This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/No41oF8nB7WnQcKnL15Ls0ybCag.mft File: No41oF8nB7WnQcKnL15Ls0ybCag.mft (raw, json) Hash identifier: AVKefhcbZrswPYBenlspHSSiwNjy9OrV4MYwelMS8U4= Subject key identifier: C8:76:4B:56:DF:F7:70:A6:A7:BE:15:9F:34:E1:AD:4F:39:A3:83:FB Authority key identifier: 36:8E:35:A0:5F:27:07:B5:A7:41:C2:A7:2F:5E:4B:B3:4C:9B:09:A8 Certificate issuer: /CN=368e35a05f2707b5a741c2a72f5e4bb34c9b09a8 Certificate serial: 019B2EC215DF4A10D9EE064448AA53BDF7C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/No41oF8nB7WnQcKnL15Ls0ybCag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/No41oF8nB7WnQcKnL15Ls0ybCag.mft Manifest number: 177F Signing time: Thu 18 Dec 2025 00:00:30 +0000 Manifest this update: Thu 18 Dec 2025 00:00:30 +0000 Manifest next update: Fri 19 Dec 2025 00:00:30 +0000 Files and hashes: 1: L7FYC8e89xGKnty6O1mK_Gb2H5U.roa (hash: McrAWYa182W0VDulttkCRb8Sku8UBSHS1nLFi0h9Euw=) 2: No41oF8nB7WnQcKnL15Ls0ybCag.crl (hash: TE3vfnYaQGNd/wuXLiY0tJ5W9uacTOO0VxXHvV8iCuw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/No41oF8nB7WnQcKnL15Ls0ybCag.crl rsync://rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/No41oF8nB7WnQcKnL15Ls0ybCag.mft rsync://rpki.ripe.net/repository/DEFAULT/No41oF8nB7WnQcKnL15Ls0ybCag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:c2:15:df:4a:10:d9:ee:06:44:48:aa:53:bd:f7:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=368e35a05f2707b5a741c2a72f5e4bb34c9b09a8 Validity Not Before: Dec 18 00:00:30 2025 GMT Not After : Dec 19 00:00:30 2025 GMT Subject: CN=c8764b56dff770a6a7be159f34e1ad4f39a383fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:d7:53:ae:86:e9:28:39:ce:4d:59:f9:68:9c: eb:21:55:31:d1:9f:20:d3:4c:69:4a:a8:00:62:08: 56:51:dd:5c:52:b9:fc:d0:a7:b7:15:38:c2:bb:54: 1a:11:0b:fa:1f:83:8b:aa:09:25:37:85:7b:fb:9d: e6:6d:96:e7:d6:73:09:4c:6e:6d:c6:d4:52:19:41: 88:12:6e:07:43:d7:d9:e7:6d:4c:09:6c:2e:fd:b6: dd:82:66:b9:ea:77:09:16:26:95:a3:01:d7:08:46: 01:03:92:a3:cf:0d:b4:b0:93:30:54:04:e5:85:1f: 68:6a:4e:a9:20:ee:69:70:d7:3d:59:46:08:1d:cf: 28:5e:40:d3:80:9c:be:85:be:fa:a2:2c:27:e1:57: ef:b5:41:c4:47:7b:7c:3e:ae:2c:7f:d5:d2:36:c5: f2:40:1b:5e:4f:5d:dc:d0:c0:3e:6f:e3:35:8e:ac: 65:06:e7:ef:d2:f2:b7:83:a1:46:9b:74:f3:36:3c: aa:10:6a:1a:b9:d9:59:9b:45:55:ef:27:d5:d2:61: ff:86:c8:98:31:c3:2b:54:85:2f:9a:9f:9e:d1:06: 75:2f:ea:59:e7:e6:70:72:bc:5b:63:22:eb:54:d4: 96:7e:42:8a:ce:64:f7:77:e9:f7:6a:5f:aa:67:3d: d4:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:76:4B:56:DF:F7:70:A6:A7:BE:15:9F:34:E1:AD:4F:39:A3:83:FB X509v3 Authority Key Identifier: keyid:36:8E:35:A0:5F:27:07:B5:A7:41:C2:A7:2F:5E:4B:B3:4C:9B:09:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/No41oF8nB7WnQcKnL15Ls0ybCag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/No41oF8nB7WnQcKnL15Ls0ybCag.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/No41oF8nB7WnQcKnL15Ls0ybCag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:2e:e6:eb:1f:e5:0e:27:b8:64:2e:54:eb:3d:3f:61:4e:96: d3:b3:66:ff:62:cb:17:8e:a0:8a:e6:04:2d:25:86:42:73:ad: 45:76:61:79:7e:21:16:12:e6:72:0c:8d:a3:a4:3c:70:91:ee: e3:e4:e6:d4:e8:8c:eb:1f:d1:08:db:de:22:b0:0f:e3:46:06: 20:93:ee:26:2f:25:26:a2:f3:2d:bf:73:c5:9e:37:50:be:6f: 77:e1:59:30:1d:b5:0c:4e:27:d3:7a:59:b7:66:a7:88:88:8d: 0e:ec:58:92:55:b5:1f:7d:6d:55:9a:d8:22:a1:7c:dd:d9:7f: 40:2f:0d:bf:b4:3c:14:1e:e5:18:c8:13:18:9d:b5:55:1a:d7: bd:ad:3e:2f:d9:52:60:a0:84:48:00:ab:c1:74:02:c1:cd:33: 6f:3c:67:c0:d1:71:44:53:d7:8d:2f:a6:68:a7:ad:6d:27:f5: fc:60:4c:29:cb:9e:ae:3d:cb:1a:6f:d4:af:15:37:a8:c6:19: 6f:02:11:37:c9:d2:31:97:10:04:7b:c2:6d:13:dd:04:a9:e3: fe:f0:a4:f5:17:ca:8e:7d:8b:21:2a:73:c0:57:99:94:9b:e8: cb:25:9f:06:34:76:e6:56:af:81:bf:5f:60:76:f3:07:3f:59: ab:02:45:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsuwhXfShDZ7gZESKpTvffHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2OGUzNWEwNWYyNzA3YjVhNzQxYzJhNzJmNWU0YmIzNGM5 YjA5YTgwHhcNMjUxMjE4MDAwMDMwWhcNMjUxMjE5MDAwMDMwWjAzMTEwLwYDVQQD EyhjODc2NGI1NmRmZjc3MGE2YTdiZTE1OWYzNGUxYWQ0ZjM5YTM4M2ZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktdTrobpKDnOTVn5aJzrIVUx0Z8g 00xpSqgAYghWUd1cUrn80Ke3FTjCu1QaEQv6H4OLqgklN4V7+53mbZbn1nMJTG5t xtRSGUGIEm4HQ9fZ521MCWwu/bbdgma56ncJFiaVowHXCEYBA5Kjzw20sJMwVATl hR9oak6pIO5pcNc9WUYIHc8oXkDTgJy+hb76oiwn4VfvtUHER3t8Pq4sf9XSNsXy QBteT13c0MA+b+M1jqxlBufv0vK3g6FGm3TzNjyqEGoaudlZm0VV7yfV0mH/hsiY McMrVIUvmp+e0QZ1L+pZ5+ZwcrxbYyLrVNSWfkKKzmT3d+n3al+qZz3UmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMh2S1bf93Cmp74VnzThrU85o4P7MB8GA1UdIwQY MBaAFDaONaBfJwe1p0HCpy9eS7NMmwmoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTm80MW9GOG5CN1duUWNLbkwxNUxzMHliQ2FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9iYjU0ZDEtODkyZC00NzExLWE5Y2Yt NzZmMTM1YzRmMzExLzEvTm80MW9GOG5CN1duUWNLbkwxNUxzMHliQ2FnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS9iYjU0ZDEtODkyZC00NzExLWE5Y2YtNzZmMTM1YzRmMzEx LzEvTm80MW9GOG5CN1duUWNLbkwxNUxzMHliQ2FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAni7m6x/l Die4ZC5U6z0/YU6W07Nm/2LLF46giuYELSWGQnOtRXZheX4hFhLmcgyNo6Q8cJHu 4+Tm1OiM6x/RCNveIrAP40YGIJPuJi8lJqLzLb9zxZ43UL5vd+FZMB21DE4n03pZ t2aniIiNDuxYklW1H31tVZrYIqF83dl/QC8Nv7Q8FB7lGMgTGJ21VRrXva0+L9lS YKCESACrwXQCwc0zbzxnwNFxRFPXjS+maKetbSf1/GBMKcuerj3LGm/UrxU3qMYZ bwIRN8nSMZcQBHvCbRPdBKnj/vCk9RfKjn2LISpzwFeZlJvoyyWfBjR25lavgb9f YHbzBz9ZqwJFIw== -----END CERTIFICATE-----Generated at Thu Dec 18 07:11:48 2025 by rpki-client