This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/bb97d9-7b81-449f-9060-bd465ce711bb/1/nB7k05z6obOseZwX94grjOTigSA.mft File: nB7k05z6obOseZwX94grjOTigSA.mft (raw, json) Hash identifier: PS2vYxYGF7uXQwhmKWo1dBLDGxlofAolOIjaK3mfbdY= Subject key identifier: EF:4C:21:DE:DB:58:BE:B7:8F:22:8F:61:08:A3:92:D8:00:1F:F1:87 Authority key identifier: 9C:1E:E4:D3:9C:FA:A1:B3:AC:79:9C:17:F7:88:2B:8C:E4:E2:81:20 Certificate issuer: /CN=9c1ee4d39cfaa1b3ac799c17f7882b8ce4e28120 Certificate serial: 019AF3898663804ABD8A19442244EF31B74C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nB7k05z6obOseZwX94grjOTigSA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/bb97d9-7b81-449f-9060-bd465ce711bb/1/nB7k05z6obOseZwX94grjOTigSA.mft Manifest number: 0A15 Signing time: Sat 06 Dec 2025 12:01:07 +0000 Manifest this update: Sat 06 Dec 2025 12:01:07 +0000 Manifest next update: Sun 07 Dec 2025 12:01:07 +0000 Files and hashes: 1: egM_lo5hkg5KA7_uP-5h7pmD4BM.roa (hash: LWEk9cOjEXdGtew0n3bgwHhe3Zn8McfotK81AHI+3M0=) 2: nB7k05z6obOseZwX94grjOTigSA.crl (hash: uEG0vajGnPWF6cxqfcMJ/kAKtJxAHyswzv8X2YHyLOo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/bb97d9-7b81-449f-9060-bd465ce711bb/1/nB7k05z6obOseZwX94grjOTigSA.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/bb97d9-7b81-449f-9060-bd465ce711bb/1/nB7k05z6obOseZwX94grjOTigSA.mft rsync://rpki.ripe.net/repository/DEFAULT/nB7k05z6obOseZwX94grjOTigSA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:86:63:80:4a:bd:8a:19:44:22:44:ef:31:b7:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c1ee4d39cfaa1b3ac799c17f7882b8ce4e28120 Validity Not Before: Dec 6 12:01:07 2025 GMT Not After : Dec 7 12:01:07 2025 GMT Subject: CN=ef4c21dedb58beb78f228f6108a392d8001ff187 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:97:38:3e:45:ee:2d:e9:2e:a1:f3:36:2f:a0: 30:07:55:61:11:16:14:53:4a:b9:d4:d0:dc:a5:37: f9:9a:8d:ca:e4:0e:41:42:28:e5:f2:19:1b:b8:c0: fa:63:70:00:cf:17:de:52:f2:de:6b:29:27:c3:a5: c1:a6:c5:41:8b:ac:7f:e2:29:42:2c:48:bf:e8:be: dc:14:1e:f2:a8:d8:01:ba:02:ec:5c:58:4f:c6:48: eb:29:3e:a4:d4:e9:75:06:fa:48:1b:dd:e0:c3:82: 31:b7:b8:f1:c4:3d:d7:31:8a:e8:a7:79:b2:02:13: ae:e9:d8:b9:19:69:cb:ce:91:df:e8:e6:24:f2:45: dd:7d:6e:15:50:2c:b0:0e:9d:58:97:0e:88:d0:ab: 73:ea:5e:49:08:b6:fc:4a:aa:30:2d:a4:ab:10:0d: df:32:aa:fa:f4:05:75:64:94:0a:75:e3:a4:c6:45: 86:4f:4b:8c:97:31:7a:bb:ca:1e:7f:d0:51:fa:c6: a5:ab:e7:f9:73:68:e9:f3:69:fe:e0:55:cf:78:3f: af:ef:23:db:dc:b3:37:16:f1:bd:7a:39:2e:13:24: aa:ca:00:e0:5c:3a:4d:6f:80:8d:89:3a:6b:ac:62: 5e:b8:30:e4:27:54:92:38:63:a1:62:db:63:25:d1: 23:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:4C:21:DE:DB:58:BE:B7:8F:22:8F:61:08:A3:92:D8:00:1F:F1:87 X509v3 Authority Key Identifier: keyid:9C:1E:E4:D3:9C:FA:A1:B3:AC:79:9C:17:F7:88:2B:8C:E4:E2:81:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nB7k05z6obOseZwX94grjOTigSA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/bb97d9-7b81-449f-9060-bd465ce711bb/1/nB7k05z6obOseZwX94grjOTigSA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/bb97d9-7b81-449f-9060-bd465ce711bb/1/nB7k05z6obOseZwX94grjOTigSA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:e9:2b:eb:d1:f1:db:2e:68:f5:b1:3a:02:14:83:16:f8:c5: e8:bc:ef:f2:b2:d5:67:19:80:6e:e4:a7:a8:09:61:83:9d:18: 63:12:2f:d2:1d:a6:aa:be:1d:5d:7e:f9:10:71:7a:05:97:8a: a4:6d:2f:23:e0:dd:44:cd:19:54:c3:7f:aa:92:49:03:08:d1: b1:67:4e:b5:c3:69:8c:08:8d:b9:b9:dd:71:fd:eb:ea:de:71: 35:5c:e2:aa:63:41:15:ab:de:4e:80:1d:31:d6:5c:cc:c9:cc: 8e:ff:5c:72:04:59:41:2b:8d:ab:be:45:91:a0:88:1d:b2:93: 9e:95:b7:8b:bc:01:80:97:30:22:cc:47:0b:03:75:89:1d:77: 3b:fc:4d:6a:cb:8d:96:d6:08:e7:53:28:b5:b8:f1:39:96:8b: ea:86:78:0e:18:ef:61:42:6a:72:5b:07:fd:ff:61:70:d2:ec: 9f:8b:c3:88:4e:a6:f5:d0:f6:76:55:66:16:57:66:eb:16:89: 0c:41:b9:09:27:6c:d8:24:fa:fc:d9:77:3f:c3:a7:c0:9d:94: 59:1b:07:8a:84:54:8c:19:30:77:e8:d6:ef:43:02:02:87:b4: 58:98:15:66:f4:7e:47:e2:be:a5:ec:c0:0d:78:ce:25:c5:48: 67:ac:fb:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziYZjgEq9ihlEIkTvMbdMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljMWVlNGQzOWNmYWExYjNhYzc5OWMxN2Y3ODgyYjhjZTRl MjgxMjAwHhcNMjUxMjA2MTIwMTA3WhcNMjUxMjA3MTIwMTA3WjAzMTEwLwYDVQQD EyhlZjRjMjFkZWRiNThiZWI3OGYyMjhmNjEwOGEzOTJkODAwMWZmMTg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpc4PkXuLekuofM2L6AwB1VhERYU U0q51NDcpTf5mo3K5A5BQijl8hkbuMD6Y3AAzxfeUvLeayknw6XBpsVBi6x/4ilC LEi/6L7cFB7yqNgBugLsXFhPxkjrKT6k1Ol1BvpIG93gw4Ixt7jxxD3XMYrop3my AhOu6di5GWnLzpHf6OYk8kXdfW4VUCywDp1Ylw6I0Ktz6l5JCLb8SqowLaSrEA3f Mqr69AV1ZJQKdeOkxkWGT0uMlzF6u8oef9BR+salq+f5c2jp82n+4FXPeD+v7yPb 3LM3FvG9ejkuEySqygDgXDpNb4CNiTprrGJeuDDkJ1SSOGOhYttjJdEjhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO9MId7bWL63jyKPYQijktgAH/GHMB8GA1UdIwQY MBaAFJwe5NOc+qGzrHmcF/eIK4zk4oEgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkI3azA1ejZvYk9zZVp3WDk0Z3JqT1RpZ1NBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9iYjk3ZDktN2I4MS00NDlmLTkwNjAt YmQ0NjVjZTcxMWJiLzEvbkI3azA1ejZvYk9zZVp3WDk0Z3JqT1RpZ1NBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9iYjk3ZDktN2I4MS00NDlmLTkwNjAtYmQ0NjVjZTcxMWJi LzEvbkI3azA1ejZvYk9zZVp3WDk0Z3JqT1RpZ1NBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuOkr69Hx 2y5o9bE6AhSDFvjF6Lzv8rLVZxmAbuSnqAlhg50YYxIv0h2mqr4dXX75EHF6BZeK pG0vI+DdRM0ZVMN/qpJJAwjRsWdOtcNpjAiNubndcf3r6t5xNVziqmNBFaveToAd MdZczMnMjv9ccgRZQSuNq75FkaCIHbKTnpW3i7wBgJcwIsxHCwN1iR13O/xNasuN ltYI51MotbjxOZaL6oZ4DhjvYUJqclsH/f9hcNLsn4vDiE6m9dD2dlVmFldm6xaJ DEG5CSds2CT6/Nl3P8OnwJ2UWRsHioRUjBkwd+jW70MCAoe0WJgVZvR+R+K+pezA DXjOJcVIZ6z7ug== -----END CERTIFICATE-----Generated at Sat Dec 6 22:27:17 2025 by rpki-client