This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.mft File: nBOUdoyaOaYRJnTXN1lypmlrRoA.mft (raw, json) Hash identifier: /Z2xgiML62e2UXUeFRsdtXD89YlyZyClfYUdBwiLw+8= Subject key identifier: A8:4B:85:D6:5B:AB:80:AC:AA:B7:6E:95:40:A0:29:B5:34:BE:15:ED Authority key identifier: 9C:13:94:76:8C:9A:39:A6:11:26:74:D7:37:59:72:A6:69:6B:46:80 Certificate issuer: /CN=9c1394768c9a39a6112674d7375972a6696b4680 Certificate serial: 019AF1646B54AFC9E125A74F3E1E627D047A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nBOUdoyaOaYRJnTXN1lypmlrRoA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.mft Manifest number: 0AD4 Signing time: Sat 06 Dec 2025 02:01:21 +0000 Manifest this update: Sat 06 Dec 2025 02:01:21 +0000 Manifest next update: Sun 07 Dec 2025 02:01:21 +0000 Files and hashes: 1: nBOUdoyaOaYRJnTXN1lypmlrRoA.crl (hash: DkfJln5FxKh6+XR2XlUMTqOekiB9yIYKyHjwSM0UZqY=) 2: naPzLZcFHsUMBLgsbgPGJCO-CF0.roa (hash: nIyF1z3b3iwZq0quO5N0o2X6gTB8LSfxugEcTz9j98Q=) 3: xvsRInrWKS5s7BFPqZmvGE0s2hc.roa (hash: vqluH5uE90JrgU5HmvgOgqmyqSAabArFrkPQ0aAKYvU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.crl rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.mft rsync://rpki.ripe.net/repository/DEFAULT/nBOUdoyaOaYRJnTXN1lypmlrRoA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:6b:54:af:c9:e1:25:a7:4f:3e:1e:62:7d:04:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c1394768c9a39a6112674d7375972a6696b4680 Validity Not Before: Dec 6 02:01:21 2025 GMT Not After : Dec 7 02:01:21 2025 GMT Subject: CN=a84b85d65bab80acaab76e9540a029b534be15ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:de:7b:40:0c:f0:ec:36:51:68:f8:ee:cf:14: 12:66:41:41:be:f5:99:64:73:0b:ff:73:21:e0:69: 89:b3:a0:3b:d0:91:b4:a1:81:6e:a4:81:79:b3:6a: a5:3b:90:f5:1e:cf:b8:ce:54:db:b4:ac:bd:20:4a: 4d:e4:11:63:9a:0f:46:19:7c:cc:6c:eb:bc:e0:6c: 33:f3:be:67:25:0d:1e:29:f3:c9:58:8f:91:0c:1e: cb:0f:bb:4a:4c:1b:a4:9c:e4:e1:1e:30:c6:46:cc: a2:e7:54:67:f0:3c:c6:b6:0d:a2:09:c3:5f:06:ab: 35:f8:96:e9:3c:d0:63:8e:89:be:46:f8:a9:16:70: 40:7f:05:25:72:d2:fb:a3:8e:ca:16:75:7f:90:f6: b1:5b:b8:12:50:3a:66:07:98:bf:0f:32:61:70:e8: c3:d2:2b:64:f6:48:7f:65:98:72:79:4c:e1:a6:43: 46:4e:9f:89:00:51:5c:11:23:46:8a:4c:5d:fa:0f: 52:6d:f1:f0:50:91:87:f4:95:7f:e5:39:91:e4:68: 35:5d:d2:ca:ae:92:1f:94:42:45:bb:2c:78:79:2a: 23:2c:b6:da:b7:3a:91:72:80:c7:71:82:2c:65:69: eb:ea:82:73:c5:3b:75:b7:b3:a1:43:cc:71:cf:4c: 01:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:4B:85:D6:5B:AB:80:AC:AA:B7:6E:95:40:A0:29:B5:34:BE:15:ED X509v3 Authority Key Identifier: keyid:9C:13:94:76:8C:9A:39:A6:11:26:74:D7:37:59:72:A6:69:6B:46:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nBOUdoyaOaYRJnTXN1lypmlrRoA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:2d:1f:3f:74:5b:ec:d9:c3:c4:fc:ef:8f:30:a0:62:c6:f9: 4c:fc:b7:a6:49:5f:91:89:d2:70:1b:0b:db:a0:86:ce:7b:f1: ff:ce:bb:f5:cd:1f:ff:37:97:6d:1d:12:51:d8:f2:11:20:a8: 47:05:89:af:51:98:a4:8e:5c:b3:da:d7:76:96:e5:b8:78:f0: 01:19:03:24:03:9d:b4:a3:b1:98:89:5e:8b:c3:57:0d:74:ad: 29:ed:63:bd:99:6a:2a:91:d5:3a:c5:82:a2:2c:bc:fc:56:82: d4:de:1d:45:6d:a6:99:10:00:53:ab:1d:31:54:8c:d7:42:17: da:32:90:56:0f:c2:14:44:2b:7d:9c:3a:ad:88:bc:ae:c6:e2: 36:93:02:32:6d:9a:7a:56:2f:88:52:fe:c3:8e:1f:c5:21:6b: e9:8d:9d:b3:a9:52:ee:33:21:70:7b:8b:b3:04:1b:d9:ba:ab: b5:b8:6f:60:fd:fc:2c:a6:f1:5c:a0:81:bf:fd:99:7e:26:87: a7:a7:b0:6f:8c:8d:fc:48:1a:f2:3b:8a:07:55:e8:60:4e:ac: 7d:2e:03:ee:f6:d8:73:36:37:a1:be:3e:cb:f8:13:64:6d:16: 0a:e3:24:20:87:8a:19:df:e2:21:72:4c:91:58:34:ed:92:af: ec:18:7d:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZGtUr8nhJadPPh5ifQR6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljMTM5NDc2OGM5YTM5YTYxMTI2NzRkNzM3NTk3MmE2Njk2 YjQ2ODAwHhcNMjUxMjA2MDIwMTIxWhcNMjUxMjA3MDIwMTIxWjAzMTEwLwYDVQQD EyhhODRiODVkNjViYWI4MGFjYWFiNzZlOTU0MGEwMjliNTM0YmUxNWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArt57QAzw7DZRaPjuzxQSZkFBvvWZ ZHML/3Mh4GmJs6A70JG0oYFupIF5s2qlO5D1Hs+4zlTbtKy9IEpN5BFjmg9GGXzM bOu84Gwz875nJQ0eKfPJWI+RDB7LD7tKTBuknOThHjDGRsyi51Rn8DzGtg2iCcNf Bqs1+JbpPNBjjom+RvipFnBAfwUlctL7o47KFnV/kPaxW7gSUDpmB5i/DzJhcOjD 0itk9kh/ZZhyeUzhpkNGTp+JAFFcESNGikxd+g9SbfHwUJGH9JV/5TmR5Gg1XdLK rpIflEJFuyx4eSojLLbatzqRcoDHcYIsZWnr6oJzxTt1t7OhQ8xxz0wBqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKhLhdZbq4CsqrdulUCgKbU0vhXtMB8GA1UdIwQY MBaAFJwTlHaMmjmmESZ01zdZcqZpa0aAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkJPVWRveWFPYVlSSm5UWE4xbHlwbWxyUm9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8zZTcyMTAtMDUyOC00NDU2LWI2OGUt YTcxM2ExOTE1YzkwLzEvbkJPVWRveWFPYVlSSm5UWE4xbHlwbWxyUm9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy8zZTcyMTAtMDUyOC00NDU2LWI2OGUtYTcxM2ExOTE1Yzkw LzEvbkJPVWRveWFPYVlSSm5UWE4xbHlwbWxyUm9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAey0fP3Rb 7NnDxPzvjzCgYsb5TPy3pklfkYnScBsL26CGznvx/8679c0f/zeXbR0SUdjyESCo RwWJr1GYpI5cs9rXdpbluHjwARkDJAOdtKOxmIlei8NXDXStKe1jvZlqKpHVOsWC oiy8/FaC1N4dRW2mmRAAU6sdMVSM10IX2jKQVg/CFEQrfZw6rYi8rsbiNpMCMm2a elYviFL+w44fxSFr6Y2ds6lS7jMhcHuLswQb2bqrtbhvYP38LKbxXKCBv/2ZfiaH p6ewb4yN/Ega8juKB1XoYE6sfS4D7vbYczY3ob4+y/gTZG0WCuMkIIeKGd/iIXJM kVg07ZKv7Bh9eA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:10:07 2025 by rpki-client