This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.mft File: nYHLUEMmdDsX02SiBIdcOcbtvAk.mft (raw, json) Hash identifier: Axs4eiWbN501qmgM3BXt5Iwb79LqaNIC/iQO+CTrXF0= Subject key identifier: DD:6B:07:9C:DA:2B:86:0F:86:C5:8C:18:75:BB:53:4F:86:61:3B:E6 Authority key identifier: 9D:81:CB:50:43:26:74:3B:17:D3:64:A2:04:87:5C:39:C6:ED:BC:09 Certificate issuer: /CN=9d81cb504326743b17d364a204875c39c6edbc09 Certificate serial: 019B42B77FCA2985CCCC09133FECE18CE005 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nYHLUEMmdDsX02SiBIdcOcbtvAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.mft Manifest number: 1122 Signing time: Sun 21 Dec 2025 21:01:20 +0000 Manifest this update: Sun 21 Dec 2025 21:01:20 +0000 Manifest next update: Mon 22 Dec 2025 21:01:20 +0000 Files and hashes: 1: JP_mk9oH8p5bvlYYSWGek7KXox0.roa (hash: QozdhhJZu+Cfz+XSJNvXYpnVEpaUzqrN6lM64Dbcl70=) 2: nYHLUEMmdDsX02SiBIdcOcbtvAk.crl (hash: KarbMUM80pdElTtWVNl8M/GhC8qPVy1zmfHzGGTsGYA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.mft rsync://rpki.ripe.net/repository/DEFAULT/nYHLUEMmdDsX02SiBIdcOcbtvAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 21:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:b7:7f:ca:29:85:cc:cc:09:13:3f:ec:e1:8c:e0:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d81cb504326743b17d364a204875c39c6edbc09 Validity Not Before: Dec 21 21:01:20 2025 GMT Not After : Dec 22 21:01:20 2025 GMT Subject: CN=dd6b079cda2b860f86c58c1875bb534f86613be6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:bd:0b:44:27:e5:35:2b:a5:58:1a:8a:c0:e9: 7b:6e:35:d0:bf:ff:78:6a:8b:cf:35:d1:b8:c9:4b: 0b:ee:39:c1:30:65:cd:a2:f6:ea:38:69:66:80:5c: 69:70:e9:2b:e8:93:eb:94:4e:55:50:53:7b:f3:b9: 45:ec:aa:1f:e4:3f:20:8f:9a:97:ca:aa:0b:59:b7: 05:94:d5:07:11:5f:df:ae:f8:de:d4:0d:f4:c7:93: de:3a:85:1c:91:83:38:5a:9f:c3:7e:af:ff:ed:74: 11:9c:c6:a8:32:b3:48:37:56:fe:9a:07:a8:e8:2b: 3b:83:f3:dd:d0:4e:67:b2:bb:27:c3:b9:6a:9c:72: 00:57:73:21:c2:ab:5a:f7:0b:e6:15:80:e3:e4:02: 5f:8d:ed:db:ff:bf:de:56:76:4e:f2:6c:5d:80:d5: b3:1f:aa:c9:8e:92:d7:d4:55:8a:ac:a9:96:80:09: 1c:3e:e7:b7:e5:57:f5:4a:1f:54:42:df:b1:98:b9: 95:78:ca:e1:d2:4a:4c:03:69:e3:35:bf:b7:32:9e: f1:5b:11:92:01:6e:61:43:10:8f:eb:1a:8d:bf:66: c9:61:f7:c4:d6:48:df:2d:cb:a3:c9:b5:ee:ae:86: be:4d:73:a2:f6:32:54:53:7b:42:f9:d4:10:be:57: f6:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:6B:07:9C:DA:2B:86:0F:86:C5:8C:18:75:BB:53:4F:86:61:3B:E6 X509v3 Authority Key Identifier: keyid:9D:81:CB:50:43:26:74:3B:17:D3:64:A2:04:87:5C:39:C6:ED:BC:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nYHLUEMmdDsX02SiBIdcOcbtvAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:38:1d:19:f5:14:94:cf:f7:4f:d2:ff:a4:dc:63:43:ce:a3: 3e:3f:ea:51:73:7d:d3:63:71:a3:11:2f:4f:8c:29:23:dc:96: 8e:53:04:bb:0c:d0:e0:a0:d1:2f:ab:05:cc:c9:88:fa:cd:3d: c9:a5:67:05:b0:6c:9f:d5:00:e1:e4:3e:bd:af:a0:f1:c4:f7: 80:31:61:a9:2a:da:7d:5c:93:49:8c:d4:4c:4e:ce:1f:10:0f: e7:d6:6c:d4:af:67:c5:fd:13:a2:f0:47:56:ab:c0:8c:c4:0d: 7a:08:f9:c6:92:c3:d1:c7:2f:85:e6:62:72:da:a5:db:3c:08: 3b:78:7d:3c:73:64:5b:68:ac:66:fc:04:1d:e9:b6:e0:3a:af: d8:51:cc:17:51:be:fb:77:ac:c6:2d:59:f1:dc:a3:51:f1:20: d6:07:ac:d8:1b:0d:84:89:c7:12:15:ca:66:19:e6:0d:5d:0a: e4:22:82:e9:53:ab:85:24:5b:b2:e9:b0:4e:41:53:77:7a:03: a7:1e:d1:ce:69:18:f2:3a:e6:4f:ba:29:4e:e8:a1:2d:ef:a6: 82:e9:43:40:76:fb:0e:21:ba:1f:5d:45:26:b1:3f:bc:8c:c9: 09:d0:43:24:aa:aa:f5:ca:85:56:69:ca:50:db:3d:19:9d:ea: e3:4c:cd:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCt3/KKYXMzAkTP+zhjOAFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkODFjYjUwNDMyNjc0M2IxN2QzNjRhMjA0ODc1YzM5YzZl ZGJjMDkwHhcNMjUxMjIxMjEwMTIwWhcNMjUxMjIyMjEwMTIwWjAzMTEwLwYDVQQD EyhkZDZiMDc5Y2RhMmI4NjBmODZjNThjMTg3NWJiNTM0Zjg2NjEzYmU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk70LRCflNSulWBqKwOl7bjXQv/94 aovPNdG4yUsL7jnBMGXNovbqOGlmgFxpcOkr6JPrlE5VUFN787lF7Kof5D8gj5qX yqoLWbcFlNUHEV/frvje1A30x5PeOoUckYM4Wp/Dfq//7XQRnMaoMrNIN1b+mgeo 6Cs7g/Pd0E5nsrsnw7lqnHIAV3Mhwqta9wvmFYDj5AJfje3b/7/eVnZO8mxdgNWz H6rJjpLX1FWKrKmWgAkcPue35Vf1Sh9UQt+xmLmVeMrh0kpMA2njNb+3Mp7xWxGS AW5hQxCP6xqNv2bJYffE1kjfLcujybXuroa+TXOi9jJUU3tC+dQQvlf2MwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN1rB5zaK4YPhsWMGHW7U0+GYTvmMB8GA1UdIwQY MBaAFJ2By1BDJnQ7F9NkogSHXDnG7bwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbllITFVFTW1kRHNYMDJTaUJJZGNPY2J0dkFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8zMzlkMjktNzEyYS00Yzg2LTk1MTAt ZTRkNmJjZjMzNmI3LzEvbllITFVFTW1kRHNYMDJTaUJJZGNPY2J0dkFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy8zMzlkMjktNzEyYS00Yzg2LTk1MTAtZTRkNmJjZjMzNmI3 LzEvbllITFVFTW1kRHNYMDJTaUJJZGNPY2J0dkFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbjgdGfUU lM/3T9L/pNxjQ86jPj/qUXN902NxoxEvT4wpI9yWjlMEuwzQ4KDRL6sFzMmI+s09 yaVnBbBsn9UA4eQ+va+g8cT3gDFhqSrafVyTSYzUTE7OHxAP59Zs1K9nxf0TovBH VqvAjMQNegj5xpLD0ccvheZictql2zwIO3h9PHNkW2isZvwEHem24Dqv2FHMF1G+ +3esxi1Z8dyjUfEg1ges2BsNhInHEhXKZhnmDV0K5CKC6VOrhSRbsumwTkFTd3oD px7RzmkY8jrmT7opTuihLe+mgulDQHb7DiG6H11FJrE/vIzJCdBDJKqq9cqFVmnK UNs9GZ3q40zNcg== -----END CERTIFICATE-----Generated at Mon Dec 22 04:20:34 2025 by rpki-client