This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/2b5e0d-19a9-4036-98b6-ca65a9723c59/1/nEbB13YgBThO2FJs-hx0llZPUNM.mft File: nEbB13YgBThO2FJs-hx0llZPUNM.mft (raw, json) Hash identifier: Efzeb1+/x53mNdEtfrZfllvgG2gNOvI6fKfwb+pzHVA= Subject key identifier: 2F:43:6E:0D:13:8E:5D:E2:64:FC:03:AE:DD:E1:AE:8D:DC:A5:3B:D4 Authority key identifier: 9C:46:C1:D7:76:20:05:38:4E:D8:52:6C:FA:1C:74:96:56:4F:50:D3 Certificate issuer: /CN=9c46c1d7762005384ed8526cfa1c7496564f50d3 Certificate serial: 019AF2095C52F3D3999F9E3CF3AEF9BC94B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nEbB13YgBThO2FJs-hx0llZPUNM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/2b5e0d-19a9-4036-98b6-ca65a9723c59/1/nEbB13YgBThO2FJs-hx0llZPUNM.mft Manifest number: 05FA Signing time: Sat 06 Dec 2025 05:01:30 +0000 Manifest this update: Sat 06 Dec 2025 05:01:30 +0000 Manifest next update: Sun 07 Dec 2025 05:01:30 +0000 Files and hashes: 1: nEbB13YgBThO2FJs-hx0llZPUNM.crl (hash: 7d2b5ozhQX1/SaWTjDvREldSKhSkEjv5FzzunpWR3ws=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/2b5e0d-19a9-4036-98b6-ca65a9723c59/1/nEbB13YgBThO2FJs-hx0llZPUNM.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/2b5e0d-19a9-4036-98b6-ca65a9723c59/1/nEbB13YgBThO2FJs-hx0llZPUNM.mft rsync://rpki.ripe.net/repository/DEFAULT/nEbB13YgBThO2FJs-hx0llZPUNM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:5c:52:f3:d3:99:9f:9e:3c:f3:ae:f9:bc:94:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c46c1d7762005384ed8526cfa1c7496564f50d3 Validity Not Before: Dec 6 05:01:30 2025 GMT Not After : Dec 7 05:01:30 2025 GMT Subject: CN=2f436e0d138e5de264fc03aedde1ae8ddca53bd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:0f:fa:a3:29:02:50:a5:db:f6:73:ea:2d:f5: 0d:1e:81:4a:53:f5:60:d9:bd:62:d9:64:8a:c0:cd: f5:af:a1:a2:e2:fe:06:0c:17:48:4f:08:2e:3c:30: 74:4e:cc:97:15:1b:ae:27:ea:eb:b2:3d:4e:c3:fe: a7:4c:48:df:62:42:38:88:73:0f:02:17:aa:c6:fc: 53:7c:31:c9:93:f0:ab:48:a2:29:b4:fc:f7:e8:12: 7e:af:4f:35:39:bd:2f:6f:46:c5:66:2a:4f:89:8e: 25:7a:99:0a:f0:ac:3d:11:e7:37:02:09:37:f0:e1: 35:b2:f0:d0:f9:af:86:2a:b2:6b:3c:17:d4:ac:e3: 8e:0e:df:7a:a5:e1:2d:aa:6b:14:02:bd:1a:35:58: fa:92:29:ca:08:85:67:10:e9:bf:6f:95:57:03:a8: 95:1e:d4:f6:9c:07:5f:21:d8:3f:cb:0d:6f:59:89: 55:a0:8b:f5:5a:fe:e0:ca:07:bf:50:fb:bb:1b:30: b1:62:70:eb:5b:2e:06:10:be:07:3f:f5:1e:12:e9: ca:da:df:ef:d7:72:7e:fb:1c:3e:c1:62:5c:36:94: 9c:eb:27:b5:68:5e:5a:58:d0:f2:22:46:ef:a2:55: 0a:2e:74:4b:f5:d9:9b:e2:80:bd:c2:2b:93:29:6d: 50:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:43:6E:0D:13:8E:5D:E2:64:FC:03:AE:DD:E1:AE:8D:DC:A5:3B:D4 X509v3 Authority Key Identifier: keyid:9C:46:C1:D7:76:20:05:38:4E:D8:52:6C:FA:1C:74:96:56:4F:50:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nEbB13YgBThO2FJs-hx0llZPUNM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2b5e0d-19a9-4036-98b6-ca65a9723c59/1/nEbB13YgBThO2FJs-hx0llZPUNM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2b5e0d-19a9-4036-98b6-ca65a9723c59/1/nEbB13YgBThO2FJs-hx0llZPUNM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:d1:4b:43:43:9e:fc:e3:cb:14:ff:d7:54:bf:42:ab:24:9b: ff:e5:6b:26:2f:8f:88:e8:c1:27:85:04:bc:18:58:53:d2:16: c8:0e:81:35:ee:27:6e:35:fc:34:90:64:08:28:01:fe:10:da: 72:d7:6f:c2:bf:f0:7d:4c:3a:ff:d4:6b:dd:c2:90:a6:bc:8a: 72:a7:65:80:0e:2d:62:49:d6:47:a2:64:db:ba:cf:67:5e:89: 1a:31:da:8d:c3:1c:a6:7f:b0:4f:a7:4f:34:9d:7d:dd:80:13: 41:4d:6b:15:ed:c0:9d:fe:de:0b:75:f4:94:07:4d:5a:81:a3: ea:47:90:9f:bb:38:ca:4c:39:a4:5a:1c:f4:15:cf:84:37:80: 76:77:0e:38:6c:c9:87:7d:1b:04:5a:95:6c:99:ce:bb:6c:36: 52:a5:83:82:9e:f6:6a:28:5e:eb:8a:50:4d:24:97:1b:b6:d2: a7:f3:57:d9:03:5d:72:ec:84:25:6d:c6:f9:98:ef:e3:3c:69: f2:b8:44:9e:b0:d9:6c:54:ac:02:e7:f0:ac:de:8a:40:10:07: a3:9f:70:93:a5:b3:83:29:ff:c3:82:ff:9e:95:de:3b:bf:51: f1:c5:6c:66:42:cd:43:17:9c:e9:3f:0a:37:ff:51:d8:32:8a: 04:af:3f:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCVxS89OZn5488675vJS5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljNDZjMWQ3NzYyMDA1Mzg0ZWQ4NTI2Y2ZhMWM3NDk2NTY0 ZjUwZDMwHhcNMjUxMjA2MDUwMTMwWhcNMjUxMjA3MDUwMTMwWjAzMTEwLwYDVQQD EygyZjQzNmUwZDEzOGU1ZGUyNjRmYzAzYWVkZGUxYWU4ZGRjYTUzYmQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQ/6oykCUKXb9nPqLfUNHoFKU/Vg 2b1i2WSKwM31r6Gi4v4GDBdITwguPDB0TsyXFRuuJ+rrsj1Ow/6nTEjfYkI4iHMP AheqxvxTfDHJk/CrSKIptPz36BJ+r081Ob0vb0bFZipPiY4lepkK8Kw9Eec3Agk3 8OE1svDQ+a+GKrJrPBfUrOOODt96peEtqmsUAr0aNVj6kinKCIVnEOm/b5VXA6iV HtT2nAdfIdg/yw1vWYlVoIv1Wv7gyge/UPu7GzCxYnDrWy4GEL4HP/UeEunK2t/v 13J++xw+wWJcNpSc6ye1aF5aWNDyIkbvolUKLnRL9dmb4oC9wiuTKW1QZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC9Dbg0Tjl3iZPwDrt3hro3cpTvUMB8GA1UdIwQY MBaAFJxGwdd2IAU4TthSbPocdJZWT1DTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkViQjEzWWdCVGhPMkZKcy1oeDBsbFpQVU5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8yYjVlMGQtMTlhOS00MDM2LTk4YjYt Y2E2NWE5NzIzYzU5LzEvbkViQjEzWWdCVGhPMkZKcy1oeDBsbFpQVU5NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC8yYjVlMGQtMTlhOS00MDM2LTk4YjYtY2E2NWE5NzIzYzU5 LzEvbkViQjEzWWdCVGhPMkZKcy1oeDBsbFpQVU5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAldFLQ0Oe /OPLFP/XVL9CqySb/+VrJi+PiOjBJ4UEvBhYU9IWyA6BNe4nbjX8NJBkCCgB/hDa ctdvwr/wfUw6/9Rr3cKQpryKcqdlgA4tYknWR6Jk27rPZ16JGjHajcMcpn+wT6dP NJ193YATQU1rFe3Anf7eC3X0lAdNWoGj6keQn7s4ykw5pFoc9BXPhDeAdncOOGzJ h30bBFqVbJnOu2w2UqWDgp72aihe64pQTSSXG7bSp/NX2QNdcuyEJW3G+Zjv4zxp 8rhEnrDZbFSsAufwrN6KQBAHo59wk6Wzgyn/w4L/npXeO79R8cVsZkLNQxec6T8K N/9R2DKKBK8/TA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:13:25 2025 by rpki-client