This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/eda15a-0423-46bd-b32a-52147aae0eb4/1/nIMTOn4Fk7s5jq25J1jLySydZaU.mft File: nIMTOn4Fk7s5jq25J1jLySydZaU.mft (raw, json) Hash identifier: gap19PJKW6EWeMItrAWa3XuSmBS1PoIvVHRZVLyBRk0= Subject key identifier: F8:96:3A:4D:AE:2E:C8:7E:28:E0:D1:2B:92:3C:CB:7E:46:05:12:A6 Authority key identifier: 9C:83:13:3A:7E:05:93:BB:39:8E:AD:B9:27:58:CB:C9:2C:9D:65:A5 Certificate issuer: /CN=9c83133a7e0593bb398eadb92758cbc92c9d65a5 Certificate serial: 019B416D37D654770853F18E70FC8560EB1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nIMTOn4Fk7s5jq25J1jLySydZaU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/eda15a-0423-46bd-b32a-52147aae0eb4/1/nIMTOn4Fk7s5jq25J1jLySydZaU.mft Manifest number: 12BF Signing time: Sun 21 Dec 2025 15:00:35 +0000 Manifest this update: Sun 21 Dec 2025 15:00:35 +0000 Manifest next update: Mon 22 Dec 2025 15:00:35 +0000 Files and hashes: 1: ekhJmeQnAobhvtQLQDb4UB8M1mE.roa (hash: 6CiHXbuoqrzSCFBPUfq3RLFxMNDauAW0jWPQmmN8RFM=) 2: nIMTOn4Fk7s5jq25J1jLySydZaU.crl (hash: XUDzDP/Y/VZj1v86NCen+HbtHriieqGNLIuswKxEEd0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/eda15a-0423-46bd-b32a-52147aae0eb4/1/nIMTOn4Fk7s5jq25J1jLySydZaU.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/eda15a-0423-46bd-b32a-52147aae0eb4/1/nIMTOn4Fk7s5jq25J1jLySydZaU.mft rsync://rpki.ripe.net/repository/DEFAULT/nIMTOn4Fk7s5jq25J1jLySydZaU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:6d:37:d6:54:77:08:53:f1:8e:70:fc:85:60:eb:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c83133a7e0593bb398eadb92758cbc92c9d65a5 Validity Not Before: Dec 21 15:00:35 2025 GMT Not After : Dec 22 15:00:35 2025 GMT Subject: CN=f8963a4dae2ec87e28e0d12b923ccb7e460512a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:70:b6:30:63:c3:ea:20:70:07:58:c5:68:fb: 04:1b:3e:00:ea:94:85:1b:e4:42:fa:9f:d3:ef:f0: c6:71:7c:38:81:03:21:ea:6b:9b:9c:b4:5e:f7:41: 50:c9:85:d0:e4:94:36:b0:aa:c6:b8:4a:9b:f5:1a: a8:0b:32:ca:e4:0c:c9:4d:8e:07:20:af:68:29:92: d2:dc:10:d6:1a:81:77:1b:d7:0a:cf:5b:09:f7:ca: f6:31:9f:e1:40:1e:79:4d:17:84:46:d9:f1:9e:ed: a9:4b:88:e6:a8:de:27:86:b7:c0:a8:29:8b:9a:5a: d1:6b:c7:ec:88:c2:f9:8f:10:95:4f:b4:70:f3:0e: cc:aa:19:20:f3:70:e4:0d:19:77:9e:09:86:19:ee: b0:62:83:8b:29:8a:b8:14:40:bd:e4:1d:8a:9e:dc: 2c:32:2c:c4:9c:ff:40:3d:e1:41:db:65:3f:8e:ef: 04:4d:3a:09:3a:68:50:43:a1:ca:f5:ec:3b:dd:3c: f6:fa:98:62:f0:7d:9a:90:70:7d:fc:3b:ea:f2:a0: 56:7e:a0:ca:5c:14:6d:91:e7:07:49:60:be:63:d6: 23:49:9a:a3:af:97:9d:4b:bb:ae:dd:db:00:89:1e: ae:86:7a:8c:81:a4:ff:72:71:ee:6c:ff:aa:29:bd: 9e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:96:3A:4D:AE:2E:C8:7E:28:E0:D1:2B:92:3C:CB:7E:46:05:12:A6 X509v3 Authority Key Identifier: keyid:9C:83:13:3A:7E:05:93:BB:39:8E:AD:B9:27:58:CB:C9:2C:9D:65:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nIMTOn4Fk7s5jq25J1jLySydZaU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/eda15a-0423-46bd-b32a-52147aae0eb4/1/nIMTOn4Fk7s5jq25J1jLySydZaU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/eda15a-0423-46bd-b32a-52147aae0eb4/1/nIMTOn4Fk7s5jq25J1jLySydZaU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:b6:9e:bb:b5:f0:76:6a:38:a8:f0:cb:73:2a:ed:83:bb:be: 24:5d:c5:49:de:0c:09:d5:c2:53:2a:4b:62:4a:d9:d9:ee:62: 6f:79:58:b0:f7:21:c1:1d:c1:84:ff:16:60:75:d1:e6:28:d2: c5:38:f0:b2:bd:8f:b7:e7:01:07:ee:41:21:99:af:eb:f6:b1: 05:2d:80:fb:52:29:35:a7:81:0c:48:f4:83:05:74:2b:97:c1: ca:32:28:ca:ce:ae:69:5f:11:4b:74:2f:8b:d8:3f:2d:e2:28: 12:8c:ca:0e:75:80:e7:9f:54:7c:b2:76:72:ea:84:06:06:fe: de:bd:4a:e0:2b:12:6a:15:60:fe:f7:ee:d3:e6:dd:0c:e6:6b: 99:5d:ce:08:3c:6d:32:0d:4b:d8:16:2a:dd:33:37:54:1a:98: b0:b5:9d:ad:a0:fb:2f:ed:48:af:ab:a4:c8:f5:d4:de:3b:e7: 61:61:9e:7b:2d:27:c0:2e:7b:c5:ee:4d:aa:26:c7:c4:d2:72: fc:38:b8:29:f5:ce:8a:43:9a:34:17:56:1e:91:7e:cc:f4:71: f3:f4:48:0a:9f:80:2e:1e:96:04:5d:59:8e:bf:7d:6a:b6:a1: 02:48:75:7a:bd:c6:0d:14:f7:51:66:5a:54:76:be:09:60:0a: 8a:e9:63:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBbTfWVHcIU/GOcPyFYOsaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljODMxMzNhN2UwNTkzYmIzOThlYWRiOTI3NThjYmM5MmM5 ZDY1YTUwHhcNMjUxMjIxMTUwMDM1WhcNMjUxMjIyMTUwMDM1WjAzMTEwLwYDVQQD EyhmODk2M2E0ZGFlMmVjODdlMjhlMGQxMmI5MjNjY2I3ZTQ2MDUxMmE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA53C2MGPD6iBwB1jFaPsEGz4A6pSF G+RC+p/T7/DGcXw4gQMh6mubnLRe90FQyYXQ5JQ2sKrGuEqb9RqoCzLK5AzJTY4H IK9oKZLS3BDWGoF3G9cKz1sJ98r2MZ/hQB55TReERtnxnu2pS4jmqN4nhrfAqCmL mlrRa8fsiML5jxCVT7Rw8w7Mqhkg83DkDRl3ngmGGe6wYoOLKYq4FEC95B2Kntws MizEnP9APeFB22U/ju8ETToJOmhQQ6HK9ew73Tz2+phi8H2akHB9/Dvq8qBWfqDK XBRtkecHSWC+Y9YjSZqjr5edS7uu3dsAiR6uhnqMgaT/cnHubP+qKb2efQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPiWOk2uLsh+KODRK5I8y35GBRKmMB8GA1UdIwQY MBaAFJyDEzp+BZO7OY6tuSdYy8ksnWWlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbklNVE9uNEZrN3M1anEyNUoxakx5U3lkWmFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9lZGExNWEtMDQyMy00NmJkLWIzMmEt NTIxNDdhYWUwZWI0LzEvbklNVE9uNEZrN3M1anEyNUoxakx5U3lkWmFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi9lZGExNWEtMDQyMy00NmJkLWIzMmEtNTIxNDdhYWUwZWI0 LzEvbklNVE9uNEZrN3M1anEyNUoxakx5U3lkWmFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZbaeu7Xw dmo4qPDLcyrtg7u+JF3FSd4MCdXCUypLYkrZ2e5ib3lYsPchwR3BhP8WYHXR5ijS xTjwsr2Pt+cBB+5BIZmv6/axBS2A+1IpNaeBDEj0gwV0K5fByjIoys6uaV8RS3Qv i9g/LeIoEozKDnWA559UfLJ2cuqEBgb+3r1K4CsSahVg/vfu0+bdDOZrmV3OCDxt Mg1L2BYq3TM3VBqYsLWdraD7L+1Ir6ukyPXU3jvnYWGeey0nwC57xe5NqibHxNJy /Di4KfXOikOaNBdWHpF+zPRx8/RICp+ALh6WBF1Zjr99arahAkh1er3GDRT3UWZa VHa+CWAKiuljEg== -----END CERTIFICATE-----Generated at Sun Dec 21 19:49:50 2025 by rpki-client