This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/c429df-af25-4cce-bed7-d9b07fbbbbdb/1/NmIEOjHdm9K3yxhifrS6wRhAzhY.mft File: NmIEOjHdm9K3yxhifrS6wRhAzhY.mft (raw, json) Hash identifier: a/Lx8Y4xo7YnNwzLK3JH1QFANcFteMLfb002xte6IxQ= Subject key identifier: 0F:07:66:E9:BA:49:A1:2C:BA:0F:5E:9A:ED:28:37:62:DB:1C:A2:B3 Authority key identifier: 36:62:04:3A:31:DD:9B:D2:B7:CB:18:62:7E:B4:BA:C1:18:40:CE:16 Certificate issuer: /CN=3662043a31dd9bd2b7cb18627eb4bac11840ce16 Certificate serial: 019AF2ADB199A87C3AA7FBFF187F7AAAD0AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NmIEOjHdm9K3yxhifrS6wRhAzhY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/c429df-af25-4cce-bed7-d9b07fbbbbdb/1/NmIEOjHdm9K3yxhifrS6wRhAzhY.mft Manifest number: 1471 Signing time: Sat 06 Dec 2025 08:01:00 +0000 Manifest this update: Sat 06 Dec 2025 08:01:00 +0000 Manifest next update: Sun 07 Dec 2025 08:01:00 +0000 Files and hashes: 1: NmIEOjHdm9K3yxhifrS6wRhAzhY.crl (hash: Idm5JVuYwK3wi0UtJqw39qJ8egKSoGvmoB04U1KYz3k=) 2: WD0FQcbHEB-uoxf6girnu5JNKHw.roa (hash: iXRex71CWC3wFm8Z6DiGxb32qluuOPal75ek37KzREs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/c429df-af25-4cce-bed7-d9b07fbbbbdb/1/NmIEOjHdm9K3yxhifrS6wRhAzhY.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/c429df-af25-4cce-bed7-d9b07fbbbbdb/1/NmIEOjHdm9K3yxhifrS6wRhAzhY.mft rsync://rpki.ripe.net/repository/DEFAULT/NmIEOjHdm9K3yxhifrS6wRhAzhY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:b1:99:a8:7c:3a:a7:fb:ff:18:7f:7a:aa:d0:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3662043a31dd9bd2b7cb18627eb4bac11840ce16 Validity Not Before: Dec 6 08:01:00 2025 GMT Not After : Dec 7 08:01:00 2025 GMT Subject: CN=0f0766e9ba49a12cba0f5e9aed283762db1ca2b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a2:60:bb:1c:44:7d:b9:39:3e:11:6a:35:35: 88:e5:15:95:d7:59:45:df:ab:67:eb:36:4b:e4:8f: 87:3d:f7:91:9e:c9:bd:4d:09:ed:d2:cb:a9:3e:0c: 82:ff:d6:17:6d:e9:bb:8d:59:96:83:78:90:90:db: bc:40:ee:87:16:2c:95:93:67:f5:5a:74:b3:b9:88: f8:29:52:36:e9:cf:84:e5:36:6b:6a:57:f5:a4:14: b1:7e:b7:2d:98:75:39:0d:28:5b:de:1f:6a:a1:cc: f6:9b:28:4a:18:0d:f4:54:38:5f:e8:9a:43:ff:20: 26:c8:31:48:02:8a:1d:75:ef:54:c0:12:5c:36:ff: 68:f2:48:82:ab:22:e2:2a:19:c5:2b:9c:de:ac:70: 0d:8e:71:2b:45:62:1c:e8:4c:82:e9:b8:7f:6d:9c: 38:f6:6a:0b:5a:13:55:20:17:34:b2:e0:26:96:ee: dd:45:83:2c:e2:c7:2c:7e:ea:3a:da:63:a7:03:27: 78:c9:d1:48:6b:f7:e7:21:78:27:16:dd:d4:46:27: 14:1b:78:53:ac:5c:0f:35:65:b3:38:60:da:b7:66: bd:58:bf:fa:27:d9:87:bd:d0:d7:e6:27:38:58:93: af:d7:c7:f6:ea:58:f5:4d:70:11:b4:8f:73:84:a9: 41:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:07:66:E9:BA:49:A1:2C:BA:0F:5E:9A:ED:28:37:62:DB:1C:A2:B3 X509v3 Authority Key Identifier: keyid:36:62:04:3A:31:DD:9B:D2:B7:CB:18:62:7E:B4:BA:C1:18:40:CE:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NmIEOjHdm9K3yxhifrS6wRhAzhY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/c429df-af25-4cce-bed7-d9b07fbbbbdb/1/NmIEOjHdm9K3yxhifrS6wRhAzhY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/c429df-af25-4cce-bed7-d9b07fbbbbdb/1/NmIEOjHdm9K3yxhifrS6wRhAzhY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:a2:f6:2d:b2:8d:61:82:81:18:29:88:fd:1a:9e:7e:a8:60: 83:3b:54:05:2c:a4:b8:1b:a7:f4:39:40:02:d8:da:a8:97:de: 73:2c:88:02:0c:dd:14:da:8f:53:65:81:0a:9a:41:d6:5a:3a: 36:0c:c9:fc:56:db:b4:69:d5:22:b3:d6:6e:12:84:66:46:54: 57:5f:71:44:4a:34:c7:c9:66:9e:c2:20:93:52:7b:cf:7b:76: 22:fb:2a:d9:18:16:a6:49:c1:da:ba:23:0a:a4:a4:fc:c2:53: e8:b6:5e:30:e2:77:c7:59:64:fb:03:fe:eb:cd:8c:a0:9d:91: e6:4e:3e:7b:2e:70:c3:b4:20:a6:da:ce:b4:61:9e:ec:1b:a4: 2f:8b:89:8b:6e:01:27:66:16:32:79:8d:96:f6:2f:8b:73:66: be:d2:4e:24:49:2a:dc:97:9a:6f:52:85:a5:51:03:04:6f:72: 75:ed:d4:4c:5c:28:11:2d:3e:32:16:3d:f3:f1:24:a2:9a:cd: a9:59:34:05:40:ea:d8:79:c5:34:98:91:90:b0:55:63:15:ba: 0a:68:f2:d3:cf:5b:6b:72:aa:b4:42:8f:6a:84:1e:2b:42:ce: 35:90:3b:f5:99:30:18:a0:73:cd:16:14:68:5d:1d:9e:b3:66: 96:fb:a7:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrbGZqHw6p/v/GH96qtCsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2NjIwNDNhMzFkZDliZDJiN2NiMTg2MjdlYjRiYWMxMTg0 MGNlMTYwHhcNMjUxMjA2MDgwMTAwWhcNMjUxMjA3MDgwMTAwWjAzMTEwLwYDVQQD EygwZjA3NjZlOWJhNDlhMTJjYmEwZjVlOWFlZDI4Mzc2MmRiMWNhMmIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaJguxxEfbk5PhFqNTWI5RWV11lF 36tn6zZL5I+HPfeRnsm9TQnt0supPgyC/9YXbem7jVmWg3iQkNu8QO6HFiyVk2f1 WnSzuYj4KVI26c+E5TZralf1pBSxfrctmHU5DShb3h9qocz2myhKGA30VDhf6JpD /yAmyDFIAoodde9UwBJcNv9o8kiCqyLiKhnFK5zerHANjnErRWIc6EyC6bh/bZw4 9moLWhNVIBc0suAmlu7dRYMs4scsfuo62mOnAyd4ydFIa/fnIXgnFt3URicUG3hT rFwPNWWzOGDat2a9WL/6J9mHvdDX5ic4WJOv18f26lj1TXARtI9zhKlBTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA8HZum6SaEsug9emu0oN2LbHKKzMB8GA1UdIwQY MBaAFDZiBDox3ZvSt8sYYn60usEYQM4WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTm1JRU9qSGRtOUszeXhoaWZyUzZ3UmhBemhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9jNDI5ZGYtYWYyNS00Y2NlLWJlZDct ZDliMDdmYmJiYmRiLzEvTm1JRU9qSGRtOUszeXhoaWZyUzZ3UmhBemhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi9jNDI5ZGYtYWYyNS00Y2NlLWJlZDctZDliMDdmYmJiYmRi LzEvTm1JRU9qSGRtOUszeXhoaWZyUzZ3UmhBemhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALqL2LbKN YYKBGCmI/RqefqhggztUBSykuBun9DlAAtjaqJfecyyIAgzdFNqPU2WBCppB1lo6 NgzJ/FbbtGnVIrPWbhKEZkZUV19xREo0x8lmnsIgk1J7z3t2Ivsq2RgWpknB2roj CqSk/MJT6LZeMOJ3x1lk+wP+682MoJ2R5k4+ey5ww7QgptrOtGGe7BukL4uJi24B J2YWMnmNlvYvi3NmvtJOJEkq3Jeab1KFpVEDBG9yde3UTFwoES0+MhY98/EkoprN qVk0BUDq2HnFNJiRkLBVYxW6Cmjy089ba3KqtEKPaoQeK0LONZA79ZkwGKBzzRYU aF0dnrNmlvunPA== -----END CERTIFICATE-----Generated at Sat Dec 6 16:10:24 2025 by rpki-client