This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft File: nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft (raw, json) Hash identifier: aCyAxb9mIhx0wcDpGIhMcQGOXULJMkXCfpA7SSCXboA= Subject key identifier: F7:28:85:B2:00:B8:9C:E6:38:D8:E7:C6:CC:C3:29:E7:04:95:62:A4 Authority key identifier: 9E:6F:26:22:E6:5C:2E:E8:63:50:1D:77:21:47:5A:05:EF:53:43:FB Certificate issuer: /CN=9e6f2622e65c2ee863501d7721475a05ef5343fb Certificate serial: 019B3420491DBA6822F6C28FA202979D6AE1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nm8mIuZcLuhjUB13IUdaBe9TQ_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft Manifest number: 0379 Signing time: Fri 19 Dec 2025 01:01:29 +0000 Manifest this update: Fri 19 Dec 2025 01:01:29 +0000 Manifest next update: Sat 20 Dec 2025 01:01:29 +0000 Files and hashes: 1: cuJe5r6PJPS-jv29DbSoyr1BYdg.roa (hash: 2tGiauvihDEwDBBUXD4gVcgWbpgeD9AUpt2tKQwt6ew=) 2: nm8mIuZcLuhjUB13IUdaBe9TQ_s.crl (hash: R0baK92VMTqFSIXsKHOqDC3ZPC2N3+SRowh7C8Qp/oc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft rsync://rpki.ripe.net/repository/DEFAULT/nm8mIuZcLuhjUB13IUdaBe9TQ_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:20:49:1d:ba:68:22:f6:c2:8f:a2:02:97:9d:6a:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e6f2622e65c2ee863501d7721475a05ef5343fb Validity Not Before: Dec 19 01:01:29 2025 GMT Not After : Dec 20 01:01:29 2025 GMT Subject: CN=f72885b200b89ce638d8e7c6ccc329e7049562a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:91:30:01:dc:ad:98:f5:82:69:63:27:2f:85: 00:7f:39:54:85:7e:0c:83:c2:79:85:e0:a1:de:28: 23:ae:b0:b4:25:ca:d1:d0:62:0d:da:8b:12:b4:02: 1a:f8:98:90:aa:60:b4:85:9c:0e:ae:bd:aa:42:42: b0:5a:28:2f:d6:50:4e:08:b4:a7:36:01:15:71:05: 15:31:fc:d3:d3:d5:82:a0:86:f9:e4:d8:2a:69:eb: cf:84:53:1d:3a:20:cb:7a:28:c6:80:5a:4c:3a:7e: 15:29:f2:42:f7:dd:cf:82:56:17:3c:1a:c2:b9:42: 72:86:98:3d:47:b0:04:26:96:6e:31:00:51:61:da: bf:40:7a:be:be:c4:23:38:bb:ad:9b:9c:20:f5:e3: 7e:e5:6b:5b:4f:41:97:35:d8:c5:2a:41:a5:7d:09: 81:54:34:df:ca:d4:d4:a3:c8:e9:65:85:94:b9:7e: 45:95:8c:4e:bf:98:c3:53:ce:d7:0d:cf:f3:99:bf: d3:0b:57:eb:07:3d:1b:2b:ce:47:5a:5e:3c:fc:9f: 6d:f5:8c:80:52:1e:68:3c:a7:bf:15:bd:71:67:bb: 3f:6a:f1:13:9f:9b:2a:f9:f9:c7:1d:78:18:dc:5f: 25:87:87:64:92:17:6b:12:95:09:df:17:b9:a8:33: 57:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:28:85:B2:00:B8:9C:E6:38:D8:E7:C6:CC:C3:29:E7:04:95:62:A4 X509v3 Authority Key Identifier: keyid:9E:6F:26:22:E6:5C:2E:E8:63:50:1D:77:21:47:5A:05:EF:53:43:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nm8mIuZcLuhjUB13IUdaBe9TQ_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:c5:70:14:94:9c:56:94:c2:07:95:93:ee:0c:97:e6:f7:6e: ee:56:a4:2d:99:1c:cb:c2:cf:79:8f:52:2b:64:64:e3:6a:99: ca:d5:59:70:e7:12:7a:fd:49:7d:29:c1:37:f3:26:4a:6e:5b: 97:92:e5:b4:b0:f0:e7:4a:3a:a3:6a:a4:ed:1e:b5:ab:4f:8c: 74:b9:55:63:87:36:fc:b4:86:11:32:46:12:dc:41:b8:a0:37: e2:0f:13:74:a8:70:47:42:01:04:21:06:3c:2c:97:48:fb:42: 61:36:29:9f:16:3e:1e:53:31:0d:96:55:97:d9:60:c2:41:71: e8:7e:a7:03:47:46:47:2d:02:c8:93:57:10:f3:53:4f:dc:87: 84:6c:6d:fa:ff:86:46:19:e0:44:fe:a7:78:3a:87:34:c4:1c: 80:0f:90:81:c3:28:54:88:94:5d:ba:89:30:59:19:b9:ee:72: 2f:f5:36:c9:55:ab:ed:2f:98:fa:c8:07:13:d3:8a:3d:90:ad: 05:74:a2:5a:08:d7:a9:e6:d5:ca:e0:3c:be:87:1c:34:fa:bb: 5a:5a:18:8d:fc:95:89:ed:90:28:d0:4a:5f:c2:b8:b7:18:74: 5b:17:56:e5:df:f2:b3:55:f2:cf:f4:52:73:9d:70:f1:c8:99: e8:fc:fe:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0IEkdumgi9sKPogKXnWrhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNmYyNjIyZTY1YzJlZTg2MzUwMWQ3NzIxNDc1YTA1ZWY1 MzQzZmIwHhcNMjUxMjE5MDEwMTI5WhcNMjUxMjIwMDEwMTI5WjAzMTEwLwYDVQQD EyhmNzI4ODViMjAwYjg5Y2U2MzhkOGU3YzZjY2MzMjllNzA0OTU2MmE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5EwAdytmPWCaWMnL4UAfzlUhX4M g8J5heCh3igjrrC0JcrR0GIN2osStAIa+JiQqmC0hZwOrr2qQkKwWigv1lBOCLSn NgEVcQUVMfzT09WCoIb55NgqaevPhFMdOiDLeijGgFpMOn4VKfJC993PglYXPBrC uUJyhpg9R7AEJpZuMQBRYdq/QHq+vsQjOLutm5wg9eN+5WtbT0GXNdjFKkGlfQmB VDTfytTUo8jpZYWUuX5FlYxOv5jDU87XDc/zmb/TC1frBz0bK85HWl48/J9t9YyA Uh5oPKe/Fb1xZ7s/avETn5sq+fnHHXgY3F8lh4dkkhdrEpUJ3xe5qDNXswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPcohbIAuJzmONjnxszDKecElWKkMB8GA1UdIwQY MBaAFJ5vJiLmXC7oY1AddyFHWgXvU0P7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbm04bUl1WmNMdWhqVUIxM0lVZGFCZTlUUV9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS81OTNkZDUtYjkwNy00ZGU4LTgwY2Qt YjFkYjcwMDcxZGRlLzEvbm04bUl1WmNMdWhqVUIxM0lVZGFCZTlUUV9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS81OTNkZDUtYjkwNy00ZGU4LTgwY2QtYjFkYjcwMDcxZGRl LzEvbm04bUl1WmNMdWhqVUIxM0lVZGFCZTlUUV9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXMVwFJSc VpTCB5WT7gyX5vdu7lakLZkcy8LPeY9SK2Rk42qZytVZcOcSev1JfSnBN/MmSm5b l5LltLDw50o6o2qk7R61q0+MdLlVY4c2/LSGETJGEtxBuKA34g8TdKhwR0IBBCEG PCyXSPtCYTYpnxY+HlMxDZZVl9lgwkFx6H6nA0dGRy0CyJNXEPNTT9yHhGxt+v+G RhngRP6neDqHNMQcgA+QgcMoVIiUXbqJMFkZue5yL/U2yVWr7S+Y+sgHE9OKPZCt BXSiWgjXqebVyuA8voccNPq7WloYjfyVie2QKNBKX8K4txh0WxdW5d/ys1Xyz/RS c51w8ciZ6Pz+1Q== -----END CERTIFICATE-----Generated at Fri Dec 19 07:52:30 2025 by rpki-client