This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/cbb741-b692-4f09-8cba-c6aec68ab364/1/NhF6aBWpGEeNP4wA1nGlcWa_7so.mft File: NhF6aBWpGEeNP4wA1nGlcWa_7so.mft (raw, json) Hash identifier: n1V7X17tjq3WeCuX+XeM1CTNkpZm1mCHZiLYiOLnlbI= Subject key identifier: CB:5A:B2:FF:2C:A2:18:4D:6F:0B:16:9E:5E:A7:61:A2:E6:E8:CB:F6 Authority key identifier: 36:11:7A:68:15:A9:18:47:8D:3F:8C:00:D6:71:A5:71:66:BF:EE:CA Certificate issuer: /CN=36117a6815a918478d3f8c00d671a57166bfeeca Certificate serial: 019AF2AD671FC34E3D42CDBD4EFB9EAFC735 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhF6aBWpGEeNP4wA1nGlcWa_7so.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/cbb741-b692-4f09-8cba-c6aec68ab364/1/NhF6aBWpGEeNP4wA1nGlcWa_7so.mft Manifest number: 07FB Signing time: Sat 06 Dec 2025 08:00:41 +0000 Manifest this update: Sat 06 Dec 2025 08:00:41 +0000 Manifest next update: Sun 07 Dec 2025 08:00:41 +0000 Files and hashes: 1: NhF6aBWpGEeNP4wA1nGlcWa_7so.crl (hash: Z5W5kZRVyD7LUOZVS3wqudJdnpun5w0bHLaxWg3w120=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/cbb741-b692-4f09-8cba-c6aec68ab364/1/NhF6aBWpGEeNP4wA1nGlcWa_7so.crl rsync://rpki.ripe.net/repository/DEFAULT/18/cbb741-b692-4f09-8cba-c6aec68ab364/1/NhF6aBWpGEeNP4wA1nGlcWa_7so.mft rsync://rpki.ripe.net/repository/DEFAULT/NhF6aBWpGEeNP4wA1nGlcWa_7so.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:67:1f:c3:4e:3d:42:cd:bd:4e:fb:9e:af:c7:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36117a6815a918478d3f8c00d671a57166bfeeca Validity Not Before: Dec 6 08:00:41 2025 GMT Not After : Dec 7 08:00:41 2025 GMT Subject: CN=cb5ab2ff2ca2184d6f0b169e5ea761a2e6e8cbf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:8a:cd:3e:38:3d:e7:27:d4:82:bf:2d:76:7b: d6:ec:6c:0b:f0:00:32:3a:0e:a3:61:9e:8b:38:13: c1:3d:3e:77:f9:c9:09:f0:2a:91:aa:47:60:fb:1e: 65:c8:13:74:d9:9c:fa:a4:f1:d4:e7:aa:ea:94:aa: eb:e5:05:ed:2d:0c:3d:df:99:40:91:35:ed:ba:76: f5:6f:0e:85:ab:c3:50:3a:96:20:40:fa:39:6c:a3: 37:03:6e:12:02:47:7e:34:39:df:4a:02:04:25:3b: d1:c1:ab:04:bc:e2:c8:4c:90:11:0a:28:e2:4b:05: 16:b4:c1:bc:34:6c:9a:0f:50:c0:24:40:e8:14:98: 37:ed:a7:3b:8d:48:7a:5b:1d:67:17:cf:8c:fc:05: 93:d5:42:92:fe:f2:f6:cc:87:31:b3:66:ad:1f:31: 48:70:df:9a:20:80:92:f7:41:b0:e5:ad:01:ad:11: 71:38:aa:80:62:98:d0:f8:b7:9b:f1:18:8d:63:e6: f5:a9:22:da:88:fc:72:9b:17:0d:ea:19:07:b1:be: 9a:ce:af:af:a6:93:3b:05:30:ff:8d:71:66:43:6b: 35:b3:11:05:5a:f5:a5:fd:d5:ed:67:f6:8f:40:92: fd:88:1b:d1:b6:7f:88:75:e7:b6:32:24:00:05:1c: bb:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:5A:B2:FF:2C:A2:18:4D:6F:0B:16:9E:5E:A7:61:A2:E6:E8:CB:F6 X509v3 Authority Key Identifier: keyid:36:11:7A:68:15:A9:18:47:8D:3F:8C:00:D6:71:A5:71:66:BF:EE:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhF6aBWpGEeNP4wA1nGlcWa_7so.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cbb741-b692-4f09-8cba-c6aec68ab364/1/NhF6aBWpGEeNP4wA1nGlcWa_7so.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cbb741-b692-4f09-8cba-c6aec68ab364/1/NhF6aBWpGEeNP4wA1nGlcWa_7so.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:c5:64:49:81:64:d4:3c:45:2a:92:4a:75:34:dd:d2:f3:95: ce:3a:ce:50:59:91:9c:6d:bb:3e:35:6f:8f:e9:33:dc:78:c2: 45:5d:42:1a:03:71:bd:ed:0f:f3:cd:bd:87:af:d6:0c:66:41: 27:fa:45:5d:37:e7:e1:e7:98:ed:db:91:50:63:99:76:a3:76: 94:73:bb:ca:db:20:2f:f4:77:66:a8:f9:c6:35:d5:a5:72:ad: 6a:c9:aa:2b:18:54:69:5e:a9:04:07:b2:e4:c8:3b:69:43:05: 06:9c:4d:05:5a:76:b2:37:62:95:8e:c7:da:21:e5:87:a2:ee: 67:0f:5d:f2:9d:04:62:9f:51:08:93:5a:35:26:3b:bd:b2:fe: 79:e0:39:0e:ad:d5:f7:6d:8a:6f:e7:77:19:6d:4b:49:a6:3d: 28:d7:3b:41:a5:62:31:2c:43:21:65:94:1a:62:2e:8a:27:11: 56:b0:03:66:4b:79:cd:f7:0a:ad:db:06:71:d4:99:a7:cd:bc: 55:8c:c1:4a:5f:ea:22:7f:26:ff:c2:9f:fc:f3:ea:d0:6e:a9: 62:61:92:d5:a6:2a:b2:83:e1:86:43:31:08:cd:13:e8:d3:60: 83:d5:19:09:26:1c:ea:04:a2:2f:ab:05:a5:9e:b2:cf:df:61: 4b:6b:59:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrWcfw049Qs29Tvuer8c1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2MTE3YTY4MTVhOTE4NDc4ZDNmOGMwMGQ2NzFhNTcxNjZi ZmVlY2EwHhcNMjUxMjA2MDgwMDQxWhcNMjUxMjA3MDgwMDQxWjAzMTEwLwYDVQQD EyhjYjVhYjJmZjJjYTIxODRkNmYwYjE2OWU1ZWE3NjFhMmU2ZThjYmY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIrNPjg95yfUgr8tdnvW7GwL8AAy Og6jYZ6LOBPBPT53+ckJ8CqRqkdg+x5lyBN02Zz6pPHU56rqlKrr5QXtLQw935lA kTXtunb1bw6Fq8NQOpYgQPo5bKM3A24SAkd+NDnfSgIEJTvRwasEvOLITJARCiji SwUWtMG8NGyaD1DAJEDoFJg37ac7jUh6Wx1nF8+M/AWT1UKS/vL2zIcxs2atHzFI cN+aIICS90Gw5a0BrRFxOKqAYpjQ+Leb8RiNY+b1qSLaiPxymxcN6hkHsb6azq+v ppM7BTD/jXFmQ2s1sxEFWvWl/dXtZ/aPQJL9iBvRtn+Idee2MiQABRy76QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMtasv8sohhNbwsWnl6nYaLm6Mv2MB8GA1UdIwQY MBaAFDYRemgVqRhHjT+MANZxpXFmv+7KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmhGNmFCV3BHRWVOUDR3QTFuR2xjV2FfN3NvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9jYmI3NDEtYjY5Mi00ZjA5LThjYmEt YzZhZWM2OGFiMzY0LzEvTmhGNmFCV3BHRWVOUDR3QTFuR2xjV2FfN3NvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9jYmI3NDEtYjY5Mi00ZjA5LThjYmEtYzZhZWM2OGFiMzY0 LzEvTmhGNmFCV3BHRWVOUDR3QTFuR2xjV2FfN3NvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK8VkSYFk 1DxFKpJKdTTd0vOVzjrOUFmRnG27PjVvj+kz3HjCRV1CGgNxve0P8829h6/WDGZB J/pFXTfn4eeY7duRUGOZdqN2lHO7ytsgL/R3Zqj5xjXVpXKtasmqKxhUaV6pBAey 5Mg7aUMFBpxNBVp2sjdilY7H2iHlh6LuZw9d8p0EYp9RCJNaNSY7vbL+eeA5Dq3V 922Kb+d3GW1LSaY9KNc7QaViMSxDIWWUGmIuiicRVrADZkt5zfcKrdsGcdSZp828 VYzBSl/qIn8m/8Kf/PPq0G6pYmGS1aYqsoPhhkMxCM0T6NNgg9UZCSYc6gSiL6sF pZ6yz99hS2tZLg== -----END CERTIFICATE-----Generated at Sat Dec 6 14:33:24 2025 by rpki-client