This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft File: nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft (raw, json) Hash identifier: hDzPPv3Lub4q8n68UWOb0SRu6RNHlCGQsw8YsixiJ/Q= Subject key identifier: 16:B8:FD:52:BF:E9:87:08:04:AB:1F:E9:F0:C5:77:E6:D2:3E:6C:A4 Authority key identifier: 9E:6F:26:22:E6:5C:2E:E8:63:50:1D:77:21:47:5A:05:EF:53:43:FB Certificate issuer: /CN=9e6f2622e65c2ee863501d7721475a05ef5343fb Certificate serial: 019B24ACD642AF62E6EFB9C728B10EB4CF2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nm8mIuZcLuhjUB13IUdaBe9TQ_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft Manifest number: 0371 Signing time: Tue 16 Dec 2025 01:01:05 +0000 Manifest this update: Tue 16 Dec 2025 01:01:05 +0000 Manifest next update: Wed 17 Dec 2025 01:01:05 +0000 Files and hashes: 1: cuJe5r6PJPS-jv29DbSoyr1BYdg.roa (hash: 2tGiauvihDEwDBBUXD4gVcgWbpgeD9AUpt2tKQwt6ew=) 2: nm8mIuZcLuhjUB13IUdaBe9TQ_s.crl (hash: K0tq6L6vdllOCTc3DjEcq6OICrygZrR9QUcwuG27//w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft rsync://rpki.ripe.net/repository/DEFAULT/nm8mIuZcLuhjUB13IUdaBe9TQ_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 01:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:ac:d6:42:af:62:e6:ef:b9:c7:28:b1:0e:b4:cf:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e6f2622e65c2ee863501d7721475a05ef5343fb Validity Not Before: Dec 16 01:01:05 2025 GMT Not After : Dec 17 01:01:05 2025 GMT Subject: CN=16b8fd52bfe9870804ab1fe9f0c577e6d23e6ca4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:05:63:48:4d:4c:2a:42:a9:97:61:82:3d:57: 88:02:d5:04:7a:83:43:33:a8:3c:51:e4:3b:6f:11: cd:42:7d:a3:b9:52:d4:c7:94:20:ab:8d:74:d2:db: d6:8b:53:71:58:46:8c:2f:6f:77:5c:0d:48:e7:a2: 77:c9:9d:d1:d0:3e:25:97:b6:8c:04:d0:11:84:9d: bf:f3:fa:00:4b:6c:c6:44:36:18:6f:a6:85:93:0b: 93:96:49:02:19:7b:f7:67:14:ae:97:07:2f:cd:c6: c0:87:fc:50:47:7c:ec:01:18:be:ea:6a:df:0f:2c: b2:72:8a:00:b8:af:22:98:bd:37:db:ef:9e:c0:5d: f5:1f:b1:56:e9:26:15:ec:5d:c4:cf:25:b1:c2:15: d4:3a:f3:19:c7:ef:bb:9a:65:58:0d:c0:60:61:7d: e2:9a:9f:98:69:65:07:a5:67:9b:31:a8:5e:f1:1d: 48:a4:d4:0d:85:eb:d5:3b:2d:57:2c:6d:99:ec:97: 2c:ac:8a:ff:4e:b5:f0:5e:48:a3:87:db:14:51:98: 75:13:74:4f:7f:d8:88:1d:72:e2:af:6b:4e:ff:96: cd:42:17:bf:58:6c:49:7c:af:58:00:88:60:0e:43: f0:ab:61:44:06:08:e3:02:4c:8d:d2:c6:f6:7b:e4: bf:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:B8:FD:52:BF:E9:87:08:04:AB:1F:E9:F0:C5:77:E6:D2:3E:6C:A4 X509v3 Authority Key Identifier: keyid:9E:6F:26:22:E6:5C:2E:E8:63:50:1D:77:21:47:5A:05:EF:53:43:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nm8mIuZcLuhjUB13IUdaBe9TQ_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:4e:46:45:09:41:f9:12:0f:40:67:1a:1a:0a:26:62:c0:92: 09:7a:61:93:65:71:0a:28:f8:36:82:91:ab:1b:40:b3:3c:bc: f3:5e:46:80:62:c9:00:6e:9b:c2:85:b3:50:44:e1:02:1c:f0: 09:65:4a:21:66:47:84:6a:eb:76:7f:6c:88:71:1b:9f:de:2e: 35:1e:a3:43:bf:cd:19:e1:56:a7:93:69:45:76:c1:8d:87:37: b1:e0:14:22:d9:41:5e:52:75:e1:d5:65:eb:1d:0e:bc:9e:d8: 14:67:d8:dc:0c:86:0e:fc:94:f6:92:7a:e8:a7:fa:23:38:a8: ab:f1:0e:84:fd:fe:b5:6e:03:a5:d1:aa:b4:6e:d0:51:9b:ff: 37:3c:35:f1:b2:07:ea:06:00:7d:34:96:51:90:5e:57:8a:1d: 62:6a:c2:3f:b1:d1:46:38:05:4e:f0:91:e1:a9:59:52:49:28: b2:40:aa:0c:9d:2d:ac:97:d8:fd:94:97:2c:c6:e1:3e:17:6a: 54:11:5f:38:f9:d6:c1:96:28:fe:1d:f9:f2:fd:5e:fe:c4:1b: a0:ba:75:e6:4f:da:fa:c6:78:d8:4b:b1:99:26:65:2f:6e:6e: df:29:fb:2e:11:59:74:00:de:cd:f3:05:ca:79:3d:46:01:80: 80:20:5c:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskrNZCr2Lm77nHKLEOtM8qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNmYyNjIyZTY1YzJlZTg2MzUwMWQ3NzIxNDc1YTA1ZWY1 MzQzZmIwHhcNMjUxMjE2MDEwMTA1WhcNMjUxMjE3MDEwMTA1WjAzMTEwLwYDVQQD EygxNmI4ZmQ1MmJmZTk4NzA4MDRhYjFmZTlmMGM1NzdlNmQyM2U2Y2E0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3gVjSE1MKkKpl2GCPVeIAtUEeoND M6g8UeQ7bxHNQn2juVLUx5Qgq4100tvWi1NxWEaML293XA1I56J3yZ3R0D4ll7aM BNARhJ2/8/oAS2zGRDYYb6aFkwuTlkkCGXv3ZxSulwcvzcbAh/xQR3zsARi+6mrf DyyycooAuK8imL032++ewF31H7FW6SYV7F3EzyWxwhXUOvMZx++7mmVYDcBgYX3i mp+YaWUHpWebMahe8R1IpNQNhevVOy1XLG2Z7JcsrIr/TrXwXkijh9sUUZh1E3RP f9iIHXLir2tO/5bNQhe/WGxJfK9YAIhgDkPwq2FEBgjjAkyN0sb2e+S/UQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBa4/VK/6YcIBKsf6fDFd+bSPmykMB8GA1UdIwQY MBaAFJ5vJiLmXC7oY1AddyFHWgXvU0P7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbm04bUl1WmNMdWhqVUIxM0lVZGFCZTlUUV9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS81OTNkZDUtYjkwNy00ZGU4LTgwY2Qt YjFkYjcwMDcxZGRlLzEvbm04bUl1WmNMdWhqVUIxM0lVZGFCZTlUUV9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS81OTNkZDUtYjkwNy00ZGU4LTgwY2QtYjFkYjcwMDcxZGRl LzEvbm04bUl1WmNMdWhqVUIxM0lVZGFCZTlUUV9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArk5GRQlB +RIPQGcaGgomYsCSCXphk2VxCij4NoKRqxtAszy8815GgGLJAG6bwoWzUEThAhzw CWVKIWZHhGrrdn9siHEbn94uNR6jQ7/NGeFWp5NpRXbBjYc3seAUItlBXlJ14dVl 6x0OvJ7YFGfY3AyGDvyU9pJ66Kf6Izioq/EOhP3+tW4DpdGqtG7QUZv/Nzw18bIH 6gYAfTSWUZBeV4odYmrCP7HRRjgFTvCR4alZUkkoskCqDJ0trJfY/ZSXLMbhPhdq VBFfOPnWwZYo/h358v1e/sQboLp15k/a+sZ42EuxmSZlL25u3yn7LhFZdADezfMF ynk9RgGAgCBcDA== -----END CERTIFICATE-----Generated at Tue Dec 16 11:15:28 2025 by rpki-client