This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft File: nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft (raw, json) Hash identifier: C4JTe4UdCKSRyRkIrjDzHgw6FaHYIp5D9/ua+H7j4LQ= Subject key identifier: FF:0E:2A:EA:C5:C7:61:EA:E2:87:A6:5D:F1:F6:42:92:A0:01:C0:22 Authority key identifier: 9E:B3:14:3A:2E:73:F2:09:E6:9D:97:C4:B8:F7:8C:DA:5F:43:70:05 Certificate issuer: /CN=9eb3143a2e73f209e69d97c4b8f78cda5f437005 Certificate serial: 019B1B3BEE91C630CEF3B22D90B9F6839209 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrMUOi5z8gnmnZfEuPeM2l9DcAU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft Manifest number: 07C8 Signing time: Sun 14 Dec 2025 05:01:11 +0000 Manifest this update: Sun 14 Dec 2025 05:01:11 +0000 Manifest next update: Mon 15 Dec 2025 05:01:11 +0000 Files and hashes: 1: I0hxWmi1uukEvqwKPfe9SQ5b_IA.roa (hash: J5yFqxN1A9HSh1h4LfTcY/5BgexCgptY4Dax8tjW9X4=) 2: nrMUOi5z8gnmnZfEuPeM2l9DcAU.crl (hash: IlY3iIURyUssGtnJ96hSYA5xySreNEoP+TJPpD3sicM=) 3: wu74ellxTR1URudwGeXbUef_Mc4.roa (hash: moXgOfjz6lSXZnPmCRWJ8GgkWq4qK3fy/l+GxzPvtEA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft rsync://rpki.ripe.net/repository/DEFAULT/nrMUOi5z8gnmnZfEuPeM2l9DcAU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:3b:ee:91:c6:30:ce:f3:b2:2d:90:b9:f6:83:92:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9eb3143a2e73f209e69d97c4b8f78cda5f437005 Validity Not Before: Dec 14 05:01:11 2025 GMT Not After : Dec 15 05:01:11 2025 GMT Subject: CN=ff0e2aeac5c761eae287a65df1f64292a001c022 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e0:9a:ca:7a:e5:5e:2f:5e:d9:27:c5:7f:a0: e1:29:74:70:7e:89:0f:28:ec:c2:c3:f3:ee:6b:26: 87:bc:0b:45:a7:ce:84:33:5d:6e:8d:13:3b:b5:e7: de:2f:08:33:39:c3:da:1a:ad:b0:69:7b:de:3c:90: 56:7d:2c:22:9c:28:96:6b:f6:7b:b2:07:11:8c:17: b9:65:6a:25:9c:7f:4b:3d:f3:ed:21:21:9a:63:3b: 61:f3:a1:f8:ab:1a:12:39:af:dd:b9:ac:57:09:e4: 0c:e7:83:7c:fa:d4:60:de:31:ea:65:4f:be:dd:a2: 9e:f7:6d:34:35:e6:f8:69:6f:25:60:00:22:71:9c: ab:94:42:8c:37:35:c6:de:df:3a:ee:5d:5e:f5:4f: 1d:d7:b9:1c:b7:50:77:02:bd:46:4b:a2:04:7f:ab: 12:6e:4b:52:52:9a:12:cc:f1:fa:a4:17:fb:e9:fd: fc:53:b3:dc:f6:09:a3:92:0e:19:e6:15:18:db:43: 16:6d:5a:02:ce:e9:0b:55:92:b7:32:47:0a:79:73: 82:83:84:2e:db:71:19:80:8a:8e:28:10:a0:eb:03: c4:53:57:cc:4a:21:e2:7e:47:3e:57:3d:5a:e9:55: 12:7b:48:e4:10:da:fc:53:71:00:ce:64:bd:8b:65: fe:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:0E:2A:EA:C5:C7:61:EA:E2:87:A6:5D:F1:F6:42:92:A0:01:C0:22 X509v3 Authority Key Identifier: keyid:9E:B3:14:3A:2E:73:F2:09:E6:9D:97:C4:B8:F7:8C:DA:5F:43:70:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrMUOi5z8gnmnZfEuPeM2l9DcAU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:bf:77:80:f5:6b:a8:d1:a1:0a:ff:ff:be:45:09:f6:17:0f: 30:d1:91:bb:52:71:a6:38:d3:7b:70:17:bc:69:a5:d2:01:9c: 08:37:15:70:fa:f3:51:ec:66:bc:8b:92:b0:25:c9:ef:3a:3a: 21:70:26:68:57:c1:c4:1d:c1:fd:42:8d:35:5d:06:89:70:91: 00:88:15:fa:1f:ec:99:1f:ba:58:d3:cb:af:8e:db:12:db:3c: 10:a8:fc:1a:68:96:d8:b9:15:60:ac:e0:b5:d9:08:7b:14:65: fb:cd:f7:56:81:4d:9d:2e:df:68:5b:17:5c:2c:54:66:9f:03: 15:41:32:a7:44:f0:a6:ce:09:c0:7a:ec:d4:38:a4:cc:6c:fb: 0b:88:c0:62:7b:6b:a6:27:f3:b6:5f:54:83:fb:cd:41:42:57: fc:bb:7c:39:c4:a1:d8:93:29:2e:6a:94:cb:aa:54:ee:19:1d: f2:3b:36:b3:b0:cd:a9:63:fb:7a:54:40:5b:e6:1f:be:6a:ed: b4:b9:a1:9e:d7:c9:18:2a:08:99:57:6f:32:de:39:3e:d6:e3: 1d:d1:df:e4:ad:db:45:fa:63:e0:e8:03:cb:04:3a:20:29:fc: ba:ed:b6:8c:ee:01:33:b1:a9:03:18:38:92:bd:12:69:aa:c7: 48:3f:73:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsbO+6RxjDO87ItkLn2g5IJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllYjMxNDNhMmU3M2YyMDllNjlkOTdjNGI4Zjc4Y2RhNWY0 MzcwMDUwHhcNMjUxMjE0MDUwMTExWhcNMjUxMjE1MDUwMTExWjAzMTEwLwYDVQQD EyhmZjBlMmFlYWM1Yzc2MWVhZTI4N2E2NWRmMWY2NDI5MmEwMDFjMDIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+CaynrlXi9e2SfFf6DhKXRwfokP KOzCw/PuayaHvAtFp86EM11ujRM7tefeLwgzOcPaGq2waXvePJBWfSwinCiWa/Z7 sgcRjBe5ZWolnH9LPfPtISGaYzth86H4qxoSOa/duaxXCeQM54N8+tRg3jHqZU++ 3aKe9200Neb4aW8lYAAicZyrlEKMNzXG3t867l1e9U8d17kct1B3Ar1GS6IEf6sS bktSUpoSzPH6pBf76f38U7Pc9gmjkg4Z5hUY20MWbVoCzukLVZK3MkcKeXOCg4Qu 23EZgIqOKBCg6wPEU1fMSiHifkc+Vz1a6VUSe0jkENr8U3EAzmS9i2X+hwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP8OKurFx2Hq4oemXfH2QpKgAcAiMB8GA1UdIwQY MBaAFJ6zFDouc/IJ5p2XxLj3jNpfQ3AFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnJNVU9pNXo4Z25tblpmRXVQZU0ybDlEY0FVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85ZmFmMjQtMDVlMS00ZGI5LTlhYWYt NTAxNjE4NDExYzc2LzEvbnJNVU9pNXo4Z25tblpmRXVQZU0ybDlEY0FVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi85ZmFmMjQtMDVlMS00ZGI5LTlhYWYtNTAxNjE4NDExYzc2 LzEvbnJNVU9pNXo4Z25tblpmRXVQZU0ybDlEY0FVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM793gPVr qNGhCv//vkUJ9hcPMNGRu1JxpjjTe3AXvGml0gGcCDcVcPrzUexmvIuSsCXJ7zo6 IXAmaFfBxB3B/UKNNV0GiXCRAIgV+h/smR+6WNPLr47bEts8EKj8GmiW2LkVYKzg tdkIexRl+833VoFNnS7faFsXXCxUZp8DFUEyp0Twps4JwHrs1DikzGz7C4jAYntr pifztl9Ug/vNQUJX/Lt8OcSh2JMpLmqUy6pU7hkd8js2s7DNqWP7elRAW+Yfvmrt tLmhntfJGCoImVdvMt45PtbjHdHf5K3bRfpj4OgDywQ6ICn8uu22jO4BM7GpAxg4 kr0SaarHSD9z1w== -----END CERTIFICATE-----Generated at Sun Dec 14 15:05:51 2025 by rpki-client