This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.mft File: nBOUdoyaOaYRJnTXN1lypmlrRoA.mft (raw, json) Hash identifier: h/K0ePBuhGnKqm04jwzxbF84B/a9dCltfdDMns49WsA= Subject key identifier: B2:04:34:69:5A:23:1C:7D:00:2E:B9:5E:C8:CA:F9:3D:3E:45:6D:2C Authority key identifier: 9C:13:94:76:8C:9A:39:A6:11:26:74:D7:37:59:72:A6:69:6B:46:80 Certificate issuer: /CN=9c1394768c9a39a6112674d7375972a6696b4680 Certificate serial: 019B59ACFA4DB2CC1AC3B440935FD371EE9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nBOUdoyaOaYRJnTXN1lypmlrRoA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.mft Manifest number: 0B0A Signing time: Fri 26 Dec 2025 08:01:07 +0000 Manifest this update: Fri 26 Dec 2025 08:01:07 +0000 Manifest next update: Sat 27 Dec 2025 08:01:07 +0000 Files and hashes: 1: nBOUdoyaOaYRJnTXN1lypmlrRoA.crl (hash: 4THuOHzzz9D8D2blVM+og3em2JeWGjIPzmdlFX9Jrzg=) 2: naPzLZcFHsUMBLgsbgPGJCO-CF0.roa (hash: nIyF1z3b3iwZq0quO5N0o2X6gTB8LSfxugEcTz9j98Q=) 3: xvsRInrWKS5s7BFPqZmvGE0s2hc.roa (hash: vqluH5uE90JrgU5HmvgOgqmyqSAabArFrkPQ0aAKYvU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.crl rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.mft rsync://rpki.ripe.net/repository/DEFAULT/nBOUdoyaOaYRJnTXN1lypmlrRoA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 08:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ac:fa:4d:b2:cc:1a:c3:b4:40:93:5f:d3:71:ee:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c1394768c9a39a6112674d7375972a6696b4680 Validity Not Before: Dec 26 08:01:07 2025 GMT Not After : Dec 27 08:01:07 2025 GMT Subject: CN=b20434695a231c7d002eb95ec8caf93d3e456d2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f4:e5:0a:96:64:87:65:41:f6:84:27:44:2b: d9:8f:98:95:b9:6d:39:dc:c3:b5:2f:d1:f9:0f:55: a0:bd:df:e2:f8:01:20:0c:dd:2a:35:ea:2e:e3:41: a3:ed:21:3a:7f:02:d6:0b:99:b4:0e:3e:91:8e:cc: 59:be:35:ef:4c:ef:17:01:80:bb:75:56:a4:2e:99: 8e:12:f7:88:fb:cd:81:fd:12:47:d8:1b:1c:fe:79: 3c:6b:30:e0:27:d7:2e:01:a1:28:76:cf:6d:5a:1b: b7:ce:27:fd:a0:6c:1f:68:7e:81:3c:5d:9d:7f:19: b6:44:e7:f7:48:81:63:39:13:d3:1c:16:85:1e:c8: df:d3:15:2f:c3:52:27:10:ad:f2:1e:44:dc:47:e6: fc:c1:b4:39:c4:1f:7f:04:85:6a:df:3a:49:a1:c5: 9a:87:d6:09:28:8a:b2:cc:3c:47:42:66:71:5f:f7: b7:10:82:7c:4c:6c:72:9d:f4:d3:7b:bd:25:dd:e7: 49:f1:b6:31:9d:11:ed:10:b4:1f:7e:e7:10:49:69: e1:ed:59:fc:08:8a:dc:a6:0e:7d:7b:1f:75:2e:71: 25:6c:e8:1d:e3:5f:75:4f:a3:4d:0c:99:f5:ce:10: e8:61:84:6b:eb:d5:5a:3c:5d:d8:e2:dc:a2:19:aa: b9:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:04:34:69:5A:23:1C:7D:00:2E:B9:5E:C8:CA:F9:3D:3E:45:6D:2C X509v3 Authority Key Identifier: keyid:9C:13:94:76:8C:9A:39:A6:11:26:74:D7:37:59:72:A6:69:6B:46:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nBOUdoyaOaYRJnTXN1lypmlrRoA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:c0:a3:04:a9:9f:37:36:86:d5:48:84:7f:7b:e6:0f:d0:60: 07:b8:a8:12:f3:25:85:b7:01:19:17:92:6f:42:43:46:68:f9: b0:63:f4:fe:3c:24:b2:55:56:a1:9f:63:56:1d:2c:15:7f:80: f4:00:69:80:a4:66:53:36:6b:29:4c:97:18:f0:2d:e5:4b:aa: 0f:ad:d6:1c:79:26:0e:cc:86:a8:72:c8:e9:76:e5:01:e7:77: 12:2c:30:c6:39:06:a5:d9:b0:8e:1d:81:4b:48:70:bf:5d:dc: d9:24:55:52:f1:92:37:e2:6c:f5:62:11:43:90:b2:92:19:da: b4:d1:c3:5f:a6:1d:dc:57:45:73:8a:79:8a:57:f4:20:4f:1e: a3:8c:1d:fb:87:5c:67:71:eb:a2:e4:c3:99:df:98:b1:8e:98: c3:a8:77:aa:0e:4f:a1:5b:bd:9e:8b:83:0a:07:59:a5:44:b3: 4c:74:2f:68:05:16:35:84:9c:a5:26:23:f1:74:28:8f:ec:2a: 52:83:eb:9c:78:eb:38:e5:57:4f:bf:c3:bc:3d:2f:a2:6c:91: 73:aa:b0:67:87:14:1e:33:86:26:d3:50:a8:a6:7e:e4:48:5e: fc:ad:6b:cd:62:79:57:23:40:b8:5f:fc:16:6d:bb:24:e6:4d: 31:3b:36:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrPpNsswaw7RAk1/Tce6aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljMTM5NDc2OGM5YTM5YTYxMTI2NzRkNzM3NTk3MmE2Njk2 YjQ2ODAwHhcNMjUxMjI2MDgwMTA3WhcNMjUxMjI3MDgwMTA3WjAzMTEwLwYDVQQD EyhiMjA0MzQ2OTVhMjMxYzdkMDAyZWI5NWVjOGNhZjkzZDNlNDU2ZDJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfTlCpZkh2VB9oQnRCvZj5iVuW05 3MO1L9H5D1Wgvd/i+AEgDN0qNeou40Gj7SE6fwLWC5m0Dj6RjsxZvjXvTO8XAYC7 dVakLpmOEveI+82B/RJH2Bsc/nk8azDgJ9cuAaEods9tWhu3zif9oGwfaH6BPF2d fxm2ROf3SIFjORPTHBaFHsjf0xUvw1InEK3yHkTcR+b8wbQ5xB9/BIVq3zpJocWa h9YJKIqyzDxHQmZxX/e3EIJ8TGxynfTTe70l3edJ8bYxnRHtELQffucQSWnh7Vn8 CIrcpg59ex91LnElbOgd4191T6NNDJn1zhDoYYRr69VaPF3Y4tyiGaq57wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLIENGlaIxx9AC65XsjK+T0+RW0sMB8GA1UdIwQY MBaAFJwTlHaMmjmmESZ01zdZcqZpa0aAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkJPVWRveWFPYVlSSm5UWE4xbHlwbWxyUm9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8zZTcyMTAtMDUyOC00NDU2LWI2OGUt YTcxM2ExOTE1YzkwLzEvbkJPVWRveWFPYVlSSm5UWE4xbHlwbWxyUm9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy8zZTcyMTAtMDUyOC00NDU2LWI2OGUtYTcxM2ExOTE1Yzkw LzEvbkJPVWRveWFPYVlSSm5UWE4xbHlwbWxyUm9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZcCjBKmf NzaG1UiEf3vmD9BgB7ioEvMlhbcBGReSb0JDRmj5sGP0/jwkslVWoZ9jVh0sFX+A 9ABpgKRmUzZrKUyXGPAt5UuqD63WHHkmDsyGqHLI6XblAed3EiwwxjkGpdmwjh2B S0hwv13c2SRVUvGSN+Js9WIRQ5CykhnatNHDX6Yd3FdFc4p5ilf0IE8eo4wd+4dc Z3HrouTDmd+YsY6Yw6h3qg5PoVu9nouDCgdZpUSzTHQvaAUWNYScpSYj8XQoj+wq UoPrnHjrOOVXT7/DvD0vomyRc6qwZ4cUHjOGJtNQqKZ+5Ehe/K1rzWJ5VyNAuF/8 Fm27JOZNMTs2Wg== -----END CERTIFICATE-----Generated at Fri Dec 26 16:03:51 2025 by rpki-client