This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c4a45f-4213-4f01-98f6-98eb53b9502a/1/bNoVAPXJY-0jT9lIWfI7MvSIXfw.mft File: bNoVAPXJY-0jT9lIWfI7MvSIXfw.mft (raw, json) Hash identifier: oTqBcQlwbQUATcFJA7X6M0cTakbV4xEbSgPHyCxYJeU= Subject key identifier: EA:9E:C1:CE:78:97:14:69:64:80:9B:68:4E:4A:5B:7E:75:3D:76:F4 Authority key identifier: 6C:DA:15:00:F5:C9:63:ED:23:4F:D9:48:59:F2:3B:32:F4:88:5D:FC Certificate issuer: /CN=6cda1500f5c963ed234fd94859f23b32f4885dfc Certificate serial: 019AF1D2442788CD7D4F0D0E64E88A18229C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bNoVAPXJY-0jT9lIWfI7MvSIXfw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c4a45f-4213-4f01-98f6-98eb53b9502a/1/bNoVAPXJY-0jT9lIWfI7MvSIXfw.mft Manifest number: 1540 Signing time: Sat 06 Dec 2025 04:01:20 +0000 Manifest this update: Sat 06 Dec 2025 04:01:20 +0000 Manifest next update: Sun 07 Dec 2025 04:01:20 +0000 Files and hashes: 1: VL7EtVPW-Ba0tPYDXOg-sXCbn4U.roa (hash: gs/UbUcaVfJny1jbjzMdFc3Au+82Qsl/IH1AWl7JplE=) 2: bNoVAPXJY-0jT9lIWfI7MvSIXfw.crl (hash: XPjBo9Tc317P2rhxISd/2qiCjnZCvvdnI5k18GvfO5U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/c4a45f-4213-4f01-98f6-98eb53b9502a/1/bNoVAPXJY-0jT9lIWfI7MvSIXfw.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/c4a45f-4213-4f01-98f6-98eb53b9502a/1/bNoVAPXJY-0jT9lIWfI7MvSIXfw.mft rsync://rpki.ripe.net/repository/DEFAULT/bNoVAPXJY-0jT9lIWfI7MvSIXfw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:44:27:88:cd:7d:4f:0d:0e:64:e8:8a:18:22:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cda1500f5c963ed234fd94859f23b32f4885dfc Validity Not Before: Dec 6 04:01:20 2025 GMT Not After : Dec 7 04:01:20 2025 GMT Subject: CN=ea9ec1ce7897146964809b684e4a5b7e753d76f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:fd:72:71:3e:78:6c:2c:c5:c0:e6:e6:c1:d6: a7:d6:0d:52:01:21:48:84:95:ea:0f:1f:a6:7a:ed: 81:93:57:e7:3c:fe:73:c5:1c:4b:6f:a4:66:82:b9: 38:e5:f1:bf:60:33:17:37:b7:d7:80:0c:9c:ca:69: b3:b7:ae:2c:83:66:5f:12:28:ee:cd:c0:07:dd:80: b2:a5:3a:98:76:f1:f9:8d:71:ae:73:30:11:c1:d0: e4:b9:d2:c5:48:c7:07:3a:84:83:13:5a:c8:ee:99: 08:a2:1e:38:70:db:52:9e:fe:ff:c2:81:19:c3:c9: e8:bc:ca:77:ab:60:85:15:cf:b7:ea:d1:c4:a6:f5: 1c:d8:c9:58:66:a5:fa:d3:25:de:b9:57:06:37:89: 9f:8a:0a:e5:e5:6e:ec:71:2f:dc:24:1c:2d:ca:43: 9b:b6:74:9e:99:cc:86:70:94:7f:89:57:7d:c3:65: b6:2a:d8:09:3d:99:ca:59:02:db:c7:43:54:48:53: a9:6b:2d:b0:3f:83:f4:69:83:47:37:b9:f5:97:b6: 74:23:49:0a:ee:e8:78:71:64:e7:5e:18:3a:15:6c: d0:a7:bc:cb:20:14:ad:79:df:b7:ba:d8:81:51:7d: cd:78:1b:24:f5:6e:2f:e1:3d:d7:a7:83:62:97:c7: c1:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:9E:C1:CE:78:97:14:69:64:80:9B:68:4E:4A:5B:7E:75:3D:76:F4 X509v3 Authority Key Identifier: keyid:6C:DA:15:00:F5:C9:63:ED:23:4F:D9:48:59:F2:3B:32:F4:88:5D:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNoVAPXJY-0jT9lIWfI7MvSIXfw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c4a45f-4213-4f01-98f6-98eb53b9502a/1/bNoVAPXJY-0jT9lIWfI7MvSIXfw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c4a45f-4213-4f01-98f6-98eb53b9502a/1/bNoVAPXJY-0jT9lIWfI7MvSIXfw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:8c:54:40:e3:0b:0b:bf:6c:4d:e3:b7:db:fb:93:a8:72:a1: bd:4d:59:53:c2:32:81:27:b0:79:28:ad:de:eb:22:89:d8:ee: 2a:a8:a9:2c:d5:c6:c8:83:7c:21:cf:5b:95:78:1e:a5:58:bb: 43:d1:6d:a3:a0:80:a1:82:ed:58:42:e0:49:f8:7f:70:4b:df: c8:41:62:50:d6:78:5a:ba:fd:eb:6e:85:76:cc:a5:9d:90:c3: ec:37:cf:a0:b0:97:1c:53:e6:03:73:61:49:58:2f:59:68:19: 2e:7d:ad:21:88:5e:e8:70:cd:3d:ed:09:10:6e:db:40:55:6d: 15:19:be:7c:3f:67:5c:84:75:10:d5:a8:6c:e4:a6:3b:b4:c2: fa:40:61:40:f4:d8:5c:f0:aa:10:08:13:33:ff:0d:48:ea:8a: aa:e4:ea:40:16:ca:62:56:23:56:c0:8d:45:69:f0:f9:47:83: dd:ea:05:33:6e:b1:38:8d:6b:95:34:6c:00:77:7b:41:c0:ab: c9:04:8d:17:85:5e:14:fa:9b:b6:61:ea:b1:b9:7d:b6:38:16: f2:e3:02:49:7d:35:ae:f8:50:cc:d9:d1:e1:36:46:df:c5:82: 35:46:3b:89:f3:3d:13:3a:de:b4:d2:ed:75:1a:45:8c:4f:28: a5:e2:9d:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0kQniM19Tw0OZOiKGCKcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjZGExNTAwZjVjOTYzZWQyMzRmZDk0ODU5ZjIzYjMyZjQ4 ODVkZmMwHhcNMjUxMjA2MDQwMTIwWhcNMjUxMjA3MDQwMTIwWjAzMTEwLwYDVQQD EyhlYTllYzFjZTc4OTcxNDY5NjQ4MDliNjg0ZTRhNWI3ZTc1M2Q3NmY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0f1ycT54bCzFwObmwdan1g1SASFI hJXqDx+meu2Bk1fnPP5zxRxLb6Rmgrk45fG/YDMXN7fXgAycymmzt64sg2ZfEiju zcAH3YCypTqYdvH5jXGuczARwdDkudLFSMcHOoSDE1rI7pkIoh44cNtSnv7/woEZ w8novMp3q2CFFc+36tHEpvUc2MlYZqX60yXeuVcGN4mfigrl5W7scS/cJBwtykOb tnSemcyGcJR/iVd9w2W2KtgJPZnKWQLbx0NUSFOpay2wP4P0aYNHN7n1l7Z0I0kK 7uh4cWTnXhg6FWzQp7zLIBSted+3utiBUX3NeBsk9W4v4T3Xp4Nil8fBAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOqewc54lxRpZICbaE5KW351PXb0MB8GA1UdIwQY MBaAFGzaFQD1yWPtI0/ZSFnyOzL0iF38MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYk5vVkFQWEpZLTBqVDlsSVdmSTdNdlNJWGZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9jNGE0NWYtNDIxMy00ZjAxLTk4ZjYt OThlYjUzYjk1MDJhLzEvYk5vVkFQWEpZLTBqVDlsSVdmSTdNdlNJWGZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi9jNGE0NWYtNDIxMy00ZjAxLTk4ZjYtOThlYjUzYjk1MDJh LzEvYk5vVkFQWEpZLTBqVDlsSVdmSTdNdlNJWGZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzYxUQOML C79sTeO32/uTqHKhvU1ZU8IygSeweSit3usiidjuKqipLNXGyIN8Ic9blXgepVi7 Q9Fto6CAoYLtWELgSfh/cEvfyEFiUNZ4Wrr9626FdsylnZDD7DfPoLCXHFPmA3Nh SVgvWWgZLn2tIYhe6HDNPe0JEG7bQFVtFRm+fD9nXIR1ENWobOSmO7TC+kBhQPTY XPCqEAgTM/8NSOqKquTqQBbKYlYjVsCNRWnw+UeD3eoFM26xOI1rlTRsAHd7QcCr yQSNF4VeFPqbtmHqsbl9tjgW8uMCSX01rvhQzNnR4TZG38WCNUY7ifM9EzretNLt dRpFjE8opeKdeA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:12:03 2025 by rpki-client