This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft File: nlUyAHdpaUSxYTwujJxgah4G63k.mft (raw, json) Hash identifier: pAWb30FSde1VSvTFD5UCWU+ZnTB9tm/FL3VaB5O7JJ4= Subject key identifier: 8F:30:EC:C2:70:01:24:F3:B8:BA:C3:5D:83:BE:2D:6F:93:54:B9:0F Authority key identifier: 9E:55:32:00:77:69:69:44:B1:61:3C:2E:8C:9C:60:6A:1E:06:EB:79 Certificate issuer: /CN=9e55320077696944b1613c2e8c9c606a1e06eb79 Certificate serial: 019B46CB2979E187C0707FAEFD6042D63E21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft Manifest number: 17AC Signing time: Mon 22 Dec 2025 16:01:18 +0000 Manifest this update: Mon 22 Dec 2025 16:01:18 +0000 Manifest next update: Tue 23 Dec 2025 16:01:18 +0000 Files and hashes: 1: MWa5Dj5_kmbgw0j6IBXQLJfi3UE.roa (hash: IKx6KdWK7MMrT+DuoPdaDD+mZCI7VV+oe8XMrptTZ1w=) 2: QjtWj02YBmI5Jv7YvgwRw2CvoyA.roa (hash: xzR/aqYGTG/UIUSP1rL50ozgA3zAN0ypP0J4BQa6rSk=) 3: T1_pchNqlq7DTDdnnhWMYLChBoU.roa (hash: 3peIpL8l/Rnx3wWmXa0H7Vz2+9XZpZaFvAX9xROlB/s=) 4: crvEgPTpcYjRSHsrYeLgXXEBKUk.roa (hash: 7eXEVTxEH/UTzDacXKPIjatCFJu/CB4kzr15IvQwXDk=) 5: hvCCVUZ3vm78utey9zVykeFfmZg.roa (hash: 8LKNeWR/ydRJi6I0838T1dU97Q8jY2cXv/vQVdAuDbQ=) 6: nlUyAHdpaUSxYTwujJxgah4G63k.crl (hash: AisLNbXxQ1X+3z7DM07gT6jg50gjenyVkgTOibQGWbI=) 7: oGavUwYGf9k8hmqppcV6OhAR0l8.roa (hash: xxSUypsCBzVEfCKjWpeRgbmsfcja4p6HlyrSFwzu1Eo=) 8: ofJM-BOf8d42dE82c9Ub9dgl42A.roa (hash: 5Kr1/Loqh5IoZ9YAjtlJKKCAtdpo/Xrh4HBNFY8lq58=) 9: qealtEqMLJg3Xy2LvZJt_teWrWQ.roa (hash: jUDg3WMKq6N0QAPZM0fHhLPl0mZhBgxm/pe95LVDZy0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.crl rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:cb:29:79:e1:87:c0:70:7f:ae:fd:60:42:d6:3e:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e55320077696944b1613c2e8c9c606a1e06eb79 Validity Not Before: Dec 22 16:01:18 2025 GMT Not After : Dec 23 16:01:18 2025 GMT Subject: CN=8f30ecc2700124f3b8bac35d83be2d6f9354b90f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:db:d7:98:c4:f9:37:8a:8b:7c:25:06:ef:9b: d9:10:3a:e3:33:c0:f2:2f:6b:50:c9:40:30:6a:32: cb:f6:79:f6:d5:a5:23:97:fd:fc:cf:30:da:12:7d: 5f:09:b8:0d:e1:03:3e:33:84:b7:17:7b:cf:aa:8c: 2f:53:47:21:94:89:88:8a:93:0b:82:fb:e6:e2:cb: 9c:02:6c:04:5d:ac:a3:e2:53:a8:84:c5:d7:25:6d: 06:46:97:56:f5:52:0e:f1:cc:bf:e8:c3:32:5b:4c: 1e:5b:c8:7f:32:39:9b:37:df:03:55:8a:d4:1a:03: 41:37:76:26:19:65:b1:c6:f5:f5:c0:96:a2:a8:cb: 98:76:72:3c:76:99:29:ec:93:ce:e2:89:c7:0b:18: 1e:09:23:e3:1f:ea:91:55:de:66:23:e7:88:a7:9e: 8d:50:d6:4e:bc:c8:82:0f:0f:22:22:9d:1a:3c:69: 42:6c:2c:a8:5a:e5:64:76:19:87:36:25:af:74:82: 51:63:e2:c0:96:05:8e:20:db:b9:ac:72:da:49:44: 38:f0:6c:73:5f:d7:4c:ca:67:9e:7a:15:3f:f0:9e: 66:d7:15:35:12:24:5e:e7:d0:1d:13:59:fb:63:87: a1:ca:9d:93:e3:50:34:72:62:00:e8:70:be:ba:6f: 55:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:30:EC:C2:70:01:24:F3:B8:BA:C3:5D:83:BE:2D:6F:93:54:B9:0F X509v3 Authority Key Identifier: keyid:9E:55:32:00:77:69:69:44:B1:61:3C:2E:8C:9C:60:6A:1E:06:EB:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:f3:8b:e3:46:61:a0:01:c3:9e:04:da:ae:d0:31:6b:ea:66: 1f:98:89:e0:5e:fd:e0:dc:1d:9b:14:5a:8f:9d:ba:ff:6e:3d: 40:7b:92:f0:33:d2:26:23:f4:5d:a4:46:11:89:dd:07:53:f2: 4f:36:59:3a:2d:59:d0:01:56:24:74:6b:09:7d:92:e8:7d:ea: be:28:b0:c6:05:30:22:42:98:10:d4:86:42:a0:ea:00:2f:14: a4:ee:bd:94:69:b2:f7:b9:90:29:84:c0:04:98:46:fe:04:a9: 86:9e:24:58:ee:e5:3b:93:6e:69:72:0d:d5:89:11:0c:85:17: 2f:d9:8c:13:6a:4e:4e:c8:a1:fc:3a:67:e5:36:b6:ae:fa:c9: a9:66:e2:1d:d7:af:8c:95:a6:ac:5d:14:23:17:89:d4:21:17: 7f:98:e8:72:a3:32:74:d3:7f:5a:44:f3:14:31:84:85:6c:d8: 29:1e:dd:36:30:7c:e4:17:58:48:2d:eb:2f:88:7c:90:f6:c6: fd:52:3f:8e:53:d8:b1:0d:07:65:7d:ed:e4:9d:4f:88:7e:14: 2a:43:22:f0:b3:ea:50:92:f1:f0:c3:6e:3d:38:ca:16:2d:1b: e5:b5:6e:2b:91:3d:ad:3f:bc:dd:4f:94:fb:8e:70:cf:07:5c: 36:44:b9:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGyyl54YfAcH+u/WBC1j4hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNTUzMjAwNzc2OTY5NDRiMTYxM2MyZThjOWM2MDZhMWUw NmViNzkwHhcNMjUxMjIyMTYwMTE4WhcNMjUxMjIzMTYwMTE4WjAzMTEwLwYDVQQD Eyg4ZjMwZWNjMjcwMDEyNGYzYjhiYWMzNWQ4M2JlMmQ2ZjkzNTRiOTBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA59vXmMT5N4qLfCUG75vZEDrjM8Dy L2tQyUAwajLL9nn21aUjl/38zzDaEn1fCbgN4QM+M4S3F3vPqowvU0chlImIipML gvvm4sucAmwEXayj4lOohMXXJW0GRpdW9VIO8cy/6MMyW0weW8h/MjmbN98DVYrU GgNBN3YmGWWxxvX1wJaiqMuYdnI8dpkp7JPO4onHCxgeCSPjH+qRVd5mI+eIp56N UNZOvMiCDw8iIp0aPGlCbCyoWuVkdhmHNiWvdIJRY+LAlgWOINu5rHLaSUQ48Gxz X9dMymeeehU/8J5m1xU1EiRe59AdE1n7Y4ehyp2T41A0cmIA6HC+um9VQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI8w7MJwASTzuLrDXYO+LW+TVLkPMB8GA1UdIwQY MBaAFJ5VMgB3aWlEsWE8LoycYGoeBut5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmxVeUFIZHBhVVN4WVR3dWpKeGdhaDRHNjNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8yNjBiNjEtYTM0OC00ZDQ3LTkyZjYt MWUwZThiOTA5ZTM0LzEvbmxVeUFIZHBhVVN4WVR3dWpKeGdhaDRHNjNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC8yNjBiNjEtYTM0OC00ZDQ3LTkyZjYtMWUwZThiOTA5ZTM0 LzEvbmxVeUFIZHBhVVN4WVR3dWpKeGdhaDRHNjNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcvOL40Zh oAHDngTartAxa+pmH5iJ4F794NwdmxRaj526/249QHuS8DPSJiP0XaRGEYndB1Py TzZZOi1Z0AFWJHRrCX2S6H3qviiwxgUwIkKYENSGQqDqAC8UpO69lGmy97mQKYTA BJhG/gSphp4kWO7lO5NuaXIN1YkRDIUXL9mME2pOTsih/Dpn5Ta2rvrJqWbiHdev jJWmrF0UIxeJ1CEXf5jocqMydNN/WkTzFDGEhWzYKR7dNjB85BdYSC3rL4h8kPbG /VI/jlPYsQ0HZX3t5J1PiH4UKkMi8LPqUJLx8MNuPTjKFi0b5bVuK5E9rT+83U+U +45wzwdcNkS50A== -----END CERTIFICATE-----Generated at Mon Dec 22 20:27:13 2025 by rpki-client