This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/dcb613-93eb-4e86-895b-b1e698708f59/1/nJB6oEaogfuAUFGVIBYwYCYNfzE.mft File: nJB6oEaogfuAUFGVIBYwYCYNfzE.mft (raw, json) Hash identifier: CbZwaeXLH8K09F8kQolWz+nz2e6tf3TxJI6HKAhBARw= Subject key identifier: 50:F0:F1:BB:26:76:5E:D9:25:77:19:7B:6E:D1:12:2D:31:8D:75:6D Authority key identifier: 9C:90:7A:A0:46:A8:81:FB:80:50:51:95:20:16:30:60:26:0D:7F:31 Certificate issuer: /CN=9c907aa046a881fb8050519520163060260d7f31 Certificate serial: 019AF1D252C47C6BE71A7E3D63B039BD89F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nJB6oEaogfuAUFGVIBYwYCYNfzE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/dcb613-93eb-4e86-895b-b1e698708f59/1/nJB6oEaogfuAUFGVIBYwYCYNfzE.mft Manifest number: 033C Signing time: Sat 06 Dec 2025 04:01:24 +0000 Manifest this update: Sat 06 Dec 2025 04:01:24 +0000 Manifest next update: Sun 07 Dec 2025 04:01:24 +0000 Files and hashes: 1: F86xC6xwpLDuhs7A8wZygejUMX8.roa (hash: hqY5dyyDkeBwJW2ZEKNHXzfFF8UT2R+EbGGyWHizujw=) 2: nJB6oEaogfuAUFGVIBYwYCYNfzE.crl (hash: ULhaSyuMr8zhRx2vmg/MvoKSeTU+H+nij+ZdezD4HxI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/dcb613-93eb-4e86-895b-b1e698708f59/1/nJB6oEaogfuAUFGVIBYwYCYNfzE.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/dcb613-93eb-4e86-895b-b1e698708f59/1/nJB6oEaogfuAUFGVIBYwYCYNfzE.mft rsync://rpki.ripe.net/repository/DEFAULT/nJB6oEaogfuAUFGVIBYwYCYNfzE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:52:c4:7c:6b:e7:1a:7e:3d:63:b0:39:bd:89:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c907aa046a881fb8050519520163060260d7f31 Validity Not Before: Dec 6 04:01:24 2025 GMT Not After : Dec 7 04:01:24 2025 GMT Subject: CN=50f0f1bb26765ed92577197b6ed1122d318d756d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:33:23:90:ab:a2:ce:62:9e:99:ca:2c:6f:b2: c4:dd:27:a4:d2:75:57:10:2b:22:34:ae:67:c6:9c: df:d0:54:f0:b5:62:d1:bf:82:66:e9:b0:2f:64:86: 56:4e:df:3a:be:ad:23:39:95:2d:7c:07:b7:8b:0b: 00:84:cf:25:40:7d:9b:e4:55:40:cd:5f:80:f4:7c: 30:4e:fe:6f:bd:53:04:2e:8b:8a:0c:39:df:5d:f9: 52:0b:e2:7c:ef:b4:06:02:8b:6a:ef:9d:01:97:46: b4:8f:dc:2a:4d:f1:d7:da:21:ab:d2:20:0d:13:cf: b8:37:3f:e6:76:ee:2f:34:6c:f3:90:df:e2:94:63: 37:37:13:96:da:89:a8:c5:37:40:28:98:fb:21:70: 2e:8a:57:c6:e7:bb:a2:0d:48:50:57:6e:42:18:89: 12:d8:29:db:e9:97:68:6a:8d:1b:be:9e:22:a6:45: b5:23:18:04:2f:87:7c:39:8a:6a:cb:94:5d:7c:a8: 1e:c6:bb:54:a5:59:0e:a2:57:b3:6c:a0:7b:25:e8: b3:65:b0:73:fd:6e:10:45:ab:9f:70:4f:b3:47:f3: 7e:48:5d:6a:87:07:55:6a:7e:36:65:29:3d:53:1f: f0:c8:ac:08:9c:fd:12:67:5c:ce:aa:d8:e6:fe:7c: e1:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:F0:F1:BB:26:76:5E:D9:25:77:19:7B:6E:D1:12:2D:31:8D:75:6D X509v3 Authority Key Identifier: keyid:9C:90:7A:A0:46:A8:81:FB:80:50:51:95:20:16:30:60:26:0D:7F:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJB6oEaogfuAUFGVIBYwYCYNfzE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/dcb613-93eb-4e86-895b-b1e698708f59/1/nJB6oEaogfuAUFGVIBYwYCYNfzE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/dcb613-93eb-4e86-895b-b1e698708f59/1/nJB6oEaogfuAUFGVIBYwYCYNfzE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:9a:83:11:b0:cc:bc:86:37:7d:90:58:b8:54:15:e0:df:d2: 18:ee:21:d1:8c:a4:3d:f3:fd:2f:dc:cb:fb:36:d4:ea:11:bd: 49:27:7e:a9:6f:8d:0c:6d:88:f4:48:32:fc:e1:be:02:97:fb: b0:93:0c:5a:dd:98:24:4b:1f:80:5c:4e:44:0d:3a:65:6b:13: 73:75:9b:ba:0d:9e:76:5d:dd:72:1f:21:2b:aa:df:e9:c3:fb: 45:7f:57:d5:c2:b3:05:42:9c:ed:03:02:db:cf:e3:35:63:6f: 20:7c:ed:a8:0d:08:3d:2f:b5:4c:6f:8c:a3:c4:6d:6b:19:ef: 86:20:4f:89:f6:9d:c8:35:64:20:fc:c1:08:c4:d9:5d:66:1c: dd:04:e8:ef:24:91:f2:86:11:a5:69:62:0f:a4:4d:f9:dd:ab: 6c:6c:a1:2f:8d:d4:9a:1c:45:41:f3:88:70:98:49:67:04:5b: be:bf:24:55:3b:0d:5e:fd:ea:de:a3:3e:f0:f1:64:a0:08:26: 66:e5:e2:d8:c2:44:5b:cf:fb:d6:3b:77:ca:2f:4e:5a:da:93: 4f:3e:f8:16:70:10:1d:5d:70:49:40:97:c1:ff:a7:8b:18:45: fa:b1:46:f3:97:59:63:c3:f0:a3:b7:5c:5a:ce:90:f3:45:b6: 25:8e:1d:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0lLEfGvnGn49Y7A5vYn1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljOTA3YWEwNDZhODgxZmI4MDUwNTE5NTIwMTYzMDYwMjYw ZDdmMzEwHhcNMjUxMjA2MDQwMTI0WhcNMjUxMjA3MDQwMTI0WjAzMTEwLwYDVQQD Eyg1MGYwZjFiYjI2NzY1ZWQ5MjU3NzE5N2I2ZWQxMTIyZDMxOGQ3NTZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3jMjkKuizmKemcosb7LE3Sek0nVX ECsiNK5nxpzf0FTwtWLRv4Jm6bAvZIZWTt86vq0jOZUtfAe3iwsAhM8lQH2b5FVA zV+A9HwwTv5vvVMELouKDDnfXflSC+J877QGAotq750Bl0a0j9wqTfHX2iGr0iAN E8+4Nz/mdu4vNGzzkN/ilGM3NxOW2omoxTdAKJj7IXAuilfG57uiDUhQV25CGIkS 2Cnb6Zdoao0bvp4ipkW1IxgEL4d8OYpqy5RdfKgexrtUpVkOolezbKB7JeizZbBz /W4QRaufcE+zR/N+SF1qhwdVan42ZSk9Ux/wyKwInP0SZ1zOqtjm/nzhEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFDw8bsmdl7ZJXcZe27REi0xjXVtMB8GA1UdIwQY MBaAFJyQeqBGqIH7gFBRlSAWMGAmDX8xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkpCNm9FYW9nZnVBVUZHVklCWXdZQ1lOZnpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9kY2I2MTMtOTNlYi00ZTg2LTg5NWIt YjFlNjk4NzA4ZjU5LzEvbkpCNm9FYW9nZnVBVUZHVklCWXdZQ1lOZnpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9kY2I2MTMtOTNlYi00ZTg2LTg5NWItYjFlNjk4NzA4ZjU5 LzEvbkpCNm9FYW9nZnVBVUZHVklCWXdZQ1lOZnpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB5qDEbDM vIY3fZBYuFQV4N/SGO4h0YykPfP9L9zL+zbU6hG9SSd+qW+NDG2I9Egy/OG+Apf7 sJMMWt2YJEsfgFxORA06ZWsTc3Wbug2edl3dch8hK6rf6cP7RX9X1cKzBUKc7QMC 28/jNWNvIHztqA0IPS+1TG+Mo8RtaxnvhiBPifadyDVkIPzBCMTZXWYc3QTo7ySR 8oYRpWliD6RN+d2rbGyhL43UmhxFQfOIcJhJZwRbvr8kVTsNXv3q3qM+8PFkoAgm ZuXi2MJEW8/71jt3yi9OWtqTTz74FnAQHV1wSUCXwf+nixhF+rFG85dZY8Pwo7dc Ws6Q80W2JY4dag== -----END CERTIFICATE-----Generated at Sat Dec 6 15:10:17 2025 by rpki-client