This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft File: NoBlGroGa0CEp-0g1_UgGyKWwZc.mft (raw, json) Hash identifier: CSDEJdBv52QU54xG+VqcRqc2L6HCmelkiPICX1lL6kc= Subject key identifier: EF:91:4A:8B:B7:05:23:40:1D:51:7A:9A:9F:DD:94:97:3E:5E:02:0C Authority key identifier: 36:80:65:1A:BA:06:6B:40:84:A7:ED:20:D7:F5:20:1B:22:96:C1:97 Certificate issuer: /CN=3680651aba066b4084a7ed20d7f5201b2296c197 Certificate serial: 019AF209767D06B573C54E314503B721ED5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NoBlGroGa0CEp-0g1_UgGyKWwZc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft Manifest number: 0782 Signing time: Sat 06 Dec 2025 05:01:37 +0000 Manifest this update: Sat 06 Dec 2025 05:01:37 +0000 Manifest next update: Sun 07 Dec 2025 05:01:37 +0000 Files and hashes: 1: 4WEE6M8dthgW-fAXTbXKabGLlL0.roa (hash: Vz/LsTTjIy8GCO6P/Fc6vDeS0OdzaRulpb9xjUaoVO0=) 2: NoBlGroGa0CEp-0g1_UgGyKWwZc.crl (hash: wiBwn1qAzmZ08jtiQm2I+VeZmne80O+khCySwZzp374=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft rsync://rpki.ripe.net/repository/DEFAULT/NoBlGroGa0CEp-0g1_UgGyKWwZc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:76:7d:06:b5:73:c5:4e:31:45:03:b7:21:ed:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3680651aba066b4084a7ed20d7f5201b2296c197 Validity Not Before: Dec 6 05:01:37 2025 GMT Not After : Dec 7 05:01:37 2025 GMT Subject: CN=ef914a8bb70523401d517a9a9fdd94973e5e020c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f0:3e:64:23:2f:51:3a:a1:37:94:16:82:09: 3f:81:9e:39:7c:da:d9:ca:00:75:e1:45:ae:6f:05: c1:de:43:13:96:2d:6e:5b:76:49:8f:52:d1:4e:8a: 8a:2f:8d:f3:0a:bd:9a:1b:38:77:25:f3:9a:1c:01: ff:33:79:64:46:83:39:fc:53:46:1e:38:de:d4:b6: 13:54:43:cd:d3:66:8a:17:8c:a8:94:04:47:e4:48: da:f3:5f:89:e7:20:fd:8e:4a:f2:36:8d:c8:30:b7: 45:85:e3:76:bc:79:e7:45:e7:66:b0:21:34:d2:ca: 18:fa:18:fe:fe:ac:5a:49:25:04:48:72:b6:d4:7c: 9a:21:51:cc:b5:c2:b6:2f:06:8d:60:ad:65:09:00: 69:ba:82:d1:3d:1a:5d:24:70:41:2c:68:69:e5:14: b6:20:fa:75:99:de:a8:e8:d9:40:47:21:63:79:f4: f5:5f:d0:8c:15:01:3f:55:c7:e8:5c:1e:b2:d0:36: 7c:5c:b1:89:05:5d:28:e8:1d:66:a0:df:fb:b5:34: 25:82:75:e6:b6:f9:d7:20:2d:7e:d7:30:fe:b4:8a: d7:cc:6e:c0:9e:b6:3c:36:29:33:f7:64:d0:e8:47: 37:83:d0:01:11:f1:b3:c3:e0:ab:78:fc:d7:d9:f2: 54:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:91:4A:8B:B7:05:23:40:1D:51:7A:9A:9F:DD:94:97:3E:5E:02:0C X509v3 Authority Key Identifier: keyid:36:80:65:1A:BA:06:6B:40:84:A7:ED:20:D7:F5:20:1B:22:96:C1:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NoBlGroGa0CEp-0g1_UgGyKWwZc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:82:01:7f:25:6e:b8:1b:7b:23:ed:70:3a:f2:d4:9a:0d:e6: 4d:ec:74:2d:90:7c:ae:1b:4e:f1:84:34:ab:e0:a9:4c:03:20: a1:b6:e1:e8:2e:17:3b:25:00:f8:f0:f8:77:27:7c:6d:e0:e5: 2b:4b:62:ce:3c:96:b2:eb:5d:90:8f:46:a3:ef:70:58:34:f1: 8d:61:b7:f8:9a:c5:72:62:59:a8:a7:97:b0:6d:e0:c9:12:84: e1:a5:03:76:62:4a:96:9a:71:8e:8d:d3:43:6f:e5:b9:d0:85: 44:04:48:f9:0b:bf:65:7e:0c:fd:68:a6:f4:ab:68:0f:b3:3b: ad:3b:8f:fb:26:08:9d:31:1e:f2:62:cb:64:7f:86:3e:94:e3: 4e:bc:7e:2d:e4:96:43:0d:b4:bd:9d:b4:53:e9:61:30:b7:59: 41:60:84:78:54:86:b3:8b:fa:cd:e3:0b:b8:55:87:5d:a2:f7: d4:16:33:61:5a:4c:0d:b4:00:b1:d0:de:4f:f7:61:ec:16:1b: 2d:c2:0e:9b:9a:88:1e:b8:63:ed:92:6b:d9:7f:9e:6e:c3:f7: 83:82:63:f4:4f:b4:13:0b:68:f0:20:43:15:0f:1b:7f:8d:2d: 04:5d:bb:75:90:ff:92:ac:af:27:59:cf:5e:d5:b7:63:56:fc: 01:07:c9:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCXZ9BrVzxU4xRQO3Ie1cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2ODA2NTFhYmEwNjZiNDA4NGE3ZWQyMGQ3ZjUyMDFiMjI5 NmMxOTcwHhcNMjUxMjA2MDUwMTM3WhcNMjUxMjA3MDUwMTM3WjAzMTEwLwYDVQQD EyhlZjkxNGE4YmI3MDUyMzQwMWQ1MTdhOWE5ZmRkOTQ5NzNlNWUwMjBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/A+ZCMvUTqhN5QWggk/gZ45fNrZ ygB14UWubwXB3kMTli1uW3ZJj1LRToqKL43zCr2aGzh3JfOaHAH/M3lkRoM5/FNG Hjje1LYTVEPN02aKF4yolARH5Eja81+J5yD9jkryNo3IMLdFheN2vHnnRedmsCE0 0soY+hj+/qxaSSUESHK21HyaIVHMtcK2LwaNYK1lCQBpuoLRPRpdJHBBLGhp5RS2 IPp1md6o6NlARyFjefT1X9CMFQE/VcfoXB6y0DZ8XLGJBV0o6B1moN/7tTQlgnXm tvnXIC1+1zD+tIrXzG7AnrY8Nikz92TQ6Ec3g9ABEfGzw+CrePzX2fJUmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO+RSou3BSNAHVF6mp/dlJc+XgIMMB8GA1UdIwQY MBaAFDaAZRq6BmtAhKftINf1IBsilsGXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTm9CbEdyb0dhMENFcC0wZzFfVWdHeUtXd1pjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9kMTBiOTQtNDEwNS00NWUyLWE3MDct NTIyNGNmMTNmNTg2LzEvTm9CbEdyb0dhMENFcC0wZzFfVWdHeUtXd1pjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9kMTBiOTQtNDEwNS00NWUyLWE3MDctNTIyNGNmMTNmNTg2 LzEvTm9CbEdyb0dhMENFcC0wZzFfVWdHeUtXd1pjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEIIBfyVu uBt7I+1wOvLUmg3mTex0LZB8rhtO8YQ0q+CpTAMgobbh6C4XOyUA+PD4dyd8beDl K0tizjyWsutdkI9Go+9wWDTxjWG3+JrFcmJZqKeXsG3gyRKE4aUDdmJKlppxjo3T Q2/ludCFRARI+Qu/ZX4M/Wim9KtoD7M7rTuP+yYInTEe8mLLZH+GPpTjTrx+LeSW Qw20vZ20U+lhMLdZQWCEeFSGs4v6zeMLuFWHXaL31BYzYVpMDbQAsdDeT/dh7BYb LcIOm5qIHrhj7ZJr2X+ebsP3g4Jj9E+0Ewto8CBDFQ8bf40tBF27dZD/kqyvJ1nP XtW3Y1b8AQfJCA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:48:05 2025 by rpki-client