This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/99ef87-f86c-4fac-84b6-316b03d502cc/1/neBXM--4s3ZMqT7jQJiIadlmA6o.mft File: neBXM--4s3ZMqT7jQJiIadlmA6o.mft (raw, json) Hash identifier: MKDtsFNiu4INNn4pEzG9as4HkyLDf6CBP0mudHGFBZw= Subject key identifier: D8:3A:B3:41:49:E5:B6:EC:97:95:55:85:61:0F:3C:01:07:BF:59:97 Authority key identifier: 9D:E0:57:33:EF:B8:B3:76:4C:A9:3E:E3:40:98:88:69:D9:66:03:AA Certificate issuer: /CN=9de05733efb8b3764ca93ee340988869d96603aa Certificate serial: 019AF1D2404ABAEE3E42BF615DCCA98122C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/neBXM--4s3ZMqT7jQJiIadlmA6o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/99ef87-f86c-4fac-84b6-316b03d502cc/1/neBXM--4s3ZMqT7jQJiIadlmA6o.mft Manifest number: 0791 Signing time: Sat 06 Dec 2025 04:01:19 +0000 Manifest this update: Sat 06 Dec 2025 04:01:19 +0000 Manifest next update: Sun 07 Dec 2025 04:01:19 +0000 Files and hashes: 1: neBXM--4s3ZMqT7jQJiIadlmA6o.crl (hash: sWD2VpRjjyYcjOSe12j+bCJQzHO6PkTm7jNXYR6sUYM=) 2: sqmMGt0eDKyreQvWI_6aFaF0fMI.roa (hash: qdLfu3h3QsYojhl/lJoW5BgE1PTZ02X+GGEq14T1m/g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/99ef87-f86c-4fac-84b6-316b03d502cc/1/neBXM--4s3ZMqT7jQJiIadlmA6o.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/99ef87-f86c-4fac-84b6-316b03d502cc/1/neBXM--4s3ZMqT7jQJiIadlmA6o.mft rsync://rpki.ripe.net/repository/DEFAULT/neBXM--4s3ZMqT7jQJiIadlmA6o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:40:4a:ba:ee:3e:42:bf:61:5d:cc:a9:81:22:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9de05733efb8b3764ca93ee340988869d96603aa Validity Not Before: Dec 6 04:01:19 2025 GMT Not After : Dec 7 04:01:19 2025 GMT Subject: CN=d83ab34149e5b6ec97955585610f3c0107bf5997 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ac:55:34:b3:ca:56:84:85:78:4f:dc:5f:fb: c2:3d:c3:52:95:ea:f1:d7:ea:cc:03:2d:43:17:7f: 74:5a:f8:95:4f:9f:ac:80:0e:88:5e:20:bb:66:b3: 64:77:82:c5:a2:22:35:10:3c:69:77:f2:1a:e0:5c: bd:4f:0d:3a:55:3a:31:a1:84:0d:ce:2e:c4:06:ba: 74:09:e9:7c:72:b3:c7:1c:f1:a5:f9:0c:2e:56:c9: 28:6b:97:ad:e6:53:4c:eb:7b:4e:19:d9:66:91:37: 6e:ae:2e:90:83:97:96:c0:ca:f2:5b:bc:d3:c1:bf: c2:ed:d8:43:fc:53:0c:83:6d:ea:d7:6d:42:ea:07: 75:f7:7f:ad:11:c1:2d:88:94:8c:37:49:5e:ce:84: 89:52:5e:11:db:ee:b9:a2:bf:1b:c9:55:34:cf:0a: fa:06:1c:18:74:a0:a8:9c:01:7a:9e:00:ce:dc:0c: fb:fc:64:cd:9d:bc:ef:a6:87:ef:17:65:20:83:9b: e8:82:fa:f1:af:20:31:d8:54:fc:5a:2a:73:08:d9: de:9e:ba:e5:9f:1e:f4:73:dd:0f:36:ed:63:fb:94: 97:96:44:b7:94:47:74:40:9d:9f:01:9d:66:75:6e: d8:95:a3:4b:0a:ee:ec:92:17:1a:fd:b5:d4:f9:86: 6e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:3A:B3:41:49:E5:B6:EC:97:95:55:85:61:0F:3C:01:07:BF:59:97 X509v3 Authority Key Identifier: keyid:9D:E0:57:33:EF:B8:B3:76:4C:A9:3E:E3:40:98:88:69:D9:66:03:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/neBXM--4s3ZMqT7jQJiIadlmA6o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/99ef87-f86c-4fac-84b6-316b03d502cc/1/neBXM--4s3ZMqT7jQJiIadlmA6o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/99ef87-f86c-4fac-84b6-316b03d502cc/1/neBXM--4s3ZMqT7jQJiIadlmA6o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:87:ff:87:de:fe:00:31:01:34:65:86:51:31:2a:06:d4:0b: 3c:4b:35:0a:4a:c4:b4:92:fa:90:bb:f3:ef:d5:fa:d2:ff:2e: a3:f6:e7:cf:8e:30:46:b0:10:7e:90:13:91:ed:93:94:6b:ce: 94:15:30:4c:a3:74:3f:cc:0d:2c:72:96:d9:bc:fd:00:8c:81: f6:ec:36:64:17:6e:f8:01:dc:45:57:9e:73:fc:88:10:a6:32: 42:22:f7:16:99:4d:d3:e7:05:94:6b:a4:94:10:fc:3d:72:bd: a5:83:81:d2:cc:09:54:e1:f2:b7:b5:2d:b7:4f:e7:9f:1f:20: 5c:db:b4:79:72:58:33:01:35:51:6d:ec:30:d6:42:1f:01:da: 30:02:6e:e0:f8:f0:43:e4:38:86:ab:55:39:c1:94:03:1d:e2: ff:9d:2b:26:b4:ee:ae:3a:a9:57:95:8e:d1:9d:e9:3c:26:27: d0:a4:18:8a:dc:3a:d5:e0:23:90:42:54:b1:b8:08:c1:ab:01: 17:c9:28:4d:f2:ce:19:28:38:21:4b:6f:9f:33:87:39:7f:5d: 77:27:5b:0e:89:11:11:79:65:ea:0c:2b:49:b6:e3:a6:9f:e4: 00:ee:0b:56:24:b1:8c:0c:f8:af:9f:37:0a:b6:94:c0:f5:28: 3d:eb:3b:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0kBKuu4+Qr9hXcypgSLBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkZTA1NzMzZWZiOGIzNzY0Y2E5M2VlMzQwOTg4ODY5ZDk2 NjAzYWEwHhcNMjUxMjA2MDQwMTE5WhcNMjUxMjA3MDQwMTE5WjAzMTEwLwYDVQQD EyhkODNhYjM0MTQ5ZTViNmVjOTc5NTU1ODU2MTBmM2MwMTA3YmY1OTk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1KxVNLPKVoSFeE/cX/vCPcNSlerx 1+rMAy1DF390WviVT5+sgA6IXiC7ZrNkd4LFoiI1EDxpd/Ia4Fy9Tw06VToxoYQN zi7EBrp0Cel8crPHHPGl+QwuVskoa5et5lNM63tOGdlmkTduri6Qg5eWwMryW7zT wb/C7dhD/FMMg23q121C6gd193+tEcEtiJSMN0lezoSJUl4R2+65or8byVU0zwr6 BhwYdKConAF6ngDO3Az7/GTNnbzvpofvF2Ugg5vogvrxryAx2FT8WipzCNnenrrl nx70c90PNu1j+5SXlkS3lEd0QJ2fAZ1mdW7YlaNLCu7skhca/bXU+YZuwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNg6s0FJ5bbsl5VVhWEPPAEHv1mXMB8GA1UdIwQY MBaAFJ3gVzPvuLN2TKk+40CYiGnZZgOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmVCWE0tLTRzM1pNcVQ3alFKaUlhZGxtQTZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC85OWVmODctZjg2Yy00ZmFjLTg0YjYt MzE2YjAzZDUwMmNjLzEvbmVCWE0tLTRzM1pNcVQ3alFKaUlhZGxtQTZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC85OWVmODctZjg2Yy00ZmFjLTg0YjYtMzE2YjAzZDUwMmNj LzEvbmVCWE0tLTRzM1pNcVQ3alFKaUlhZGxtQTZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKYf/h97+ ADEBNGWGUTEqBtQLPEs1CkrEtJL6kLvz79X60v8uo/bnz44wRrAQfpATke2TlGvO lBUwTKN0P8wNLHKW2bz9AIyB9uw2ZBdu+AHcRVeec/yIEKYyQiL3FplN0+cFlGuk lBD8PXK9pYOB0swJVOHyt7Utt0/nnx8gXNu0eXJYMwE1UW3sMNZCHwHaMAJu4Pjw Q+Q4hqtVOcGUAx3i/50rJrTurjqpV5WO0Z3pPCYn0KQYitw61eAjkEJUsbgIwasB F8koTfLOGSg4IUtvnzOHOX9ddydbDokREXll6gwrSbbjpp/kAO4LViSxjAz4r583 CraUwPUoPes7kw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:11:55 2025 by rpki-client