This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f3bfcf-b0cd-45f1-ae9e-5c3f76d11607/1/Nuoi8EuUB4quAV4AlXsnP_A4zxI.mft File: Nuoi8EuUB4quAV4AlXsnP_A4zxI.mft (raw, json) Hash identifier: U3do0uBSmNE2bmpgDDioBTobnLHvdyiA6Tzl89OTBL0= Subject key identifier: 29:09:C6:54:A3:53:8B:8E:60:7D:8D:FA:AA:5D:04:1D:6E:1E:89:61 Authority key identifier: 36:EA:22:F0:4B:94:07:8A:AE:01:5E:00:95:7B:27:3F:F0:38:CF:12 Certificate issuer: /CN=36ea22f04b94078aae015e00957b273ff038cf12 Certificate serial: 019B5ABF26E93DC75687F649738EDC8EFD03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nuoi8EuUB4quAV4AlXsnP_A4zxI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/f3bfcf-b0cd-45f1-ae9e-5c3f76d11607/1/Nuoi8EuUB4quAV4AlXsnP_A4zxI.mft Manifest number: 012C Signing time: Fri 26 Dec 2025 13:00:35 +0000 Manifest this update: Fri 26 Dec 2025 13:00:35 +0000 Manifest next update: Sat 27 Dec 2025 13:00:35 +0000 Files and hashes: 1: Nuoi8EuUB4quAV4AlXsnP_A4zxI.crl (hash: O0w03oMyvW8x72fe6JuSVD19DPBwYJDhIrdRhvtO1p0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/f3bfcf-b0cd-45f1-ae9e-5c3f76d11607/1/Nuoi8EuUB4quAV4AlXsnP_A4zxI.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/f3bfcf-b0cd-45f1-ae9e-5c3f76d11607/1/Nuoi8EuUB4quAV4AlXsnP_A4zxI.mft rsync://rpki.ripe.net/repository/DEFAULT/Nuoi8EuUB4quAV4AlXsnP_A4zxI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:26:e9:3d:c7:56:87:f6:49:73:8e:dc:8e:fd:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36ea22f04b94078aae015e00957b273ff038cf12 Validity Not Before: Dec 26 13:00:35 2025 GMT Not After : Dec 27 13:00:35 2025 GMT Subject: CN=2909c654a3538b8e607d8dfaaa5d041d6e1e8961 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:47:bc:34:49:d2:4b:4e:06:07:26:e0:5d:d4: 3f:1e:cf:88:5b:bd:c0:d6:f0:e9:c7:e5:d9:3b:49: 06:51:18:ef:f7:14:b0:50:30:f7:44:dd:69:f5:fd: 66:d7:2e:05:ae:61:da:23:db:aa:2b:22:b8:21:cd: ab:54:97:53:c6:00:f8:03:b4:f0:6b:2c:00:b6:1b: 29:50:6e:f8:0c:aa:65:7b:c8:7a:8f:fe:92:46:e8: e4:76:1b:be:11:4b:5e:d5:d3:19:dc:6b:67:c7:e5: 5d:5e:70:b6:59:ea:2d:f0:99:b3:4c:3f:1d:03:17: 20:6c:38:2d:20:90:43:69:aa:31:bd:04:15:8f:6a: cc:33:ec:4d:48:2a:f9:de:56:bd:19:22:6b:b6:35: d5:58:fc:47:5d:7a:45:cd:ac:af:ac:b5:9e:35:78: f8:d0:ed:19:1c:56:68:ca:c2:95:07:f2:96:01:32: 5c:2c:43:87:ff:23:1a:2c:ff:63:e5:ab:c7:8a:f5: b1:58:2a:d4:cf:3d:48:61:72:78:16:5a:4b:01:84: 7c:09:98:30:44:75:2c:b7:42:bc:62:2e:35:05:12: df:73:0d:c5:b6:76:66:19:f8:98:22:40:86:12:c6: d4:a9:3a:86:fd:00:9f:30:90:91:ad:9c:2e:a7:0a: 2e:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:09:C6:54:A3:53:8B:8E:60:7D:8D:FA:AA:5D:04:1D:6E:1E:89:61 X509v3 Authority Key Identifier: keyid:36:EA:22:F0:4B:94:07:8A:AE:01:5E:00:95:7B:27:3F:F0:38:CF:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nuoi8EuUB4quAV4AlXsnP_A4zxI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f3bfcf-b0cd-45f1-ae9e-5c3f76d11607/1/Nuoi8EuUB4quAV4AlXsnP_A4zxI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f3bfcf-b0cd-45f1-ae9e-5c3f76d11607/1/Nuoi8EuUB4quAV4AlXsnP_A4zxI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:a6:69:82:64:08:84:ff:39:0b:16:0b:01:f2:db:24:d1:f3: 83:bf:8a:13:7e:95:b1:39:37:8d:66:1c:2f:61:27:77:b8:d7: 4a:82:6b:d8:f6:08:02:5a:9c:62:8c:a1:80:57:d3:83:02:82: 59:40:5d:0f:ec:c6:15:8e:77:c9:69:7c:7b:93:1d:7d:20:d8: 3e:6a:69:d5:59:9c:4f:89:42:aa:9a:6d:b5:d4:e7:b1:6e:bb: d2:01:b5:b0:e5:e3:78:0d:0f:1c:58:c3:bd:78:0e:56:b9:78: a6:58:55:9b:71:d3:74:3e:88:18:1b:1f:08:b0:cb:0d:fa:2c: 81:75:2c:64:ff:27:ca:01:5d:8f:1d:f6:3a:5b:21:e8:2b:e4: 1e:9d:f1:e2:78:b8:bf:e3:2e:84:33:26:c8:eb:7b:eb:5c:2a: ef:f1:40:c8:a0:58:80:8e:91:9d:70:20:e7:79:da:90:3c:68: ca:4a:86:89:03:cf:16:c1:d8:74:ea:e0:98:2f:18:2e:45:91: a8:98:b8:8e:95:46:fa:58:51:0d:b0:fe:c3:56:33:0e:96:b1: a5:bd:e8:98:01:ac:bc:aa:de:f3:3d:71:c3:a1:32:2e:74:f7: 43:fa:bf:db:61:6d:f0:39:d6:9f:b4:44:b5:dc:6b:58:08:2a: 33:b9:7c:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtavybpPcdWh/ZJc47cjv0DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2ZWEyMmYwNGI5NDA3OGFhZTAxNWUwMDk1N2IyNzNmZjAz OGNmMTIwHhcNMjUxMjI2MTMwMDM1WhcNMjUxMjI3MTMwMDM1WjAzMTEwLwYDVQQD EygyOTA5YzY1NGEzNTM4YjhlNjA3ZDhkZmFhYTVkMDQxZDZlMWU4OTYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEe8NEnSS04GBybgXdQ/Hs+IW73A 1vDpx+XZO0kGURjv9xSwUDD3RN1p9f1m1y4FrmHaI9uqKyK4Ic2rVJdTxgD4A7Tw aywAthspUG74DKple8h6j/6SRujkdhu+EUte1dMZ3Gtnx+VdXnC2Weot8JmzTD8d AxcgbDgtIJBDaaoxvQQVj2rMM+xNSCr53la9GSJrtjXVWPxHXXpFzayvrLWeNXj4 0O0ZHFZoysKVB/KWATJcLEOH/yMaLP9j5avHivWxWCrUzz1IYXJ4FlpLAYR8CZgw RHUst0K8Yi41BRLfcw3FtnZmGfiYIkCGEsbUqTqG/QCfMJCRrZwupwouIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCkJxlSjU4uOYH2N+qpdBB1uHolhMB8GA1UdIwQY MBaAFDbqIvBLlAeKrgFeAJV7Jz/wOM8SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnVvaThFdVVCNHF1QVY0QWxYc25QX0E0enhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9mM2JmY2YtYjBjZC00NWYxLWFlOWUt NWMzZjc2ZDExNjA3LzEvTnVvaThFdVVCNHF1QVY0QWxYc25QX0E0enhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9mM2JmY2YtYjBjZC00NWYxLWFlOWUtNWMzZjc2ZDExNjA3 LzEvTnVvaThFdVVCNHF1QVY0QWxYc25QX0E0enhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV6ZpgmQI hP85CxYLAfLbJNHzg7+KE36VsTk3jWYcL2End7jXSoJr2PYIAlqcYoyhgFfTgwKC WUBdD+zGFY53yWl8e5MdfSDYPmpp1VmcT4lCqppttdTnsW670gG1sOXjeA0PHFjD vXgOVrl4plhVm3HTdD6IGBsfCLDLDfosgXUsZP8nygFdjx32Olsh6CvkHp3x4ni4 v+MuhDMmyOt761wq7/FAyKBYgI6RnXAg53nakDxoykqGiQPPFsHYdOrgmC8YLkWR qJi4jpVG+lhRDbD+w1YzDpaxpb3omAGsvKre8z1xw6EyLnT3Q/q/22Ft8DnWn7RE tdxrWAgqM7l87Q== -----END CERTIFICATE-----Generated at Fri Dec 26 15:53:44 2025 by rpki-client