIZHBhVVN4WVR3dWpKeGdhaDRHNjNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC8yNjBiNjEtYTM0OC00ZDQ3LTkyZjYtMWUwZThiOTA5ZTM0 LzEvbmxVeUFIZHBhVVN4WVR3dWpKeGdhaDRHNjNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb5CcKE+p PhgCGhoP/iDau9d3MkGN0AR2MNKeDw75xVG/se9yAnKkfhhQxAaKxm4ttlcUaD8h ZhoysTMz7r0WztzhWf08mDpIX8Sn2D0Y9HIMK+hvkYaV4+znxfGzvnD4tWHlRJku GGd6ER9N/KTcRb4CRBpmfb0z2XnY/6j/Xw1nzg6gGD9VL/+Vb8zakUJXxoI/dbn2 EC1EOD3h3nQ6L4UFDLdsMdhKI2RcPhk/Di7gAHTPHTqczOrmcNwTedhiZQBAscHE FJpej3U/OVRWdfumVYU/y0F5e7ZyqJvQTzpqiKiaoqFMHppjeGJZGxU6LcACVCzl 0216Hpi8CW2GGg== -----END CERTIFICATE-----Generated at Thu Dec 11 00:59:19 2025 by rpki-client