This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/e42800-c8c7-4599-b1fd-88a74d039f7f/1/n8bodwmunQRHlA8j11Tfi6gXWw0.mft File: n8bodwmunQRHlA8j11Tfi6gXWw0.mft (raw, json) Hash identifier: mCo/JLEk//Asb1oF9aSv5PJ5gua6cKAlozJzHFHoRws= Subject key identifier: 02:24:BF:61:33:C4:44:38:D7:3E:A5:EF:15:6D:CB:11:AE:47:C4:4B Authority key identifier: 9F:C6:E8:77:09:AE:9D:04:47:94:0F:23:D7:54:DF:8B:A8:17:5B:0D Certificate issuer: /CN=9fc6e87709ae9d0447940f23d754df8ba8175b0d Certificate serial: 019AF19B9D962EEDF4C4A599757CEE08E68B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n8bodwmunQRHlA8j11Tfi6gXWw0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/e42800-c8c7-4599-b1fd-88a74d039f7f/1/n8bodwmunQRHlA8j11Tfi6gXWw0.mft Manifest number: 160A Signing time: Sat 06 Dec 2025 03:01:38 +0000 Manifest this update: Sat 06 Dec 2025 03:01:38 +0000 Manifest next update: Sun 07 Dec 2025 03:01:38 +0000 Files and hashes: 1: n8bodwmunQRHlA8j11Tfi6gXWw0.crl (hash: z8pTRSBvoo1KVQ/RHv6gCowgKkF4or74A9q/ZVrqmS4=) 2: z7xTQbxrh0uWjK7zpjPYq_zoSQo.roa (hash: gzKeSIds853lGCFoWu+NS/HRph4q2guB/dUt5Y5WdPY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/e42800-c8c7-4599-b1fd-88a74d039f7f/1/n8bodwmunQRHlA8j11Tfi6gXWw0.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/e42800-c8c7-4599-b1fd-88a74d039f7f/1/n8bodwmunQRHlA8j11Tfi6gXWw0.mft rsync://rpki.ripe.net/repository/DEFAULT/n8bodwmunQRHlA8j11Tfi6gXWw0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:9d:96:2e:ed:f4:c4:a5:99:75:7c:ee:08:e6:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9fc6e87709ae9d0447940f23d754df8ba8175b0d Validity Not Before: Dec 6 03:01:38 2025 GMT Not After : Dec 7 03:01:38 2025 GMT Subject: CN=0224bf6133c44438d73ea5ef156dcb11ae47c44b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:2f:70:2e:43:5b:5a:71:07:b1:5b:78:42:c8: 1f:5d:e0:92:e1:78:fd:c0:7e:35:c0:82:71:d3:7e: e4:19:08:a8:df:8e:89:26:ca:ed:37:2e:5c:49:6d: cc:af:05:82:b2:2d:a0:e7:f2:15:05:f8:51:b7:ba: 32:ff:74:4b:1a:70:0a:8d:68:bf:27:29:32:07:68: 12:e3:5a:fa:aa:c4:e7:7d:c7:14:8e:bb:8c:3e:15: 05:88:cf:cb:bd:1f:25:24:25:76:51:2b:7b:9f:6d: 79:53:2e:10:21:94:f7:09:1a:6d:1b:15:81:f7:80: ac:54:61:0f:b0:a7:5f:fe:0f:22:ac:5e:0d:6b:e9: 3e:ec:a7:43:0d:72:55:38:aa:12:e7:da:6b:a7:5d: 90:7a:9d:ef:89:38:8d:b8:2b:8c:44:42:56:c3:e5: 73:a6:7b:f3:38:c8:5f:dd:f8:32:77:4e:4b:82:00: fa:db:0d:2f:f9:12:92:34:60:6f:0c:1a:cd:5d:4c: 1e:a9:10:5f:53:92:18:fa:2e:c5:b0:1a:dd:bc:54: 91:f7:d2:af:85:9f:62:ab:c2:a1:6b:4b:a3:f4:c9: 47:09:f0:fd:8c:2a:c8:16:23:f4:21:0b:a9:5b:cd: d6:3b:12:bf:6d:1d:34:a8:fb:c6:4a:98:41:5e:e9: 92:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:24:BF:61:33:C4:44:38:D7:3E:A5:EF:15:6D:CB:11:AE:47:C4:4B X509v3 Authority Key Identifier: keyid:9F:C6:E8:77:09:AE:9D:04:47:94:0F:23:D7:54:DF:8B:A8:17:5B:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n8bodwmunQRHlA8j11Tfi6gXWw0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/e42800-c8c7-4599-b1fd-88a74d039f7f/1/n8bodwmunQRHlA8j11Tfi6gXWw0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/e42800-c8c7-4599-b1fd-88a74d039f7f/1/n8bodwmunQRHlA8j11Tfi6gXWw0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:bd:62:77:80:8a:3c:ea:11:47:ff:14:9e:70:fe:f6:38:a9: 20:df:0c:78:78:8e:dc:bd:5d:7e:05:df:9e:29:20:26:00:53: 83:73:99:90:02:0f:c8:a5:4f:ec:ef:25:68:44:b0:6d:ec:e2: 5d:bc:a3:8f:0c:08:56:3e:6a:5b:35:f4:20:00:ec:72:56:e5: e7:63:97:1f:81:15:e9:b5:12:3b:7d:c3:99:17:de:34:07:00: 43:13:6a:33:41:e3:a5:a2:12:2d:98:b5:f7:d6:27:1d:27:f9: 65:10:6b:2a:de:f9:38:c6:63:b4:ab:c0:72:bc:f7:c2:df:41: da:8d:be:6f:50:de:97:1e:5e:37:bc:4f:df:cb:ec:35:f4:52: 33:e0:81:ff:c5:75:e1:4a:47:8c:e5:6e:01:d3:2b:f2:29:65: 7a:10:0d:44:4c:c6:86:7d:84:ef:89:2c:7a:18:48:c9:13:86: a0:89:3a:4d:27:82:37:a4:d8:4f:b4:ed:35:5c:14:d0:26:a1: 76:3c:27:36:a7:73:92:38:5e:4a:a2:a0:03:ee:d9:84:8a:b9: 81:d3:ed:3a:4e:5e:06:6d:fe:18:cc:5d:83:70:a4:de:2f:27: f8:91:a7:75:18:13:bb:35:a1:4e:cd:bb:76:ea:e3:0f:f9:18: eb:5f:df:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm52WLu30xKWZdXzuCOaLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmYzZlODc3MDlhZTlkMDQ0Nzk0MGYyM2Q3NTRkZjhiYTgx NzViMGQwHhcNMjUxMjA2MDMwMTM4WhcNMjUxMjA3MDMwMTM4WjAzMTEwLwYDVQQD EygwMjI0YmY2MTMzYzQ0NDM4ZDczZWE1ZWYxNTZkY2IxMWFlNDdjNDRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAli9wLkNbWnEHsVt4QsgfXeCS4Xj9 wH41wIJx037kGQio346JJsrtNy5cSW3MrwWCsi2g5/IVBfhRt7oy/3RLGnAKjWi/ JykyB2gS41r6qsTnfccUjruMPhUFiM/LvR8lJCV2USt7n215Uy4QIZT3CRptGxWB 94CsVGEPsKdf/g8irF4Na+k+7KdDDXJVOKoS59prp12Qep3viTiNuCuMREJWw+Vz pnvzOMhf3fgyd05LggD62w0v+RKSNGBvDBrNXUweqRBfU5IY+i7FsBrdvFSR99Kv hZ9iq8Kha0uj9MlHCfD9jCrIFiP0IQupW83WOxK/bR00qPvGSphBXumSAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAIkv2EzxEQ41z6l7xVtyxGuR8RLMB8GA1UdIwQY MBaAFJ/G6HcJrp0ER5QPI9dU34uoF1sNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjhib2R3bXVuUVJIbEE4ajExVGZpNmdYV3cwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9lNDI4MDAtYzhjNy00NTk5LWIxZmQt ODhhNzRkMDM5ZjdmLzEvbjhib2R3bXVuUVJIbEE4ajExVGZpNmdYV3cwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9lNDI4MDAtYzhjNy00NTk5LWIxZmQtODhhNzRkMDM5Zjdm LzEvbjhib2R3bXVuUVJIbEE4ajExVGZpNmdYV3cwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD71id4CK POoRR/8UnnD+9jipIN8MeHiO3L1dfgXfnikgJgBTg3OZkAIPyKVP7O8laESwbezi XbyjjwwIVj5qWzX0IADsclbl52OXH4EV6bUSO33DmRfeNAcAQxNqM0HjpaISLZi1 99YnHSf5ZRBrKt75OMZjtKvAcrz3wt9B2o2+b1Delx5eN7xP38vsNfRSM+CB/8V1 4UpHjOVuAdMr8illehANREzGhn2E74ksehhIyROGoIk6TSeCN6TYT7TtNVwU0Cah djwnNqdzkjheSqKgA+7ZhIq5gdPtOk5eBm3+GMxdg3Ck3i8n+JGndRgTuzWhTs27 durjD/kY61/f0A== -----END CERTIFICATE-----Generated at Sat Dec 6 07:10:45 2025 by rpki-client