This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.mft File: nYHLUEMmdDsX02SiBIdcOcbtvAk.mft (raw, json) Hash identifier: 5p3FWWNek+TnAU+YFLWRXnRU7E4OVX21vuB1qCKfN7Y= Subject key identifier: 2B:23:A2:61:DF:0D:5F:BA:44:B9:52:12:D2:56:1C:37:57:26:C5:55 Authority key identifier: 9D:81:CB:50:43:26:74:3B:17:D3:64:A2:04:87:5C:39:C6:ED:BC:09 Certificate issuer: /CN=9d81cb504326743b17d364a204875c39c6edbc09 Certificate serial: 019B0E930D3BADBF4EF8769EA6B2DD213BAA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nYHLUEMmdDsX02SiBIdcOcbtvAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.mft Manifest number: 1107 Signing time: Thu 11 Dec 2025 18:01:16 +0000 Manifest this update: Thu 11 Dec 2025 18:01:16 +0000 Manifest next update: Fri 12 Dec 2025 18:01:16 +0000 Files and hashes: 1: JP_mk9oH8p5bvlYYSWGek7KXox0.roa (hash: QozdhhJZu+Cfz+XSJNvXYpnVEpaUzqrN6lM64Dbcl70=) 2: nYHLUEMmdDsX02SiBIdcOcbtvAk.crl (hash: S0eCKHFhzDDbsvpAeWDE5GzQxf0B5IIgBzAE5pSgaz4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.mft rsync://rpki.ripe.net/repository/DEFAULT/nYHLUEMmdDsX02SiBIdcOcbtvAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:93:0d:3b:ad:bf:4e:f8:76:9e:a6:b2:dd:21:3b:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d81cb504326743b17d364a204875c39c6edbc09 Validity Not Before: Dec 11 18:01:16 2025 GMT Not After : Dec 12 18:01:16 2025 GMT Subject: CN=2b23a261df0d5fba44b95212d2561c375726c555 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ea:ff:e0:75:ad:c5:f4:ec:24:09:fc:c3:7a: 1b:09:23:db:10:7b:6c:21:92:89:f0:56:9d:b2:31: 71:45:b2:9d:6c:01:2c:96:aa:74:a2:7b:d8:9e:95: f8:57:fb:70:4b:e4:ec:21:60:8f:ee:c2:bf:6a:07: 10:88:96:73:1b:34:8b:d0:96:e6:51:f8:8f:63:b4: 1a:a4:60:e2:6f:42:1c:76:12:6d:a8:21:37:13:fd: f0:a6:b9:b5:53:45:31:13:80:4b:72:74:77:04:88: 8c:95:46:e6:c6:31:4d:6a:05:6e:d1:3e:3d:de:1d: 63:d9:84:e8:7a:83:26:c3:69:70:2f:e0:4a:b0:c3: 08:fa:ae:8c:db:fc:e5:93:68:d5:2e:2f:54:3f:ab: 85:c9:ef:ca:f4:09:cd:14:23:9c:fb:28:23:c0:e3: 0e:81:fd:f6:43:10:e6:8a:3d:ad:4d:ab:dc:52:69: cf:43:90:3b:22:b7:0b:24:7d:8a:fe:0a:94:b5:96: a4:e5:ce:51:5c:25:af:e2:a1:4d:a4:2c:c2:4e:3d: b5:64:63:c9:f8:12:e0:6e:7d:63:27:17:10:2a:f2: 55:64:27:ee:cc:83:9d:ba:b5:ac:76:61:e9:1a:82: 3e:94:0f:a0:ea:52:99:72:b6:13:32:23:45:ef:9d: 2c:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:23:A2:61:DF:0D:5F:BA:44:B9:52:12:D2:56:1C:37:57:26:C5:55 X509v3 Authority Key Identifier: keyid:9D:81:CB:50:43:26:74:3B:17:D3:64:A2:04:87:5C:39:C6:ED:BC:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nYHLUEMmdDsX02SiBIdcOcbtvAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:a1:de:79:25:c9:31:26:29:55:54:6f:08:ad:74:88:d8:66: 75:f7:68:6f:d0:01:c9:49:e5:52:88:51:b1:33:02:5e:51:ce: 26:9a:c8:eb:5a:81:b6:2b:46:7b:fd:4a:57:63:77:3a:44:08: 10:f8:5c:af:5c:cd:20:37:af:93:e8:08:e8:89:5a:b9:96:f1: b2:28:b6:4e:88:14:de:2d:a5:78:fa:bc:0a:4d:c1:df:f0:56: 56:cd:a6:72:a7:82:83:87:18:e1:73:44:8e:de:85:51:67:77: 7d:07:2c:1f:49:7f:7e:9d:ea:84:c3:8b:cb:16:78:0a:44:19: 68:2b:e8:f4:c0:99:5e:3b:11:be:12:87:5b:ff:c1:f1:9b:20: fa:8e:5d:80:81:a3:8d:67:56:56:e6:76:4d:ce:2a:9c:36:ff: a8:50:74:67:e6:cd:d6:1e:46:2e:4f:ca:a8:87:9d:e0:58:c9: 92:bc:b8:13:4f:9a:94:83:0e:4c:ef:3c:1a:c5:ef:35:ac:1f: 7a:f2:47:ec:bf:d4:1b:9e:21:9e:71:3a:ed:e0:b0:a9:2f:7a: 5c:ec:f3:d3:f0:8c:a4:66:e3:38:a6:bb:e1:52:60:b9:6a:f2: 34:1e:c5:4c:9e:87:1f:79:c9:a6:08:aa:fe:41:ae:14:da:24: 56:fb:aa:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOkw07rb9O+HaeprLdITuqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkODFjYjUwNDMyNjc0M2IxN2QzNjRhMjA0ODc1YzM5YzZl ZGJjMDkwHhcNMjUxMjExMTgwMTE2WhcNMjUxMjEyMTgwMTE2WjAzMTEwLwYDVQQD EygyYjIzYTI2MWRmMGQ1ZmJhNDRiOTUyMTJkMjU2MWMzNzU3MjZjNTU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOr/4HWtxfTsJAn8w3obCSPbEHts IZKJ8FadsjFxRbKdbAEslqp0onvYnpX4V/twS+TsIWCP7sK/agcQiJZzGzSL0Jbm UfiPY7QapGDib0IcdhJtqCE3E/3wprm1U0UxE4BLcnR3BIiMlUbmxjFNagVu0T49 3h1j2YToeoMmw2lwL+BKsMMI+q6M2/zlk2jVLi9UP6uFye/K9AnNFCOc+ygjwOMO gf32QxDmij2tTavcUmnPQ5A7IrcLJH2K/gqUtZak5c5RXCWv4qFNpCzCTj21ZGPJ +BLgbn1jJxcQKvJVZCfuzIOdurWsdmHpGoI+lA+g6lKZcrYTMiNF750skQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCsjomHfDV+6RLlSEtJWHDdXJsVVMB8GA1UdIwQY MBaAFJ2By1BDJnQ7F9NkogSHXDnG7bwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbllITFVFTW1kRHNYMDJTaUJJZGNPY2J0dkFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8zMzlkMjktNzEyYS00Yzg2LTk1MTAt ZTRkNmJjZjMzNmI3LzEvbllITFVFTW1kRHNYMDJTaUJJZGNPY2J0dkFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy8zMzlkMjktNzEyYS00Yzg2LTk1MTAtZTRkNmJjZjMzNmI3 LzEvbllITFVFTW1kRHNYMDJTaUJJZGNPY2J0dkFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlqHeeSXJ MSYpVVRvCK10iNhmdfdob9AByUnlUohRsTMCXlHOJprI61qBtitGe/1KV2N3OkQI EPhcr1zNIDevk+gI6IlauZbxsii2TogU3i2lePq8Ck3B3/BWVs2mcqeCg4cY4XNE jt6FUWd3fQcsH0l/fp3qhMOLyxZ4CkQZaCvo9MCZXjsRvhKHW//B8Zsg+o5dgIGj jWdWVuZ2Tc4qnDb/qFB0Z+bN1h5GLk/KqIed4FjJkry4E0+alIMOTO88GsXvNawf evJH7L/UG54hnnE67eCwqS96XOzz0/CMpGbjOKa74VJguWryNB7FTJ6HH3nJpgiq /kGuFNokVvuqXw== -----END CERTIFICATE-----Generated at Thu Dec 11 23:28:05 2025 by rpki-client