This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/c7244e-b103-43b1-912f-aa632ddb7615/1/NO2iVBz8z2guKd2uYx7cjR57b2A.mft File: NO2iVBz8z2guKd2uYx7cjR57b2A.mft (raw, json) Hash identifier: 1l3HpZ6yAQCKdb8Vsupsic9+mGdSlVMYq/bq/CAcNkA= Subject key identifier: 97:52:E5:48:A4:D3:58:45:27:BD:D8:FF:BA:0A:2D:6E:8A:14:C1:53 Authority key identifier: 34:ED:A2:54:1C:FC:CF:68:2E:29:DD:AE:63:1E:DC:8D:1E:7B:6F:60 Certificate issuer: /CN=34eda2541cfccf682e29ddae631edc8d1e7b6f60 Certificate serial: 019AF12D24E2B2D89A82FC4478608F933092 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NO2iVBz8z2guKd2uYx7cjR57b2A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/c7244e-b103-43b1-912f-aa632ddb7615/1/NO2iVBz8z2guKd2uYx7cjR57b2A.mft Manifest number: 080F Signing time: Sat 06 Dec 2025 01:00:58 +0000 Manifest this update: Sat 06 Dec 2025 01:00:58 +0000 Manifest next update: Sun 07 Dec 2025 01:00:58 +0000 Files and hashes: 1: NO2iVBz8z2guKd2uYx7cjR57b2A.crl (hash: ZlOGXWGNLZlJzhuEBYxi1jZa3ZPCB0fFxSqaGZrJhHA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/c7244e-b103-43b1-912f-aa632ddb7615/1/NO2iVBz8z2guKd2uYx7cjR57b2A.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/c7244e-b103-43b1-912f-aa632ddb7615/1/NO2iVBz8z2guKd2uYx7cjR57b2A.mft rsync://rpki.ripe.net/repository/DEFAULT/NO2iVBz8z2guKd2uYx7cjR57b2A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:24:e2:b2:d8:9a:82:fc:44:78:60:8f:93:30:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34eda2541cfccf682e29ddae631edc8d1e7b6f60 Validity Not Before: Dec 6 01:00:58 2025 GMT Not After : Dec 7 01:00:58 2025 GMT Subject: CN=9752e548a4d3584527bdd8ffba0a2d6e8a14c153 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:55:dc:61:56:cc:64:c1:3c:bb:ba:88:f9:96: 44:bc:b5:9d:43:6d:c2:6a:eb:96:6a:15:74:b1:d3: 85:aa:69:5a:58:f9:ba:36:99:bf:fa:4e:82:68:ae: 58:17:79:6d:b9:b5:c9:8c:b5:b0:83:36:f4:90:23: 77:f0:7b:2c:11:fd:ee:9a:dd:fc:58:37:c2:e0:9c: be:20:7d:29:3b:cc:d5:c0:80:07:ea:19:1a:e8:b5: be:e6:30:c1:e0:37:da:4f:50:e8:37:fa:cd:b3:4c: 55:d4:c3:be:f7:5d:8c:00:72:e1:ed:b3:64:0d:6f: 27:f6:aa:fd:d0:a1:29:cb:db:ff:e7:fa:6d:98:c8: e7:be:12:89:b8:ee:a0:f7:4b:49:1a:bf:cb:d7:c5: 94:e0:bb:f6:de:93:9a:3a:88:5b:14:ce:ad:ec:2c: f3:db:62:d8:56:5e:13:5c:69:4d:44:05:c9:b6:e2: 8d:d7:7d:08:6b:f4:4f:90:6b:0c:2f:65:85:9f:f7: 79:98:6c:ea:01:4e:c5:2c:73:ab:a5:14:8b:e0:ad: 6d:25:6e:ef:c1:b1:53:ed:70:48:b6:5a:9c:24:ed: 71:b4:d7:c8:b2:dd:f0:95:45:f8:28:fa:64:19:35: c4:ef:7c:41:46:2c:78:1b:af:10:83:87:a1:f5:52: 9b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:52:E5:48:A4:D3:58:45:27:BD:D8:FF:BA:0A:2D:6E:8A:14:C1:53 X509v3 Authority Key Identifier: keyid:34:ED:A2:54:1C:FC:CF:68:2E:29:DD:AE:63:1E:DC:8D:1E:7B:6F:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NO2iVBz8z2guKd2uYx7cjR57b2A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c7244e-b103-43b1-912f-aa632ddb7615/1/NO2iVBz8z2guKd2uYx7cjR57b2A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c7244e-b103-43b1-912f-aa632ddb7615/1/NO2iVBz8z2guKd2uYx7cjR57b2A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:f2:71:3d:f2:d8:01:5c:4b:fb:e5:dd:fc:81:dd:cf:bb:ed: 0f:e2:f1:a3:9a:d0:0e:6d:dd:43:68:e9:04:8b:69:08:2d:e5: bb:b9:d9:b7:a6:86:2c:3d:8d:6b:6d:cb:aa:ed:c9:1e:00:5c: df:5e:09:ce:df:ed:77:6d:9d:ca:55:96:d6:0a:a6:47:41:cd: 85:8d:d4:1e:26:7d:c7:e4:66:87:0e:ba:74:d0:66:47:74:65: 11:6a:93:c5:0a:21:f7:64:6d:aa:ff:4d:da:9f:02:5c:2f:0e: 06:13:2b:72:7f:c7:bb:5f:cb:3a:b0:0d:fc:4e:8d:09:05:0b: 12:9a:34:34:25:ef:cd:d4:be:68:08:72:7c:12:41:28:16:11: d8:10:82:e8:89:f1:1d:d0:01:3e:ac:14:a5:e5:35:8c:66:e0: 37:19:55:08:25:13:d5:2d:13:31:24:5a:ab:b4:73:47:49:5a: 30:6e:52:3b:ab:d3:23:ff:9b:36:2c:2a:79:a2:0f:ee:db:97: 12:df:8d:15:a7:0e:54:c6:67:b3:cc:b1:27:77:c1:c6:e4:89: 99:ae:57:08:88:b1:e9:39:be:a7:22:7d:ab:45:19:ec:1a:85: be:02:68:2e:41:e6:62:83:0d:56:e2:9a:48:6e:a0:ca:82:f1: ed:ba:68:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLSTistiagvxEeGCPkzCSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0ZWRhMjU0MWNmY2NmNjgyZTI5ZGRhZTYzMWVkYzhkMWU3 YjZmNjAwHhcNMjUxMjA2MDEwMDU4WhcNMjUxMjA3MDEwMDU4WjAzMTEwLwYDVQQD Eyg5NzUyZTU0OGE0ZDM1ODQ1MjdiZGQ4ZmZiYTBhMmQ2ZThhMTRjMTUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVXcYVbMZME8u7qI+ZZEvLWdQ23C auuWahV0sdOFqmlaWPm6Npm/+k6CaK5YF3ltubXJjLWwgzb0kCN38HssEf3umt38 WDfC4Jy+IH0pO8zVwIAH6hka6LW+5jDB4DfaT1DoN/rNs0xV1MO+912MAHLh7bNk DW8n9qr90KEpy9v/5/ptmMjnvhKJuO6g90tJGr/L18WU4Lv23pOaOohbFM6t7Czz 22LYVl4TXGlNRAXJtuKN130Ia/RPkGsML2WFn/d5mGzqAU7FLHOrpRSL4K1tJW7v wbFT7XBItlqcJO1xtNfIst3wlUX4KPpkGTXE73xBRix4G68Qg4eh9VKbRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJdS5Uik01hFJ73Y/7oKLW6KFMFTMB8GA1UdIwQY MBaAFDTtolQc/M9oLindrmMe3I0ee29gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTk8yaVZCejh6Mmd1S2QydVl4N2NqUjU3YjJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9jNzI0NGUtYjEwMy00M2IxLTkxMmYt YWE2MzJkZGI3NjE1LzEvTk8yaVZCejh6Mmd1S2QydVl4N2NqUjU3YjJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9jNzI0NGUtYjEwMy00M2IxLTkxMmYtYWE2MzJkZGI3NjE1 LzEvTk8yaVZCejh6Mmd1S2QydVl4N2NqUjU3YjJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB/JxPfLY AVxL++Xd/IHdz7vtD+Lxo5rQDm3dQ2jpBItpCC3lu7nZt6aGLD2Na23Lqu3JHgBc 314Jzt/td22dylWW1gqmR0HNhY3UHiZ9x+Rmhw66dNBmR3RlEWqTxQoh92Rtqv9N 2p8CXC8OBhMrcn/Hu1/LOrAN/E6NCQULEpo0NCXvzdS+aAhyfBJBKBYR2BCC6Inx HdABPqwUpeU1jGbgNxlVCCUT1S0TMSRaq7RzR0laMG5SO6vTI/+bNiwqeaIP7tuX Et+NFacOVMZns8yxJ3fBxuSJma5XCIix6Tm+pyJ9q0UZ7BqFvgJoLkHmYoMNVuKa SG6gyoLx7bpotg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:10:52 2025 by rpki-client