This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/nBYm1f1UoXollC9v2VyDwOCIF7s.mft File: nBYm1f1UoXollC9v2VyDwOCIF7s.mft (raw, json) Hash identifier: YgpwxE1HKo+cGHM1xALkkjeY+t5Lr0trTA9Z2Vr2wmg= Subject key identifier: 94:32:A7:83:79:B0:D7:A1:93:51:8D:C5:B9:0C:DB:FD:45:25:4A:1C Authority key identifier: 9C:16:26:D5:FD:54:A1:7A:25:94:2F:6F:D9:5C:83:C0:E0:88:17:BB Certificate issuer: /CN=9c1626d5fd54a17a25942f6fd95c83c0e08817bb Certificate serial: 019AF31D1DF528CA295D7CD3A14519D8EB79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nBYm1f1UoXollC9v2VyDwOCIF7s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/nBYm1f1UoXollC9v2VyDwOCIF7s.mft Manifest number: 0DF4 Signing time: Sat 06 Dec 2025 10:02:42 +0000 Manifest this update: Sat 06 Dec 2025 10:02:42 +0000 Manifest next update: Sun 07 Dec 2025 10:02:42 +0000 Files and hashes: 1: idcg-tJ_CtGkzqKZfUKrfRvVQ_E.roa (hash: Nye8o2xtEJeY8siYmI8/lYTnzfEn8Ihz4z9R7JBQAZI=) 2: nBYm1f1UoXollC9v2VyDwOCIF7s.crl (hash: PKHheuYuVSTfr0jdVW2Ch6Kxwh6je7BM+zsG3kW/gxY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/nBYm1f1UoXollC9v2VyDwOCIF7s.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/nBYm1f1UoXollC9v2VyDwOCIF7s.mft rsync://rpki.ripe.net/repository/DEFAULT/nBYm1f1UoXollC9v2VyDwOCIF7s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:1d:f5:28:ca:29:5d:7c:d3:a1:45:19:d8:eb:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c1626d5fd54a17a25942f6fd95c83c0e08817bb Validity Not Before: Dec 6 10:02:42 2025 GMT Not After : Dec 7 10:02:42 2025 GMT Subject: CN=9432a78379b0d7a193518dc5b90cdbfd45254a1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:26:fc:d3:58:5b:97:ce:4f:a8:76:0a:b1:c2: 78:9a:c5:86:de:dd:68:64:07:c4:97:3f:f3:ae:fc: 49:fd:49:b9:3a:35:ca:25:f8:f6:66:e3:56:d7:4c: 63:da:19:9b:e7:91:f6:4c:4d:0d:42:1f:e0:7e:59: 7d:d1:d2:ae:96:ea:3d:84:22:d7:8f:25:42:c4:32: 37:d0:76:5b:36:19:23:f7:d0:67:25:52:f0:e7:ad: 12:38:5c:ce:c4:1a:a9:33:b1:2f:2b:bf:c5:23:14: d5:cb:b7:2b:27:f7:58:8c:5b:56:27:77:cf:f6:cb: c4:14:be:7d:95:24:2a:cf:64:4d:b5:68:40:18:d5: 27:af:c0:ae:ff:74:5a:f6:2c:8b:d7:98:1a:d7:aa: b8:bf:3a:c9:10:de:0a:fb:e8:69:b3:81:e5:84:53: 7d:be:7b:cc:1d:ca:e5:b1:60:7c:d9:72:dd:9b:64: ff:e7:66:50:1b:df:54:39:21:88:61:ba:09:2d:9f: 9d:b3:30:5b:0b:67:de:bf:7f:03:47:da:46:3b:43: 07:e3:21:09:29:c4:43:4c:fa:43:25:f8:f9:56:4d: 04:03:bb:0f:6f:ff:59:1e:26:5b:a5:4d:ee:2e:b1: c7:b5:8f:42:b0:6f:52:57:1b:78:9e:3f:39:44:9f: d1:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:32:A7:83:79:B0:D7:A1:93:51:8D:C5:B9:0C:DB:FD:45:25:4A:1C X509v3 Authority Key Identifier: keyid:9C:16:26:D5:FD:54:A1:7A:25:94:2F:6F:D9:5C:83:C0:E0:88:17:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nBYm1f1UoXollC9v2VyDwOCIF7s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/nBYm1f1UoXollC9v2VyDwOCIF7s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/nBYm1f1UoXollC9v2VyDwOCIF7s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:48:d6:7b:73:f1:64:9e:07:18:02:9b:5e:4d:7d:9b:20:53: b8:e8:e1:dd:7c:30:86:5c:13:ca:db:17:b6:cf:83:69:12:5f: 9f:1b:f7:a4:ae:27:f5:78:81:a4:aa:05:e5:51:16:23:a4:d5: aa:28:67:a0:2b:c0:fd:d6:eb:ed:5b:3e:7e:9d:71:74:4c:e4: de:e4:33:9f:e8:48:b5:50:7d:a2:65:2c:1d:36:e8:d6:d6:f1: 4a:66:ae:e1:c6:e4:02:6a:cc:19:9d:31:db:36:3e:5f:fa:52: 6f:c4:b2:b7:ea:aa:fc:d0:70:04:62:f9:b3:b2:fa:eb:58:3e: a3:5e:36:40:f2:85:84:df:7c:8d:be:c7:85:34:9e:d4:53:7b: c3:2d:25:2c:f7:b5:e4:bc:01:76:3a:d8:e2:e4:67:da:99:f7: 36:8a:f8:9f:b7:33:c0:a0:d9:60:85:64:7d:57:c1:d3:72:56: 73:cc:2c:5e:ec:66:a2:c5:70:6f:4b:ab:ab:84:e5:38:ed:62: fa:5a:eb:6c:8a:15:6f:3a:88:88:3c:3d:38:2b:d0:9b:75:58: bd:93:a5:a6:5e:88:cb:fc:0e:8e:0d:b7:df:d3:1b:f6:19:db: 50:0f:c4:b5:7a:dc:6f:87:47:24:92:29:b8:3a:e2:b2:96:b5: b1:c5:b1:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHR31KMopXXzToUUZ2Ot5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljMTYyNmQ1ZmQ1NGExN2EyNTk0MmY2ZmQ5NWM4M2MwZTA4 ODE3YmIwHhcNMjUxMjA2MTAwMjQyWhcNMjUxMjA3MTAwMjQyWjAzMTEwLwYDVQQD Eyg5NDMyYTc4Mzc5YjBkN2ExOTM1MThkYzViOTBjZGJmZDQ1MjU0YTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSb801hbl85PqHYKscJ4msWG3t1o ZAfElz/zrvxJ/Um5OjXKJfj2ZuNW10xj2hmb55H2TE0NQh/gfll90dKuluo9hCLX jyVCxDI30HZbNhkj99BnJVLw560SOFzOxBqpM7EvK7/FIxTVy7crJ/dYjFtWJ3fP 9svEFL59lSQqz2RNtWhAGNUnr8Cu/3Ra9iyL15ga16q4vzrJEN4K++hps4HlhFN9 vnvMHcrlsWB82XLdm2T/52ZQG99UOSGIYboJLZ+dszBbC2fev38DR9pGO0MH4yEJ KcRDTPpDJfj5Vk0EA7sPb/9ZHiZbpU3uLrHHtY9CsG9SVxt4nj85RJ/RzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJQyp4N5sNehk1GNxbkM2/1FJUocMB8GA1UdIwQY MBaAFJwWJtX9VKF6JZQvb9lcg8DgiBe7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkJZbTFmMVVvWG9sbEM5djJWeUR3T0NJRjdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS81Nzk0NzktN2Q0ZC00OWM0LTgzYzMt MjA3ZTliNzBjMzg1LzEvbkJZbTFmMVVvWG9sbEM5djJWeUR3T0NJRjdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS81Nzk0NzktN2Q0ZC00OWM0LTgzYzMtMjA3ZTliNzBjMzg1 LzEvbkJZbTFmMVVvWG9sbEM5djJWeUR3T0NJRjdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm0jWe3Px ZJ4HGAKbXk19myBTuOjh3XwwhlwTytsXts+DaRJfnxv3pK4n9XiBpKoF5VEWI6TV qihnoCvA/dbr7Vs+fp1xdEzk3uQzn+hItVB9omUsHTbo1tbxSmau4cbkAmrMGZ0x 2zY+X/pSb8Syt+qq/NBwBGL5s7L661g+o142QPKFhN98jb7HhTSe1FN7wy0lLPe1 5LwBdjrY4uRn2pn3Nor4n7czwKDZYIVkfVfB03JWc8wsXuxmosVwb0urq4TlOO1i +lrrbIoVbzqIiDw9OCvQm3VYvZOlpl6Iy/wOjg2339Mb9hnbUA/EtXrcb4dHJJIp uDrispa1scWx7w== -----END CERTIFICATE-----Generated at Sat Dec 6 12:08:16 2025 by rpki-client