This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/bce397-372d-4d2f-ad0a-a48ebd301671/1/nElQd51ZdVHXnEPmFqUJB96M33c.mft File: nElQd51ZdVHXnEPmFqUJB96M33c.mft (raw, json) Hash identifier: acV9yw4uuZX59fexwHEeFJ4LLmYBoSHD8n4jt7+yPKY= Subject key identifier: CB:1A:BA:D4:F4:4E:45:53:DD:DE:45:51:17:5D:16:F0:25:39:20:5F Authority key identifier: 9C:49:50:77:9D:59:75:51:D7:9C:43:E6:16:A5:09:07:DE:8C:DF:77 Certificate issuer: /CN=9c4950779d597551d79c43e616a50907de8cdf77 Certificate serial: 019B206227A22910B985CBB66072CC833B51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nElQd51ZdVHXnEPmFqUJB96M33c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/bce397-372d-4d2f-ad0a-a48ebd301671/1/nElQd51ZdVHXnEPmFqUJB96M33c.mft Manifest number: 177A Signing time: Mon 15 Dec 2025 05:01:02 +0000 Manifest this update: Mon 15 Dec 2025 05:01:02 +0000 Manifest next update: Tue 16 Dec 2025 05:01:02 +0000 Files and hashes: 1: 2R1UFCZ6LPm3SJQHM7rJf5ia5HE.roa (hash: 9iVp3ax6SoInGkRmccCgwLuza4oa5BeDphs/tDw0ZLo=) 2: nElQd51ZdVHXnEPmFqUJB96M33c.crl (hash: 3AxcYKtM5eZORCwDMAqSTyHvNehmMogQxOk6HO/GCsE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/bce397-372d-4d2f-ad0a-a48ebd301671/1/nElQd51ZdVHXnEPmFqUJB96M33c.crl rsync://rpki.ripe.net/repository/DEFAULT/53/bce397-372d-4d2f-ad0a-a48ebd301671/1/nElQd51ZdVHXnEPmFqUJB96M33c.mft rsync://rpki.ripe.net/repository/DEFAULT/nElQd51ZdVHXnEPmFqUJB96M33c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 05:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:62:27:a2:29:10:b9:85:cb:b6:60:72:cc:83:3b:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c4950779d597551d79c43e616a50907de8cdf77 Validity Not Before: Dec 15 05:01:02 2025 GMT Not After : Dec 16 05:01:02 2025 GMT Subject: CN=cb1abad4f44e4553ddde4551175d16f02539205f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:17:2e:a9:b9:d9:bb:e5:ce:c1:88:96:34:1b: 3e:5d:58:73:f1:04:6d:29:1e:c9:79:b6:58:67:6a: ad:b0:67:ba:d8:0f:af:35:08:cc:56:41:4e:3b:97: 0e:23:89:0c:ec:9d:ec:55:51:aa:e2:73:3a:63:4a: 28:82:e8:a6:4e:2c:15:e8:20:36:34:79:f5:d7:8b: 05:55:64:7a:58:60:c0:de:45:a8:b6:83:c4:b1:4f: b7:30:ce:c2:6e:d2:b0:a3:fb:21:bc:32:ca:b6:12: f9:5e:73:81:af:bc:51:e3:d9:46:9f:1e:44:53:d4: a9:5e:33:30:23:dd:20:ea:11:00:58:16:dd:5f:71: a9:18:17:0d:31:8e:10:d5:9e:10:24:77:53:9a:6c: 3d:fd:af:b7:2d:92:a7:e0:70:2b:7c:c9:dd:be:b6: 04:ea:76:fe:1a:e1:df:6b:7b:fa:eb:44:88:cc:a6: b9:e2:3f:46:ec:0e:52:07:d2:c5:be:43:65:6c:66: cb:72:04:43:f2:b1:c5:34:75:b6:cf:e3:2d:2f:0e: 70:00:37:de:11:a7:a0:a9:73:b7:a6:28:c5:e7:03: 53:fe:e8:58:5b:27:ed:e2:a6:8e:42:d7:c1:fd:d9: 5e:cc:03:b7:1e:ac:f3:88:75:13:6e:72:44:a3:54: b7:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:1A:BA:D4:F4:4E:45:53:DD:DE:45:51:17:5D:16:F0:25:39:20:5F X509v3 Authority Key Identifier: keyid:9C:49:50:77:9D:59:75:51:D7:9C:43:E6:16:A5:09:07:DE:8C:DF:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nElQd51ZdVHXnEPmFqUJB96M33c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/bce397-372d-4d2f-ad0a-a48ebd301671/1/nElQd51ZdVHXnEPmFqUJB96M33c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/bce397-372d-4d2f-ad0a-a48ebd301671/1/nElQd51ZdVHXnEPmFqUJB96M33c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:41:2b:40:32:6d:44:c6:23:e5:41:37:31:58:3d:5b:52:66: a4:02:68:3e:f8:02:70:00:5e:c0:40:af:e2:cf:9d:39:95:a8: ce:1a:7b:57:94:d7:49:02:c3:a4:1b:59:c7:5e:2d:66:d1:75: 47:b3:27:27:b4:43:13:0c:6f:5a:bd:fc:94:9e:b0:53:d6:11: 29:e1:01:69:0e:05:7e:ed:d3:4f:65:11:41:d0:b8:6a:c4:42: 51:c1:c5:d6:f2:b0:1f:80:bf:4b:f1:d5:76:ce:da:27:19:98: 9a:7e:c8:04:eb:42:3f:59:d3:42:4b:71:fc:b1:24:42:1b:ad: 24:67:78:e5:be:22:76:ef:be:9e:a5:d0:65:68:b1:88:f2:51: 36:3a:73:b2:f5:d9:7d:40:7b:48:a4:5e:4b:01:7b:f2:8e:d3: c4:22:9a:24:79:2e:25:ef:4f:62:b7:ce:ec:00:20:c8:ed:09: 81:e8:48:15:84:75:3d:59:1d:53:1c:3c:d6:41:67:0b:e9:83: ad:4d:a9:d8:22:53:42:ae:42:bb:20:26:c1:98:8b:ed:f9:be: cb:15:69:1e:86:31:d1:c8:34:c6:4d:d9:1a:a7:3a:d7:b0:61: 4f:fc:bd:03:8a:9a:c8:f6:44:83:0e:30:69:5f:39:2d:6a:ba: e9:6e:8b:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsgYieiKRC5hcu2YHLMgztRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljNDk1MDc3OWQ1OTc1NTFkNzljNDNlNjE2YTUwOTA3ZGU4 Y2RmNzcwHhcNMjUxMjE1MDUwMTAyWhcNMjUxMjE2MDUwMTAyWjAzMTEwLwYDVQQD EyhjYjFhYmFkNGY0NGU0NTUzZGRkZTQ1NTExNzVkMTZmMDI1MzkyMDVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhcuqbnZu+XOwYiWNBs+XVhz8QRt KR7JebZYZ2qtsGe62A+vNQjMVkFOO5cOI4kM7J3sVVGq4nM6Y0ooguimTiwV6CA2 NHn114sFVWR6WGDA3kWotoPEsU+3MM7CbtKwo/shvDLKthL5XnOBr7xR49lGnx5E U9SpXjMwI90g6hEAWBbdX3GpGBcNMY4Q1Z4QJHdTmmw9/a+3LZKn4HArfMndvrYE 6nb+GuHfa3v660SIzKa54j9G7A5SB9LFvkNlbGbLcgRD8rHFNHW2z+MtLw5wADfe EaegqXO3pijF5wNT/uhYWyft4qaOQtfB/dlezAO3HqzziHUTbnJEo1S33QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMsautT0TkVT3d5FURddFvAlOSBfMB8GA1UdIwQY MBaAFJxJUHedWXVR15xD5halCQfejN93MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkVsUWQ1MVpkVkhYbkVQbUZxVUpCOTZNMzNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9iY2UzOTctMzcyZC00ZDJmLWFkMGEt YTQ4ZWJkMzAxNjcxLzEvbkVsUWQ1MVpkVkhYbkVQbUZxVUpCOTZNMzNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My9iY2UzOTctMzcyZC00ZDJmLWFkMGEtYTQ4ZWJkMzAxNjcx LzEvbkVsUWQ1MVpkVkhYbkVQbUZxVUpCOTZNMzNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvEErQDJt RMYj5UE3MVg9W1JmpAJoPvgCcABewECv4s+dOZWozhp7V5TXSQLDpBtZx14tZtF1 R7MnJ7RDEwxvWr38lJ6wU9YRKeEBaQ4Ffu3TT2URQdC4asRCUcHF1vKwH4C/S/HV ds7aJxmYmn7IBOtCP1nTQktx/LEkQhutJGd45b4idu++nqXQZWixiPJRNjpzsvXZ fUB7SKReSwF78o7TxCKaJHkuJe9PYrfO7AAgyO0JgehIFYR1PVkdUxw81kFnC+mD rU2p2CJTQq5CuyAmwZiL7fm+yxVpHoYx0cg0xk3ZGqc617BhT/y9A4qayPZEgw4w aV85LWq66W6LTQ== -----END CERTIFICATE-----Generated at Mon Dec 15 13:18:57 2025 by rpki-client