This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c4a45f-4213-4f01-98f6-98eb53b9502a/1/bNoVAPXJY-0jT9lIWfI7MvSIXfw.mft File: bNoVAPXJY-0jT9lIWfI7MvSIXfw.mft (raw, json) Hash identifier: zN7r46rVBsIz4cFMG0NM9kYFp+jVZo+IJZX3ysnCoH4= Subject key identifier: 09:B6:29:B5:B6:22:1F:B8:1C:C8:C3:64:CD:16:7B:0C:4E:6D:71:36 Authority key identifier: 6C:DA:15:00:F5:C9:63:ED:23:4F:D9:48:59:F2:3B:32:F4:88:5D:FC Certificate issuer: /CN=6cda1500f5c963ed234fd94859f23b32f4885dfc Certificate serial: 019B5A1A965EBD62BF93AFCA6FED6BD78B16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bNoVAPXJY-0jT9lIWfI7MvSIXfw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c4a45f-4213-4f01-98f6-98eb53b9502a/1/bNoVAPXJY-0jT9lIWfI7MvSIXfw.mft Manifest number: 1576 Signing time: Fri 26 Dec 2025 10:00:50 +0000 Manifest this update: Fri 26 Dec 2025 10:00:50 +0000 Manifest next update: Sat 27 Dec 2025 10:00:50 +0000 Files and hashes: 1: VL7EtVPW-Ba0tPYDXOg-sXCbn4U.roa (hash: gs/UbUcaVfJny1jbjzMdFc3Au+82Qsl/IH1AWl7JplE=) 2: bNoVAPXJY-0jT9lIWfI7MvSIXfw.crl (hash: la0N3LJnSDoJPPKKGuJSst1anaV8njvFI6o3oQxdGZc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/c4a45f-4213-4f01-98f6-98eb53b9502a/1/bNoVAPXJY-0jT9lIWfI7MvSIXfw.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/c4a45f-4213-4f01-98f6-98eb53b9502a/1/bNoVAPXJY-0jT9lIWfI7MvSIXfw.mft rsync://rpki.ripe.net/repository/DEFAULT/bNoVAPXJY-0jT9lIWfI7MvSIXfw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:96:5e:bd:62:bf:93:af:ca:6f:ed:6b:d7:8b:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cda1500f5c963ed234fd94859f23b32f4885dfc Validity Not Before: Dec 26 10:00:50 2025 GMT Not After : Dec 27 10:00:50 2025 GMT Subject: CN=09b629b5b6221fb81cc8c364cd167b0c4e6d7136 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:77:72:8e:5d:94:dc:69:08:83:fc:ed:92:6a: a6:42:8c:51:a5:42:0c:ad:a2:6f:d6:8a:ae:f1:70: e0:5d:2d:0c:84:7f:d4:39:f3:26:8b:f5:82:63:8f: d5:b6:57:4c:96:dc:48:9a:cd:37:cf:60:18:93:73: ef:cf:19:13:f3:b8:aa:0e:05:a1:5a:dd:fc:60:08: 08:1b:b0:f3:7b:60:e6:46:fb:49:5c:bb:85:42:f1: 83:e4:da:bb:17:2e:fc:b8:e9:61:55:22:72:6e:f8: 8f:08:11:69:8a:46:0f:57:ec:9a:de:e5:0c:da:02: 1e:21:4e:1b:02:66:d0:28:07:97:46:3d:99:75:2d: e5:8e:e8:84:5d:c1:af:51:0f:e3:03:c6:06:40:0b: cd:67:7b:3f:c7:d8:5a:f9:1c:8c:50:25:7e:71:4a: d0:b4:33:8c:a0:7b:d6:9b:fe:02:f0:05:b0:9f:9a: 9e:93:7a:00:43:a5:b2:c9:23:d6:c0:15:d6:3c:83: 75:3c:c4:4c:a8:d9:5a:52:46:fc:6d:7f:58:ef:2d: 0a:ef:25:e3:03:ef:05:14:47:57:7c:ee:7f:60:38: 70:57:48:78:e7:cd:41:72:7f:b1:45:d2:60:d7:d2: 1a:b3:0f:bb:be:84:f1:71:27:b8:69:00:64:d1:44: e6:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:B6:29:B5:B6:22:1F:B8:1C:C8:C3:64:CD:16:7B:0C:4E:6D:71:36 X509v3 Authority Key Identifier: keyid:6C:DA:15:00:F5:C9:63:ED:23:4F:D9:48:59:F2:3B:32:F4:88:5D:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNoVAPXJY-0jT9lIWfI7MvSIXfw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c4a45f-4213-4f01-98f6-98eb53b9502a/1/bNoVAPXJY-0jT9lIWfI7MvSIXfw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c4a45f-4213-4f01-98f6-98eb53b9502a/1/bNoVAPXJY-0jT9lIWfI7MvSIXfw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:e5:d3:3c:d7:16:1b:74:4b:b1:4c:06:e7:eb:3a:b0:7f:43: c6:6a:48:11:c4:8d:05:fb:23:28:38:2f:05:80:69:14:8a:05: 4e:80:4e:22:01:2e:01:3c:63:ca:a3:5b:cf:8e:78:51:15:b8: 91:a7:15:a5:ff:93:81:0d:bf:9a:2f:14:f7:f3:c1:7a:b5:19: 72:46:d4:1e:05:13:67:6d:c3:5b:4d:11:f2:8a:9a:8c:cb:ba: c2:31:56:58:a7:8b:67:7d:41:e2:ed:bc:47:99:44:a0:11:10: a4:3c:e7:35:a7:b0:d1:b8:2a:9b:69:97:07:b1:0f:33:4d:c3: 74:0e:14:63:28:6d:4d:68:ba:db:d6:21:cb:89:dc:bb:50:3a: 44:14:57:70:1f:9f:01:1a:14:5a:05:4c:71:83:97:6c:23:9e: c0:a5:bf:5b:27:f0:1b:05:9e:a6:40:87:5c:79:28:6c:b1:a3: b2:90:f6:f9:0e:10:1e:e4:3c:0a:7a:52:2c:d1:7c:dc:0a:a1: 7f:82:7e:07:c8:86:7c:37:32:34:1f:0b:82:5e:97:77:f3:f4: c5:9a:e8:e3:08:54:9a:28:51:45:cf:a5:f0:a0:5a:fc:ca:7e: 1a:51:4a:87:80:2a:43:72:05:bc:7b:82:57:17:1c:7c:35:3f: 49:70:2c:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGpZevWK/k6/Kb+1r14sWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjZGExNTAwZjVjOTYzZWQyMzRmZDk0ODU5ZjIzYjMyZjQ4 ODVkZmMwHhcNMjUxMjI2MTAwMDUwWhcNMjUxMjI3MTAwMDUwWjAzMTEwLwYDVQQD EygwOWI2MjliNWI2MjIxZmI4MWNjOGMzNjRjZDE2N2IwYzRlNmQ3MTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ndyjl2U3GkIg/ztkmqmQoxRpUIM raJv1oqu8XDgXS0MhH/UOfMmi/WCY4/VtldMltxIms03z2AYk3PvzxkT87iqDgWh Wt38YAgIG7Dze2DmRvtJXLuFQvGD5Nq7Fy78uOlhVSJybviPCBFpikYPV+ya3uUM 2gIeIU4bAmbQKAeXRj2ZdS3ljuiEXcGvUQ/jA8YGQAvNZ3s/x9ha+RyMUCV+cUrQ tDOMoHvWm/4C8AWwn5qek3oAQ6WyySPWwBXWPIN1PMRMqNlaUkb8bX9Y7y0K7yXj A+8FFEdXfO5/YDhwV0h4581Bcn+xRdJg19Iasw+7voTxcSe4aQBk0UTmFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAm2KbW2Ih+4HMjDZM0WewxObXE2MB8GA1UdIwQY MBaAFGzaFQD1yWPtI0/ZSFnyOzL0iF38MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYk5vVkFQWEpZLTBqVDlsSVdmSTdNdlNJWGZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9jNGE0NWYtNDIxMy00ZjAxLTk4ZjYt OThlYjUzYjk1MDJhLzEvYk5vVkFQWEpZLTBqVDlsSVdmSTdNdlNJWGZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi9jNGE0NWYtNDIxMy00ZjAxLTk4ZjYtOThlYjUzYjk1MDJh LzEvYk5vVkFQWEpZLTBqVDlsSVdmSTdNdlNJWGZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXOXTPNcW G3RLsUwG5+s6sH9DxmpIEcSNBfsjKDgvBYBpFIoFToBOIgEuATxjyqNbz454URW4 kacVpf+TgQ2/mi8U9/PBerUZckbUHgUTZ23DW00R8oqajMu6wjFWWKeLZ31B4u28 R5lEoBEQpDznNaew0bgqm2mXB7EPM03DdA4UYyhtTWi629Yhy4ncu1A6RBRXcB+f ARoUWgVMcYOXbCOewKW/WyfwGwWepkCHXHkobLGjspD2+Q4QHuQ8CnpSLNF83Aqh f4J+B8iGfDcyNB8Lgl6Xd/P0xZro4whUmihRRc+l8KBa/Mp+GlFKh4AqQ3IFvHuC VxccfDU/SXAsow== -----END CERTIFICATE-----Generated at Fri Dec 26 16:06:37 2025 by rpki-client