This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft File: nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft (raw, json) Hash identifier: ET6SFo4MPoAolZ0f9+Ujee8lqnMORyQNNHQ9QtdiQTs= Subject key identifier: 0D:B7:38:DD:E5:30:14:8C:EC:AF:DD:2C:0B:6B:E0:DC:6B:E6:C1:07 Authority key identifier: 9E:6F:26:22:E6:5C:2E:E8:63:50:1D:77:21:47:5A:05:EF:53:43:FB Certificate issuer: /CN=9e6f2622e65c2ee863501d7721475a05ef5343fb Certificate serial: 019B39EB66B274B8834A93D59CD2887D09F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nm8mIuZcLuhjUB13IUdaBe9TQ_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft Manifest number: 037C Signing time: Sat 20 Dec 2025 04:01:27 +0000 Manifest this update: Sat 20 Dec 2025 04:01:27 +0000 Manifest next update: Sun 21 Dec 2025 04:01:27 +0000 Files and hashes: 1: cuJe5r6PJPS-jv29DbSoyr1BYdg.roa (hash: 2tGiauvihDEwDBBUXD4gVcgWbpgeD9AUpt2tKQwt6ew=) 2: nm8mIuZcLuhjUB13IUdaBe9TQ_s.crl (hash: FZ73GFeDpv242rtR/9n79FkkwEwvKmIJYwyc4IBlqvI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft rsync://rpki.ripe.net/repository/DEFAULT/nm8mIuZcLuhjUB13IUdaBe9TQ_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:eb:66:b2:74:b8:83:4a:93:d5:9c:d2:88:7d:09:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e6f2622e65c2ee863501d7721475a05ef5343fb Validity Not Before: Dec 20 04:01:27 2025 GMT Not After : Dec 21 04:01:27 2025 GMT Subject: CN=0db738dde530148cecafdd2c0b6be0dc6be6c107 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c6:52:8f:f2:29:b8:79:a0:d0:96:15:e8:c4: 85:18:62:fb:4e:a5:fd:64:20:ac:47:88:2c:1b:d0: 33:9e:da:4f:cc:ee:4a:88:38:8f:2a:94:23:6d:6a: b7:41:a5:f2:25:b1:b3:46:d8:01:04:f0:e9:0d:bd: cd:23:08:86:58:6e:92:9b:63:01:13:78:22:65:fb: 19:b2:fe:dc:47:30:82:bb:be:02:2e:c8:1d:ce:68: ea:f2:11:e2:b5:2b:f4:8f:66:cb:ba:82:d9:a4:b7: 34:8d:07:62:71:b2:8c:9b:76:8a:9c:7a:41:9b:8f: f6:f9:ef:eb:4a:a1:5e:64:18:25:72:05:0f:2e:93: 25:5d:0e:fe:b7:ff:9a:0b:58:82:c2:04:6d:bf:de: 4c:ca:15:19:58:8a:b3:2d:6a:5b:6e:22:5e:cc:16: d5:09:0e:57:8a:69:d1:ba:f5:56:bd:66:44:ba:3b: d3:b9:26:15:a8:5f:88:14:68:a1:57:bc:f3:b2:f5: e0:c5:1c:fc:a7:fd:6b:91:4c:67:fd:52:66:e9:52: f4:aa:f4:bb:b9:45:2b:f9:cb:5b:ec:f4:6b:54:ad: 85:b6:e8:15:f4:89:d7:91:72:3b:77:c7:4a:5e:ca: 01:42:08:a9:fc:94:56:a3:a5:fd:04:ca:24:a3:96: 22:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:B7:38:DD:E5:30:14:8C:EC:AF:DD:2C:0B:6B:E0:DC:6B:E6:C1:07 X509v3 Authority Key Identifier: keyid:9E:6F:26:22:E6:5C:2E:E8:63:50:1D:77:21:47:5A:05:EF:53:43:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nm8mIuZcLuhjUB13IUdaBe9TQ_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:ad:04:7f:c8:1d:a3:b7:56:11:dc:06:9e:28:32:32:c6:96: a7:4f:e1:8f:00:49:61:76:a0:c4:16:89:02:28:26:74:e6:dc: f4:59:5e:ba:76:a4:2e:24:98:29:5f:7a:c4:7d:4a:0c:1a:84: 97:8c:ae:61:51:29:1b:9b:5f:64:e7:a9:53:08:7a:d3:da:fb: 04:9c:a9:68:f5:f1:75:09:25:7e:99:d1:2d:a6:a7:c4:4a:cb: 83:36:b0:aa:4a:7d:03:a3:07:21:7f:5c:d9:d4:c3:31:7b:5a: 68:5f:01:6d:7d:fe:bd:14:e1:e3:4d:04:7c:26:78:4e:34:c4: 83:83:dd:22:62:8c:d3:b9:f8:77:da:de:c4:50:8b:1d:59:a3: 2d:5b:ba:cf:42:13:6f:38:b1:86:29:36:9f:9d:6e:21:d9:02: 40:5d:e8:47:7c:47:b5:ec:25:87:bc:fc:43:c0:cb:b1:cc:19: f5:c8:e7:ea:e2:e3:06:07:51:6f:86:61:0a:f5:90:d9:f2:86: 93:19:2f:71:c1:fa:f2:2c:25:cd:e4:20:e8:94:0b:d5:8a:63: d0:03:d1:04:e3:0b:3c:59:cc:5d:fc:03:88:84:ba:c8:6f:90: 36:09:b9:67:48:03:94:b0:8c:65:49:91:f3:cd:e4:23:90:6a: d9:de:91:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs562aydLiDSpPVnNKIfQnyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNmYyNjIyZTY1YzJlZTg2MzUwMWQ3NzIxNDc1YTA1ZWY1 MzQzZmIwHhcNMjUxMjIwMDQwMTI3WhcNMjUxMjIxMDQwMTI3WjAzMTEwLwYDVQQD EygwZGI3MzhkZGU1MzAxNDhjZWNhZmRkMmMwYjZiZTBkYzZiZTZjMTA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8ZSj/IpuHmg0JYV6MSFGGL7TqX9 ZCCsR4gsG9AzntpPzO5KiDiPKpQjbWq3QaXyJbGzRtgBBPDpDb3NIwiGWG6Sm2MB E3giZfsZsv7cRzCCu74CLsgdzmjq8hHitSv0j2bLuoLZpLc0jQdicbKMm3aKnHpB m4/2+e/rSqFeZBglcgUPLpMlXQ7+t/+aC1iCwgRtv95MyhUZWIqzLWpbbiJezBbV CQ5XimnRuvVWvWZEujvTuSYVqF+IFGihV7zzsvXgxRz8p/1rkUxn/VJm6VL0qvS7 uUUr+ctb7PRrVK2FtugV9InXkXI7d8dKXsoBQgip/JRWo6X9BMoko5YigQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA23ON3lMBSM7K/dLAtr4Nxr5sEHMB8GA1UdIwQY MBaAFJ5vJiLmXC7oY1AddyFHWgXvU0P7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbm04bUl1WmNMdWhqVUIxM0lVZGFCZTlUUV9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS81OTNkZDUtYjkwNy00ZGU4LTgwY2Qt YjFkYjcwMDcxZGRlLzEvbm04bUl1WmNMdWhqVUIxM0lVZGFCZTlUUV9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS81OTNkZDUtYjkwNy00ZGU4LTgwY2QtYjFkYjcwMDcxZGRl LzEvbm04bUl1WmNMdWhqVUIxM0lVZGFCZTlUUV9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEK0Ef8gd o7dWEdwGnigyMsaWp0/hjwBJYXagxBaJAigmdObc9FleunakLiSYKV96xH1KDBqE l4yuYVEpG5tfZOepUwh609r7BJypaPXxdQklfpnRLaanxErLgzawqkp9A6MHIX9c 2dTDMXtaaF8BbX3+vRTh400EfCZ4TjTEg4PdImKM07n4d9rexFCLHVmjLVu6z0IT bzixhik2n51uIdkCQF3oR3xHtewlh7z8Q8DLscwZ9cjn6uLjBgdRb4ZhCvWQ2fKG kxkvccH68iwlzeQg6JQL1Ypj0APRBOMLPFnMXfwDiIS6yG+QNgm5Z0gDlLCMZUmR 883kI5Bq2d6RiQ== -----END CERTIFICATE-----Generated at Sat Dec 20 05:30:30 2025 by rpki-client