This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/7f3546-4a87-4627-a019-341b9d64645d/1/b_nKXHa7Nak1PpsT4_zoDzYxYYA.mft File: b_nKXHa7Nak1PpsT4_zoDzYxYYA.mft (raw, json) Hash identifier: q9Ps5EU4agy6gWSilIpwwW0PXW5Rmxu76rmVXY/W/w8= Subject key identifier: E4:61:4F:90:41:0E:5F:B0:1B:02:A7:8C:91:E6:C3:64:09:68:8C:B1 Authority key identifier: 6F:F9:CA:5C:76:BB:35:A9:35:3E:9B:13:E3:FC:E8:0F:36:31:61:80 Certificate issuer: /CN=6ff9ca5c76bb35a9353e9b13e3fce80f36316180 Certificate serial: 019AF42E878F6F34B46EB8330A9F3C154002 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b_nKXHa7Nak1PpsT4_zoDzYxYYA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/7f3546-4a87-4627-a019-341b9d64645d/1/b_nKXHa7Nak1PpsT4_zoDzYxYYA.mft Manifest number: 12F2 Signing time: Sat 06 Dec 2025 15:01:21 +0000 Manifest this update: Sat 06 Dec 2025 15:01:21 +0000 Manifest next update: Sun 07 Dec 2025 15:01:21 +0000 Files and hashes: 1: K1yirsr-iaS7nREQciotspB8RVo.roa (hash: hy+JqcAOeQKytaM3EAomiIfLy4MHrS39bRFVCLNpTzc=) 2: b_nKXHa7Nak1PpsT4_zoDzYxYYA.crl (hash: f8duHoHKyM5CKX1boqONerTSe0Ou6PuS7RJJViQVR9A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/7f3546-4a87-4627-a019-341b9d64645d/1/b_nKXHa7Nak1PpsT4_zoDzYxYYA.crl rsync://rpki.ripe.net/repository/DEFAULT/92/7f3546-4a87-4627-a019-341b9d64645d/1/b_nKXHa7Nak1PpsT4_zoDzYxYYA.mft rsync://rpki.ripe.net/repository/DEFAULT/b_nKXHa7Nak1PpsT4_zoDzYxYYA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 15:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:87:8f:6f:34:b4:6e:b8:33:0a:9f:3c:15:40:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ff9ca5c76bb35a9353e9b13e3fce80f36316180 Validity Not Before: Dec 6 15:01:21 2025 GMT Not After : Dec 7 15:01:21 2025 GMT Subject: CN=e4614f90410e5fb01b02a78c91e6c36409688cb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:20:2e:85:c7:bb:90:15:79:09:b0:53:2f:4a: 89:02:5f:d6:be:c3:97:1a:87:9f:92:e9:83:7d:d6: b4:07:32:ab:e3:91:99:0c:72:e4:97:63:75:46:90: 7e:ee:09:4d:52:b6:5e:25:c1:60:e0:e4:f4:4a:ba: 10:92:4e:64:9b:b7:9f:e6:5c:24:46:53:fe:19:d0: 6a:79:24:36:4d:8e:92:88:fb:88:38:8f:e3:5e:19: 8a:81:97:79:ad:6b:82:30:a7:0d:d6:c7:36:9c:2f: 45:42:57:02:70:cd:7c:7a:00:c3:b9:34:10:6b:8a: b6:d3:de:f5:49:12:ea:dc:48:1a:1a:87:cc:be:06: fc:8f:06:54:56:f9:59:34:71:71:c6:b1:4f:b7:bb: e3:0a:ea:d2:19:05:c1:a0:ff:ab:a5:de:87:34:85: 80:a0:7d:f6:57:0f:ad:b8:a1:9e:9c:25:04:f3:1d: 5b:c2:9d:90:59:d3:05:11:50:86:02:0a:d1:de:a5: 23:58:c1:26:21:24:38:b0:32:ef:a2:dc:6a:34:55: 0d:f1:1b:26:b9:22:f2:cc:82:81:83:8e:6f:e9:88: db:f3:c2:12:0b:c7:fa:e0:1e:9a:6b:6b:86:bd:ae: e6:44:d6:dc:fa:bf:55:18:e2:b2:f2:b9:0b:49:c1: 18:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:61:4F:90:41:0E:5F:B0:1B:02:A7:8C:91:E6:C3:64:09:68:8C:B1 X509v3 Authority Key Identifier: keyid:6F:F9:CA:5C:76:BB:35:A9:35:3E:9B:13:E3:FC:E8:0F:36:31:61:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_nKXHa7Nak1PpsT4_zoDzYxYYA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/7f3546-4a87-4627-a019-341b9d64645d/1/b_nKXHa7Nak1PpsT4_zoDzYxYYA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/7f3546-4a87-4627-a019-341b9d64645d/1/b_nKXHa7Nak1PpsT4_zoDzYxYYA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:e9:98:79:52:c7:f8:a2:84:5f:32:be:d8:f2:1f:55:aa:6e: 26:71:78:1c:0a:c5:f4:c6:85:32:e1:ef:bc:ef:69:ba:d3:f9: 95:82:a0:89:c7:c8:af:61:13:0b:9c:d6:23:88:e1:43:be:92: 3d:4f:ec:da:04:3c:4b:56:c6:d7:d5:33:40:81:a4:f4:59:6b: c5:ef:f0:bf:ac:0a:ef:fc:bd:32:48:a0:f3:fa:a4:d4:6c:1f: a3:5f:11:de:a2:d4:54:9b:51:92:a6:e9:79:17:4a:e8:17:17: 16:73:b4:c4:5a:f4:f7:ef:72:86:dc:d3:b5:49:fd:74:3a:78: 51:29:b0:1b:51:d1:7a:0e:9a:6f:91:94:c8:e9:2d:3d:6c:e6: 83:9d:b2:a5:7f:c3:02:16:97:4c:64:1f:fc:34:47:e1:e2:94: 08:84:31:19:8a:6e:e7:ac:99:e4:e3:2a:27:a9:f6:c9:26:1a: 4b:1f:91:2f:92:f6:32:04:8c:0c:9b:a9:02:5d:33:91:d9:53: 37:3b:7f:39:ca:7c:35:7e:5f:0d:8c:55:82:55:96:91:4b:74: 0d:7e:7b:8d:e4:14:5a:45:f3:17:14:f6:da:6a:bd:41:39:1e: ef:f4:d0:70:25:37:0f:59:d2:df:43:a9:56:b5:9a:85:c2:38: d6:4a:b0:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LoePbzS0brgzCp88FUACMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmZjljYTVjNzZiYjM1YTkzNTNlOWIxM2UzZmNlODBmMzYz MTYxODAwHhcNMjUxMjA2MTUwMTIxWhcNMjUxMjA3MTUwMTIxWjAzMTEwLwYDVQQD EyhlNDYxNGY5MDQxMGU1ZmIwMWIwMmE3OGM5MWU2YzM2NDA5Njg4Y2IxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSAuhce7kBV5CbBTL0qJAl/WvsOX GoefkumDfda0BzKr45GZDHLkl2N1RpB+7glNUrZeJcFg4OT0SroQkk5km7ef5lwk RlP+GdBqeSQ2TY6SiPuIOI/jXhmKgZd5rWuCMKcN1sc2nC9FQlcCcM18egDDuTQQ a4q20971SRLq3EgaGofMvgb8jwZUVvlZNHFxxrFPt7vjCurSGQXBoP+rpd6HNIWA oH32Vw+tuKGenCUE8x1bwp2QWdMFEVCGAgrR3qUjWMEmISQ4sDLvotxqNFUN8Rsm uSLyzIKBg45v6Yjb88ISC8f64B6aa2uGva7mRNbc+r9VGOKy8rkLScEY/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFORhT5BBDl+wGwKnjJHmw2QJaIyxMB8GA1UdIwQY MBaAFG/5ylx2uzWpNT6bE+P86A82MWGAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYl9uS1hIYTdOYWsxUHBzVDRfem9Eell4WVlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi83ZjM1NDYtNGE4Ny00NjI3LWEwMTkt MzQxYjlkNjQ2NDVkLzEvYl9uS1hIYTdOYWsxUHBzVDRfem9Eell4WVlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi83ZjM1NDYtNGE4Ny00NjI3LWEwMTktMzQxYjlkNjQ2NDVk LzEvYl9uS1hIYTdOYWsxUHBzVDRfem9Eell4WVlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAROmYeVLH +KKEXzK+2PIfVapuJnF4HArF9MaFMuHvvO9putP5lYKgicfIr2ETC5zWI4jhQ76S PU/s2gQ8S1bG19UzQIGk9Flrxe/wv6wK7/y9Mkig8/qk1Gwfo18R3qLUVJtRkqbp eRdK6BcXFnO0xFr09+9yhtzTtUn9dDp4USmwG1HReg6ab5GUyOktPWzmg52ypX/D AhaXTGQf/DRH4eKUCIQxGYpu56yZ5OMqJ6n2ySYaSx+RL5L2MgSMDJupAl0zkdlT Nzt/Ocp8NX5fDYxVglWWkUt0DX57jeQUWkXzFxT22mq9QTke7/TQcCU3D1nS30Op VrWahcI41kqw/w== -----END CERTIFICATE-----Generated at Sun Dec 7 00:52:21 2025 by rpki-client