This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/29098b-f0f2-4b10-b2e2-1fb3d554fed5/1/1-0NLMrn7496VvHcdbSs8eaoBS_U.mft File: 1-0NLMrn7496VvHcdbSs8eaoBS_U.mft (raw, json) Hash identifier: dAj+YODzJLXxJyY+9jJe1bS8pT6EfBJxU/I3nWlkBv8= Subject key identifier: 8C:85:F9:63:56:5F:C0:7F:A5:8B:8A:45:09:96:B3:4B:61:25:4D:88 Authority key identifier: FB:43:4B:32:B9:FB:E3:DE:95:BC:77:1D:6D:2B:3C:79:AA:01:4B:F5 Certificate issuer: /CN=fb434b32b9fbe3de95bc771d6d2b3c79aa014bf5 Certificate serial: 019B59AC782F965D24197EC083B30FC1DC10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-0NLMrn7496VvHcdbSs8eaoBS_U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/29098b-f0f2-4b10-b2e2-1fb3d554fed5/1/1-0NLMrn7496VvHcdbSs8eaoBS_U.mft Manifest number: 89 Signing time: Fri 26 Dec 2025 08:00:33 +0000 Manifest this update: Fri 26 Dec 2025 08:00:33 +0000 Manifest next update: Sat 27 Dec 2025 08:00:33 +0000 Files and hashes: 1: 1-0NLMrn7496VvHcdbSs8eaoBS_U.crl (hash: V8JkpIiKRrm6+rC+7HePl9iqJuaECfu2xF6ueL38KxA=) 2: oszO5cRy_bT24vbGygYagfAt25M.roa (hash: jZ3tdldk6JjFlin4RDbE9w6pyZh5JE76rT/riu50Cpw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/29098b-f0f2-4b10-b2e2-1fb3d554fed5/1/1-0NLMrn7496VvHcdbSs8eaoBS_U.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/29098b-f0f2-4b10-b2e2-1fb3d554fed5/1/1-0NLMrn7496VvHcdbSs8eaoBS_U.mft rsync://rpki.ripe.net/repository/DEFAULT/1-0NLMrn7496VvHcdbSs8eaoBS_U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ac:78:2f:96:5d:24:19:7e:c0:83:b3:0f:c1:dc:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb434b32b9fbe3de95bc771d6d2b3c79aa014bf5 Validity Not Before: Dec 26 08:00:33 2025 GMT Not After : Dec 27 08:00:33 2025 GMT Subject: CN=8c85f963565fc07fa58b8a450996b34b61254d88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:38:d3:e3:84:9c:12:ee:4c:dc:b3:12:64:a0: ad:7e:f2:ed:dd:e3:d0:50:43:3a:95:99:e4:a4:22: bc:eb:8e:70:01:72:04:e6:99:ef:44:b8:3b:53:87: 51:bd:cd:04:23:7e:0f:36:80:e4:d8:a8:65:b0:ff: aa:fb:42:2d:5e:42:69:23:bf:fe:c2:90:c2:61:cf: 3f:1f:08:ab:ff:ae:86:a4:7c:30:44:63:53:e3:6a: c9:91:7f:b8:c0:97:9d:12:63:7e:3f:ad:31:e0:ab: 97:8a:a3:e3:45:8e:15:e1:40:5b:1c:30:e7:60:02: bd:a1:9e:7e:6f:63:50:4e:6b:fe:ad:b9:af:51:d0: 8a:e5:85:66:53:b2:c4:50:85:bb:95:1a:ce:09:21: 36:6b:09:20:ef:45:c4:e7:13:17:c7:b3:dc:08:b6: bb:bf:04:b8:8a:e8:f2:af:8f:60:c6:ed:5a:04:79: 02:97:17:6c:01:49:75:45:29:c8:04:b3:f5:f8:de: 96:ac:f6:a2:60:21:6a:ca:0d:0e:29:fd:0a:6d:1b: 70:89:3c:77:0c:aa:c6:47:b8:b7:d1:00:84:76:9f: c8:25:48:38:c3:6b:d3:af:eb:b6:fb:83:fc:cd:94: ac:a5:2f:fc:9b:a1:05:d3:93:f0:e7:5b:02:72:1b: fd:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:85:F9:63:56:5F:C0:7F:A5:8B:8A:45:09:96:B3:4B:61:25:4D:88 X509v3 Authority Key Identifier: keyid:FB:43:4B:32:B9:FB:E3:DE:95:BC:77:1D:6D:2B:3C:79:AA:01:4B:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-0NLMrn7496VvHcdbSs8eaoBS_U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/29098b-f0f2-4b10-b2e2-1fb3d554fed5/1/1-0NLMrn7496VvHcdbSs8eaoBS_U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/29098b-f0f2-4b10-b2e2-1fb3d554fed5/1/1-0NLMrn7496VvHcdbSs8eaoBS_U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:8e:ca:ae:68:71:dd:1f:c4:8c:51:0f:25:c6:95:18:63:ec: 3d:af:df:c2:87:ad:5a:d7:ac:a9:92:9b:38:63:44:8f:55:01: 87:f1:b1:f1:fd:78:91:8d:98:f6:b8:68:54:0a:ce:79:17:5c: 4f:31:40:72:aa:b0:af:59:77:50:fb:7b:8f:d0:b6:75:9e:77: 84:bb:ea:56:9e:66:34:de:b6:21:d1:46:58:b4:db:81:4e:3a: bc:49:b8:ac:d2:10:0f:68:2f:b9:21:44:6b:bb:37:42:d6:6b: d9:89:fc:52:44:10:4a:b6:16:6f:bc:9a:d5:23:63:e2:dd:ac: 41:db:e5:0d:93:68:80:83:5f:7f:46:30:e8:1b:53:6d:a8:00: 22:0b:4b:2a:87:a7:ce:bc:03:5c:13:73:e0:6f:34:33:1f:08: c8:87:1b:76:53:0d:3a:b2:c6:cf:20:68:cd:50:62:a7:5d:03: c0:b4:6e:88:ea:22:aa:fd:f9:ad:32:23:07:27:65:1a:28:32: 61:bb:5f:05:a9:16:44:9e:ee:e8:96:8c:51:31:4e:70:12:bf: 7f:a6:91:9d:24:95:40:5f:3a:56:ff:6e:64:06:7c:03:b1:b0: 30:b0:43:12:a0:e7:d9:f1:98:85:29:0a:2c:3d:50:75:50:1b: 8e:12:0f:98 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtZrHgvll0kGX7Ag7MPwdwQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiNDM0YjMyYjlmYmUzZGU5NWJjNzcxZDZkMmIzYzc5YWEw MTRiZjUwHhcNMjUxMjI2MDgwMDMzWhcNMjUxMjI3MDgwMDMzWjAzMTEwLwYDVQQD Eyg4Yzg1Zjk2MzU2NWZjMDdmYTU4YjhhNDUwOTk2YjM0YjYxMjU0ZDg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTjT44ScEu5M3LMSZKCtfvLt3ePQ UEM6lZnkpCK8645wAXIE5pnvRLg7U4dRvc0EI34PNoDk2KhlsP+q+0ItXkJpI7/+ wpDCYc8/Hwir/66GpHwwRGNT42rJkX+4wJedEmN+P60x4KuXiqPjRY4V4UBbHDDn YAK9oZ5+b2NQTmv+rbmvUdCK5YVmU7LEUIW7lRrOCSE2awkg70XE5xMXx7PcCLa7 vwS4iujyr49gxu1aBHkClxdsAUl1RSnIBLP1+N6WrPaiYCFqyg0OKf0KbRtwiTx3 DKrGR7i30QCEdp/IJUg4w2vTr+u2+4P8zZSspS/8m6EF05Pw51sCchv9KwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFIyF+WNWX8B/pYuKRQmWs0thJU2IMB8GA1UdIwQY MBaAFPtDSzK5++Pelbx3HW0rPHmqAUv1MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS0wTkxNcm43NDk2VnZIY2RiU3M4ZWFvQlNfVS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjcvMjkwOThiLWYwZjItNGIxMC1iMmUy LTFmYjNkNTU0ZmVkNS8xLzEtME5MTXJuNzQ5NlZ2SGNkYlNzOGVhb0JTX1UubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2Y3LzI5MDk4Yi1mMGYyLTRiMTAtYjJlMi0xZmIzZDU1NGZl ZDUvMS8xLTBOTE1ybjc0OTZWdkhjZGJTczhlYW9CU19VLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh47K rmhx3R/EjFEPJcaVGGPsPa/fwoetWtesqZKbOGNEj1UBh/Gx8f14kY2Y9rhoVArO eRdcTzFAcqqwr1l3UPt7j9C2dZ53hLvqVp5mNN62IdFGWLTbgU46vEm4rNIQD2gv uSFEa7s3QtZr2Yn8UkQQSrYWb7ya1SNj4t2sQdvlDZNogINff0Yw6BtTbagAIgtL KoenzrwDXBNz4G80Mx8IyIcbdlMNOrLGzyBozVBip10DwLRuiOoiqv35rTIjBydl GigyYbtfBakWRJ7u6JaMUTFOcBK/f6aRnSSVQF86Vv9uZAZ8A7GwMLBDEqDn2fGY hSkKLD1QdVAbjhIPmA== -----END CERTIFICATE-----Generated at Fri Dec 26 15:55:52 2025 by rpki-client