This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.mft File: NnRl_9ujwFwhvlsV8NkV78ywaeU.mft (raw, json) Hash identifier: nvabPRkYmkY4QTaEp1at63BbunKRmgnPgMBqOkXxJgs= Subject key identifier: 67:6F:C6:A0:79:A0:FE:C4:FC:54:E5:90:4D:31:BF:66:0F:6D:5B:39 Authority key identifier: 36:74:65:FF:DB:A3:C0:5C:21:BE:5B:15:F0:D9:15:EF:CC:B0:69:E5 Certificate issuer: /CN=367465ffdba3c05c21be5b15f0d915efccb069e5 Certificate serial: 019AF208D43CF0A4387B8331BEB5BE5E0FE0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NnRl_9ujwFwhvlsV8NkV78ywaeU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.mft Manifest number: 0E42 Signing time: Sat 06 Dec 2025 05:00:56 +0000 Manifest this update: Sat 06 Dec 2025 05:00:56 +0000 Manifest next update: Sun 07 Dec 2025 05:00:56 +0000 Files and hashes: 1: NnRl_9ujwFwhvlsV8NkV78ywaeU.crl (hash: BkGsHNoeqNADZ4dhGTNTqC88tflbhzSrNdPpmyGjm+0=) 2: apGrLeQXGFDnmjDGU5J1xhLa7ts.roa (hash: TvPWK0JX9FOtKwbjXZr2maaJZh4hwmSWvBJ0nfoejxE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.mft rsync://rpki.ripe.net/repository/DEFAULT/NnRl_9ujwFwhvlsV8NkV78ywaeU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:d4:3c:f0:a4:38:7b:83:31:be:b5:be:5e:0f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=367465ffdba3c05c21be5b15f0d915efccb069e5 Validity Not Before: Dec 6 05:00:56 2025 GMT Not After : Dec 7 05:00:56 2025 GMT Subject: CN=676fc6a079a0fec4fc54e5904d31bf660f6d5b39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:20:b2:1a:21:8b:bc:a9:99:cc:cd:a9:6f:d4: 15:6a:5a:20:29:5a:5e:44:df:b0:b7:90:6d:2c:83: b1:05:dc:91:3e:71:7a:e9:75:71:33:06:94:ad:9a: 91:a9:28:66:5c:a6:dc:5f:b9:72:93:59:ed:c8:30: a6:d2:79:14:32:08:1b:a7:b6:1e:8d:3a:9b:7f:a9: a1:50:42:88:f1:21:15:fe:39:ae:78:f8:88:81:6a: 3a:33:69:0a:f0:bd:67:e6:a1:7e:1e:e5:bb:34:79: 34:51:d5:21:d6:c3:1e:9f:de:81:7f:dc:29:6f:5d: b8:db:d1:00:39:5a:f9:f8:c7:17:a7:19:df:17:20: b7:f6:d1:31:40:93:4e:c4:c7:e4:54:b8:b9:84:6d: 78:f4:1b:24:64:e0:1b:2d:40:74:2f:7f:53:37:e5: e2:58:59:f6:2c:32:b9:4e:06:51:41:2a:38:73:44: 8e:9b:91:35:ad:f4:cb:66:69:9f:99:ef:5e:98:1f: d3:15:36:ce:24:d8:19:9a:28:7e:ab:aa:df:f4:f9: 87:50:7e:76:0a:35:ec:d5:22:0f:e9:4d:2d:ef:d8: 7b:7d:60:a6:c9:79:3f:3c:b7:33:50:17:87:1c:d8: 4a:60:21:e5:04:80:5d:13:30:4d:23:56:64:6c:ed: 74:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:6F:C6:A0:79:A0:FE:C4:FC:54:E5:90:4D:31:BF:66:0F:6D:5B:39 X509v3 Authority Key Identifier: keyid:36:74:65:FF:DB:A3:C0:5C:21:BE:5B:15:F0:D9:15:EF:CC:B0:69:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NnRl_9ujwFwhvlsV8NkV78ywaeU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:47:0b:54:28:0c:6e:a9:88:df:38:ee:69:4a:62:14:2e:67: 62:59:3e:3f:1d:18:5f:9d:d5:93:87:32:99:60:64:8d:d4:fe: f9:ba:df:c0:d6:15:fd:24:e1:91:d5:04:62:39:74:bb:f9:ca: 1c:bc:78:38:2e:36:68:ea:31:d0:9a:61:23:81:46:98:e8:16: ad:82:cd:19:3e:88:c1:e6:c0:ba:19:7a:c5:c0:72:7f:86:7d: 26:56:74:e2:2d:73:f4:50:7e:58:01:c1:d5:09:74:52:1d:cc: c9:67:26:9a:ae:0f:4d:00:ba:a5:12:11:25:cd:6f:91:bf:99: 6a:c4:21:4e:4e:1e:2a:ad:f4:f2:c7:7a:ed:38:f8:70:83:d9: d8:ff:ba:2b:1d:4d:d8:21:54:9f:52:df:be:a9:24:34:a6:97: 9a:e3:47:38:8b:d3:14:02:26:1f:a9:c4:86:55:ec:41:e5:01: 76:24:a9:4c:1f:44:6e:34:92:65:f3:69:0a:b3:96:7e:78:24: e5:8c:57:25:88:21:38:75:63:be:0c:16:03:e8:fd:13:cd:a3: 92:8d:9a:55:c8:b1:e8:2a:fc:c4:bf:cb:cc:62:9c:d6:62:63: 02:ea:ab:72:70:f7:18:a3:77:fd:54:e4:c1:07:2a:f1:29:d5: 3f:00:5a:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCNQ88KQ4e4MxvrW+Xg/gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2NzQ2NWZmZGJhM2MwNWMyMWJlNWIxNWYwZDkxNWVmY2Ni MDY5ZTUwHhcNMjUxMjA2MDUwMDU2WhcNMjUxMjA3MDUwMDU2WjAzMTEwLwYDVQQD Eyg2NzZmYzZhMDc5YTBmZWM0ZmM1NGU1OTA0ZDMxYmY2NjBmNmQ1YjM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCCyGiGLvKmZzM2pb9QValogKVpe RN+wt5BtLIOxBdyRPnF66XVxMwaUrZqRqShmXKbcX7lyk1ntyDCm0nkUMggbp7Ye jTqbf6mhUEKI8SEV/jmuePiIgWo6M2kK8L1n5qF+HuW7NHk0UdUh1sMen96Bf9wp b12429EAOVr5+McXpxnfFyC39tExQJNOxMfkVLi5hG149BskZOAbLUB0L39TN+Xi WFn2LDK5TgZRQSo4c0SOm5E1rfTLZmmfme9emB/TFTbOJNgZmih+q6rf9PmHUH52 CjXs1SIP6U0t79h7fWCmyXk/PLczUBeHHNhKYCHlBIBdEzBNI1ZkbO10NwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGdvxqB5oP7E/FTlkE0xv2YPbVs5MB8GA1UdIwQY MBaAFDZ0Zf/bo8BcIb5bFfDZFe/MsGnlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTm5SbF85dWp3RndodmxzVjhOa1Y3OHl3YWVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi83NWNhMWEtNjgyOC00ZTZkLTlmZWEt NWU0N2NmMTk5ZGZmLzEvTm5SbF85dWp3RndodmxzVjhOa1Y3OHl3YWVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi83NWNhMWEtNjgyOC00ZTZkLTlmZWEtNWU0N2NmMTk5ZGZm LzEvTm5SbF85dWp3RndodmxzVjhOa1Y3OHl3YWVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYUcLVCgM bqmI3zjuaUpiFC5nYlk+Px0YX53Vk4cymWBkjdT++brfwNYV/SThkdUEYjl0u/nK HLx4OC42aOox0JphI4FGmOgWrYLNGT6IwebAuhl6xcByf4Z9JlZ04i1z9FB+WAHB 1Ql0Uh3MyWcmmq4PTQC6pRIRJc1vkb+ZasQhTk4eKq308sd67Tj4cIPZ2P+6Kx1N 2CFUn1LfvqkkNKaXmuNHOIvTFAImH6nEhlXsQeUBdiSpTB9EbjSSZfNpCrOWfngk 5YxXJYghOHVjvgwWA+j9E82jko2aVcix6Cr8xL/LzGKc1mJjAuqrcnD3GKN3/VTk wQcq8SnVPwBavg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:13:51 2025 by rpki-client