This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.mft File: _nB-d2cwwsLsumue6VchKtWNXNs.mft (raw, json) Hash identifier: G7j+pbVFjky5lSkSrm/NckLnC96587u2e6kGXCRgnvE= Subject key identifier: 40:76:6B:B1:76:81:14:6A:32:6C:56:B0:AA:DE:76:D4:46:9D:F1:7A Authority key identifier: FE:70:7E:77:67:30:C2:C2:EC:BA:6B:9E:E9:57:21:2A:D5:8D:5C:DB Certificate issuer: /CN=fe707e776730c2c2ecba6b9ee957212ad58d5cdb Certificate serial: 019AF68A138F27B97B01C9846FF6A227A298 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_nB-d2cwwsLsumue6VchKtWNXNs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.mft Manifest number: 0E39 Signing time: Sun 07 Dec 2025 02:00:35 +0000 Manifest this update: Sun 07 Dec 2025 02:00:35 +0000 Manifest next update: Mon 08 Dec 2025 02:00:35 +0000 Files and hashes: 1: Puy-0P_jBepIb5u3SpvEh4v47j8.roa (hash: ZN41z34tLWoaRsScijTCdX/mIzcEneubj96rKehXEgw=) 2: _nB-d2cwwsLsumue6VchKtWNXNs.crl (hash: g8tzYLYV1LW/o3jXQfIx1CWgIMZW7KV1ryOllhR17o4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.mft rsync://rpki.ripe.net/repository/DEFAULT/_nB-d2cwwsLsumue6VchKtWNXNs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:8a:13:8f:27:b9:7b:01:c9:84:6f:f6:a2:27:a2:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe707e776730c2c2ecba6b9ee957212ad58d5cdb Validity Not Before: Dec 7 02:00:35 2025 GMT Not After : Dec 8 02:00:35 2025 GMT Subject: CN=40766bb17681146a326c56b0aade76d4469df17a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c5:9c:41:25:36:32:1e:f2:f1:aa:1c:14:73: e1:14:2c:9e:71:61:90:c1:cb:e2:2e:02:4d:e0:4c: 5c:55:fd:e0:ba:7a:4c:b2:0a:82:5e:bd:e0:5c:ae: 39:fb:d6:0e:89:34:db:6b:3c:7f:41:17:ac:e6:1f: 4d:e6:f8:ae:b0:bd:fc:38:cb:0b:7c:93:6f:15:25: a8:3c:0d:d1:24:6a:dc:d2:5b:4c:b5:5a:fd:03:d5: e8:8c:bf:d5:84:d0:d0:00:6d:47:03:eb:fc:60:52: 90:9d:45:18:78:07:8e:94:e4:a8:ef:ad:33:45:14: 8d:84:02:86:e6:d1:e8:06:c0:25:7a:98:de:5c:ac: 24:84:38:d8:09:7c:6e:d8:19:6e:94:9d:c8:c1:a6: cb:fe:8b:0b:d3:a5:d6:81:f9:9b:ea:31:08:6e:9a: 9d:2e:d0:91:52:df:a3:b5:f5:cf:1f:ad:e9:a0:56: ae:9e:4e:72:7f:a6:96:aa:6b:24:e2:15:89:d7:3c: 0b:85:1f:e4:b1:e4:2e:a1:68:2c:04:f8:ed:9c:4f: be:70:99:a5:4b:82:11:99:38:36:79:09:35:68:e7: 6b:94:8d:1c:ba:be:49:62:10:31:f8:c7:87:43:ce: 37:b3:40:8c:12:10:70:c9:20:1a:db:d4:2b:6b:9a: c8:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:76:6B:B1:76:81:14:6A:32:6C:56:B0:AA:DE:76:D4:46:9D:F1:7A X509v3 Authority Key Identifier: keyid:FE:70:7E:77:67:30:C2:C2:EC:BA:6B:9E:E9:57:21:2A:D5:8D:5C:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_nB-d2cwwsLsumue6VchKtWNXNs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:a6:55:e5:dd:a8:f2:b3:37:32:fe:17:08:d6:01:ef:18:ae: a5:68:1d:3a:23:1a:20:54:71:b6:97:c5:d5:6b:b6:2a:b0:f5: 9a:09:1b:11:83:cc:98:8f:6b:fb:aa:d3:3a:59:48:9c:b8:73: 8b:1a:31:02:ad:d2:a2:da:55:34:7e:25:a4:2a:10:f0:3c:7e: 75:15:8b:f2:88:f4:c3:31:99:bc:a5:b3:17:db:40:6a:52:cb: c7:56:a9:c8:7d:f0:7b:1b:a0:fa:fc:cb:4e:4c:ec:5e:0a:2c: ee:6e:22:56:36:08:21:84:e0:4d:86:72:3d:e3:f6:52:30:5b: 4b:ef:25:8c:ca:34:e7:ea:59:0c:13:67:8f:4d:88:fb:29:3c: 67:3b:09:b5:fd:e3:4d:f9:d8:6b:ed:33:76:02:3a:ba:38:60: 20:82:a6:48:5b:7d:a0:c0:d8:12:01:2f:38:1f:0a:66:aa:59: f0:71:6b:5e:84:fb:df:d8:cc:b5:30:d3:c3:cd:a6:ba:e1:c1: 94:94:d2:f7:eb:88:23:bb:d7:be:2d:22:31:4c:be:e3:d6:92: 0e:58:ac:a0:2a:5e:e4:e5:e9:22:c3:43:e7:eb:fd:13:a6:2d: 58:6c:9a:0f:9a:00:6d:0e:eb:7a:3c:69:9a:41:62:7f:01:a7: f5:f1:f8:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2ihOPJ7l7AcmEb/aiJ6KYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlNzA3ZTc3NjczMGMyYzJlY2JhNmI5ZWU5NTcyMTJhZDU4 ZDVjZGIwHhcNMjUxMjA3MDIwMDM1WhcNMjUxMjA4MDIwMDM1WjAzMTEwLwYDVQQD Eyg0MDc2NmJiMTc2ODExNDZhMzI2YzU2YjBhYWRlNzZkNDQ2OWRmMTdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcWcQSU2Mh7y8aocFHPhFCyecWGQ wcviLgJN4ExcVf3gunpMsgqCXr3gXK45+9YOiTTbazx/QRes5h9N5viusL38OMsL fJNvFSWoPA3RJGrc0ltMtVr9A9XojL/VhNDQAG1HA+v8YFKQnUUYeAeOlOSo760z RRSNhAKG5tHoBsAlepjeXKwkhDjYCXxu2BlulJ3IwabL/osL06XWgfmb6jEIbpqd LtCRUt+jtfXPH63poFaunk5yf6aWqmsk4hWJ1zwLhR/kseQuoWgsBPjtnE++cJml S4IRmTg2eQk1aOdrlI0cur5JYhAx+MeHQ843s0CMEhBwySAa29Qra5rIzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEB2a7F2gRRqMmxWsKredtRGnfF6MB8GA1UdIwQY MBaAFP5wfndnMMLC7LprnulXISrVjVzbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX25CLWQyY3d3c0xzdW11ZTZWY2hLdFdOWE5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81ZmJkYTYtYmZjZS00ZDlkLWE0ZGIt ODcxNTQwMzMwODU5LzEvX25CLWQyY3d3c0xzdW11ZTZWY2hLdFdOWE5zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC81ZmJkYTYtYmZjZS00ZDlkLWE0ZGItODcxNTQwMzMwODU5 LzEvX25CLWQyY3d3c0xzdW11ZTZWY2hLdFdOWE5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHaZV5d2o 8rM3Mv4XCNYB7xiupWgdOiMaIFRxtpfF1Wu2KrD1mgkbEYPMmI9r+6rTOllInLhz ixoxAq3SotpVNH4lpCoQ8Dx+dRWL8oj0wzGZvKWzF9tAalLLx1apyH3wexug+vzL TkzsXgos7m4iVjYIIYTgTYZyPeP2UjBbS+8ljMo05+pZDBNnj02I+yk8ZzsJtf3j TfnYa+0zdgI6ujhgIIKmSFt9oMDYEgEvOB8KZqpZ8HFrXoT739jMtTDTw82muuHB lJTS9+uII7vXvi0iMUy+49aSDlisoCpe5OXpIsND5+v9E6YtWGyaD5oAbQ7rejxp mkFifwGn9fH4EQ== -----END CERTIFICATE-----Generated at Sun Dec 7 05:16:00 2025 by rpki-client