This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.mft File: NRNbgbbB7dL29bwcYIpfyf6SZHQ.mft (raw, json) Hash identifier: AL093sKbSFPUSYGIwZ+ZmQRoMgQl5UAXM/iJKVW1Tc4= Subject key identifier: 79:14:DF:CB:6E:2E:F8:D2:77:F3:4B:44:BE:80:60:BC:A8:9A:FB:F1 Authority key identifier: 35:13:5B:81:B6:C1:ED:D2:F6:F5:BC:1C:60:8A:5F:C9:FE:92:64:74 Certificate issuer: /CN=35135b81b6c1edd2f6f5bc1c608a5fc9fe926474 Certificate serial: 019AF19BB3ED2FA2394D13D80951654F66F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRNbgbbB7dL29bwcYIpfyf6SZHQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 03:01:44 +0000 Manifest this update: Sat 06 Dec 2025 03:01:44 +0000 Manifest next update: Sun 07 Dec 2025 03:01:44 +0000 Files and hashes: 1: 1J9DcCYd3Q_jdEJtp8cZUA8fk9c.roa (hash: iH5nOf9Pb3Kl/sC7b3allhtNGpIaxcmUvhP78iH8szA=) 2: Cefp2MinUNICkZh50zBZ0en6wPE.roa (hash: iKM2SPROiv8Ajxn8AK2LTCg5zV1U+o0PTw/lw68hm5M=) 3: IUaglXMoCfWHYoEHDvfMOLW0gCo.roa (hash: SIDwg/N1xEcZG6CVXI1MxQJ23X7MPqohUnh5tpikeYs=) 4: NRNbgbbB7dL29bwcYIpfyf6SZHQ.crl (hash: 9PN7uiuZESfzCEPWhJyTpakCXSRAFbFeGUzCuDmWQiI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.mft rsync://rpki.ripe.net/repository/DEFAULT/NRNbgbbB7dL29bwcYIpfyf6SZHQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:b3:ed:2f:a2:39:4d:13:d8:09:51:65:4f:66:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35135b81b6c1edd2f6f5bc1c608a5fc9fe926474 Validity Not Before: Dec 6 03:01:44 2025 GMT Not After : Dec 7 03:01:44 2025 GMT Subject: CN=7914dfcb6e2ef8d277f34b44be8060bca89afbf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:40:8a:ad:fe:a9:78:9d:ae:0d:48:ee:9c:63: 23:de:a6:8b:cd:7c:73:bb:c0:68:d9:7d:9c:d5:41: a1:c9:f9:f3:ab:8c:fb:fd:be:15:91:74:b3:3a:a2: a3:92:09:c3:3e:07:fd:d3:74:14:44:e1:05:ba:05: 3c:75:6e:ae:fe:bc:ec:62:1e:db:17:23:a8:b5:f8: d7:5d:07:20:a0:77:ce:e2:59:a5:94:41:a8:18:46: 5c:dc:32:b7:70:8d:8c:b8:4f:1d:32:d5:30:7b:a8: 88:14:c3:1e:2b:d9:d4:4f:0b:f7:2c:22:3f:72:b2: 6a:4c:1e:b9:33:32:70:b6:7b:29:84:ae:00:ba:e1: 68:1a:33:f3:1f:93:c0:91:58:f7:39:36:30:f7:ae: fe:32:6c:41:9c:49:88:b9:88:28:3c:b7:37:c1:02: 49:d3:5b:f7:54:99:77:15:33:97:e6:05:ad:f6:f8: 66:16:af:46:9c:0c:8a:4f:6c:6b:a2:f0:a9:05:6f: 54:57:e1:20:c8:54:47:15:ae:41:e6:c8:8a:c4:2b: 88:cc:2e:91:6a:8a:b5:b1:c8:02:0f:a5:46:3e:45: 18:4b:bf:e4:71:10:27:51:c9:1b:3d:ca:98:b1:a6: 2c:29:03:50:ad:38:68:f5:8c:75:7f:52:e1:de:eb: 52:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:14:DF:CB:6E:2E:F8:D2:77:F3:4B:44:BE:80:60:BC:A8:9A:FB:F1 X509v3 Authority Key Identifier: keyid:35:13:5B:81:B6:C1:ED:D2:F6:F5:BC:1C:60:8A:5F:C9:FE:92:64:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRNbgbbB7dL29bwcYIpfyf6SZHQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:a6:ec:31:3e:c5:42:fb:21:bd:e9:a4:bb:b5:c9:21:9a:a7: 82:e0:34:bf:44:df:1f:53:a5:5d:0d:f3:40:99:a8:20:25:1e: a5:cc:59:e3:21:5c:d5:43:44:b4:35:55:39:96:fb:d8:4e:95: 1a:d3:a3:d0:45:9c:d7:c5:1e:de:a2:83:ce:ca:e2:f4:e0:a6: d4:1d:bc:a3:58:e1:b5:21:dd:7f:df:72:93:06:da:97:19:13: 34:da:4e:16:98:78:ef:53:de:bc:0f:5f:c8:0e:3b:de:01:7e: 7c:10:d6:09:99:e2:cc:10:1a:b7:8c:ef:97:5e:c1:22:e4:b8: c1:ff:bc:8b:55:83:cd:c0:cd:0e:63:43:b9:fa:42:8a:9f:64: 15:77:e5:61:5c:fd:78:09:00:cf:8d:89:06:1a:81:42:d0:95: 2c:ee:be:c6:f9:e8:46:d3:1d:09:25:b5:15:a6:35:b2:94:92: 68:a1:96:1b:76:5f:c2:a9:bf:29:b6:78:d9:2d:92:c1:ad:87: da:66:2b:09:3a:ec:13:67:3e:1b:28:68:08:ff:a9:89:9c:e3: 46:8e:d3:1d:a0:0d:52:6c:17:dd:c9:3a:02:7d:fd:2d:7a:d2: b5:a6:3a:81:91:34:f6:24:27:5d:c3:9c:ab:e0:b0:07:a6:00: 49:c5:96:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm7PtL6I5TRPYCVFlT2b3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MTM1YjgxYjZjMWVkZDJmNmY1YmMxYzYwOGE1ZmM5ZmU5 MjY0NzQwHhcNMjUxMjA2MDMwMTQ0WhcNMjUxMjA3MDMwMTQ0WjAzMTEwLwYDVQQD Eyg3OTE0ZGZjYjZlMmVmOGQyNzdmMzRiNDRiZTgwNjBiY2E4OWFmYmYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA70CKrf6peJ2uDUjunGMj3qaLzXxz u8Bo2X2c1UGhyfnzq4z7/b4VkXSzOqKjkgnDPgf903QUROEFugU8dW6u/rzsYh7b FyOotfjXXQcgoHfO4lmllEGoGEZc3DK3cI2MuE8dMtUwe6iIFMMeK9nUTwv3LCI/ crJqTB65MzJwtnsphK4AuuFoGjPzH5PAkVj3OTYw967+MmxBnEmIuYgoPLc3wQJJ 01v3VJl3FTOX5gWt9vhmFq9GnAyKT2xrovCpBW9UV+EgyFRHFa5B5siKxCuIzC6R aoq1scgCD6VGPkUYS7/kcRAnUckbPcqYsaYsKQNQrTho9Yx1f1Lh3utSrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHkU38tuLvjSd/NLRL6AYLyomvvxMB8GA1UdIwQY MBaAFDUTW4G2we3S9vW8HGCKX8n+kmR0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlJOYmdiYkI3ZEwyOWJ3Y1lJcGZ5ZjZTWkhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9kMGEwYTAtZDI1YS00NzQ2LTkxMzkt YTcxNDU2ZGY5OTk3LzEvTlJOYmdiYkI3ZEwyOWJ3Y1lJcGZ5ZjZTWkhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi9kMGEwYTAtZDI1YS00NzQ2LTkxMzktYTcxNDU2ZGY5OTk3 LzEvTlJOYmdiYkI3ZEwyOWJ3Y1lJcGZ5ZjZTWkhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZqbsMT7F Qvshvemku7XJIZqnguA0v0TfH1OlXQ3zQJmoICUepcxZ4yFc1UNEtDVVOZb72E6V GtOj0EWc18Ue3qKDzsri9OCm1B28o1jhtSHdf99ykwbalxkTNNpOFph471PevA9f yA473gF+fBDWCZnizBAat4zvl17BIuS4wf+8i1WDzcDNDmNDufpCip9kFXflYVz9 eAkAz42JBhqBQtCVLO6+xvnoRtMdCSW1FaY1spSSaKGWG3Zfwqm/KbZ42S2Swa2H 2mYrCTrsE2c+GyhoCP+piZzjRo7THaANUmwX3ck6An39LXrStaY6gZE09iQnXcOc q+CwB6YAScWWpA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:15:13 2025 by rpki-client