This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.mft File: NUb_Rc5QVX7cTAMG4fhpSCrUI-A.mft (raw, json) Hash identifier: RruskBbaV/GKrPdz12qP0QPinB9rcJmWQA4d6YY+Ejw= Subject key identifier: 8F:BD:5C:3C:03:9F:A5:A1:35:BB:4D:D7:62:0D:88:97:C0:9A:73:34 Authority key identifier: 35:46:FF:45:CE:50:55:7E:DC:4C:03:06:E1:F8:69:48:2A:D4:23:E0 Certificate issuer: /CN=3546ff45ce50557edc4c0306e1f869482ad423e0 Certificate serial: 019B5A1A6F56CFA76365A12BCD27B1D1BC83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.mft Manifest number: 0952 Signing time: Fri 26 Dec 2025 10:00:40 +0000 Manifest this update: Fri 26 Dec 2025 10:00:40 +0000 Manifest next update: Sat 27 Dec 2025 10:00:40 +0000 Files and hashes: 1: NUb_Rc5QVX7cTAMG4fhpSCrUI-A.crl (hash: eUsF1Zpj+Y+lrcCEw4iHk66kCtkuTOwqlXNg60zgk4o=) 2: Rv1036YGXSxZ-LNtEMTG-yB-cpE.roa (hash: 9hIhakYU1jL8ELRanjY68hTQVJc33GMXNtFCdw91hfI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.mft rsync://rpki.ripe.net/repository/DEFAULT/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:6f:56:cf:a7:63:65:a1:2b:cd:27:b1:d1:bc:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3546ff45ce50557edc4c0306e1f869482ad423e0 Validity Not Before: Dec 26 10:00:40 2025 GMT Not After : Dec 27 10:00:40 2025 GMT Subject: CN=8fbd5c3c039fa5a135bb4dd7620d8897c09a7334 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:9e:72:59:9a:33:88:cf:1e:7c:c8:4a:2f:74: c4:58:c2:e7:c9:fc:3c:80:03:cf:b8:cb:55:11:dc: 0d:57:4a:31:1c:49:45:67:09:5c:e6:d7:ac:f2:c4: 9e:08:f0:81:4a:33:45:76:11:7a:ca:4a:bb:9c:0f: 8b:ee:6e:9d:13:74:c9:2d:91:d3:e5:74:65:70:5c: e3:a4:1d:11:e9:9b:00:03:ee:d1:9c:ff:14:fd:fe: a5:6b:dd:56:77:a0:76:73:e3:4f:2a:89:9e:af:2a: d4:05:24:a8:9a:75:33:81:93:f9:8d:c4:c4:6c:a5: 0b:97:a0:4c:90:76:cb:83:92:1a:eb:84:9f:f6:1b: 07:7f:42:9d:7a:88:91:d6:27:81:a4:38:b6:d0:03: 0e:54:dc:47:f0:e5:86:16:4f:f4:af:b7:6d:4c:bf: 01:19:62:43:7f:f6:7f:5f:26:90:ec:97:82:c8:97: e8:44:05:40:41:88:3d:93:08:5a:77:97:58:d8:fd: ea:c5:06:ae:aa:1f:94:e3:dc:6f:4b:86:71:93:7e: da:7b:e4:cf:4b:c3:8a:2e:b4:59:38:34:6d:4d:6b: 40:98:44:89:88:a5:c4:93:9a:b5:52:e4:1e:56:f2: 3b:f1:d9:5c:d6:73:2c:e5:11:79:60:81:8e:c8:99: c5:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:BD:5C:3C:03:9F:A5:A1:35:BB:4D:D7:62:0D:88:97:C0:9A:73:34 X509v3 Authority Key Identifier: keyid:35:46:FF:45:CE:50:55:7E:DC:4C:03:06:E1:F8:69:48:2A:D4:23:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:6b:b9:c8:97:f7:dc:26:14:0c:e6:c2:d4:f3:15:41:aa:ad: e9:d5:93:9f:f1:cf:96:45:92:a4:9d:00:dd:08:df:bf:08:07: d0:98:11:2e:3e:d2:70:14:d6:dd:e4:37:31:e5:9a:ca:f6:7d: 67:d9:13:4d:c4:44:db:fd:91:2a:6f:67:1c:2a:3f:c9:a9:21: 8d:9a:26:5f:46:80:59:0b:99:9a:d9:6f:95:7c:a0:72:51:a3: 9b:6a:25:d0:ca:cf:92:66:7f:78:07:9c:bd:27:b2:cc:ad:83: a4:b5:ee:92:cf:48:a4:cb:ff:b7:61:23:da:cd:3c:82:1d:22: 9f:2e:e8:d6:a3:96:5d:b7:2a:8c:85:94:40:7e:59:2d:5f:ab: 1c:7a:9b:01:69:39:b3:bd:4b:6f:6f:d2:d6:4f:b2:db:00:fc: f0:c4:a0:4c:ba:23:33:e9:94:de:b6:0e:ca:3c:b5:7a:ee:23: ea:f7:c3:fd:9b:b8:ee:4e:d7:8e:5f:84:89:96:ba:41:8e:07: 64:43:eb:d7:c1:08:59:bd:a3:ec:e5:da:4a:5f:9a:97:ae:a7: 33:37:18:6b:88:ed:29:3a:90:4c:fe:80:a6:f2:5c:3c:00:a8: 37:84:28:4e:21:28:2f:45:ea:b9:9d:5c:20:99:b2:02:43:ef: d2:02:38:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGm9Wz6djZaErzSex0byDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NDZmZjQ1Y2U1MDU1N2VkYzRjMDMwNmUxZjg2OTQ4MmFk NDIzZTAwHhcNMjUxMjI2MTAwMDQwWhcNMjUxMjI3MTAwMDQwWjAzMTEwLwYDVQQD Eyg4ZmJkNWMzYzAzOWZhNWExMzViYjRkZDc2MjBkODg5N2MwOWE3MzM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAop5yWZoziM8efMhKL3TEWMLnyfw8 gAPPuMtVEdwNV0oxHElFZwlc5tes8sSeCPCBSjNFdhF6ykq7nA+L7m6dE3TJLZHT 5XRlcFzjpB0R6ZsAA+7RnP8U/f6la91Wd6B2c+NPKomeryrUBSSomnUzgZP5jcTE bKULl6BMkHbLg5Ia64Sf9hsHf0KdeoiR1ieBpDi20AMOVNxH8OWGFk/0r7dtTL8B GWJDf/Z/XyaQ7JeCyJfoRAVAQYg9kwhad5dY2P3qxQauqh+U49xvS4Zxk37ae+TP S8OKLrRZODRtTWtAmESJiKXEk5q1UuQeVvI78dlc1nMs5RF5YIGOyJnFXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI+9XDwDn6WhNbtN12INiJfAmnM0MB8GA1UdIwQY MBaAFDVG/0XOUFV+3EwDBuH4aUgq1CPgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlViX1JjNVFWWDdjVEFNRzRmaHBTQ3JVSS1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9jOTA4NjktZWUyMC00OTM5LTg0MGUt NjQwYzc0YTk0Y2M2LzEvTlViX1JjNVFWWDdjVEFNRzRmaHBTQ3JVSS1BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9jOTA4NjktZWUyMC00OTM5LTg0MGUtNjQwYzc0YTk0Y2M2 LzEvTlViX1JjNVFWWDdjVEFNRzRmaHBTQ3JVSS1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo2u5yJf3 3CYUDObC1PMVQaqt6dWTn/HPlkWSpJ0A3QjfvwgH0JgRLj7ScBTW3eQ3MeWayvZ9 Z9kTTcRE2/2RKm9nHCo/yakhjZomX0aAWQuZmtlvlXygclGjm2ol0MrPkmZ/eAec vSeyzK2DpLXuks9IpMv/t2Ej2s08gh0iny7o1qOWXbcqjIWUQH5ZLV+rHHqbAWk5 s71Lb2/S1k+y2wD88MSgTLojM+mU3rYOyjy1eu4j6vfD/Zu47k7Xjl+EiZa6QY4H ZEPr18EIWb2j7OXaSl+al66nMzcYa4jtKTqQTP6ApvJcPACoN4QoTiEoL0XquZ1c IJmyAkPv0gI4Yg== -----END CERTIFICATE-----Generated at Fri Dec 26 15:47:14 2025 by rpki-client