This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.mft File: _nB-d2cwwsLsumue6VchKtWNXNs.mft (raw, json) Hash identifier: YPDYxo41u0hUeHg/AX8mP7/q0tzUTSH1zEJFam8vaSU= Subject key identifier: 84:06:A8:FE:19:84:36:C1:D3:BA:5B:3D:00:DE:A7:B8:8E:DB:D6:E0 Authority key identifier: FE:70:7E:77:67:30:C2:C2:EC:BA:6B:9E:E9:57:21:2A:D5:8D:5C:DB Certificate issuer: /CN=fe707e776730c2c2ecba6b9ee957212ad58d5cdb Certificate serial: 019B194D357AD0C5B81C7B02C56B81D120FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_nB-d2cwwsLsumue6VchKtWNXNs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.mft Manifest number: 0E4B Signing time: Sat 13 Dec 2025 20:00:48 +0000 Manifest this update: Sat 13 Dec 2025 20:00:48 +0000 Manifest next update: Sun 14 Dec 2025 20:00:48 +0000 Files and hashes: 1: Puy-0P_jBepIb5u3SpvEh4v47j8.roa (hash: ZN41z34tLWoaRsScijTCdX/mIzcEneubj96rKehXEgw=) 2: _nB-d2cwwsLsumue6VchKtWNXNs.crl (hash: YP6C1Upsnebjjz3HHYx+mCzRoRKLMIYx0onsyLPVRdU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.mft rsync://rpki.ripe.net/repository/DEFAULT/_nB-d2cwwsLsumue6VchKtWNXNs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:4d:35:7a:d0:c5:b8:1c:7b:02:c5:6b:81:d1:20:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe707e776730c2c2ecba6b9ee957212ad58d5cdb Validity Not Before: Dec 13 20:00:48 2025 GMT Not After : Dec 14 20:00:48 2025 GMT Subject: CN=8406a8fe198436c1d3ba5b3d00dea7b88edbd6e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:69:da:25:53:ad:0a:68:77:31:25:f3:40:1f: 50:1a:6d:36:18:7c:39:a9:f9:6d:31:91:14:08:23: 85:a0:be:93:ba:f5:3a:a6:d8:b1:1f:5a:62:26:76: b3:05:2e:ba:d9:3e:ab:1a:52:f9:55:75:71:bd:12: 65:9d:1a:46:1a:d4:a7:4d:c2:a3:5e:19:09:26:a0: 7c:04:f9:a0:05:22:94:b4:92:db:2a:99:2a:43:4e: 3c:d8:f1:1b:8a:2e:d4:24:82:95:65:a0:75:1b:12: 07:b8:6b:83:b9:60:d8:6f:b7:91:9e:05:8d:22:74: 30:0f:ba:a0:fe:91:01:17:05:23:e7:bd:1f:28:a9: d7:0d:2e:8f:76:91:93:34:19:24:9f:24:81:e9:30: db:03:e0:18:d1:73:c1:e5:f6:80:c5:be:21:c7:65: 31:e8:47:5e:00:ed:77:01:87:f2:86:4a:ae:71:a9: d5:41:49:57:38:1f:84:06:89:fc:28:fb:80:4f:a0: 28:f1:61:6f:31:eb:12:ae:f6:fa:ee:63:96:57:4f: 7e:28:16:5a:f5:f2:f6:8d:af:c9:f0:f7:7e:3a:05: 0e:2e:56:33:a7:70:34:3c:ed:ff:d9:ac:f2:62:bf: 0b:78:4a:60:d6:06:41:d3:7d:7e:f4:11:22:86:92: 55:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:06:A8:FE:19:84:36:C1:D3:BA:5B:3D:00:DE:A7:B8:8E:DB:D6:E0 X509v3 Authority Key Identifier: keyid:FE:70:7E:77:67:30:C2:C2:EC:BA:6B:9E:E9:57:21:2A:D5:8D:5C:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_nB-d2cwwsLsumue6VchKtWNXNs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:77:c9:c9:83:78:16:5c:e0:2d:c5:a7:0a:75:ff:49:f5:ed: 40:2f:79:8a:03:43:35:a4:69:52:d8:d2:46:dc:0e:be:64:2d: a2:3e:e1:f3:59:3a:f0:67:a4:91:35:13:71:15:90:67:3c:0f: 49:de:23:6c:47:15:01:82:e7:59:73:31:de:71:b7:fa:4e:ba: 23:1b:96:19:eb:85:12:cf:df:67:37:93:df:5c:53:d9:26:55: 8f:d6:88:1b:cc:3b:0e:ab:01:2d:22:3d:c9:de:3e:6b:f0:41: 6e:27:4b:db:ba:67:8a:7a:ee:8c:cd:0a:07:ad:6b:21:b9:b4: fe:3e:01:b5:41:95:20:8f:eb:17:31:cc:89:0a:c8:9f:ec:ad: 53:a2:31:50:fd:6e:8d:ac:f8:dd:0d:ea:eb:74:32:72:73:67: 31:51:47:a7:3d:8a:0d:62:c2:77:e3:31:41:7f:7c:22:dd:b2: 37:ab:e6:18:db:01:60:10:78:10:d8:bd:90:ef:02:7a:c5:21: fe:11:d8:a6:09:69:94:da:a1:e2:73:e8:e1:04:a9:66:0b:fc: 70:ed:6b:9e:fe:48:3f:5d:6c:b6:d2:1f:a4:31:ad:a3:bd:74: 95:d7:2c:03:5c:87:60:7f:43:b5:52:fa:87:52:21:40:85:ba: 2c:1d:fc:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZTTV60MW4HHsCxWuB0SD8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlNzA3ZTc3NjczMGMyYzJlY2JhNmI5ZWU5NTcyMTJhZDU4 ZDVjZGIwHhcNMjUxMjEzMjAwMDQ4WhcNMjUxMjE0MjAwMDQ4WjAzMTEwLwYDVQQD Eyg4NDA2YThmZTE5ODQzNmMxZDNiYTViM2QwMGRlYTdiODhlZGJkNmUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGnaJVOtCmh3MSXzQB9QGm02GHw5 qfltMZEUCCOFoL6TuvU6ptixH1piJnazBS662T6rGlL5VXVxvRJlnRpGGtSnTcKj XhkJJqB8BPmgBSKUtJLbKpkqQ0482PEbii7UJIKVZaB1GxIHuGuDuWDYb7eRngWN InQwD7qg/pEBFwUj570fKKnXDS6PdpGTNBkknySB6TDbA+AY0XPB5faAxb4hx2Ux 6EdeAO13AYfyhkqucanVQUlXOB+EBon8KPuAT6Ao8WFvMesSrvb67mOWV09+KBZa 9fL2ja/J8Pd+OgUOLlYzp3A0PO3/2azyYr8LeEpg1gZB031+9BEihpJV/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIQGqP4ZhDbB07pbPQDep7iO29bgMB8GA1UdIwQY MBaAFP5wfndnMMLC7LprnulXISrVjVzbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX25CLWQyY3d3c0xzdW11ZTZWY2hLdFdOWE5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81ZmJkYTYtYmZjZS00ZDlkLWE0ZGIt ODcxNTQwMzMwODU5LzEvX25CLWQyY3d3c0xzdW11ZTZWY2hLdFdOWE5zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC81ZmJkYTYtYmZjZS00ZDlkLWE0ZGItODcxNTQwMzMwODU5 LzEvX25CLWQyY3d3c0xzdW11ZTZWY2hLdFdOWE5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAHfJyYN4 FlzgLcWnCnX/SfXtQC95igNDNaRpUtjSRtwOvmQtoj7h81k68GekkTUTcRWQZzwP Sd4jbEcVAYLnWXMx3nG3+k66IxuWGeuFEs/fZzeT31xT2SZVj9aIG8w7DqsBLSI9 yd4+a/BBbidL27pninrujM0KB61rIbm0/j4BtUGVII/rFzHMiQrIn+ytU6IxUP1u jaz43Q3q63QycnNnMVFHpz2KDWLCd+MxQX98It2yN6vmGNsBYBB4ENi9kO8CesUh /hHYpglplNqh4nPo4QSpZgv8cO1rnv5IP11sttIfpDGto710ldcsA1yHYH9DtVL6 h1IhQIW6LB38hg== -----END CERTIFICATE-----Generated at Sun Dec 14 03:28:27 2025 by rpki-client