This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/d2dc9b-bcdc-42de-a1ae-42ce2d2be097/1/_Nbe4Pi6PCIpPWLscB7yULzI0uc.mft File: _Nbe4Pi6PCIpPWLscB7yULzI0uc.mft (raw, json) Hash identifier: 7mYw6EMxRP4yhnnWXcq+JCTUJcyR2666AM8fW2uyoYo= Subject key identifier: B0:4E:89:15:F8:4A:9D:39:F4:CB:97:FB:5C:B4:E3:9C:22:C1:44:06 Authority key identifier: FC:D6:DE:E0:F8:BA:3C:22:29:3D:62:EC:70:1E:F2:50:BC:C8:D2:E7 Certificate issuer: /CN=fcd6dee0f8ba3c22293d62ec701ef250bcc8d2e7 Certificate serial: 019AF27694FA59A6CB5B555B02B43AC3BCB7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Nbe4Pi6PCIpPWLscB7yULzI0uc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/d2dc9b-bcdc-42de-a1ae-42ce2d2be097/1/_Nbe4Pi6PCIpPWLscB7yULzI0uc.mft Manifest number: 073C Signing time: Sat 06 Dec 2025 07:00:48 +0000 Manifest this update: Sat 06 Dec 2025 07:00:48 +0000 Manifest next update: Sun 07 Dec 2025 07:00:48 +0000 Files and hashes: 1: _Nbe4Pi6PCIpPWLscB7yULzI0uc.crl (hash: uoem+HgPQnc2jXzhRHm9z5VJpoNPJVUaR2QCBpI0dcI=) 2: uDZZBTPRRP5MQogb2OjdT8pUiBA.roa (hash: T9yL9Bw5mv08XIGrA3/0U3W6rC1uZNivZ+GrYQ4KE/k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/d2dc9b-bcdc-42de-a1ae-42ce2d2be097/1/_Nbe4Pi6PCIpPWLscB7yULzI0uc.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/d2dc9b-bcdc-42de-a1ae-42ce2d2be097/1/_Nbe4Pi6PCIpPWLscB7yULzI0uc.mft rsync://rpki.ripe.net/repository/DEFAULT/_Nbe4Pi6PCIpPWLscB7yULzI0uc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:94:fa:59:a6:cb:5b:55:5b:02:b4:3a:c3:bc:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fcd6dee0f8ba3c22293d62ec701ef250bcc8d2e7 Validity Not Before: Dec 6 07:00:48 2025 GMT Not After : Dec 7 07:00:48 2025 GMT Subject: CN=b04e8915f84a9d39f4cb97fb5cb4e39c22c14406 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:0e:c1:3e:26:27:68:46:5b:43:50:17:f4:11: 3c:62:02:1c:8b:e2:b3:31:9c:b8:89:56:b0:e9:7f: b3:05:2c:20:0a:6a:50:1a:19:c3:f0:44:85:bb:9a: a7:17:55:85:17:2f:0a:81:e4:40:d5:93:21:16:cd: a1:ac:1b:04:e7:00:fa:eb:36:3d:45:1f:21:15:9e: ce:06:a4:5d:b4:c2:7b:2e:cb:54:7f:ef:b2:50:0a: 45:fd:19:ec:5a:5d:44:19:d3:a8:24:cf:3b:97:c8: 2e:08:aa:5d:69:48:ab:bf:bd:b0:67:04:f8:04:d4: d9:ca:3e:81:a6:07:5c:99:25:3e:58:a7:71:c4:b0: fb:0d:8e:31:80:12:7a:e1:4f:e0:6d:4c:cc:25:1b: 35:c0:c6:92:50:eb:c4:d8:77:fc:d3:c2:5f:1a:3f: b1:b3:70:10:eb:82:56:4f:29:e4:69:7a:43:a7:dd: 63:d3:7a:6e:08:de:9d:9e:7d:ee:fd:ab:a4:a0:0e: 3a:a0:2b:00:f7:9b:da:73:46:52:03:37:69:d6:91: 56:fa:2b:5f:cc:1b:dd:5f:ef:fd:95:36:aa:7d:0f: 4d:c6:21:74:6c:78:f6:5c:d7:20:17:03:1d:eb:44: 72:6d:e6:b0:3f:45:9d:5c:ff:ca:60:24:ee:7c:d6: 4c:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:4E:89:15:F8:4A:9D:39:F4:CB:97:FB:5C:B4:E3:9C:22:C1:44:06 X509v3 Authority Key Identifier: keyid:FC:D6:DE:E0:F8:BA:3C:22:29:3D:62:EC:70:1E:F2:50:BC:C8:D2:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Nbe4Pi6PCIpPWLscB7yULzI0uc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d2dc9b-bcdc-42de-a1ae-42ce2d2be097/1/_Nbe4Pi6PCIpPWLscB7yULzI0uc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d2dc9b-bcdc-42de-a1ae-42ce2d2be097/1/_Nbe4Pi6PCIpPWLscB7yULzI0uc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:c6:eb:42:1f:f9:16:7b:f3:ed:4e:2f:4c:19:e6:30:b2:48: 26:65:55:45:7e:d9:55:79:f6:d9:af:ec:9e:37:42:f1:ee:d8: 57:a1:b5:f4:81:d6:98:71:b3:a3:9a:40:62:be:72:d9:12:2d: a7:49:51:f9:d4:45:04:34:86:ea:0c:2e:6d:56:b1:0a:fe:69: 08:57:ef:67:60:c3:4a:d1:50:bf:3e:a3:d1:57:7d:c8:a2:da: dd:db:62:de:54:d2:56:f2:4b:26:72:dc:1f:4b:56:86:de:57: e4:b1:25:79:4d:f5:7a:c7:53:34:ab:6c:ea:0a:10:37:2d:63: 68:6d:eb:df:23:60:93:0f:c6:bb:ba:f8:9d:53:e3:c7:d8:39: 20:48:51:ea:7a:98:ae:e3:83:2a:9c:ae:3b:0f:8c:81:04:54: 98:00:25:d6:79:93:d3:6e:83:e2:d2:4d:33:fc:37:bd:ca:6d: 33:8c:12:bb:b0:ff:bf:96:ea:e7:6b:ee:0d:c8:0a:60:9e:7a: c8:7c:6b:80:87:54:47:80:0e:f4:1b:e1:94:94:1d:4b:fb:d7: cb:ca:d1:2f:0d:2a:6a:1d:55:dd:95:24:07:5c:e7:33:8c:19: 44:c9:32:8f:a5:34:e5:95:3c:3b:1d:6b:c3:83:8a:e5:1d:8d: 90:71:0d:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydpT6WabLW1VbArQ6w7y3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjZDZkZWUwZjhiYTNjMjIyOTNkNjJlYzcwMWVmMjUwYmNj OGQyZTcwHhcNMjUxMjA2MDcwMDQ4WhcNMjUxMjA3MDcwMDQ4WjAzMTEwLwYDVQQD EyhiMDRlODkxNWY4NGE5ZDM5ZjRjYjk3ZmI1Y2I0ZTM5YzIyYzE0NDA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQ7BPiYnaEZbQ1AX9BE8YgIci+Kz MZy4iVaw6X+zBSwgCmpQGhnD8ESFu5qnF1WFFy8KgeRA1ZMhFs2hrBsE5wD66zY9 RR8hFZ7OBqRdtMJ7LstUf++yUApF/RnsWl1EGdOoJM87l8guCKpdaUirv72wZwT4 BNTZyj6BpgdcmSU+WKdxxLD7DY4xgBJ64U/gbUzMJRs1wMaSUOvE2Hf808JfGj+x s3AQ64JWTynkaXpDp91j03puCN6dnn3u/aukoA46oCsA95vac0ZSAzdp1pFW+itf zBvdX+/9lTaqfQ9NxiF0bHj2XNcgFwMd60RybeawP0WdXP/KYCTufNZMowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLBOiRX4Sp059MuX+1y045wiwUQGMB8GA1UdIwQY MBaAFPzW3uD4ujwiKT1i7HAe8lC8yNLnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX05iZTRQaTZQQ0lwUFdMc2NCN3lVTHpJMHVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9kMmRjOWItYmNkYy00MmRlLWExYWUt NDJjZTJkMmJlMDk3LzEvX05iZTRQaTZQQ0lwUFdMc2NCN3lVTHpJMHVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9kMmRjOWItYmNkYy00MmRlLWExYWUtNDJjZTJkMmJlMDk3 LzEvX05iZTRQaTZQQ0lwUFdMc2NCN3lVTHpJMHVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcMbrQh/5 Fnvz7U4vTBnmMLJIJmVVRX7ZVXn22a/snjdC8e7YV6G19IHWmHGzo5pAYr5y2RIt p0lR+dRFBDSG6gwubVaxCv5pCFfvZ2DDStFQvz6j0Vd9yKLa3dti3lTSVvJLJnLc H0tWht5X5LEleU31esdTNKts6goQNy1jaG3r3yNgkw/Gu7r4nVPjx9g5IEhR6nqY ruODKpyuOw+MgQRUmAAl1nmT026D4tJNM/w3vcptM4wSu7D/v5bq52vuDcgKYJ56 yHxrgIdUR4AO9BvhlJQdS/vXy8rRLw0qah1V3ZUkB1znM4wZRMkyj6U05ZU8Ox1r w4OK5R2NkHEN8A== -----END CERTIFICATE-----Generated at Sat Dec 6 10:00:43 2025 by rpki-client