This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/1bde39-b6d5-46ec-a813-26ef96643d84/1/noBwLuah3L864lehmUFfWbgzjqQ.mft File: noBwLuah3L864lehmUFfWbgzjqQ.mft (raw, json) Hash identifier: uFt7wPcAUvx99Yo1h3pWX8dsMqjM9WPFhRM/tNLiPz8= Subject key identifier: 60:80:EE:77:88:71:71:B6:6C:4D:C7:BE:92:94:80:60:CB:C5:97:A0 Authority key identifier: 9E:80:70:2E:E6:A1:DC:BF:3A:E2:57:A1:99:41:5F:59:B8:33:8E:A4 Certificate issuer: /CN=9e80702ee6a1dcbf3ae257a199415f59b8338ea4 Certificate serial: 019AF23FA9F4DAF23DE6A796066740AD2272 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/noBwLuah3L864lehmUFfWbgzjqQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/1bde39-b6d5-46ec-a813-26ef96643d84/1/noBwLuah3L864lehmUFfWbgzjqQ.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 06:00:49 +0000 Manifest this update: Sat 06 Dec 2025 06:00:49 +0000 Manifest next update: Sun 07 Dec 2025 06:00:49 +0000 Files and hashes: 1: 4r39zvWrkYP2asO0kOUkjIaBE5M.roa (hash: v58EqYlL6LzlpEJ1F9DVvqr5mbMv8/9nhYAa/WADapg=) 2: noBwLuah3L864lehmUFfWbgzjqQ.crl (hash: oce9md48GYDKHUHkXEMGtdgWe/TqZCB6wO9i7T94ut8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/1bde39-b6d5-46ec-a813-26ef96643d84/1/noBwLuah3L864lehmUFfWbgzjqQ.crl rsync://rpki.ripe.net/repository/DEFAULT/36/1bde39-b6d5-46ec-a813-26ef96643d84/1/noBwLuah3L864lehmUFfWbgzjqQ.mft rsync://rpki.ripe.net/repository/DEFAULT/noBwLuah3L864lehmUFfWbgzjqQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:a9:f4:da:f2:3d:e6:a7:96:06:67:40:ad:22:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e80702ee6a1dcbf3ae257a199415f59b8338ea4 Validity Not Before: Dec 6 06:00:49 2025 GMT Not After : Dec 7 06:00:49 2025 GMT Subject: CN=6080ee77887171b66c4dc7be92948060cbc597a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:8e:b6:9f:a3:f9:8e:36:88:86:f7:c1:62:57: d5:ab:7a:13:ff:18:be:62:a2:a2:92:13:b3:51:d9: af:6f:20:83:fa:50:5a:30:9f:a1:1b:29:ce:a7:0b: 87:fe:73:ac:1b:a9:be:d3:8d:a1:a0:ea:48:10:3d: f5:a6:52:aa:64:7e:e7:92:25:be:c3:25:51:69:d7: 76:e4:1b:04:90:0b:bd:1d:2c:77:a2:f9:1e:c8:8b: 49:70:13:62:ed:ee:6f:aa:f7:53:6b:dc:d7:4f:85: f5:3c:69:19:4b:8c:4b:d2:66:b3:db:34:01:e1:ca: 7c:20:64:c5:3e:41:82:60:29:c0:37:82:2c:17:7a: 99:69:6c:56:20:b3:96:f3:72:d3:ba:27:2d:c7:5a: 2d:fc:47:df:fc:cd:56:78:5b:fe:cd:f9:a4:07:5b: 7e:95:ce:c1:12:60:50:8d:a9:77:6a:85:af:71:7b: 98:91:f2:47:32:c0:df:ea:14:fe:11:cc:68:2b:1f: 2f:cb:a8:52:eb:25:f6:f6:7f:a3:4d:c7:46:41:a5: cb:6b:4f:5b:7f:ef:56:91:55:2f:24:5c:4c:7d:7e: c4:43:b7:18:58:55:7b:83:76:ad:71:49:da:08:f4: 07:8f:1f:b9:43:26:0d:cb:e5:29:2f:f2:43:4d:13: 74:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:80:EE:77:88:71:71:B6:6C:4D:C7:BE:92:94:80:60:CB:C5:97:A0 X509v3 Authority Key Identifier: keyid:9E:80:70:2E:E6:A1:DC:BF:3A:E2:57:A1:99:41:5F:59:B8:33:8E:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/noBwLuah3L864lehmUFfWbgzjqQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1bde39-b6d5-46ec-a813-26ef96643d84/1/noBwLuah3L864lehmUFfWbgzjqQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1bde39-b6d5-46ec-a813-26ef96643d84/1/noBwLuah3L864lehmUFfWbgzjqQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:e6:ce:a8:c2:69:19:2f:11:1a:2c:82:f8:e4:e4:08:6a:c3: 16:7e:b4:0f:d1:26:c6:5a:8e:12:9b:d3:e6:e6:81:c1:e6:ec: a8:30:78:89:62:fd:c9:31:11:32:f8:dd:55:ac:ba:62:80:0b: 01:2b:60:a8:72:89:e7:3a:f0:21:b0:f1:3c:75:95:a9:b1:e5: 61:6d:20:2e:28:57:e8:90:35:86:b0:f0:83:dd:d3:38:ec:59: 4a:45:15:2b:c3:8b:f8:90:fe:03:07:ce:82:5a:64:50:37:8d: 93:e3:2b:98:ed:53:8e:04:d5:23:78:39:a2:06:e5:f3:02:ff: e6:c7:d8:c2:19:d0:e4:96:44:38:9a:69:4a:12:29:58:13:e4: bc:04:b8:61:61:59:b8:65:af:c7:39:97:85:a5:da:5d:0f:55: d1:9e:ee:b6:15:fb:ab:65:4f:0c:21:ce:fa:a5:8b:23:c7:11: 0f:9e:75:fc:af:c5:89:86:81:61:e8:53:72:ea:c8:f4:20:db: a1:74:d3:f5:c2:ca:9f:df:bd:15:4f:0e:9d:c4:81:c1:eb:1f: 95:fb:34:a6:64:fa:2a:d0:f9:db:78:d0:97:4d:92:4c:ff:b5: 2a:21:ea:82:2f:e9:3c:d3:ed:8f:4a:13:09:e9:ed:71:64:ae: bf:68:0c:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP6n02vI95qeWBmdArSJyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllODA3MDJlZTZhMWRjYmYzYWUyNTdhMTk5NDE1ZjU5Yjgz MzhlYTQwHhcNMjUxMjA2MDYwMDQ5WhcNMjUxMjA3MDYwMDQ5WjAzMTEwLwYDVQQD Eyg2MDgwZWU3Nzg4NzE3MWI2NmM0ZGM3YmU5Mjk0ODA2MGNiYzU5N2EwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq462n6P5jjaIhvfBYlfVq3oT/xi+ YqKikhOzUdmvbyCD+lBaMJ+hGynOpwuH/nOsG6m+042hoOpIED31plKqZH7nkiW+ wyVRadd25BsEkAu9HSx3ovkeyItJcBNi7e5vqvdTa9zXT4X1PGkZS4xL0maz2zQB 4cp8IGTFPkGCYCnAN4IsF3qZaWxWILOW83LTuictx1ot/Eff/M1WeFv+zfmkB1t+ lc7BEmBQjal3aoWvcXuYkfJHMsDf6hT+EcxoKx8vy6hS6yX29n+jTcdGQaXLa09b f+9WkVUvJFxMfX7EQ7cYWFV7g3atcUnaCPQHjx+5QyYNy+UpL/JDTRN0dwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGCA7neIcXG2bE3HvpKUgGDLxZegMB8GA1UdIwQY MBaAFJ6AcC7mody/OuJXoZlBX1m4M46kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbm9Cd0x1YWgzTDg2NGxlaG1VRmZXYmd6anFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8xYmRlMzktYjZkNS00NmVjLWE4MTMt MjZlZjk2NjQzZDg0LzEvbm9Cd0x1YWgzTDg2NGxlaG1VRmZXYmd6anFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8xYmRlMzktYjZkNS00NmVjLWE4MTMtMjZlZjk2NjQzZDg0 LzEvbm9Cd0x1YWgzTDg2NGxlaG1VRmZXYmd6anFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX+bOqMJp GS8RGiyC+OTkCGrDFn60D9EmxlqOEpvT5uaBwebsqDB4iWL9yTERMvjdVay6YoAL AStgqHKJ5zrwIbDxPHWVqbHlYW0gLihX6JA1hrDwg93TOOxZSkUVK8OL+JD+AwfO glpkUDeNk+MrmO1TjgTVI3g5ogbl8wL/5sfYwhnQ5JZEOJppShIpWBPkvAS4YWFZ uGWvxzmXhaXaXQ9V0Z7uthX7q2VPDCHO+qWLI8cRD551/K/FiYaBYehTcurI9CDb oXTT9cLKn9+9FU8OncSBwesflfs0pmT6KtD523jQl02STP+1KiHqgi/pPNPtj0oT CentcWSuv2gMHA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:33:24 2025 by rpki-client