This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/No41oF8nB7WnQcKnL15Ls0ybCag.mft File: No41oF8nB7WnQcKnL15Ls0ybCag.mft (raw, json) Hash identifier: oXbd4aLU9hN2Gjlw3tP0tWtIwRRKaguinzdlh4DjJcQ= Subject key identifier: 80:7E:6E:1A:D1:2D:CF:1A:2E:83:7D:68:6C:CF:51:F4:32:47:4B:FB Authority key identifier: 36:8E:35:A0:5F:27:07:B5:A7:41:C2:A7:2F:5E:4B:B3:4C:9B:09:A8 Certificate issuer: /CN=368e35a05f2707b5a741c2a72f5e4bb34c9b09a8 Certificate serial: 019AF2E42CED0664EEE4AB5D261AF690FC8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/No41oF8nB7WnQcKnL15Ls0ybCag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/No41oF8nB7WnQcKnL15Ls0ybCag.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 09:00:31 +0000 Manifest this update: Sat 06 Dec 2025 09:00:31 +0000 Manifest next update: Sun 07 Dec 2025 09:00:31 +0000 Files and hashes: 1: L7FYC8e89xGKnty6O1mK_Gb2H5U.roa (hash: McrAWYa182W0VDulttkCRb8Sku8UBSHS1nLFi0h9Euw=) 2: No41oF8nB7WnQcKnL15Ls0ybCag.crl (hash: qxpEi2CnMIMSO3aK5jdbpEgNV7Jpb8bpfB2/U0mrgS4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/No41oF8nB7WnQcKnL15Ls0ybCag.crl rsync://rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/No41oF8nB7WnQcKnL15Ls0ybCag.mft rsync://rpki.ripe.net/repository/DEFAULT/No41oF8nB7WnQcKnL15Ls0ybCag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:e4:2c:ed:06:64:ee:e4:ab:5d:26:1a:f6:90:fc:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=368e35a05f2707b5a741c2a72f5e4bb34c9b09a8 Validity Not Before: Dec 6 09:00:31 2025 GMT Not After : Dec 7 09:00:31 2025 GMT Subject: CN=807e6e1ad12dcf1a2e837d686ccf51f432474bfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:76:f7:0a:59:8e:a5:10:41:88:77:61:d1:a5: 80:8a:9b:67:d7:c6:76:18:a0:1b:ff:d8:4f:af:c4: 4c:df:27:ca:25:b7:f2:f2:e3:fb:55:48:25:51:2e: 83:25:0a:c5:a5:d8:1d:b3:4e:24:46:76:c0:17:7c: ed:17:f3:7d:92:83:40:51:30:29:98:fb:58:51:c7: 92:69:0a:05:d8:50:46:27:f6:e2:c2:93:87:5b:75: 03:b1:28:9c:21:e1:2b:e8:80:69:90:1a:16:01:e0: f5:52:21:04:3c:79:e0:bc:cb:01:36:c9:4a:4b:67: c7:74:d1:f9:bd:8a:98:52:b9:8f:b6:4d:2d:2f:48: 6f:f9:6f:39:6f:d7:0b:b0:0e:52:ef:72:b0:22:19: 8d:f6:64:8d:e0:95:9c:ad:4b:1e:73:b4:51:7d:a9: f4:ee:1a:f3:88:b3:cb:ca:09:6f:a9:19:d5:a9:50: f2:f4:09:fd:35:8d:58:91:7d:60:87:d2:20:94:09: 7e:fe:28:03:7b:1a:c5:8f:15:58:63:91:23:62:7e: e9:88:66:e2:10:92:19:a0:16:79:53:3f:88:c3:fa: df:4b:45:a7:9b:bb:f2:dd:90:12:be:8e:1d:a4:c5: 73:10:b8:54:17:b3:bb:d0:d0:31:0c:e6:0f:ba:95: b1:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:7E:6E:1A:D1:2D:CF:1A:2E:83:7D:68:6C:CF:51:F4:32:47:4B:FB X509v3 Authority Key Identifier: keyid:36:8E:35:A0:5F:27:07:B5:A7:41:C2:A7:2F:5E:4B:B3:4C:9B:09:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/No41oF8nB7WnQcKnL15Ls0ybCag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/No41oF8nB7WnQcKnL15Ls0ybCag.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/No41oF8nB7WnQcKnL15Ls0ybCag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:83:4b:85:6b:2a:f6:3b:22:5d:ce:91:7c:36:27:95:c6:aa: b0:23:ed:81:53:9a:a6:3f:c0:81:8d:cf:2d:b6:18:a4:6d:4e: 68:dc:55:4c:a9:04:f4:87:90:06:04:5e:e2:00:aa:e1:99:41: 51:d4:fc:2e:d8:f1:45:f4:7d:bc:e3:a6:ce:b7:2b:47:72:07: 4d:2a:04:4f:15:b6:af:b1:30:b3:30:80:10:6f:72:13:6f:45: 76:e7:83:82:dd:d9:91:36:1d:03:d9:66:f6:f7:76:98:23:ae: 92:2f:cf:97:3f:e4:4c:e8:f8:96:9b:78:c3:4a:33:bf:c2:a6: 82:7c:0c:20:c6:72:b7:cd:e4:7f:95:a4:ef:9d:3a:8d:43:38: b1:1a:e5:68:3c:59:9f:58:31:c3:77:a0:0c:fe:70:86:f0:f2: ec:de:69:07:4d:df:1c:35:db:1c:eb:b0:80:0c:7e:2a:0a:f2: 73:e5:d4:b0:31:62:92:b3:b4:53:f2:df:27:e9:1d:38:42:e0: ee:89:7f:92:52:00:fe:ef:fe:44:01:2c:a1:ae:f2:79:46:93: 51:cf:62:21:1c:c8:47:f3:be:d6:5e:fa:f2:dc:99:d9:d8:42: e4:01:5f:e9:01:8f:57:e5:78:97:7f:3b:8d:d8:c6:8e:86:3d: 55:12:f5:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZry5CztBmTu5KtdJhr2kPyLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2OGUzNWEwNWYyNzA3YjVhNzQxYzJhNzJmNWU0YmIzNGM5 YjA5YTgwHhcNMjUxMjA2MDkwMDMxWhcNMjUxMjA3MDkwMDMxWjAzMTEwLwYDVQQD Eyg4MDdlNmUxYWQxMmRjZjFhMmU4MzdkNjg2Y2NmNTFmNDMyNDc0YmZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3b3ClmOpRBBiHdh0aWAiptn18Z2 GKAb/9hPr8RM3yfKJbfy8uP7VUglUS6DJQrFpdgds04kRnbAF3ztF/N9koNAUTAp mPtYUceSaQoF2FBGJ/biwpOHW3UDsSicIeEr6IBpkBoWAeD1UiEEPHngvMsBNslK S2fHdNH5vYqYUrmPtk0tL0hv+W85b9cLsA5S73KwIhmN9mSN4JWcrUsec7RRfan0 7hrziLPLyglvqRnVqVDy9An9NY1YkX1gh9IglAl+/igDexrFjxVYY5EjYn7piGbi EJIZoBZ5Uz+Iw/rfS0Wnm7vy3ZASvo4dpMVzELhUF7O70NAxDOYPupWxuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIB+bhrRLc8aLoN9aGzPUfQyR0v7MB8GA1UdIwQY MBaAFDaONaBfJwe1p0HCpy9eS7NMmwmoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTm80MW9GOG5CN1duUWNLbkwxNUxzMHliQ2FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9iYjU0ZDEtODkyZC00NzExLWE5Y2Yt NzZmMTM1YzRmMzExLzEvTm80MW9GOG5CN1duUWNLbkwxNUxzMHliQ2FnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS9iYjU0ZDEtODkyZC00NzExLWE5Y2YtNzZmMTM1YzRmMzEx LzEvTm80MW9GOG5CN1duUWNLbkwxNUxzMHliQ2FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApoNLhWsq 9jsiXc6RfDYnlcaqsCPtgVOapj/AgY3PLbYYpG1OaNxVTKkE9IeQBgRe4gCq4ZlB UdT8LtjxRfR9vOOmzrcrR3IHTSoETxW2r7EwszCAEG9yE29FdueDgt3ZkTYdA9lm 9vd2mCOuki/Plz/kTOj4lpt4w0ozv8KmgnwMIMZyt83kf5Wk7506jUM4sRrlaDxZ n1gxw3egDP5whvDy7N5pB03fHDXbHOuwgAx+Kgryc+XUsDFikrO0U/LfJ+kdOELg 7ol/klIA/u/+RAEsoa7yeUaTUc9iIRzIR/O+1l768tyZ2dhC5AFf6QGPV+V4l387 jdjGjoY9VRL1+w== -----END CERTIFICATE-----Generated at Sat Dec 6 13:15:06 2025 by rpki-client