This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.mft File: b-NJEELvMdzG4K2OVcvhSd0MMYI.mft (raw, json) Hash identifier: 0mU48ffTmaZlCd9kl79GmpBqrB5bd7CFwzKqi28fd/Y= Subject key identifier: BF:B2:74:6E:70:AF:1A:4F:49:2A:FC:36:37:BE:EE:71:4B:40:A8:05 Authority key identifier: 6F:E3:49:10:42:EF:31:DC:C6:E0:AD:8E:55:CB:E1:49:DD:0C:31:82 Certificate issuer: /CN=6fe3491042ef31dcc6e0ad8e55cbe149dd0c3182 Certificate serial: 019AF12CCA8CA346BECABFADBAD525FED4B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b-NJEELvMdzG4K2OVcvhSd0MMYI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.mft Manifest number: 0F28 Signing time: Sat 06 Dec 2025 01:00:35 +0000 Manifest this update: Sat 06 Dec 2025 01:00:35 +0000 Manifest next update: Sun 07 Dec 2025 01:00:35 +0000 Files and hashes: 1: ZIja49CzE0s2C9AlBaxxTa5EnBc.roa (hash: Mwwwh5zbLqqLKLq4mDwCxjzrltfztiX/y2yTkp5xrGs=) 2: b-NJEELvMdzG4K2OVcvhSd0MMYI.crl (hash: EzdZcTfPcoaoqqg2vu6avfWjdf5t8a1T+aorLuxfP9s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.mft rsync://rpki.ripe.net/repository/DEFAULT/b-NJEELvMdzG4K2OVcvhSd0MMYI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:ca:8c:a3:46:be:ca:bf:ad:ba:d5:25:fe:d4:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6fe3491042ef31dcc6e0ad8e55cbe149dd0c3182 Validity Not Before: Dec 6 01:00:35 2025 GMT Not After : Dec 7 01:00:35 2025 GMT Subject: CN=bfb2746e70af1a4f492afc3637beee714b40a805 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5d:51:9f:59:b2:2d:82:39:af:de:bd:17:85: c8:21:bb:45:6c:d6:f2:ba:13:cf:0a:a5:1f:0c:57: 27:b1:47:76:b3:95:28:02:14:48:05:79:0c:03:8d: c3:e5:d1:0e:9b:9d:80:eb:bf:5f:64:4e:6e:b8:ad: 7f:b3:d6:35:12:e1:3a:80:10:5c:bc:b4:1f:24:9d: d1:92:07:2e:ac:20:10:1b:9a:09:70:82:d8:23:d5: 32:2b:cb:10:ef:f3:3c:3e:ee:e1:33:16:09:b1:29: eb:44:cb:7e:86:2c:28:8e:98:a1:72:1e:68:6d:49: e5:eb:c4:36:d1:0d:8e:33:40:a4:28:5d:8b:6b:07: 9d:4a:9b:c4:58:b9:e1:8d:eb:1d:4c:55:87:ed:68: 09:ab:6b:59:8a:28:0a:e4:81:c3:ba:12:89:77:1f: ff:a4:c0:38:91:7e:8f:9c:c5:5a:f8:70:0b:33:98: 0c:5c:a2:e5:eb:d9:64:85:00:c6:8a:c0:49:c5:55: 4f:71:fa:b0:5f:83:dd:c6:65:a9:1f:88:e0:78:37: c8:bd:b5:1e:61:ba:f0:98:13:73:aa:ba:d8:19:b9: 45:02:23:00:03:07:a1:70:c3:ae:a0:3b:ab:ed:fd: cc:0f:cd:03:3b:fa:fd:ea:2a:df:ff:ac:75:f8:a8: 61:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:B2:74:6E:70:AF:1A:4F:49:2A:FC:36:37:BE:EE:71:4B:40:A8:05 X509v3 Authority Key Identifier: keyid:6F:E3:49:10:42:EF:31:DC:C6:E0:AD:8E:55:CB:E1:49:DD:0C:31:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b-NJEELvMdzG4K2OVcvhSd0MMYI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:5c:01:ba:1a:69:57:6c:f6:66:36:84:35:db:a2:62:ad:d6: 2d:eb:30:5b:33:3d:2d:42:c3:db:85:89:10:04:9a:00:90:8b: 2c:1d:5d:93:49:1c:a3:2b:f7:59:a3:74:8b:fd:08:ba:2e:3a: fb:ae:18:cf:0a:75:0e:3b:3b:d4:22:18:e2:2d:12:47:26:57: 25:33:25:2d:fd:62:b6:b0:d3:d3:17:72:9a:63:52:4f:30:c7: a9:bf:d3:f6:bf:7c:a4:e7:6b:1d:63:74:9b:39:45:25:83:93: 56:a1:1b:e0:93:a0:6f:8d:5d:2f:94:33:a5:af:92:61:0e:42: 4f:42:9e:ac:12:cd:e6:41:bf:1b:a4:02:45:58:87:e3:aa:ef: c8:75:bf:fa:bb:f3:d7:28:2c:31:ee:b1:1f:18:b8:13:cc:bc: 72:26:55:96:5b:a7:71:87:78:ba:3b:97:94:34:dd:58:3a:15: fa:3c:84:f2:a9:bf:ac:e5:03:aa:22:c5:e9:c0:08:21:42:f4: f7:9e:bb:f9:f2:45:2a:fb:02:6d:3a:52:f9:d8:f9:f4:57:66: bc:39:c5:c2:98:a2:ba:41:7f:58:c1:0e:7f:df:19:00:db:89: db:a9:58:de:f6:42:c6:bb:db:02:e6:cb:7d:7d:0a:b2:e2:1b: 61:22:de:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLMqMo0a+yr+tutUl/tS0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmZTM0OTEwNDJlZjMxZGNjNmUwYWQ4ZTU1Y2JlMTQ5ZGQw YzMxODIwHhcNMjUxMjA2MDEwMDM1WhcNMjUxMjA3MDEwMDM1WjAzMTEwLwYDVQQD EyhiZmIyNzQ2ZTcwYWYxYTRmNDkyYWZjMzYzN2JlZWU3MTRiNDBhODA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwF1Rn1myLYI5r969F4XIIbtFbNby uhPPCqUfDFcnsUd2s5UoAhRIBXkMA43D5dEOm52A679fZE5uuK1/s9Y1EuE6gBBc vLQfJJ3RkgcurCAQG5oJcILYI9UyK8sQ7/M8Pu7hMxYJsSnrRMt+hiwojpihch5o bUnl68Q20Q2OM0CkKF2LawedSpvEWLnhjesdTFWH7WgJq2tZiigK5IHDuhKJdx// pMA4kX6PnMVa+HALM5gMXKLl69lkhQDGisBJxVVPcfqwX4PdxmWpH4jgeDfIvbUe YbrwmBNzqrrYGblFAiMAAwehcMOuoDur7f3MD80DO/r96irf/6x1+KhhxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL+ydG5wrxpPSSr8Nje+7nFLQKgFMB8GA1UdIwQY MBaAFG/jSRBC7zHcxuCtjlXL4UndDDGCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYi1OSkVFTHZNZHpHNEsyT1ZjdmhTZDBNTVlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9mODliZjAtM2Q2Zi00YjRkLWJmNDIt Yzc4YmQyMjhhOTFkLzEvYi1OSkVFTHZNZHpHNEsyT1ZjdmhTZDBNTVlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC9mODliZjAtM2Q2Zi00YjRkLWJmNDItYzc4YmQyMjhhOTFk LzEvYi1OSkVFTHZNZHpHNEsyT1ZjdmhTZDBNTVlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArFwBuhpp V2z2ZjaENduiYq3WLeswWzM9LULD24WJEASaAJCLLB1dk0kcoyv3WaN0i/0Iui46 +64Yzwp1Djs71CIY4i0SRyZXJTMlLf1itrDT0xdymmNSTzDHqb/T9r98pOdrHWN0 mzlFJYOTVqEb4JOgb41dL5Qzpa+SYQ5CT0KerBLN5kG/G6QCRViH46rvyHW/+rvz 1ygsMe6xHxi4E8y8ciZVlluncYd4ujuXlDTdWDoV+jyE8qm/rOUDqiLF6cAIIUL0 9567+fJFKvsCbTpS+dj59FdmvDnFwpiiukF/WMEOf98ZANuJ26lY3vZCxrvbAubL fX0KsuIbYSLenw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:00:11 2025 by rpki-client