This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft File: nNB1iCXdic_uX97MfctlHwpdEBg.mft (raw, json) Hash identifier: p/s8Y4RSTstzioq7L1mqCSZWqKWh8UUe2uy/YpYAFLw= Subject key identifier: 8A:79:F8:EF:DF:51:41:F7:9C:83:60:DF:74:13:AD:7E:16:43:06:6F Authority key identifier: 9C:D0:75:88:25:DD:89:CF:EE:5F:DE:CC:7D:CB:65:1F:0A:5D:10:18 Certificate issuer: /CN=9cd0758825dd89cfee5fdecc7dcb651f0a5d1018 Certificate serial: 019AF19AC45F378ED7B0ED582863B0FEBF0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nNB1iCXdic_uX97MfctlHwpdEBg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft Manifest number: 16AF Signing time: Sat 06 Dec 2025 03:00:43 +0000 Manifest this update: Sat 06 Dec 2025 03:00:43 +0000 Manifest next update: Sun 07 Dec 2025 03:00:43 +0000 Files and hashes: 1: 501ahkD4gjr9itS0rHitDULQOJI.roa (hash: 7QvKhQGjRnbky85nLC/mxy/1QVWGc8n8REeP6RBHa2w=) 2: mnnYxns7ruXxPgM_VNIHL5kcJa8.roa (hash: Wb/XaO0LWIZbn326Mfd8GlVkRuIOjXOck5hC67Z7SYg=) 3: nNB1iCXdic_uX97MfctlHwpdEBg.crl (hash: vgw5iUnIa6//E0niJm3MqH8tD9kqrY4chbAelkxsa/M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft rsync://rpki.ripe.net/repository/DEFAULT/nNB1iCXdic_uX97MfctlHwpdEBg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:c4:5f:37:8e:d7:b0:ed:58:28:63:b0:fe:bf:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cd0758825dd89cfee5fdecc7dcb651f0a5d1018 Validity Not Before: Dec 6 03:00:43 2025 GMT Not After : Dec 7 03:00:43 2025 GMT Subject: CN=8a79f8efdf5141f79c8360df7413ad7e1643066f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:80:d5:d1:e4:57:42:b2:64:e2:bd:2a:34:49: fd:78:d8:a5:2f:c2:ce:c5:8d:29:7d:7b:ad:6f:a7: b6:1c:02:70:05:5b:f2:f7:a6:21:4d:99:0c:2d:c8: ec:ee:ad:dd:81:ac:07:14:08:30:fc:e5:e1:55:23: fe:57:53:d8:61:88:50:82:6f:1a:c4:ea:9b:e0:1b: 1a:64:4f:b0:2a:cd:c0:6b:57:7e:4e:0c:5c:07:3e: 0a:23:84:d8:d3:32:55:e7:ac:30:d2:dc:39:84:ab: e3:8b:6d:51:0d:7f:08:cd:57:d2:fe:94:ba:b1:48: f4:b4:e9:0f:82:58:aa:26:82:01:f9:4c:a6:08:d0: 73:49:60:ec:51:02:25:b7:12:a7:6a:3d:44:61:d6: 8a:6e:9b:79:87:58:2d:79:69:f7:65:c1:a3:14:81: e3:5f:a4:d6:44:b7:b0:65:0b:97:20:f9:7a:6c:78: f8:f2:1b:eb:18:e0:4a:b5:94:47:33:bb:f1:7b:f3: ce:91:b3:de:56:4b:dc:41:86:a5:e1:40:24:a8:66: 42:ab:8b:6f:a6:b5:a3:a3:11:a1:29:98:c3:d2:1d: 4a:af:1b:b1:c3:ee:4b:03:09:74:af:c4:b1:49:41: a0:f8:83:89:d3:03:c2:4b:7d:00:bc:f1:39:6a:db: 4d:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:79:F8:EF:DF:51:41:F7:9C:83:60:DF:74:13:AD:7E:16:43:06:6F X509v3 Authority Key Identifier: keyid:9C:D0:75:88:25:DD:89:CF:EE:5F:DE:CC:7D:CB:65:1F:0A:5D:10:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nNB1iCXdic_uX97MfctlHwpdEBg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:f9:c7:0d:0d:c2:a3:0e:ab:ca:e9:d2:76:61:b2:a9:5e:79: 52:ee:be:e7:0e:ed:1d:5e:9c:5e:4d:f8:fa:db:39:f2:8b:87: 42:38:eb:4c:5d:17:4e:27:11:a4:43:bc:33:16:93:19:d9:01: be:1d:07:b5:a3:f3:8c:20:18:95:bd:6d:89:b4:17:86:bc:2a: 60:fe:fb:f0:b5:e5:3c:4b:09:36:06:73:99:38:6d:2f:9a:4d: b0:06:0f:b3:ff:e5:44:0e:45:02:ed:0a:81:04:8c:26:d9:45: 24:84:10:a3:ac:02:a3:eb:8d:45:ad:ae:e2:ff:33:18:99:60: f6:27:87:dc:c8:d4:8f:10:8a:e8:a5:cc:78:56:e2:b5:de:d7: 50:5d:3e:cf:d6:7b:17:c3:13:1a:44:d8:c1:ca:04:c2:7e:a5: f7:7c:91:b8:ed:bf:0b:d3:4b:d3:8e:12:51:33:60:fa:6a:6e: 6b:5c:76:95:f3:58:77:8d:8b:ee:e0:09:d4:6f:19:f1:44:82: d5:62:01:e1:b6:d9:3b:b6:dc:83:7f:87:3f:0d:a8:88:e7:7f: d7:1f:bb:53:49:77:f7:ab:f2:40:f2:44:37:4e:9b:de:c7:c5: 0f:7a:14:49:be:58:62:73:fb:77:f8:97:7d:43:39:ac:10:0b: db:2a:80:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmsRfN47XsO1YKGOw/r8NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljZDA3NTg4MjVkZDg5Y2ZlZTVmZGVjYzdkY2I2NTFmMGE1 ZDEwMTgwHhcNMjUxMjA2MDMwMDQzWhcNMjUxMjA3MDMwMDQzWjAzMTEwLwYDVQQD Eyg4YTc5ZjhlZmRmNTE0MWY3OWM4MzYwZGY3NDEzYWQ3ZTE2NDMwNjZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYDV0eRXQrJk4r0qNEn9eNilL8LO xY0pfXutb6e2HAJwBVvy96YhTZkMLcjs7q3dgawHFAgw/OXhVSP+V1PYYYhQgm8a xOqb4BsaZE+wKs3Aa1d+TgxcBz4KI4TY0zJV56ww0tw5hKvji21RDX8IzVfS/pS6 sUj0tOkPgliqJoIB+UymCNBzSWDsUQIltxKnaj1EYdaKbpt5h1gteWn3ZcGjFIHj X6TWRLewZQuXIPl6bHj48hvrGOBKtZRHM7vxe/POkbPeVkvcQYal4UAkqGZCq4tv prWjoxGhKZjD0h1Krxuxw+5LAwl0r8SxSUGg+IOJ0wPCS30AvPE5attNWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIp5+O/fUUH3nINg33QTrX4WQwZvMB8GA1UdIwQY MBaAFJzQdYgl3YnP7l/ezH3LZR8KXRAYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbk5CMWlDWGRpY191WDk3TWZjdGxId3BkRUJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS8wZTY1MWUtOTBjNy00YWNkLTk3Yjkt YTU0ZjhlNDgxM2U3LzEvbk5CMWlDWGRpY191WDk3TWZjdGxId3BkRUJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS8wZTY1MWUtOTBjNy00YWNkLTk3YjktYTU0ZjhlNDgxM2U3 LzEvbk5CMWlDWGRpY191WDk3TWZjdGxId3BkRUJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADfnHDQ3C ow6ryunSdmGyqV55Uu6+5w7tHV6cXk34+ts58ouHQjjrTF0XTicRpEO8MxaTGdkB vh0HtaPzjCAYlb1tibQXhrwqYP778LXlPEsJNgZzmThtL5pNsAYPs//lRA5FAu0K gQSMJtlFJIQQo6wCo+uNRa2u4v8zGJlg9ieH3MjUjxCK6KXMeFbitd7XUF0+z9Z7 F8MTGkTYwcoEwn6l93yRuO2/C9NL044SUTNg+mpua1x2lfNYd42L7uAJ1G8Z8USC 1WIB4bbZO7bcg3+HPw2oiOd/1x+7U0l396vyQPJEN06b3sfFD3oUSb5YYnP7d/iX fUM5rBAL2yqASw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:59:12 2025 by rpki-client