This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/No41oF8nB7WnQcKnL15Ls0ybCag.mft File: No41oF8nB7WnQcKnL15Ls0ybCag.mft (raw, json) Hash identifier: +JLtMXzYT/QlzsLR/DN7WBeHNKwbfFVvW5Zqed9Af8g= Subject key identifier: 1E:F9:46:5A:21:3E:7A:E6:3F:50:60:9B:0C:C8:B0:F4:DE:01:03:9F Authority key identifier: 36:8E:35:A0:5F:27:07:B5:A7:41:C2:A7:2F:5E:4B:B3:4C:9B:09:A8 Certificate issuer: /CN=368e35a05f2707b5a741c2a72f5e4bb34c9b09a8 Certificate serial: 019B213DBE51D3FFB90B644FF48B9013D18B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/No41oF8nB7WnQcKnL15Ls0ybCag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/No41oF8nB7WnQcKnL15Ls0ybCag.mft Manifest number: 1778 Signing time: Mon 15 Dec 2025 09:00:53 +0000 Manifest this update: Mon 15 Dec 2025 09:00:53 +0000 Manifest next update: Tue 16 Dec 2025 09:00:53 +0000 Files and hashes: 1: L7FYC8e89xGKnty6O1mK_Gb2H5U.roa (hash: McrAWYa182W0VDulttkCRb8Sku8UBSHS1nLFi0h9Euw=) 2: No41oF8nB7WnQcKnL15Ls0ybCag.crl (hash: i4kK+2v1z4Xh4wOSRUjb9fXxjx5mxY5uZNXJMLY4jyk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/No41oF8nB7WnQcKnL15Ls0ybCag.crl rsync://rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/No41oF8nB7WnQcKnL15Ls0ybCag.mft rsync://rpki.ripe.net/repository/DEFAULT/No41oF8nB7WnQcKnL15Ls0ybCag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:3d:be:51:d3:ff:b9:0b:64:4f:f4:8b:90:13:d1:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=368e35a05f2707b5a741c2a72f5e4bb34c9b09a8 Validity Not Before: Dec 15 09:00:53 2025 GMT Not After : Dec 16 09:00:53 2025 GMT Subject: CN=1ef9465a213e7ae63f50609b0cc8b0f4de01039f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:44:bc:e1:74:3e:e9:f5:f6:63:2e:6a:f2:e4: c3:4d:9a:eb:b7:10:7a:62:05:00:e7:a7:21:78:3e: 19:0b:5d:7e:76:46:c3:06:76:9c:4c:75:6e:68:ea: 0d:6e:81:ba:5e:85:46:d4:10:8f:75:0d:58:c1:be: 10:81:83:66:9c:fa:78:d1:33:5f:ad:f1:b0:03:ff: ba:9e:30:7b:50:4e:29:63:ac:c1:e6:e8:a4:4b:8a: d5:a7:86:45:45:a6:e4:70:00:f8:83:3c:e1:d6:b1: 51:ee:92:04:4c:b0:73:6a:5f:04:2a:2c:88:6c:0c: 00:c1:f6:94:d4:c5:35:bc:d3:60:2d:df:dc:ce:3d: 27:fc:10:09:e6:a0:54:7e:c6:ac:d2:3d:2d:58:b4: 8e:77:db:41:01:20:e5:c6:2a:3a:06:a3:95:2b:8e: d9:a9:62:56:f2:51:ea:f2:cb:18:8e:6e:df:41:80: a6:16:1b:e7:0f:d7:7b:a0:e7:13:55:b2:c2:a0:6f: 65:c5:ed:d9:5c:97:8d:39:ba:1f:3c:63:cf:3d:d7: 56:e5:b4:11:d3:4f:e8:1e:61:71:b0:70:6d:d8:9d: d9:56:09:bb:81:9b:9a:5c:65:d4:06:3c:2e:5d:2b: 6c:e4:ff:bc:56:c0:8a:02:a3:8f:31:84:2d:b4:15: 71:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:F9:46:5A:21:3E:7A:E6:3F:50:60:9B:0C:C8:B0:F4:DE:01:03:9F X509v3 Authority Key Identifier: keyid:36:8E:35:A0:5F:27:07:B5:A7:41:C2:A7:2F:5E:4B:B3:4C:9B:09:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/No41oF8nB7WnQcKnL15Ls0ybCag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/No41oF8nB7WnQcKnL15Ls0ybCag.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/No41oF8nB7WnQcKnL15Ls0ybCag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:2c:4d:4e:63:30:61:d7:a3:3b:71:b2:05:e6:90:c6:eb:c0: f7:82:17:70:ab:d7:a1:50:8a:e9:0b:0d:a1:e6:ee:a8:5b:42: 39:51:61:cd:85:ea:4b:1b:03:74:da:ed:08:65:e1:1f:97:ff: 4d:04:fd:da:59:3a:d3:65:b4:c6:5b:4a:d1:1e:fd:f3:f1:e0: d8:97:59:ea:f1:e7:7a:b9:b0:e7:f6:2f:7b:89:93:ea:31:cb: 37:0d:37:80:01:b6:ff:0b:67:3c:b9:99:15:be:55:3c:a6:e2: ce:e2:45:a0:1b:75:93:6c:8c:de:16:86:f4:77:af:c0:64:6e: 46:b5:88:b0:41:f7:35:1d:06:5a:07:f7:40:f9:db:41:04:3c: b2:c1:2b:dc:17:74:09:3f:7f:23:9f:22:fc:66:1c:88:1e:20: ea:a4:75:60:f2:40:09:2a:0c:9c:26:7c:bd:0d:f9:a0:4f:61: 68:28:bb:b3:01:3d:b7:5a:87:03:a0:2a:f2:a6:c1:ca:72:a2: fd:70:8d:2c:84:55:a6:bb:dd:55:af:03:0f:92:0d:5d:33:1c: 1c:2a:28:93:09:0d:18:b9:d8:a8:55:dd:f2:9f:48:10:61:1e: 6b:04:d2:34:3b:79:26:0d:36:59:53:6e:47:c3:b3:f3:19:71: 79:7d:e4:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshPb5R0/+5C2RP9IuQE9GLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2OGUzNWEwNWYyNzA3YjVhNzQxYzJhNzJmNWU0YmIzNGM5 YjA5YTgwHhcNMjUxMjE1MDkwMDUzWhcNMjUxMjE2MDkwMDUzWjAzMTEwLwYDVQQD EygxZWY5NDY1YTIxM2U3YWU2M2Y1MDYwOWIwY2M4YjBmNGRlMDEwMzlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUS84XQ+6fX2Yy5q8uTDTZrrtxB6 YgUA56cheD4ZC11+dkbDBnacTHVuaOoNboG6XoVG1BCPdQ1Ywb4QgYNmnPp40TNf rfGwA/+6njB7UE4pY6zB5uikS4rVp4ZFRabkcAD4gzzh1rFR7pIETLBzal8EKiyI bAwAwfaU1MU1vNNgLd/czj0n/BAJ5qBUfsas0j0tWLSOd9tBASDlxio6BqOVK47Z qWJW8lHq8ssYjm7fQYCmFhvnD9d7oOcTVbLCoG9lxe3ZXJeNObofPGPPPddW5bQR 00/oHmFxsHBt2J3ZVgm7gZuaXGXUBjwuXSts5P+8VsCKAqOPMYQttBVxQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB75RlohPnrmP1BgmwzIsPTeAQOfMB8GA1UdIwQY MBaAFDaONaBfJwe1p0HCpy9eS7NMmwmoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTm80MW9GOG5CN1duUWNLbkwxNUxzMHliQ2FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9iYjU0ZDEtODkyZC00NzExLWE5Y2Yt NzZmMTM1YzRmMzExLzEvTm80MW9GOG5CN1duUWNLbkwxNUxzMHliQ2FnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS9iYjU0ZDEtODkyZC00NzExLWE5Y2YtNzZmMTM1YzRmMzEx LzEvTm80MW9GOG5CN1duUWNLbkwxNUxzMHliQ2FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALyxNTmMw YdejO3GyBeaQxuvA94IXcKvXoVCK6QsNoebuqFtCOVFhzYXqSxsDdNrtCGXhH5f/ TQT92lk602W0xltK0R798/Hg2JdZ6vHnermw5/Yve4mT6jHLNw03gAG2/wtnPLmZ Fb5VPKbizuJFoBt1k2yM3haG9HevwGRuRrWIsEH3NR0GWgf3QPnbQQQ8ssEr3Bd0 CT9/I58i/GYciB4g6qR1YPJACSoMnCZ8vQ35oE9haCi7swE9t1qHA6Aq8qbBynKi /XCNLIRVprvdVa8DD5INXTMcHCookwkNGLnYqFXd8p9IEGEeawTSNDt5Jg02WVNu R8Oz8xlxeX3kDg== -----END CERTIFICATE-----Generated at Mon Dec 15 13:36:08 2025 by rpki-client