This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft File: NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft (raw, json) Hash identifier: ZFCsXwvukkmcViibKnsZdjNGzwkm8CktBNl1M3HpYCY= Subject key identifier: 47:09:31:80:21:3D:2D:4E:22:52:EF:FC:D4:BE:03:4D:EA:01:4A:DC Authority key identifier: 35:45:A7:20:01:64:91:20:41:BB:93:1E:FB:1F:EA:C1:23:B4:3A:18 Certificate issuer: /CN=3545a7200164912041bb931efb1feac123b43a18 Certificate serial: 019B0E25086630D9F32408D1A0C0BCCEB1DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft Manifest number: 1776 Signing time: Thu 11 Dec 2025 16:01:06 +0000 Manifest this update: Thu 11 Dec 2025 16:01:06 +0000 Manifest next update: Fri 12 Dec 2025 16:01:06 +0000 Files and hashes: 1: 8s1U0KmUYb897VvjMdVaiCCBr8Y.roa (hash: 5qEC8e4y3KYPBzPpD5dv/300fB0lSnNjSuXLoow+Q8w=) 2: LaYkRMNeto2OFZ9VBnU48w_HGgs.roa (hash: 16B1JfqcXDvmz5pVWUS+KsHYpQRrCgD9R9Tg6uXacIA=) 3: NUWnIAFkkSBBu5Me-x_qwSO0Ohg.crl (hash: WxgK9b2FYjniONrXyO5zXFZ1gVlU/BrLhReC0QWPqRI=) 4: W8oJrry2382XyDpwYu9d1fRM57k.roa (hash: vgOtreWyL8SSvp1wiImWd0ZzLXQJtP4n+ctgbIbJd6I=) 5: ZPnSp5toQpthOZvn7vrTi1PIJ0A.roa (hash: 2xJoiopsp/aP4IfMiv71h2CCh2maxmce9cHqGdAd1jM=) 6: hDuQO-2O-6Lo8qgrhYqNM0G4P24.roa (hash: WUDxmKQLeVQHlfqkPeKYvZqVqvTuBp11Xfwh/S2zHnQ=) 7: rJESdqv17knzJ4wNzfBk8WWWnw0.roa (hash: BdHgAA5eA1A53dV1mMcPmgdF0S7eP4oFR6WHvpTEZ/k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 16:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:25:08:66:30:d9:f3:24:08:d1:a0:c0:bc:ce:b1:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3545a7200164912041bb931efb1feac123b43a18 Validity Not Before: Dec 11 16:01:06 2025 GMT Not After : Dec 12 16:01:06 2025 GMT Subject: CN=47093180213d2d4e2252effcd4be034dea014adc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c2:eb:f2:da:ef:b6:28:92:22:51:90:ff:a5: f0:08:f6:77:0f:cd:6d:85:b3:94:5b:1b:e3:97:45: e2:d0:6b:45:2c:5b:b3:8b:a5:f4:87:3d:a3:ba:79: c0:d2:59:a9:4e:b5:3d:30:68:d7:05:70:81:b6:77: 8c:74:09:3e:8c:8c:82:ba:2c:02:0a:4d:e1:d0:83: 52:1a:c0:dd:b7:ea:b5:2c:80:42:9d:5d:52:37:6a: 4e:ee:df:4f:44:e4:26:b6:c4:c2:7e:d5:c5:ab:36: 9c:6a:6f:52:c1:75:94:a7:a7:99:11:a5:3f:1c:03: da:e0:73:82:fe:f0:6b:37:68:68:ca:8a:06:44:1c: 2f:fd:93:f5:92:86:d4:18:ba:db:db:24:fe:66:b6: 9b:fe:f8:a6:5e:dd:ff:6b:c9:4b:d9:ce:39:ff:d9: 53:66:0b:5a:24:b6:37:ae:68:bf:e3:6e:c1:d0:8a: 1d:f0:d5:80:12:40:d9:f6:b2:2d:c8:31:f7:34:72: e7:26:ac:b1:0e:0a:f9:a2:98:c7:ae:8c:12:71:8c: 3b:d9:c3:da:ef:f4:f3:e1:9b:d4:f1:c8:81:41:ea: 3e:4b:fd:2a:e7:33:09:38:41:d2:38:13:02:6a:2e: 34:22:1a:b9:96:84:83:cc:4d:10:b6:02:62:09:15: 88:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:09:31:80:21:3D:2D:4E:22:52:EF:FC:D4:BE:03:4D:EA:01:4A:DC X509v3 Authority Key Identifier: keyid:35:45:A7:20:01:64:91:20:41:BB:93:1E:FB:1F:EA:C1:23:B4:3A:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:d0:7f:1a:38:f0:a1:91:52:53:25:12:da:7e:ee:42:30:8d: 19:ac:35:a2:62:84:be:e0:db:a6:0e:96:f5:10:f5:5d:f1:8c: cf:36:88:47:35:96:03:71:53:38:21:ad:08:6b:eb:72:28:e1: 81:5d:3c:b2:2e:60:0a:89:5e:f3:4f:19:23:85:99:42:06:0c: e3:64:5a:9d:86:72:30:49:79:29:41:f3:1d:26:0b:af:48:ca: b4:be:b9:33:89:19:03:eb:8f:fd:20:24:50:5f:e0:46:f8:08: 8b:e3:04:70:53:11:ff:af:f9:32:16:08:56:48:5f:9d:8d:f7: 12:ce:13:3a:5f:25:6e:d3:74:1b:91:cf:63:66:68:cb:d7:c5: 26:d5:4b:62:b5:83:c0:4c:f0:00:02:4b:8e:02:02:2f:2d:26: 92:14:8c:3b:ab:95:c0:3c:6f:75:53:da:b4:d5:0c:62:a4:ba: 95:e7:31:98:9b:78:d8:f1:be:c1:ae:3e:4d:80:5b:0c:d0:3b: ba:2a:87:b6:7b:89:e9:ab:c7:28:5b:b8:b3:e7:6e:a0:60:b0: ed:08:9d:69:6a:52:37:e3:49:f9:8b:7e:e3:6c:f3:ee:bc:5d: 2a:da:ff:ec:6d:28:60:24:d8:e7:25:ad:8c:5b:21:71:d7:36: b9:12:ec:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJQhmMNnzJAjRoMC8zrHcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NDVhNzIwMDE2NDkxMjA0MWJiOTMxZWZiMWZlYWMxMjNi NDNhMTgwHhcNMjUxMjExMTYwMTA2WhcNMjUxMjEyMTYwMTA2WjAzMTEwLwYDVQQD Eyg0NzA5MzE4MDIxM2QyZDRlMjI1MmVmZmNkNGJlMDM0ZGVhMDE0YWRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucLr8trvtiiSIlGQ/6XwCPZ3D81t hbOUWxvjl0Xi0GtFLFuzi6X0hz2junnA0lmpTrU9MGjXBXCBtneMdAk+jIyCuiwC Ck3h0INSGsDdt+q1LIBCnV1SN2pO7t9PROQmtsTCftXFqzacam9SwXWUp6eZEaU/ HAPa4HOC/vBrN2hoyooGRBwv/ZP1kobUGLrb2yT+Zrab/vimXt3/a8lL2c45/9lT ZgtaJLY3rmi/427B0Iod8NWAEkDZ9rItyDH3NHLnJqyxDgr5opjHrowScYw72cPa 7/Tz4ZvU8ciBQeo+S/0q5zMJOEHSOBMCai40Ihq5loSDzE0QtgJiCRWIfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEcJMYAhPS1OIlLv/NS+A03qAUrcMB8GA1UdIwQY MBaAFDVFpyABZJEgQbuTHvsf6sEjtDoYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlVXbklBRmtrU0JCdTVNZS14X3F3U08wT2hnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy81OWM0YjgtODdmNC00ZjJmLWE0NDkt YWFiYjA2MmU0MGRiLzEvTlVXbklBRmtrU0JCdTVNZS14X3F3U08wT2hnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy81OWM0YjgtODdmNC00ZjJmLWE0NDktYWFiYjA2MmU0MGRi LzEvTlVXbklBRmtrU0JCdTVNZS14X3F3U08wT2hnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPtB/Gjjw oZFSUyUS2n7uQjCNGaw1omKEvuDbpg6W9RD1XfGMzzaIRzWWA3FTOCGtCGvrcijh gV08si5gCole808ZI4WZQgYM42RanYZyMEl5KUHzHSYLr0jKtL65M4kZA+uP/SAk UF/gRvgIi+MEcFMR/6/5MhYIVkhfnY33Es4TOl8lbtN0G5HPY2Zoy9fFJtVLYrWD wEzwAAJLjgICLy0mkhSMO6uVwDxvdVPatNUMYqS6lecxmJt42PG+wa4+TYBbDNA7 uiqHtnuJ6avHKFu4s+duoGCw7QidaWpSN+NJ+Yt+42zz7rxdKtr/7G0oYCTY5yWt jFshcdc2uRLs/g== -----END CERTIFICATE-----Generated at Fri Dec 12 00:10:29 2025 by rpki-client