This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/NUeRPOOhFYi1nDyfnan_d_JIrBI.mft File: NUeRPOOhFYi1nDyfnan_d_JIrBI.mft (raw, json) Hash identifier: oWLUxJ0LPff+6cMx+WYZn5pV2YH2Qaxng3ZorCDH/fA= Subject key identifier: 2D:FD:87:67:2F:58:00:81:C9:14:51:01:29:54:E3:C3:B4:31:9D:CF Authority key identifier: 35:47:91:3C:E3:A1:15:88:B5:9C:3C:9F:9D:A9:FF:77:F2:48:AC:12 Certificate issuer: /CN=3547913ce3a11588b59c3c9f9da9ff77f248ac12 Certificate serial: 019B3AFE3A49A7D1F220F93F0195428D5090 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NUeRPOOhFYi1nDyfnan_d_JIrBI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/NUeRPOOhFYi1nDyfnan_d_JIrBI.mft Manifest number: 0B73 Signing time: Sat 20 Dec 2025 09:01:38 +0000 Manifest this update: Sat 20 Dec 2025 09:01:38 +0000 Manifest next update: Sun 21 Dec 2025 09:01:38 +0000 Files and hashes: 1: NUeRPOOhFYi1nDyfnan_d_JIrBI.crl (hash: wUVu45wMNASpPiRw2K5OMZpzkldh/ArU1/08jPCzOp4=) 2: O5DiGBxXgxkBCTZNGMQgecNF7aI.roa (hash: 0ahwaWUfVDJYD2wF/x/njO0sF76KorNYpLUQSfP42Kw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/NUeRPOOhFYi1nDyfnan_d_JIrBI.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/NUeRPOOhFYi1nDyfnan_d_JIrBI.mft rsync://rpki.ripe.net/repository/DEFAULT/NUeRPOOhFYi1nDyfnan_d_JIrBI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fe:3a:49:a7:d1:f2:20:f9:3f:01:95:42:8d:50:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3547913ce3a11588b59c3c9f9da9ff77f248ac12 Validity Not Before: Dec 20 09:01:38 2025 GMT Not After : Dec 21 09:01:38 2025 GMT Subject: CN=2dfd87672f580081c91451012954e3c3b4319dcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:bf:cb:ca:d5:05:a9:cc:70:86:17:76:0e:4a: 08:d6:92:90:d2:50:7e:52:9c:f6:5e:78:58:b5:08: f4:a1:02:f0:22:4b:73:d4:2f:d7:13:4c:5c:77:a5: d3:50:f2:d3:9b:b5:f0:35:7e:8e:bb:9f:86:ec:8e: af:0d:09:a2:31:ed:c6:1b:ec:95:b1:4f:82:07:e9: c4:2e:89:b9:a1:0a:64:e5:a3:f5:1b:f5:28:26:9c: ed:7a:7b:5a:08:36:5e:a7:0a:c5:e9:be:dd:c3:c9: b8:de:af:77:f9:9c:5f:fb:ae:50:b3:4a:b6:cb:31: 06:58:06:d6:6b:93:68:76:d6:32:f7:4d:c3:4a:9f: 85:8e:69:e5:36:73:dc:98:04:39:7a:3b:47:43:31: d8:67:a3:d3:c8:e8:69:4a:52:e5:4b:71:f5:ba:ad: 13:79:92:3e:e6:a2:17:fd:26:69:df:6e:f3:74:de: bb:f6:57:65:0b:bc:fd:06:47:4f:71:5b:42:ac:b4: 58:90:a4:24:45:0e:ce:9f:c9:fe:31:59:de:87:52: a4:e3:18:e6:2b:ee:5e:7b:70:48:3e:06:07:a1:92: 9a:0c:d5:36:05:cf:28:04:39:8e:4c:da:3b:ef:e2: 27:67:10:2a:6e:fa:6c:18:a9:f3:b1:fc:fb:3f:00: dd:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:FD:87:67:2F:58:00:81:C9:14:51:01:29:54:E3:C3:B4:31:9D:CF X509v3 Authority Key Identifier: keyid:35:47:91:3C:E3:A1:15:88:B5:9C:3C:9F:9D:A9:FF:77:F2:48:AC:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NUeRPOOhFYi1nDyfnan_d_JIrBI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/NUeRPOOhFYi1nDyfnan_d_JIrBI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/NUeRPOOhFYi1nDyfnan_d_JIrBI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e0:83:e3:5c:3c:eb:e6:81:97:33:0a:50:28:c7:f6:02:d2:8b: 0d:b5:4f:35:b9:85:0b:69:7c:7e:92:ad:b5:b9:39:1a:61:51: 38:56:c3:e9:33:15:d0:9f:02:26:43:43:de:0a:65:9e:f4:cf: 60:7b:06:aa:89:e5:52:79:66:2c:77:04:48:02:ca:f9:ee:3a: 92:ff:d9:42:9c:91:32:8c:ba:87:76:4a:46:d0:3f:5b:e0:91: 2b:73:8d:b0:24:c6:f0:2d:49:eb:65:c3:65:7e:30:d1:c0:00: ea:e3:49:82:b0:98:ae:e7:c6:0d:99:28:54:48:ff:f1:cc:6d: 0a:16:d8:ee:94:86:f1:be:3b:c5:33:9f:b1:38:a7:08:8b:f0: 8c:71:84:ca:65:f5:5b:06:90:91:14:be:9a:d0:8b:cf:d2:23: 58:68:47:50:80:70:77:67:8e:01:70:e0:88:3c:47:13:a0:44: 14:d2:0d:e1:31:06:8f:68:b3:4d:d3:13:fb:0a:92:bd:ef:d3: 8c:65:9b:cd:b2:7c:70:4d:d7:70:0c:0b:20:a2:56:17:01:76: 24:0d:3d:55:f7:85:de:5b:34:77:dd:aa:0d:b9:91:91:db:b0: 10:d1:10:cf:e8:ae:5a:52:a8:a2:8f:53:76:d2:56:fb:bb:8e: e0:21:02:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/jpJp9HyIPk/AZVCjVCQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NDc5MTNjZTNhMTE1ODhiNTljM2M5ZjlkYTlmZjc3ZjI0 OGFjMTIwHhcNMjUxMjIwMDkwMTM4WhcNMjUxMjIxMDkwMTM4WjAzMTEwLwYDVQQD EygyZGZkODc2NzJmNTgwMDgxYzkxNDUxMDEyOTU0ZTNjM2I0MzE5ZGNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7/LytUFqcxwhhd2DkoI1pKQ0lB+ Upz2XnhYtQj0oQLwIktz1C/XE0xcd6XTUPLTm7XwNX6Ou5+G7I6vDQmiMe3GG+yV sU+CB+nELom5oQpk5aP1G/UoJpztentaCDZepwrF6b7dw8m43q93+Zxf+65Qs0q2 yzEGWAbWa5NodtYy903DSp+FjmnlNnPcmAQ5ejtHQzHYZ6PTyOhpSlLlS3H1uq0T eZI+5qIX/SZp327zdN679ldlC7z9BkdPcVtCrLRYkKQkRQ7On8n+MVneh1Kk4xjm K+5ee3BIPgYHoZKaDNU2Bc8oBDmOTNo77+InZxAqbvpsGKnzsfz7PwDdXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC39h2cvWACByRRRASlU48O0MZ3PMB8GA1UdIwQY MBaAFDVHkTzjoRWItZw8n52p/3fySKwSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlVlUlBPT2hGWWkxbkR5Zm5hbl9kX0pJckJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8wY2RhNzQtYzliYi00ZDkyLTllNmYt Mzg5OTc4MjFmZmNlLzEvTlVlUlBPT2hGWWkxbkR5Zm5hbl9kX0pJckJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8wY2RhNzQtYzliYi00ZDkyLTllNmYtMzg5OTc4MjFmZmNl LzEvTlVlUlBPT2hGWWkxbkR5Zm5hbl9kX0pJckJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4IPjXDzr 5oGXMwpQKMf2AtKLDbVPNbmFC2l8fpKttbk5GmFROFbD6TMV0J8CJkND3gplnvTP YHsGqonlUnlmLHcESALK+e46kv/ZQpyRMoy6h3ZKRtA/W+CRK3ONsCTG8C1J62XD ZX4w0cAA6uNJgrCYrufGDZkoVEj/8cxtChbY7pSG8b47xTOfsTinCIvwjHGEymX1 WwaQkRS+mtCLz9IjWGhHUIBwd2eOAXDgiDxHE6BEFNIN4TEGj2izTdMT+wqSve/T jGWbzbJ8cE3XcAwLIKJWFwF2JA09VfeF3ls0d92qDbmRkduwENEQz+iuWlKooo9T dtJW+7uO4CECgA== -----END CERTIFICATE-----Generated at Sat Dec 20 12:23:56 2025 by rpki-client