This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/2b5e0d-19a9-4036-98b6-ca65a9723c59/1/nEbB13YgBThO2FJs-hx0llZPUNM.mft File: nEbB13YgBThO2FJs-hx0llZPUNM.mft (raw, json) Hash identifier: /xJ6RTE6KGLUMO/hQ5/J32MvVzzDD4b+eFFh8vm+hWo= Subject key identifier: BE:DA:6C:A2:81:AC:AC:9E:6B:B5:A1:47:F1:49:32:AB:20:FD:C3:82 Authority key identifier: 9C:46:C1:D7:76:20:05:38:4E:D8:52:6C:FA:1C:74:96:56:4F:50:D3 Certificate issuer: /CN=9c46c1d7762005384ed8526cfa1c7496564f50d3 Certificate serial: 019B5A516B9B34970A947DBF085100AC0E75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nEbB13YgBThO2FJs-hx0llZPUNM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/2b5e0d-19a9-4036-98b6-ca65a9723c59/1/nEbB13YgBThO2FJs-hx0llZPUNM.mft Manifest number: 0630 Signing time: Fri 26 Dec 2025 11:00:43 +0000 Manifest this update: Fri 26 Dec 2025 11:00:43 +0000 Manifest next update: Sat 27 Dec 2025 11:00:43 +0000 Files and hashes: 1: nEbB13YgBThO2FJs-hx0llZPUNM.crl (hash: r21JwK+UDOUL6pnLGpP1pE+s2IH2doWrBE1SG2BD29I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/2b5e0d-19a9-4036-98b6-ca65a9723c59/1/nEbB13YgBThO2FJs-hx0llZPUNM.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/2b5e0d-19a9-4036-98b6-ca65a9723c59/1/nEbB13YgBThO2FJs-hx0llZPUNM.mft rsync://rpki.ripe.net/repository/DEFAULT/nEbB13YgBThO2FJs-hx0llZPUNM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:6b:9b:34:97:0a:94:7d:bf:08:51:00:ac:0e:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c46c1d7762005384ed8526cfa1c7496564f50d3 Validity Not Before: Dec 26 11:00:43 2025 GMT Not After : Dec 27 11:00:43 2025 GMT Subject: CN=beda6ca281acac9e6bb5a147f14932ab20fdc382 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c3:95:ec:3d:80:b9:22:bf:34:14:ba:7e:b4: 3b:48:e7:eb:fa:ed:ce:31:82:0a:98:e4:07:54:5c: 45:13:a6:0f:89:27:8e:4d:17:1d:d5:82:e0:fa:b9: bd:2b:87:b4:b9:a2:dd:ca:01:8b:84:b2:64:e4:a9: c4:74:f8:1a:f3:68:6a:ab:d6:97:18:73:13:be:56: 64:eb:06:7b:71:e4:4e:ad:f2:8a:0f:89:78:6d:d2: 19:79:1d:4e:4b:1b:11:ba:65:91:be:86:8a:12:e8: 0c:bc:42:d8:d5:79:57:57:1d:8e:55:0b:91:d7:bc: 7b:c9:1c:82:d0:b7:b0:12:31:3c:b2:26:78:1e:5f: ba:62:e2:71:10:55:44:a7:6d:68:69:e3:99:fd:84: 07:da:c1:da:5e:3e:f1:9b:a0:f5:ad:89:22:75:45: 63:51:fa:aa:f9:08:ad:73:84:8d:65:11:27:e3:fb: da:26:89:16:c1:8c:f5:1b:5b:9d:6b:f4:23:92:36: 95:3c:79:f1:2b:6f:a8:18:bf:de:eb:74:c0:c5:ee: 33:aa:04:87:90:cb:f5:ed:49:f0:24:36:8f:bc:5d: a9:31:01:6b:68:5e:5b:27:5a:71:27:76:32:6f:15: dc:a0:4e:ac:13:ab:b5:65:3f:4e:8d:e2:80:ac:f6: f7:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:DA:6C:A2:81:AC:AC:9E:6B:B5:A1:47:F1:49:32:AB:20:FD:C3:82 X509v3 Authority Key Identifier: keyid:9C:46:C1:D7:76:20:05:38:4E:D8:52:6C:FA:1C:74:96:56:4F:50:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nEbB13YgBThO2FJs-hx0llZPUNM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2b5e0d-19a9-4036-98b6-ca65a9723c59/1/nEbB13YgBThO2FJs-hx0llZPUNM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2b5e0d-19a9-4036-98b6-ca65a9723c59/1/nEbB13YgBThO2FJs-hx0llZPUNM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:a7:b0:8a:8c:09:26:35:22:ac:7a:f2:6d:ac:c6:71:c8:82: 81:c6:20:9c:05:80:22:65:23:70:1c:3f:14:72:4b:af:da:f8: 25:d9:ba:a1:05:0d:f3:2f:ec:ae:23:5a:da:3c:08:11:0f:11: 90:81:79:4e:c0:20:31:da:39:cf:7b:f4:30:31:bb:05:57:53: ad:bf:98:89:94:f2:2c:5a:36:0d:84:c4:81:2b:c8:1c:56:5d: a0:f6:0f:93:fb:65:85:f6:83:c7:bb:a3:7e:c6:06:32:d6:cc: 6b:a6:21:a5:55:a2:19:66:ae:1c:11:21:02:72:9f:7f:2a:fd: f7:a9:f3:19:6c:72:de:5d:bf:d2:41:70:42:1a:8f:35:d0:7a: 61:40:90:97:d6:0e:ea:a1:e8:2c:7c:b1:c0:b6:59:4a:0b:e6: a2:3a:9a:9d:86:6b:a2:bb:89:a3:90:1d:99:4c:ae:7f:55:07: 77:1f:69:69:0a:b9:77:21:be:f2:39:a2:82:af:d0:37:52:d0: fe:93:5e:35:df:9e:0c:06:4f:85:05:8a:04:1d:8d:f3:e9:12: fc:92:e8:63:23:70:9c:0d:47:b1:fa:16:18:0c:79:d0:07:df: 6e:f6:80:74:63:be:19:76:61:12:a9:46:db:26:90:a0:8a:36: ef:43:46:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUWubNJcKlH2/CFEArA51MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljNDZjMWQ3NzYyMDA1Mzg0ZWQ4NTI2Y2ZhMWM3NDk2NTY0 ZjUwZDMwHhcNMjUxMjI2MTEwMDQzWhcNMjUxMjI3MTEwMDQzWjAzMTEwLwYDVQQD EyhiZWRhNmNhMjgxYWNhYzllNmJiNWExNDdmMTQ5MzJhYjIwZmRjMzgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMOV7D2AuSK/NBS6frQ7SOfr+u3O MYIKmOQHVFxFE6YPiSeOTRcd1YLg+rm9K4e0uaLdygGLhLJk5KnEdPga82hqq9aX GHMTvlZk6wZ7ceROrfKKD4l4bdIZeR1OSxsRumWRvoaKEugMvELY1XlXVx2OVQuR 17x7yRyC0LewEjE8siZ4Hl+6YuJxEFVEp21oaeOZ/YQH2sHaXj7xm6D1rYkidUVj Ufqq+Qitc4SNZREn4/vaJokWwYz1G1uda/QjkjaVPHnxK2+oGL/e63TAxe4zqgSH kMv17UnwJDaPvF2pMQFraF5bJ1pxJ3YybxXcoE6sE6u1ZT9OjeKArPb3BwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL7abKKBrKyea7WhR/FJMqsg/cOCMB8GA1UdIwQY MBaAFJxGwdd2IAU4TthSbPocdJZWT1DTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkViQjEzWWdCVGhPMkZKcy1oeDBsbFpQVU5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8yYjVlMGQtMTlhOS00MDM2LTk4YjYt Y2E2NWE5NzIzYzU5LzEvbkViQjEzWWdCVGhPMkZKcy1oeDBsbFpQVU5NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC8yYjVlMGQtMTlhOS00MDM2LTk4YjYtY2E2NWE5NzIzYzU5 LzEvbkViQjEzWWdCVGhPMkZKcy1oeDBsbFpQVU5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEqewiowJ JjUirHrybazGcciCgcYgnAWAImUjcBw/FHJLr9r4Jdm6oQUN8y/sriNa2jwIEQ8R kIF5TsAgMdo5z3v0MDG7BVdTrb+YiZTyLFo2DYTEgSvIHFZdoPYPk/tlhfaDx7uj fsYGMtbMa6YhpVWiGWauHBEhAnKffyr996nzGWxy3l2/0kFwQhqPNdB6YUCQl9YO 6qHoLHyxwLZZSgvmojqanYZroruJo5AdmUyuf1UHdx9paQq5dyG+8jmigq/QN1LQ /pNeNd+eDAZPhQWKBB2N8+kS/JLoYyNwnA1HsfoWGAx50AffbvaAdGO+GXZhEqlG 2yaQoIo270NGIg== -----END CERTIFICATE-----Generated at Fri Dec 26 15:43:39 2025 by rpki-client