This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.mft File: nbtiWqVb2O81QQr93Sorw1iiXtE.mft (raw, json) Hash identifier: h06Mwr9SC8XwNYTRxic2yVtM8Y+aID9oFlSyoLB82Hg= Subject key identifier: ED:1E:33:ED:1E:C5:F0:CD:33:E7:7A:09:D7:40:D0:0D:19:3D:D3:D3 Authority key identifier: 9D:BB:62:5A:A5:5B:D8:EF:35:41:0A:FD:DD:2A:2B:C3:58:A2:5E:D1 Certificate issuer: /CN=9dbb625aa55bd8ef35410afddd2a2bc358a25ed1 Certificate serial: 019AF1D1DE35D3C6142B4B5425279B0001CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nbtiWqVb2O81QQr93Sorw1iiXtE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.mft Manifest number: 046A Signing time: Sat 06 Dec 2025 04:00:54 +0000 Manifest this update: Sat 06 Dec 2025 04:00:54 +0000 Manifest next update: Sun 07 Dec 2025 04:00:54 +0000 Files and hashes: 1: F_kIbrNoezU2xST1IGJ7znM97So.roa (hash: SL4bD3bCY+6YeKuV14y0PigmsFs9RgYCxYhDjlPIAW4=) 2: nbtiWqVb2O81QQr93Sorw1iiXtE.crl (hash: gp/f3pBGq9S/LKuRV/r2k6Ql5Attkto5Zi0/bWjHfBQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.crl rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.mft rsync://rpki.ripe.net/repository/DEFAULT/nbtiWqVb2O81QQr93Sorw1iiXtE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:de:35:d3:c6:14:2b:4b:54:25:27:9b:00:01:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9dbb625aa55bd8ef35410afddd2a2bc358a25ed1 Validity Not Before: Dec 6 04:00:54 2025 GMT Not After : Dec 7 04:00:54 2025 GMT Subject: CN=ed1e33ed1ec5f0cd33e77a09d740d00d193dd3d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:c5:ed:a0:e9:21:ce:1d:79:39:63:73:72:1a: 5e:3e:c1:ff:bd:1b:36:44:ba:f0:c0:2a:0c:cb:cf: 86:aa:17:7a:20:91:3f:72:d5:b9:63:fa:9d:a3:89: ef:f5:cb:ab:40:20:84:8c:71:b2:3e:f0:1f:ac:41: 60:09:f3:70:31:58:fe:b9:76:74:3e:3f:17:2c:86: 73:5f:6a:11:1e:ef:21:91:5c:44:e5:1a:9a:5e:8e: fa:41:af:5f:81:78:73:ee:ae:a4:c4:04:17:00:8d: 8a:0b:43:5b:fa:21:20:b4:21:f0:2a:7e:fb:38:d7: be:39:aa:a9:a3:bd:b5:4b:36:21:7e:3a:62:5d:77: 71:ce:7b:3b:f2:33:22:bc:9e:ce:af:92:b9:14:0e: 2a:29:b7:ff:b1:90:7a:6f:0a:aa:5d:c5:ad:63:78: 94:05:d8:f1:0c:6c:b6:56:2d:b9:ae:9c:92:13:d4: b9:8a:c0:1b:12:fc:8d:65:f0:5c:d4:3c:1d:63:76: a4:ed:d8:5d:6c:ff:b0:18:68:c8:cc:75:f2:c7:47: 6b:79:83:d8:09:99:84:1a:f6:54:15:cc:7b:00:3c: 26:1a:53:d4:5e:d7:6c:bc:c4:e8:81:d7:79:97:63: f4:89:29:2b:80:d4:d0:f9:fc:a3:09:ba:5b:d3:4c: b7:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:1E:33:ED:1E:C5:F0:CD:33:E7:7A:09:D7:40:D0:0D:19:3D:D3:D3 X509v3 Authority Key Identifier: keyid:9D:BB:62:5A:A5:5B:D8:EF:35:41:0A:FD:DD:2A:2B:C3:58:A2:5E:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nbtiWqVb2O81QQr93Sorw1iiXtE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:62:f7:28:96:72:42:b7:04:c3:04:2e:14:d7:f8:a0:ea:bd: 0a:74:e4:44:b3:73:0f:e5:99:97:eb:02:c7:3e:c7:57:8e:3e: df:59:e4:72:e2:a6:bb:e7:06:e6:22:27:cc:43:86:2c:5d:1a: e5:8e:f7:ee:04:17:d4:88:dd:29:02:46:01:f4:0a:0c:bc:1f: 74:f8:65:8f:6a:f3:f9:02:73:10:d0:3c:9c:e3:fc:ad:ab:46: 55:a5:e9:b0:51:a4:9c:a7:e4:98:e9:c4:67:29:a9:01:80:1b: cc:45:f9:dc:f8:9c:93:db:32:f9:79:20:20:26:0e:72:17:37: 35:71:19:31:e9:0f:6c:55:c8:6d:9a:82:fe:b0:65:fc:ac:4f: 2d:f6:a4:4d:c3:d5:b1:4e:2b:58:a8:73:0c:42:5f:f9:42:31: 62:ed:c7:c0:51:bd:1e:aa:75:49:03:61:b4:9f:14:c3:e5:19: 33:1e:b8:47:b8:91:c9:a0:76:a4:7b:40:01:07:df:c8:81:62: 13:52:1f:aa:b8:4a:6e:6d:da:7f:af:bb:1f:5b:44:0a:67:62: 9f:73:81:69:1c:12:44:6b:24:85:75:20:17:f0:ca:69:8b:24: 0a:da:d5:b7:53:e4:80:68:1c:f7:70:5c:77:18:ab:f1:75:fe: 1f:f5:46:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0d4108YUK0tUJSebAAHNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkYmI2MjVhYTU1YmQ4ZWYzNTQxMGFmZGRkMmEyYmMzNThh MjVlZDEwHhcNMjUxMjA2MDQwMDU0WhcNMjUxMjA3MDQwMDU0WjAzMTEwLwYDVQQD EyhlZDFlMzNlZDFlYzVmMGNkMzNlNzdhMDlkNzQwZDAwZDE5M2RkM2QzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMXtoOkhzh15OWNzchpePsH/vRs2 RLrwwCoMy8+Gqhd6IJE/ctW5Y/qdo4nv9curQCCEjHGyPvAfrEFgCfNwMVj+uXZ0 Pj8XLIZzX2oRHu8hkVxE5RqaXo76Qa9fgXhz7q6kxAQXAI2KC0Nb+iEgtCHwKn77 ONe+Oaqpo721SzYhfjpiXXdxzns78jMivJ7Or5K5FA4qKbf/sZB6bwqqXcWtY3iU BdjxDGy2Vi25rpySE9S5isAbEvyNZfBc1DwdY3ak7dhdbP+wGGjIzHXyx0dreYPY CZmEGvZUFcx7ADwmGlPUXtdsvMTogdd5l2P0iSkrgNTQ+fyjCbpb00y3gQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO0eM+0exfDNM+d6CddA0A0ZPdPTMB8GA1UdIwQY MBaAFJ27YlqlW9jvNUEK/d0qK8NYol7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmJ0aVdxVmIyTzgxUVFyOTNTb3J3MWlpWHRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9jMzNhMTMtYTU0Yi00NWJiLWIwZDQt YTQ5YjcyYTFjZmUyLzEvbmJ0aVdxVmIyTzgxUVFyOTNTb3J3MWlpWHRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9jMzNhMTMtYTU0Yi00NWJiLWIwZDQtYTQ5YjcyYTFjZmUy LzEvbmJ0aVdxVmIyTzgxUVFyOTNTb3J3MWlpWHRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGGL3KJZy QrcEwwQuFNf4oOq9CnTkRLNzD+WZl+sCxz7HV44+31nkcuKmu+cG5iInzEOGLF0a 5Y737gQX1IjdKQJGAfQKDLwfdPhlj2rz+QJzENA8nOP8ratGVaXpsFGknKfkmOnE ZympAYAbzEX53Pick9sy+XkgICYOchc3NXEZMekPbFXIbZqC/rBl/KxPLfakTcPV sU4rWKhzDEJf+UIxYu3HwFG9Hqp1SQNhtJ8Uw+UZMx64R7iRyaB2pHtAAQffyIFi E1IfqrhKbm3af6+7H1tECmdin3OBaRwSRGskhXUgF/DKaYskCtrVt1PkgGgc93Bc dxir8XX+H/VGXw== -----END CERTIFICATE-----Generated at Sat Dec 6 14:42:13 2025 by rpki-client