This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.mft File: _lNCbiNhumZdjyW9PPrvwg69pIg.mft (raw, json) Hash identifier: 9Yg5t622rrFizE8XDdw85TqxQQeyBP+9eEJli644vCA= Subject key identifier: 4A:60:EA:25:60:DB:24:05:52:60:A3:13:13:48:B6:AB:A8:65:58:75 Authority key identifier: FE:53:42:6E:23:61:BA:66:5D:8F:25:BD:3C:FA:EF:C2:0E:BD:A4:88 Certificate issuer: /CN=fe53426e2361ba665d8f25bd3cfaefc20ebda488 Certificate serial: 019AF2AD9F52676188F740B0D369C9BF02B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_lNCbiNhumZdjyW9PPrvwg69pIg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.mft Manifest number: 1474 Signing time: Sat 06 Dec 2025 08:00:55 +0000 Manifest this update: Sat 06 Dec 2025 08:00:55 +0000 Manifest next update: Sun 07 Dec 2025 08:00:55 +0000 Files and hashes: 1: _lNCbiNhumZdjyW9PPrvwg69pIg.crl (hash: H3Ac9BfcYRPzl4GGsXFXJCbOVCiZDHFNQw2RVZWQHdM=) 2: haHKJrHUqbm5DebtyDYhDiGIt7A.roa (hash: Cz3j+Dv+gBqpFYF7WEnyvYZy+IRYW0vriwmXpF2DtvM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.mft rsync://rpki.ripe.net/repository/DEFAULT/_lNCbiNhumZdjyW9PPrvwg69pIg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:9f:52:67:61:88:f7:40:b0:d3:69:c9:bf:02:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe53426e2361ba665d8f25bd3cfaefc20ebda488 Validity Not Before: Dec 6 08:00:55 2025 GMT Not After : Dec 7 08:00:55 2025 GMT Subject: CN=4a60ea2560db24055260a3131348b6aba8655875 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0b:9a:26:4d:dd:fe:ec:cc:16:d3:cd:aa:37: bc:d1:a4:75:ad:57:37:50:4f:22:90:b7:2e:9f:7d: c4:10:4f:e4:4e:eb:95:87:26:8b:97:92:8f:4c:e2: 79:b9:43:61:13:4d:7b:50:25:eb:52:4c:a4:0f:f3: 09:5f:fe:b9:63:4c:fb:f7:c3:6d:7a:7c:95:8d:e4: 8b:05:0e:33:c0:23:86:b7:66:43:d3:3b:ce:9b:d7: 66:31:e7:53:1b:44:bc:37:81:71:4f:ae:72:c2:76: 73:e0:cf:ac:b4:06:a7:16:84:0f:46:d9:f9:32:8f: ea:a7:ec:2c:da:67:5c:51:81:2f:0d:8e:02:61:00: 89:73:c2:79:83:c7:22:7e:67:ce:03:bd:43:0b:33: d9:93:c6:4f:ec:1d:b2:a8:e1:f3:c7:1c:be:7f:4f: 32:29:2e:40:ce:7f:fd:09:d5:1e:d7:9b:89:0f:cf: 2a:f8:65:c7:08:98:a3:e2:db:ef:83:62:68:08:af: 2f:cb:5a:64:f2:c6:03:1b:70:51:e8:ed:4c:03:d7: ff:bd:e9:cf:cd:3d:19:14:8e:0b:17:21:1c:ce:e8: 81:49:dd:c3:a8:8b:d7:5d:32:55:f3:01:cc:2b:8a: d7:46:92:66:94:0b:91:1a:24:1a:4e:aa:e1:ab:7e: 0d:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:60:EA:25:60:DB:24:05:52:60:A3:13:13:48:B6:AB:A8:65:58:75 X509v3 Authority Key Identifier: keyid:FE:53:42:6E:23:61:BA:66:5D:8F:25:BD:3C:FA:EF:C2:0E:BD:A4:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_lNCbiNhumZdjyW9PPrvwg69pIg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7083b8-158f-40d2-91cc-9775a5d6604c/1/_lNCbiNhumZdjyW9PPrvwg69pIg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:50:cb:0f:48:77:5c:39:58:56:ce:e5:66:ca:57:9e:15:3c: ff:6b:dd:00:9b:6c:25:c2:60:e4:65:da:04:48:11:65:f3:a8: 25:ad:84:c0:8e:89:68:e6:05:22:b1:43:6d:d1:04:f3:c3:9a: 89:7a:c6:63:48:ef:f4:0c:b8:2a:cb:a4:6d:a1:2c:20:56:8e: f5:cc:7d:1a:e5:9b:f7:6c:49:7a:0c:3c:2d:e2:f8:d8:5a:98: 47:9b:1e:20:8c:09:2b:eb:0d:17:7a:9f:92:c5:51:c5:bb:e6: 62:9e:ca:42:e5:e7:03:fd:ac:c3:91:60:bc:27:71:78:0b:eb: d5:a8:03:40:c9:f4:7b:7d:af:90:ae:82:57:67:8f:4b:1d:d5: a9:48:63:2b:b2:0e:43:2c:5a:bb:d5:b7:1c:5a:f2:ce:53:1c: d3:47:7e:24:52:fe:87:88:6d:54:72:4d:b4:f1:75:4b:2f:f1: ca:0e:ac:d6:92:1f:7d:67:6d:cf:93:2b:2b:78:ad:24:24:86: 12:d3:ae:36:27:91:29:f8:c7:01:d0:0a:75:0f:72:d6:c8:39: c7:5a:db:94:bd:e4:69:19:0c:f8:30:ba:55:a7:19:ed:18:af: 74:db:12:a7:cf:4f:73:bf:e1:25:85:7d:c6:eb:0b:e8:a4:6c: d4:9f:1c:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrZ9SZ2GI90Cw02nJvwK4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlNTM0MjZlMjM2MWJhNjY1ZDhmMjViZDNjZmFlZmMyMGVi ZGE0ODgwHhcNMjUxMjA2MDgwMDU1WhcNMjUxMjA3MDgwMDU1WjAzMTEwLwYDVQQD Eyg0YTYwZWEyNTYwZGIyNDA1NTI2MGEzMTMxMzQ4YjZhYmE4NjU1ODc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsguaJk3d/uzMFtPNqje80aR1rVc3 UE8ikLcun33EEE/kTuuVhyaLl5KPTOJ5uUNhE017UCXrUkykD/MJX/65Y0z798Nt enyVjeSLBQ4zwCOGt2ZD0zvOm9dmMedTG0S8N4FxT65ywnZz4M+stAanFoQPRtn5 Mo/qp+ws2mdcUYEvDY4CYQCJc8J5g8cifmfOA71DCzPZk8ZP7B2yqOHzxxy+f08y KS5Azn/9CdUe15uJD88q+GXHCJij4tvvg2JoCK8vy1pk8sYDG3BR6O1MA9f/venP zT0ZFI4LFyEczuiBSd3DqIvXXTJV8wHMK4rXRpJmlAuRGiQaTqrhq34NoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEpg6iVg2yQFUmCjExNItquoZVh1MB8GA1UdIwQY MBaAFP5TQm4jYbpmXY8lvTz678IOvaSIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2xOQ2JpTmh1bVpkanlXOVBQcnZ3ZzY5cElnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi83MDgzYjgtMTU4Zi00MGQyLTkxY2Mt OTc3NWE1ZDY2MDRjLzEvX2xOQ2JpTmh1bVpkanlXOVBQcnZ3ZzY5cElnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi83MDgzYjgtMTU4Zi00MGQyLTkxY2MtOTc3NWE1ZDY2MDRj LzEvX2xOQ2JpTmh1bVpkanlXOVBQcnZ3ZzY5cElnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA1DLD0h3 XDlYVs7lZspXnhU8/2vdAJtsJcJg5GXaBEgRZfOoJa2EwI6JaOYFIrFDbdEE88Oa iXrGY0jv9Ay4KsukbaEsIFaO9cx9GuWb92xJegw8LeL42FqYR5seIIwJK+sNF3qf ksVRxbvmYp7KQuXnA/2sw5FgvCdxeAvr1agDQMn0e32vkK6CV2ePSx3VqUhjK7IO Qyxau9W3HFryzlMc00d+JFL+h4htVHJNtPF1Sy/xyg6s1pIffWdtz5MrK3itJCSG EtOuNieRKfjHAdAKdQ9y1sg5x1rblL3kaRkM+DC6VacZ7RivdNsSp89Pc7/hJYV9 xusL6KRs1J8cdQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:33:06 2025 by rpki-client