This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/cc4fe9-e48c-42da-97ea-ab57cabc18f7/1/NbA-yF0IYHprHd8f553GUcz-Pzc.mft File: NbA-yF0IYHprHd8f553GUcz-Pzc.mft (raw, json) Hash identifier: QtANK+NucVilBdT3UH3R9txONKb7ESsJqW1wyINKc78= Subject key identifier: 19:C9:9D:12:28:1F:FB:87:C5:5C:AD:D3:56:66:70:1C:9B:61:D9:E7 Authority key identifier: 35:B0:3E:C8:5D:08:60:7A:6B:1D:DF:1F:E7:9D:C6:51:CC:FE:3F:37 Certificate issuer: /CN=35b03ec85d08607a6b1ddf1fe79dc651ccfe3f37 Certificate serial: 019AF2AD5A7861C2B84FA40F6E2A5695394B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NbA-yF0IYHprHd8f553GUcz-Pzc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/cc4fe9-e48c-42da-97ea-ab57cabc18f7/1/NbA-yF0IYHprHd8f553GUcz-Pzc.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 08:00:38 +0000 Manifest this update: Sat 06 Dec 2025 08:00:38 +0000 Manifest next update: Sun 07 Dec 2025 08:00:38 +0000 Files and hashes: 1: EeFPhEstvW1EwmoMEs09YH1cZlE.roa (hash: zuogsczPuVIDLnfiQ5YgxbbQeRIuIE6FvsJkQLHPGfI=) 2: NbA-yF0IYHprHd8f553GUcz-Pzc.crl (hash: AlP2zuVIwpsvE/Am2E1fGk7/OM2lx1XJHF1TJf98hMI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/cc4fe9-e48c-42da-97ea-ab57cabc18f7/1/NbA-yF0IYHprHd8f553GUcz-Pzc.crl rsync://rpki.ripe.net/repository/DEFAULT/95/cc4fe9-e48c-42da-97ea-ab57cabc18f7/1/NbA-yF0IYHprHd8f553GUcz-Pzc.mft rsync://rpki.ripe.net/repository/DEFAULT/NbA-yF0IYHprHd8f553GUcz-Pzc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:5a:78:61:c2:b8:4f:a4:0f:6e:2a:56:95:39:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35b03ec85d08607a6b1ddf1fe79dc651ccfe3f37 Validity Not Before: Dec 6 08:00:38 2025 GMT Not After : Dec 7 08:00:38 2025 GMT Subject: CN=19c99d12281ffb87c55cadd35666701c9b61d9e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:a3:13:6e:c5:a0:cd:ee:48:2f:a6:de:9c:a1: 4e:6d:7d:fe:ce:36:29:97:3d:6e:66:91:46:0f:0d: 00:44:ac:c8:a3:9a:a6:2c:0c:1c:ff:f5:fd:a6:97: c0:ef:7d:da:00:65:fd:fc:77:06:b5:88:66:12:90: 4b:1c:17:bf:68:67:e5:ee:f4:fb:09:ce:8a:1d:10: ee:53:21:08:00:76:9a:25:5f:4b:a2:d7:b1:66:42: 39:1a:50:18:58:85:00:ec:d4:90:c8:f3:5b:bd:4f: a5:3d:e1:19:a0:26:93:8e:56:ec:59:39:12:e2:e1: 98:73:c0:54:d5:fb:12:97:49:ec:db:31:69:e5:ba: 84:39:6c:b4:d8:83:9f:75:43:f8:71:ef:b3:e6:27: 2d:8d:b8:4b:8d:80:0a:fb:be:f7:4b:62:32:ef:ef: 35:11:41:84:fa:b9:31:43:d6:d4:5d:24:d0:4f:6f: e8:f4:85:a9:f3:dd:c6:f2:f7:ec:3f:c9:72:a7:17: 2e:7e:ea:64:7c:b9:de:2b:6b:8d:20:7a:d9:7d:c6: 85:28:5f:4d:69:ba:80:a8:55:dd:72:45:9e:85:63: 95:99:72:32:51:6a:50:49:aa:84:04:b2:32:1f:d2: d7:14:28:23:5e:47:8a:89:7f:15:18:94:33:1b:94: 50:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:C9:9D:12:28:1F:FB:87:C5:5C:AD:D3:56:66:70:1C:9B:61:D9:E7 X509v3 Authority Key Identifier: keyid:35:B0:3E:C8:5D:08:60:7A:6B:1D:DF:1F:E7:9D:C6:51:CC:FE:3F:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NbA-yF0IYHprHd8f553GUcz-Pzc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/cc4fe9-e48c-42da-97ea-ab57cabc18f7/1/NbA-yF0IYHprHd8f553GUcz-Pzc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/cc4fe9-e48c-42da-97ea-ab57cabc18f7/1/NbA-yF0IYHprHd8f553GUcz-Pzc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:09:d3:a9:35:e0:7d:f9:29:05:44:39:5c:cd:e1:37:63:9a: 9b:6d:6e:cc:b7:f7:cf:ba:0d:55:b8:e9:08:9e:91:ec:4d:87: 1e:75:07:72:36:c3:c9:80:19:da:5c:e1:55:f2:f5:71:82:47: 44:dc:ce:02:4b:51:b6:bc:fd:35:53:bf:fa:56:bf:9a:32:eb: ee:71:04:98:ac:74:21:79:9c:e4:7e:70:df:44:5d:10:99:e1: 7e:d5:a4:09:c4:42:ae:52:b1:4d:6f:c7:5f:0f:56:60:37:ed: 58:8d:f8:f2:d8:b7:9d:42:e7:c2:8d:ef:03:d1:0e:c0:85:7b: 6a:5d:19:46:59:df:4a:93:26:64:01:a7:fa:d0:f8:a4:71:fb: 48:33:a7:b5:0d:01:76:e5:10:0e:d4:42:bd:85:f2:f3:9e:1e: 19:c6:f3:c7:ce:fc:42:12:62:05:5f:a3:07:48:77:e5:ee:99: f3:d2:7c:36:b0:15:cd:6f:89:bf:55:59:96:0a:de:d9:ba:12: 16:93:88:a3:87:d1:0b:9a:58:ab:d6:92:67:bd:b2:f7:7e:93: 0d:20:2c:e7:04:c2:69:38:dc:5b:e7:ba:f9:4f:5b:9b:dc:f1: 7c:46:69:2f:8d:33:95:04:61:e4:12:20:00:59:10:50:06:b1: fb:da:74:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrVp4YcK4T6QPbipWlTlLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1YjAzZWM4NWQwODYwN2E2YjFkZGYxZmU3OWRjNjUxY2Nm ZTNmMzcwHhcNMjUxMjA2MDgwMDM4WhcNMjUxMjA3MDgwMDM4WjAzMTEwLwYDVQQD EygxOWM5OWQxMjI4MWZmYjg3YzU1Y2FkZDM1NjY2NzAxYzliNjFkOWU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6MTbsWgze5IL6benKFObX3+zjYp lz1uZpFGDw0ARKzIo5qmLAwc//X9ppfA733aAGX9/HcGtYhmEpBLHBe/aGfl7vT7 Cc6KHRDuUyEIAHaaJV9LotexZkI5GlAYWIUA7NSQyPNbvU+lPeEZoCaTjlbsWTkS 4uGYc8BU1fsSl0ns2zFp5bqEOWy02IOfdUP4ce+z5ictjbhLjYAK+773S2Iy7+81 EUGE+rkxQ9bUXSTQT2/o9IWp893G8vfsP8lypxcufupkfLneK2uNIHrZfcaFKF9N abqAqFXdckWehWOVmXIyUWpQSaqEBLIyH9LXFCgjXkeKiX8VGJQzG5RQEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBnJnRIoH/uHxVyt01ZmcBybYdnnMB8GA1UdIwQY MBaAFDWwPshdCGB6ax3fH+edxlHM/j83MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmJBLXlGMElZSHBySGQ4ZjU1M0dVY3otUHpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9jYzRmZTktZTQ4Yy00MmRhLTk3ZWEt YWI1N2NhYmMxOGY3LzEvTmJBLXlGMElZSHBySGQ4ZjU1M0dVY3otUHpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS9jYzRmZTktZTQ4Yy00MmRhLTk3ZWEtYWI1N2NhYmMxOGY3 LzEvTmJBLXlGMElZSHBySGQ4ZjU1M0dVY3otUHpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOQnTqTXg ffkpBUQ5XM3hN2Oam21uzLf3z7oNVbjpCJ6R7E2HHnUHcjbDyYAZ2lzhVfL1cYJH RNzOAktRtrz9NVO/+la/mjLr7nEEmKx0IXmc5H5w30RdEJnhftWkCcRCrlKxTW/H Xw9WYDftWI348ti3nULnwo3vA9EOwIV7al0ZRlnfSpMmZAGn+tD4pHH7SDOntQ0B duUQDtRCvYXy854eGcbzx878QhJiBV+jB0h35e6Z89J8NrAVzW+Jv1VZlgre2boS FpOIo4fRC5pYq9aSZ72y936TDSAs5wTCaTjcW+e6+U9bm9zxfEZpL40zlQRh5BIg AFkQUAax+9p0hw== -----END CERTIFICATE-----Generated at Sat Dec 6 17:35:21 2025 by rpki-client