This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/fb7864-5795-4208-abe0-08542454d16b/1/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.mft File: nlBfLmeh5gSz-WPOTDZ9GVi9S3g.mft (raw, json) Hash identifier: /hB+ubq5WrKqoMnKQXQZFoPp2l/StZc4nNo78QEs9Dc= Subject key identifier: 4C:1C:D1:68:85:84:38:5F:DE:51:BE:8E:45:20:65:B0:B9:3B:36:69 Authority key identifier: 9E:50:5F:2E:67:A1:E6:04:B3:F9:63:CE:4C:36:7D:19:58:BD:4B:78 Certificate issuer: /CN=9e505f2e67a1e604b3f963ce4c367d1958bd4b78 Certificate serial: 019B3AC6798E7B513364DB03831C57070246 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/fb7864-5795-4208-abe0-08542454d16b/1/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.mft Manifest number: 178A Signing time: Sat 20 Dec 2025 08:00:44 +0000 Manifest this update: Sat 20 Dec 2025 08:00:44 +0000 Manifest next update: Sun 21 Dec 2025 08:00:44 +0000 Files and hashes: 1: 9v5VLNQmHUC6c_AtiguXiv9VBlw.roa (hash: iNy4HwSBG8Jz28fsrZBO8bxra5HKthytWN8pQ51S61o=) 2: nlBfLmeh5gSz-WPOTDZ9GVi9S3g.crl (hash: XshNmEljbCjxH1is2xYv0km+2VFHAMj7Dg8ezb9Mxjg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/fb7864-5795-4208-abe0-08542454d16b/1/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.crl rsync://rpki.ripe.net/repository/DEFAULT/48/fb7864-5795-4208-abe0-08542454d16b/1/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.mft rsync://rpki.ripe.net/repository/DEFAULT/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:c6:79:8e:7b:51:33:64:db:03:83:1c:57:07:02:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e505f2e67a1e604b3f963ce4c367d1958bd4b78 Validity Not Before: Dec 20 08:00:44 2025 GMT Not After : Dec 21 08:00:44 2025 GMT Subject: CN=4c1cd1688584385fde51be8e452065b0b93b3669 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:3e:b3:31:f2:d7:8f:8f:df:82:a6:59:63:f3: 0f:c4:54:a6:25:63:ea:b4:73:e6:a7:74:78:63:5a: 45:d1:ab:51:7d:46:ee:a2:eb:74:30:dc:a0:b8:fb: d1:7a:94:02:86:8f:c7:63:bf:c3:9f:01:ee:8c:73: 76:ff:08:1f:7a:b1:45:b2:1c:5a:b6:df:05:4a:11: b7:f6:80:6b:d6:78:c0:61:61:4f:3c:dd:66:8d:d7: b1:76:6a:a7:31:41:27:5b:a8:7d:e6:aa:d9:7f:1f: 5b:24:bd:de:25:8c:4e:d4:c8:b9:af:a2:a0:b1:d8: dd:35:3d:b1:e8:60:10:2c:a3:9b:1f:31:dc:55:5d: 5a:00:6c:30:95:73:08:7b:a6:0f:54:ca:4a:34:5d: 9e:8a:d9:ba:ee:68:6f:73:2c:05:fd:12:57:61:2a: d0:2b:1e:4e:72:7b:23:48:17:9a:b7:33:3b:c7:89: b8:ab:e8:48:d6:d1:2c:75:13:2d:cb:43:79:31:0a: fc:71:f6:bc:9e:3d:73:21:fa:04:41:2c:80:67:a6: 54:11:e8:37:42:91:f9:46:6b:8c:07:d3:63:77:77: 00:17:00:cf:a8:0e:86:45:10:b1:42:8a:6c:17:55: b8:2e:24:46:4d:c5:dc:1b:5a:d4:ef:f3:1b:84:04: 90:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:1C:D1:68:85:84:38:5F:DE:51:BE:8E:45:20:65:B0:B9:3B:36:69 X509v3 Authority Key Identifier: keyid:9E:50:5F:2E:67:A1:E6:04:B3:F9:63:CE:4C:36:7D:19:58:BD:4B:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/fb7864-5795-4208-abe0-08542454d16b/1/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/fb7864-5795-4208-abe0-08542454d16b/1/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:c9:d6:28:a3:23:78:8d:45:3c:ae:8c:c8:85:c1:6b:4c:92: 13:30:f2:32:c5:8f:d3:5c:49:a0:e3:64:cb:5d:57:70:e3:28: 16:4d:7a:21:33:e9:72:ee:d7:8d:f9:6c:1c:b7:64:13:ff:ce: d8:53:a9:3b:15:06:8b:27:1f:76:6a:ee:2a:6a:74:0c:d6:f6: af:7b:9a:7e:04:05:c6:3d:f0:86:27:51:37:68:7c:14:a7:ea: 5f:a6:35:e5:d6:c5:b9:53:10:af:88:98:00:f9:6b:74:3d:fe: 96:7c:42:16:43:fe:1a:2f:84:61:ef:83:b2:c0:0a:ea:10:a9: 39:a7:5a:54:7a:0a:d2:6b:17:35:db:90:b7:e0:27:c2:a9:29: 78:79:b9:17:f2:47:9b:83:e6:29:6a:4c:0c:ed:42:dd:70:86: 4d:7a:5d:94:91:57:f1:87:66:fc:44:2b:be:78:96:05:12:8d: 48:cb:ec:8a:36:e4:33:c1:21:c4:66:47:46:96:3c:65:65:d8: 1c:be:4a:97:a1:18:66:42:da:67:ab:be:66:18:9f:b5:da:10: 26:78:63:5b:c0:14:de:b3:00:8f:c4:7e:d9:c8:f7:6b:46:65: fd:1e:60:1d:a3:61:7a:74:f3:38:45:21:e4:4a:e6:27:01:8f: 8d:a4:4c:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6xnmOe1EzZNsDgxxXBwJGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNTA1ZjJlNjdhMWU2MDRiM2Y5NjNjZTRjMzY3ZDE5NThi ZDRiNzgwHhcNMjUxMjIwMDgwMDQ0WhcNMjUxMjIxMDgwMDQ0WjAzMTEwLwYDVQQD Eyg0YzFjZDE2ODg1ODQzODVmZGU1MWJlOGU0NTIwNjViMGI5M2IzNjY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkj6zMfLXj4/fgqZZY/MPxFSmJWPq tHPmp3R4Y1pF0atRfUbuout0MNyguPvRepQCho/HY7/DnwHujHN2/wgferFFshxa tt8FShG39oBr1njAYWFPPN1mjdexdmqnMUEnW6h95qrZfx9bJL3eJYxO1Mi5r6Kg sdjdNT2x6GAQLKObHzHcVV1aAGwwlXMIe6YPVMpKNF2eitm67mhvcywF/RJXYSrQ Kx5OcnsjSBeatzM7x4m4q+hI1tEsdRMty0N5MQr8cfa8nj1zIfoEQSyAZ6ZUEeg3 QpH5RmuMB9Njd3cAFwDPqA6GRRCxQopsF1W4LiRGTcXcG1rU7/MbhASQiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEwc0WiFhDhf3lG+jkUgZbC5OzZpMB8GA1UdIwQY MBaAFJ5QXy5noeYEs/ljzkw2fRlYvUt4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmxCZkxtZWg1Z1N6LVdQT1REWjlHVmk5UzNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9mYjc4NjQtNTc5NS00MjA4LWFiZTAt MDg1NDI0NTRkMTZiLzEvbmxCZkxtZWg1Z1N6LVdQT1REWjlHVmk5UzNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC9mYjc4NjQtNTc5NS00MjA4LWFiZTAtMDg1NDI0NTRkMTZi LzEvbmxCZkxtZWg1Z1N6LVdQT1REWjlHVmk5UzNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIsnWKKMj eI1FPK6MyIXBa0ySEzDyMsWP01xJoONky11XcOMoFk16ITPpcu7XjflsHLdkE//O 2FOpOxUGiycfdmruKmp0DNb2r3uafgQFxj3whidRN2h8FKfqX6Y15dbFuVMQr4iY APlrdD3+lnxCFkP+Gi+EYe+DssAK6hCpOadaVHoK0msXNduQt+AnwqkpeHm5F/JH m4PmKWpMDO1C3XCGTXpdlJFX8Ydm/EQrvniWBRKNSMvsijbkM8EhxGZHRpY8ZWXY HL5Kl6EYZkLaZ6u+ZhiftdoQJnhjW8AU3rMAj8R+2cj3a0Zl/R5gHaNhenTzOEUh 5ErmJwGPjaRMvA== -----END CERTIFICATE-----Generated at Sat Dec 20 09:13:46 2025 by rpki-client