This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.mft File: nAMai2oolAx5NrpueCuUoJYr-yc.mft (raw, json) Hash identifier: m+HBW9FnDnWLS4oqdCuc9Kt8ISn3M1556tVlgMDkDrw= Subject key identifier: 5E:4F:76:B6:FF:56:02:07:D5:B3:EF:B2:54:E4:B4:97:F2:F0:B4:FB Authority key identifier: 9C:03:1A:8B:6A:28:94:0C:79:36:BA:6E:78:2B:94:A0:96:2B:FB:27 Certificate issuer: /CN=9c031a8b6a28940c7936ba6e782b94a0962bfb27 Certificate serial: 019B10136EEB790C6BDD978486EFEA5BD8BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nAMai2oolAx5NrpueCuUoJYr-yc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.mft Manifest number: 0500 Signing time: Fri 12 Dec 2025 01:01:07 +0000 Manifest this update: Fri 12 Dec 2025 01:01:07 +0000 Manifest next update: Sat 13 Dec 2025 01:01:07 +0000 Files and hashes: 1: nAMai2oolAx5NrpueCuUoJYr-yc.crl (hash: BLWv6cYpOdTrEDAUxwWbqi7GRH+zyP9WiDT9zU1C7yk=) 2: sazfzVz6q9bIns0N5tJ_KIxOhyU.roa (hash: 7Dx7RnLHW4HsXUHgAbio+tOs+19yMbUTjmWX8tX1e1E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.mft rsync://rpki.ripe.net/repository/DEFAULT/nAMai2oolAx5NrpueCuUoJYr-yc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:13:6e:eb:79:0c:6b:dd:97:84:86:ef:ea:5b:d8:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c031a8b6a28940c7936ba6e782b94a0962bfb27 Validity Not Before: Dec 12 01:01:07 2025 GMT Not After : Dec 13 01:01:07 2025 GMT Subject: CN=5e4f76b6ff560207d5b3efb254e4b497f2f0b4fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:fb:d9:b2:ae:bd:e6:b3:f2:fd:37:2e:1a:b2: a7:77:90:ff:f1:6b:91:4c:ae:40:f1:42:dc:da:22: 7b:3f:5a:0f:44:81:bf:f7:b2:a6:b4:a5:93:bb:34: d5:9c:6b:77:7d:27:6b:a9:f0:78:ae:d8:65:5b:58: 87:d0:07:12:a3:4e:ad:f9:87:0b:46:35:4d:2c:3f: ee:2c:dd:2c:4e:6a:16:21:6d:13:64:00:50:0f:04: 39:60:b8:2d:17:84:e0:49:a6:4d:55:6f:89:f1:7e: e6:3d:d2:99:72:9c:61:88:30:c8:07:a3:70:c7:70: e1:e7:16:5d:aa:cb:4d:ed:e1:6e:6e:c5:58:08:5a: be:bc:b0:9e:fd:7f:41:ae:6f:00:1d:f4:b6:53:3f: 84:06:48:e2:5a:01:8e:f7:1b:e9:ce:55:88:cb:70: 95:fa:a9:49:06:51:78:92:bb:7b:da:54:8d:f0:63: 38:45:bc:3a:4e:88:9c:39:8a:5f:d1:71:89:ec:b8: 4a:b4:a9:29:1a:14:ad:20:69:cf:5e:be:85:bf:3b: 97:f6:ef:bd:4c:6c:59:ed:76:f5:88:68:84:a3:18: 95:dc:10:42:d3:13:81:a9:ff:7b:04:59:0d:ac:bd: 92:6d:ba:6f:67:56:a6:dd:a3:f6:84:f4:ba:29:34: e3:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:4F:76:B6:FF:56:02:07:D5:B3:EF:B2:54:E4:B4:97:F2:F0:B4:FB X509v3 Authority Key Identifier: keyid:9C:03:1A:8B:6A:28:94:0C:79:36:BA:6E:78:2B:94:A0:96:2B:FB:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAMai2oolAx5NrpueCuUoJYr-yc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/3433fe-6408-468d-81e4-f03eb8740c3e/1/nAMai2oolAx5NrpueCuUoJYr-yc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:ad:e4:97:d6:dc:30:68:66:bb:c6:93:ec:a2:5d:e8:83:25: ff:82:e1:29:1e:bd:a9:d1:f0:79:93:3a:f2:54:50:8d:a9:2d: de:bc:30:d5:82:a2:f2:a7:55:b6:30:f1:e2:45:d2:cd:b2:17: fc:e1:1a:5b:4b:fb:a3:c7:94:e1:a8:14:d1:d9:e8:c9:06:c0: cf:c4:eb:5b:43:2d:cb:4f:f5:de:39:8b:df:f8:d3:61:c3:17: 41:c4:91:73:15:b2:a7:e3:9c:56:69:e3:a8:7c:d5:5c:3a:09: 41:34:d5:93:b8:99:58:b0:ce:39:0f:67:a2:33:98:ec:37:9c: ef:0a:7c:e2:91:c2:21:f1:de:d0:ee:6a:3c:34:1b:fc:1c:f6: 91:4c:fe:16:af:0d:04:c1:f8:0f:65:18:fa:1d:a4:ea:ef:69: e9:81:92:7c:15:4a:dd:31:db:f1:3c:27:db:99:fe:d7:1a:98: 61:8b:9c:5b:be:97:63:04:a6:0b:d2:28:bc:fa:83:db:f7:e7: 15:a9:47:5b:29:6e:18:f8:fd:ee:7f:f6:e3:77:c6:e9:40:a5: 0a:dd:3c:55:62:f1:8f:7f:c6:9d:a7:39:8d:63:52:d0:ee:fd: 5d:d1:20:a6:46:fc:39:94:ff:c3:6c:57:b0:6b:01:5e:02:5d: b8:03:6e:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQE27reQxr3ZeEhu/qW9i6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljMDMxYThiNmEyODk0MGM3OTM2YmE2ZTc4MmI5NGEwOTYy YmZiMjcwHhcNMjUxMjEyMDEwMTA3WhcNMjUxMjEzMDEwMTA3WjAzMTEwLwYDVQQD Eyg1ZTRmNzZiNmZmNTYwMjA3ZDViM2VmYjI1NGU0YjQ5N2YyZjBiNGZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvvZsq695rPy/TcuGrKnd5D/8WuR TK5A8ULc2iJ7P1oPRIG/97KmtKWTuzTVnGt3fSdrqfB4rthlW1iH0AcSo06t+YcL RjVNLD/uLN0sTmoWIW0TZABQDwQ5YLgtF4TgSaZNVW+J8X7mPdKZcpxhiDDIB6Nw x3Dh5xZdqstN7eFubsVYCFq+vLCe/X9Brm8AHfS2Uz+EBkjiWgGO9xvpzlWIy3CV +qlJBlF4krt72lSN8GM4Rbw6ToicOYpf0XGJ7LhKtKkpGhStIGnPXr6FvzuX9u+9 TGxZ7Xb1iGiEoxiV3BBC0xOBqf97BFkNrL2SbbpvZ1am3aP2hPS6KTTjqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF5Pdrb/VgIH1bPvslTktJfy8LT7MB8GA1UdIwQY MBaAFJwDGotqKJQMeTa6bngrlKCWK/snMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkFNYWkyb29sQXg1TnJwdWVDdVVvSllyLXljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8zNDMzZmUtNjQwOC00NjhkLTgxZTQt ZjAzZWI4NzQwYzNlLzEvbkFNYWkyb29sQXg1TnJwdWVDdVVvSllyLXljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy8zNDMzZmUtNjQwOC00NjhkLTgxZTQtZjAzZWI4NzQwYzNl LzEvbkFNYWkyb29sQXg1TnJwdWVDdVVvSllyLXljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALq3kl9bc MGhmu8aT7KJd6IMl/4LhKR69qdHweZM68lRQjakt3rww1YKi8qdVtjDx4kXSzbIX /OEaW0v7o8eU4agU0dnoyQbAz8TrW0Mty0/13jmL3/jTYcMXQcSRcxWyp+OcVmnj qHzVXDoJQTTVk7iZWLDOOQ9nojOY7Dec7wp84pHCIfHe0O5qPDQb/Bz2kUz+Fq8N BMH4D2UY+h2k6u9p6YGSfBVK3THb8Twn25n+1xqYYYucW76XYwSmC9IovPqD2/fn FalHWyluGPj97n/243fG6UClCt08VWLxj3/Gnac5jWNS0O79XdEgpkb8OZT/w2xX sGsBXgJduANuTQ== -----END CERTIFICATE-----Generated at Fri Dec 12 08:00:36 2025 by rpki-client