This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/014a63-ca18-41df-91e9-c28ee869faa0/1/NB--B1HiEYiTdNFdYxLCJPaV-qI.mft File: NB--B1HiEYiTdNFdYxLCJPaV-qI.mft (raw, json) Hash identifier: lxGyH12LENwKDZl6NlGNiT3O4txatOQTVEG2LIx/IQw= Subject key identifier: 3E:FA:F5:42:44:5D:01:DF:04:E7:63:59:59:BA:F0:A7:FD:98:DF:69 Authority key identifier: 34:1F:BE:07:51:E2:11:88:93:74:D1:5D:63:12:C2:24:F6:95:FA:A2 Certificate issuer: /CN=341fbe0751e211889374d15d6312c224f695faa2 Certificate serial: 019B2061F927A7E23F1537790FABBB5C2103 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NB--B1HiEYiTdNFdYxLCJPaV-qI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/014a63-ca18-41df-91e9-c28ee869faa0/1/NB--B1HiEYiTdNFdYxLCJPaV-qI.mft Manifest number: 10A0 Signing time: Mon 15 Dec 2025 05:00:50 +0000 Manifest this update: Mon 15 Dec 2025 05:00:50 +0000 Manifest next update: Tue 16 Dec 2025 05:00:50 +0000 Files and hashes: 1: Giw6c3ykUw3nYPNE5UpuuM_ybFY.roa (hash: 4QE8zLtdTCj1Z8B1PqQUFcIb6Is1jjshW97EzIqWBB0=) 2: NB--B1HiEYiTdNFdYxLCJPaV-qI.crl (hash: M0cH/ksrRnyvgs4hO/QtV1eoP/vV1/Bcb5XOE4Yw95g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/014a63-ca18-41df-91e9-c28ee869faa0/1/NB--B1HiEYiTdNFdYxLCJPaV-qI.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/014a63-ca18-41df-91e9-c28ee869faa0/1/NB--B1HiEYiTdNFdYxLCJPaV-qI.mft rsync://rpki.ripe.net/repository/DEFAULT/NB--B1HiEYiTdNFdYxLCJPaV-qI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 05:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:61:f9:27:a7:e2:3f:15:37:79:0f:ab:bb:5c:21:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=341fbe0751e211889374d15d6312c224f695faa2 Validity Not Before: Dec 15 05:00:50 2025 GMT Not After : Dec 16 05:00:50 2025 GMT Subject: CN=3efaf542445d01df04e7635959baf0a7fd98df69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:29:5e:4b:56:d6:5c:44:1e:46:6e:5f:64:45: ec:91:a8:9d:5e:76:21:46:cb:7a:d0:f7:bd:a6:bb: 1a:30:80:ae:f9:1e:04:19:50:1f:c1:ec:72:0f:6c: 32:a5:1b:5c:42:35:aa:ca:c8:08:33:68:67:80:5e: 5d:65:df:f3:cc:1a:9a:9f:e0:71:59:f2:2b:ce:d1: 39:59:16:0a:83:9b:6f:15:e0:10:7a:e5:05:c5:01: 4c:be:67:09:a4:98:84:17:57:c2:b7:e5:68:42:64: dc:2c:59:a1:3c:5d:bf:7a:31:8f:70:20:50:e3:b5: 9a:14:3d:39:94:05:61:9f:e0:54:c7:7f:75:f5:6a: 6d:e2:c9:2e:f2:2e:0e:02:a8:d3:c0:a9:36:80:8a: ca:e0:88:3f:c5:2b:d6:34:65:b6:d7:05:ae:66:eb: c2:65:99:bf:85:27:6d:0f:4d:e4:37:48:4f:30:e6: a0:e9:23:a2:53:f6:5c:61:9d:a6:64:2d:26:30:c0: b0:de:40:69:ed:3f:a0:d8:81:5d:c6:73:23:ef:30: 16:05:52:68:01:d1:90:4a:99:49:b7:c6:eb:37:1f: f8:2a:bb:f5:cb:df:3c:cb:35:74:89:ce:10:6b:ef: 44:88:8d:d8:c6:72:a1:29:3c:c3:fb:2a:8f:64:09: 8e:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:FA:F5:42:44:5D:01:DF:04:E7:63:59:59:BA:F0:A7:FD:98:DF:69 X509v3 Authority Key Identifier: keyid:34:1F:BE:07:51:E2:11:88:93:74:D1:5D:63:12:C2:24:F6:95:FA:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NB--B1HiEYiTdNFdYxLCJPaV-qI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/014a63-ca18-41df-91e9-c28ee869faa0/1/NB--B1HiEYiTdNFdYxLCJPaV-qI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/014a63-ca18-41df-91e9-c28ee869faa0/1/NB--B1HiEYiTdNFdYxLCJPaV-qI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:67:2a:3c:d8:00:f1:f5:1b:fa:0d:16:9e:f5:46:53:c6:63: ee:4b:49:44:f5:9b:9d:01:08:6f:55:cb:f1:95:77:f7:19:2e: 06:bf:59:ae:bf:29:00:51:36:84:5c:6a:5f:e0:01:f8:46:34: 5e:df:d3:5b:b1:70:f1:53:6f:17:13:f8:06:62:55:e9:c4:45: 0c:4c:f2:00:06:26:dc:26:fd:6f:b0:de:57:99:6a:76:f8:d2: 62:0a:98:bb:35:c3:cf:58:17:8e:f5:4b:c3:15:18:fa:b1:d8: 56:2e:26:d8:92:93:32:e7:11:61:21:ac:88:ef:5d:36:45:22: a0:f2:d4:b8:af:88:b9:8d:83:80:dc:1c:be:3b:ee:c7:02:33: 71:78:28:92:9c:93:53:b9:10:28:8b:83:5b:07:c4:df:d7:69: ab:d8:68:50:ab:64:52:2a:d6:cf:b0:f7:07:ef:1f:81:6c:03: ae:48:17:b6:3b:cc:01:6c:41:55:cd:26:2a:5f:ec:e7:9f:9f: fa:d0:0d:fa:68:23:57:3d:51:1c:c6:2a:02:67:92:79:3e:c7: 93:51:d1:52:b8:72:d8:e3:2d:69:34:70:54:b7:5e:04:5f:65: 1a:24:8d:17:21:ba:a8:c3:3c:58:c3:71:50:5e:75:f0:3d:9d: b6:fd:07:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsgYfknp+I/FTd5D6u7XCEDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0MWZiZTA3NTFlMjExODg5Mzc0ZDE1ZDYzMTJjMjI0ZjY5 NWZhYTIwHhcNMjUxMjE1MDUwMDUwWhcNMjUxMjE2MDUwMDUwWjAzMTEwLwYDVQQD EygzZWZhZjU0MjQ0NWQwMWRmMDRlNzYzNTk1OWJhZjBhN2ZkOThkZjY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSleS1bWXEQeRm5fZEXskaidXnYh Rst60Pe9prsaMICu+R4EGVAfwexyD2wypRtcQjWqysgIM2hngF5dZd/zzBqan+Bx WfIrztE5WRYKg5tvFeAQeuUFxQFMvmcJpJiEF1fCt+VoQmTcLFmhPF2/ejGPcCBQ 47WaFD05lAVhn+BUx3919Wpt4sku8i4OAqjTwKk2gIrK4Ig/xSvWNGW21wWuZuvC ZZm/hSdtD03kN0hPMOag6SOiU/ZcYZ2mZC0mMMCw3kBp7T+g2IFdxnMj7zAWBVJo AdGQSplJt8brNx/4Krv1y988yzV0ic4Qa+9EiI3YxnKhKTzD+yqPZAmO8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD769UJEXQHfBOdjWVm68Kf9mN9pMB8GA1UdIwQY MBaAFDQfvgdR4hGIk3TRXWMSwiT2lfqiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkItLUIxSGlFWWlUZE5GZFl4TENKUGFWLXFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi8wMTRhNjMtY2ExOC00MWRmLTkxZTkt YzI4ZWU4NjlmYWEwLzEvTkItLUIxSGlFWWlUZE5GZFl4TENKUGFWLXFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi8wMTRhNjMtY2ExOC00MWRmLTkxZTktYzI4ZWU4NjlmYWEw LzEvTkItLUIxSGlFWWlUZE5GZFl4TENKUGFWLXFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAImcqPNgA 8fUb+g0WnvVGU8Zj7ktJRPWbnQEIb1XL8ZV39xkuBr9Zrr8pAFE2hFxqX+AB+EY0 Xt/TW7Fw8VNvFxP4BmJV6cRFDEzyAAYm3Cb9b7DeV5lqdvjSYgqYuzXDz1gXjvVL wxUY+rHYVi4m2JKTMucRYSGsiO9dNkUioPLUuK+IuY2DgNwcvjvuxwIzcXgokpyT U7kQKIuDWwfE39dpq9hoUKtkUirWz7D3B+8fgWwDrkgXtjvMAWxBVc0mKl/s55+f +tAN+mgjVz1RHMYqAmeSeT7Hk1HRUrhy2OMtaTRwVLdeBF9lGiSNFyG6qMM8WMNx UF518D2dtv0Hmg== -----END CERTIFICATE-----Generated at Mon Dec 15 14:40:26 2025 by rpki-client