This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/b11980-1f7b-4ee7-a88e-a5899cee655f/1/NnBwsWnRGpYpEATjAA-bBNThEtM.mft File: NnBwsWnRGpYpEATjAA-bBNThEtM.mft (raw, json) Hash identifier: W8+gx5OiT3mQIelkhPoUwH7EbEpoPP93g/9T3DZB+C0= Subject key identifier: 0D:D7:4F:D6:39:D0:56:59:17:8F:44:5E:24:33:7A:0D:06:19:C4:56 Authority key identifier: 36:70:70:B1:69:D1:1A:96:29:10:04:E3:00:0F:9B:04:D4:E1:12:D3 Certificate issuer: /CN=367070b169d11a96291004e3000f9b04d4e112d3 Certificate serial: 019AF12E3F7767BE0F3D44357640AEC8A2EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NnBwsWnRGpYpEATjAA-bBNThEtM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/b11980-1f7b-4ee7-a88e-a5899cee655f/1/NnBwsWnRGpYpEATjAA-bBNThEtM.mft Manifest number: 0846 Signing time: Sat 06 Dec 2025 01:02:11 +0000 Manifest this update: Sat 06 Dec 2025 01:02:11 +0000 Manifest next update: Sun 07 Dec 2025 01:02:11 +0000 Files and hashes: 1: NnBwsWnRGpYpEATjAA-bBNThEtM.crl (hash: pWBlqUXp8bic8SXN+aIg3hYhmmy+41hqk2MsYsDjzHU=) 2: dVmeU4wC0TgcJ1mLjCj6WUgRoKU.roa (hash: Tr7wmryEwMRa1UVn0iohUCcmRld2nTxoTKpz/4davog=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/b11980-1f7b-4ee7-a88e-a5899cee655f/1/NnBwsWnRGpYpEATjAA-bBNThEtM.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/b11980-1f7b-4ee7-a88e-a5899cee655f/1/NnBwsWnRGpYpEATjAA-bBNThEtM.mft rsync://rpki.ripe.net/repository/DEFAULT/NnBwsWnRGpYpEATjAA-bBNThEtM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:3f:77:67:be:0f:3d:44:35:76:40:ae:c8:a2:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=367070b169d11a96291004e3000f9b04d4e112d3 Validity Not Before: Dec 6 01:02:11 2025 GMT Not After : Dec 7 01:02:11 2025 GMT Subject: CN=0dd74fd639d05659178f445e24337a0d0619c456 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:0c:c5:8d:ba:e8:6b:e1:a6:fa:f9:33:8a:63: be:38:dc:b9:95:88:80:8b:09:e4:42:67:12:cd:10: 3b:ba:c3:d9:7b:11:39:a4:d1:25:5c:7e:82:e6:9d: bb:b1:65:72:7a:66:5f:fb:6e:6a:9a:5e:6d:af:ce: 5d:53:7d:0e:c3:13:0e:78:bc:68:45:80:4a:31:1e: 8b:84:f7:f8:7d:6f:36:ad:96:01:b9:88:77:0a:22: 0e:33:d9:6e:31:12:19:c6:9c:0e:5a:90:98:bd:0e: 8a:c9:1f:b5:76:4a:89:68:de:93:8a:bb:73:7d:1b: b2:13:93:2e:d5:c2:35:33:a1:fd:5b:70:78:71:6e: 8e:55:32:5e:ab:ad:2d:96:cd:1c:7e:73:6e:62:15: 04:13:9d:ef:64:b3:57:9f:93:26:ea:31:08:75:ee: cf:07:03:8a:50:4e:60:14:b6:06:0d:14:53:22:f3: b3:a2:7b:6d:86:c8:7c:ed:6f:c8:1c:d6:23:ca:05: df:50:7a:73:2e:5c:39:34:33:1e:34:70:64:fd:c0: fd:de:3b:2a:a8:26:b6:e3:75:44:1e:2a:e2:66:77: 70:20:9e:92:0e:b0:aa:ad:74:69:0e:03:ee:c3:da: 8e:52:61:23:9a:07:7e:c0:18:dc:61:67:fd:99:86: 8e:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:D7:4F:D6:39:D0:56:59:17:8F:44:5E:24:33:7A:0D:06:19:C4:56 X509v3 Authority Key Identifier: keyid:36:70:70:B1:69:D1:1A:96:29:10:04:E3:00:0F:9B:04:D4:E1:12:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NnBwsWnRGpYpEATjAA-bBNThEtM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/b11980-1f7b-4ee7-a88e-a5899cee655f/1/NnBwsWnRGpYpEATjAA-bBNThEtM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/b11980-1f7b-4ee7-a88e-a5899cee655f/1/NnBwsWnRGpYpEATjAA-bBNThEtM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:d5:fe:ce:8f:a8:c6:bc:68:70:27:df:56:39:c5:cf:84:64: 7b:02:23:5d:bb:bb:7f:a9:ff:f8:11:ba:24:e6:39:15:86:ad: 11:0d:4f:01:10:e6:87:ff:c9:11:36:3b:bd:d2:e1:0d:ba:27: 7f:f9:5c:b7:c4:99:b4:d6:f8:4f:0e:94:11:90:7d:a0:1c:2f: f0:17:48:3c:2b:21:e9:9e:9f:e7:20:40:99:0c:d0:f3:bd:c5: e3:87:5b:67:c5:5b:80:5c:2a:cd:55:35:3e:e6:34:2d:99:54: 4d:98:e1:0a:6e:f1:13:06:18:56:f6:d5:58:f3:fe:e1:f1:52: 22:6e:c8:6a:25:b4:aa:66:66:c9:01:51:ac:67:da:67:fe:3c: 74:d8:56:0e:ac:51:8d:61:d3:4c:26:0e:ff:74:31:34:c6:54: 90:5d:63:4d:80:13:53:dd:cb:bd:fa:c3:1e:5f:1a:b9:14:71: f1:0b:f2:e2:5b:7b:ff:2a:ac:4b:47:0f:f9:82:53:61:b1:ba: 97:45:74:5b:ad:81:a2:9e:fe:21:7b:36:17:67:36:cb:7b:18: e0:38:b6:83:65:3c:c3:2e:a0:ee:f6:a4:37:cf:7d:93:7c:2e: 7f:3e:e0:d9:03:45:ae:be:54:36:f2:f3:60:a9:41:4d:cf:5e: df:64:75:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLj93Z74PPUQ1dkCuyKLrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2NzA3MGIxNjlkMTFhOTYyOTEwMDRlMzAwMGY5YjA0ZDRl MTEyZDMwHhcNMjUxMjA2MDEwMjExWhcNMjUxMjA3MDEwMjExWjAzMTEwLwYDVQQD EygwZGQ3NGZkNjM5ZDA1NjU5MTc4ZjQ0NWUyNDMzN2EwZDA2MTljNDU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogzFjbroa+Gm+vkzimO+ONy5lYiA iwnkQmcSzRA7usPZexE5pNElXH6C5p27sWVyemZf+25qml5tr85dU30OwxMOeLxo RYBKMR6LhPf4fW82rZYBuYh3CiIOM9luMRIZxpwOWpCYvQ6KyR+1dkqJaN6Tirtz fRuyE5Mu1cI1M6H9W3B4cW6OVTJeq60tls0cfnNuYhUEE53vZLNXn5Mm6jEIde7P BwOKUE5gFLYGDRRTIvOzontthsh87W/IHNYjygXfUHpzLlw5NDMeNHBk/cD93jsq qCa243VEHiriZndwIJ6SDrCqrXRpDgPuw9qOUmEjmgd+wBjcYWf9mYaOcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA3XT9Y50FZZF49EXiQzeg0GGcRWMB8GA1UdIwQY MBaAFDZwcLFp0RqWKRAE4wAPmwTU4RLTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTm5Cd3NXblJHcFlwRUFUakFBLWJCTlRoRXRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9iMTE5ODAtMWY3Yi00ZWU3LWE4OGUt YTU4OTljZWU2NTVmLzEvTm5Cd3NXblJHcFlwRUFUakFBLWJCTlRoRXRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi9iMTE5ODAtMWY3Yi00ZWU3LWE4OGUtYTU4OTljZWU2NTVm LzEvTm5Cd3NXblJHcFlwRUFUakFBLWJCTlRoRXRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOtX+zo+o xrxocCffVjnFz4RkewIjXbu7f6n/+BG6JOY5FYatEQ1PARDmh//JETY7vdLhDbon f/lct8SZtNb4Tw6UEZB9oBwv8BdIPCsh6Z6f5yBAmQzQ873F44dbZ8VbgFwqzVU1 PuY0LZlUTZjhCm7xEwYYVvbVWPP+4fFSIm7IaiW0qmZmyQFRrGfaZ/48dNhWDqxR jWHTTCYO/3QxNMZUkF1jTYATU93LvfrDHl8auRRx8Qvy4lt7/yqsS0cP+YJTYbG6 l0V0W62Bop7+IXs2F2c2y3sY4Di2g2U8wy6g7vakN899k3wufz7g2QNFrr5UNvLz YKlBTc9e32R1jw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:16:26 2025 by rpki-client