This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/e01190-5204-44c5-a11a-dafd74763d23/1/b_NiwHZa-3uYBLbYGUcAB7AfJi4.mft File: b_NiwHZa-3uYBLbYGUcAB7AfJi4.mft (raw, json) Hash identifier: m+X9fqM0TxaxFUkAemQzFeSTJn7OP0eBrV33JEy/OzQ= Subject key identifier: 59:8A:58:77:E0:2C:37:B7:05:01:B9:FF:2F:9D:83:AE:19:27:2B:F1 Authority key identifier: 6F:F3:62:C0:76:5A:FB:7B:98:04:B6:D8:19:47:00:07:B0:1F:26:2E Certificate issuer: /CN=6ff362c0765afb7b9804b6d819470007b01f262e Certificate serial: 019AF209392B234ACFADBD1E70F2C0ED85D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b_NiwHZa-3uYBLbYGUcAB7AfJi4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/e01190-5204-44c5-a11a-dafd74763d23/1/b_NiwHZa-3uYBLbYGUcAB7AfJi4.mft Manifest number: 1412 Signing time: Sat 06 Dec 2025 05:01:21 +0000 Manifest this update: Sat 06 Dec 2025 05:01:21 +0000 Manifest next update: Sun 07 Dec 2025 05:01:21 +0000 Files and hashes: 1: 12DD2aCYvziGW8lVsGZ2vKiLBC0.roa (hash: Ii7ExRVqK7pcmlW/+KlDzAXDHNkTNKGqWd+7FkH2wWQ=) 2: 5XQDvCRFfpki5_C8-OeBVN6v1H0.roa (hash: /w9tePTXy2w2SJ2JE0x7aepajV3WQjBYCJm0qDkriys=) 3: R5LZb08eVQsHsmzHTriBHpv71oI.roa (hash: CJ5tPNTENlP5nBlcTG8fD7T+unBLCwcZowVguYwf6HQ=) 4: UtyjBV0EsNwGMX6YP0NptzzeFf4.roa (hash: dA0RBDw7aGVYNwlm/IJ4BCmDJNOn72e0aCAEZ6RnVIc=) 5: b_NiwHZa-3uYBLbYGUcAB7AfJi4.crl (hash: aU3xHZRhJfi32FyOGrfOdxKtUXlThgBqjuutL/i1258=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/e01190-5204-44c5-a11a-dafd74763d23/1/b_NiwHZa-3uYBLbYGUcAB7AfJi4.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/e01190-5204-44c5-a11a-dafd74763d23/1/b_NiwHZa-3uYBLbYGUcAB7AfJi4.mft rsync://rpki.ripe.net/repository/DEFAULT/b_NiwHZa-3uYBLbYGUcAB7AfJi4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:39:2b:23:4a:cf:ad:bd:1e:70:f2:c0:ed:85:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ff362c0765afb7b9804b6d819470007b01f262e Validity Not Before: Dec 6 05:01:21 2025 GMT Not After : Dec 7 05:01:21 2025 GMT Subject: CN=598a5877e02c37b70501b9ff2f9d83ae19272bf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b1:31:a7:5e:0e:e0:29:46:f9:19:5b:e8:09: 80:f4:75:23:b6:f7:1a:62:5c:cf:29:2f:e3:01:3a: 57:bc:5b:37:0f:5b:4d:a5:df:52:3f:33:b3:68:9b: de:d5:b4:3d:01:b4:6c:f1:c2:fc:e6:72:37:22:e4: d5:52:03:21:fa:96:6f:47:38:11:e6:8d:90:12:7c: bb:92:42:38:88:17:fe:fb:df:dd:11:98:10:a0:e7: 06:a6:2d:27:06:b5:67:7d:67:9e:f0:d5:ec:83:07: 4d:3e:50:3e:4f:5c:b4:44:a2:7d:b5:e4:12:c5:7f: 39:82:53:ab:67:d3:a2:b5:40:a2:a3:4d:dd:04:bd: da:07:22:9f:f9:8c:42:c1:5e:48:1a:db:49:58:1e: 16:d6:b8:9d:aa:ed:4d:7e:71:db:21:7c:0f:ba:dc: a6:0e:1b:06:91:4a:bf:7e:75:6b:58:c7:db:ba:1d: 12:a0:db:57:5a:ad:d7:fa:dc:b6:fc:ab:9b:d8:d9: ff:18:d7:12:45:00:74:08:2a:d6:44:db:82:69:42: fd:4b:ff:30:67:d8:df:6a:dc:57:ff:01:c2:b0:4e: 67:5a:10:5b:8b:d3:38:96:e3:d6:8a:1e:56:73:88: 89:88:f9:da:05:08:2f:1f:0a:db:be:5f:77:55:d1: 2d:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:8A:58:77:E0:2C:37:B7:05:01:B9:FF:2F:9D:83:AE:19:27:2B:F1 X509v3 Authority Key Identifier: keyid:6F:F3:62:C0:76:5A:FB:7B:98:04:B6:D8:19:47:00:07:B0:1F:26:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_NiwHZa-3uYBLbYGUcAB7AfJi4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e01190-5204-44c5-a11a-dafd74763d23/1/b_NiwHZa-3uYBLbYGUcAB7AfJi4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e01190-5204-44c5-a11a-dafd74763d23/1/b_NiwHZa-3uYBLbYGUcAB7AfJi4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:8e:d5:f4:43:e8:72:c4:79:3f:52:b5:37:ab:e8:49:5f:0d: 5d:2e:ef:d6:fc:b0:fd:49:b9:a1:bc:78:c8:eb:0a:dc:25:c5: 5e:b2:6e:78:6c:21:5c:17:fb:4b:2c:70:2a:0a:8b:1b:7f:6d: 2a:85:4f:c5:c1:3d:81:fb:64:c6:b2:92:d1:3f:6a:ff:9a:b9: 08:88:02:b0:45:e6:00:ae:79:2c:21:9e:c8:9f:6c:53:5c:fa: cb:65:7f:6b:ae:23:cb:c9:0f:63:42:af:a4:db:db:ec:df:5b: 01:b3:58:8c:5b:a1:b2:13:5a:b2:28:50:2a:60:52:41:40:d2: 1b:97:91:72:d7:c8:8b:ae:16:08:09:df:65:3b:2c:b0:c6:cf: c2:f4:07:ee:e2:1c:cf:36:0e:b2:c0:39:cf:d8:0d:70:6f:e9: b1:37:91:ab:ce:02:d1:f0:48:72:f2:cd:cb:f1:7b:1f:47:43: ed:d4:06:c0:62:26:98:c9:ba:4c:d0:df:75:5d:5f:c1:f0:72: 41:70:0e:4f:24:d9:20:f3:28:3a:8e:f8:b7:c3:13:31:c5:70: bf:ac:02:15:13:8e:c4:dc:01:c2:9b:2c:10:29:80:a2:d6:1e: 4a:7d:39:b6:a3:c9:40:61:fa:a6:62:66:9e:73:44:cd:95:38: 34:a5:ef:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCTkrI0rPrb0ecPLA7YXUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmZjM2MmMwNzY1YWZiN2I5ODA0YjZkODE5NDcwMDA3YjAx ZjI2MmUwHhcNMjUxMjA2MDUwMTIxWhcNMjUxMjA3MDUwMTIxWjAzMTEwLwYDVQQD Eyg1OThhNTg3N2UwMmMzN2I3MDUwMWI5ZmYyZjlkODNhZTE5MjcyYmYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7Exp14O4ClG+Rlb6AmA9HUjtvca YlzPKS/jATpXvFs3D1tNpd9SPzOzaJve1bQ9AbRs8cL85nI3IuTVUgMh+pZvRzgR 5o2QEny7kkI4iBf++9/dEZgQoOcGpi0nBrVnfWee8NXsgwdNPlA+T1y0RKJ9teQS xX85glOrZ9OitUCio03dBL3aByKf+YxCwV5IGttJWB4W1ridqu1NfnHbIXwPutym DhsGkUq/fnVrWMfbuh0SoNtXWq3X+ty2/Kub2Nn/GNcSRQB0CCrWRNuCaUL9S/8w Z9jfatxX/wHCsE5nWhBbi9M4luPWih5Wc4iJiPnaBQgvHwrbvl93VdEtqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFmKWHfgLDe3BQG5/y+dg64ZJyvxMB8GA1UdIwQY MBaAFG/zYsB2Wvt7mAS22BlHAAewHyYuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYl9OaXdIWmEtM3VZQkxiWUdVY0FCN0FmSmk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9lMDExOTAtNTIwNC00NGM1LWExMWEt ZGFmZDc0NzYzZDIzLzEvYl9OaXdIWmEtM3VZQkxiWUdVY0FCN0FmSmk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9lMDExOTAtNTIwNC00NGM1LWExMWEtZGFmZDc0NzYzZDIz LzEvYl9OaXdIWmEtM3VZQkxiWUdVY0FCN0FmSmk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVY7V9EPo csR5P1K1N6voSV8NXS7v1vyw/Um5obx4yOsK3CXFXrJueGwhXBf7SyxwKgqLG39t KoVPxcE9gftkxrKS0T9q/5q5CIgCsEXmAK55LCGeyJ9sU1z6y2V/a64jy8kPY0Kv pNvb7N9bAbNYjFuhshNasihQKmBSQUDSG5eRctfIi64WCAnfZTsssMbPwvQH7uIc zzYOssA5z9gNcG/psTeRq84C0fBIcvLNy/F7H0dD7dQGwGImmMm6TNDfdV1fwfBy QXAOTyTZIPMoOo74t8MTMcVwv6wCFROOxNwBwpssECmAotYeSn05tqPJQGH6pmJm nnNEzZU4NKXvaw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:10:22 2025 by rpki-client