This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.mft File: b-NJEELvMdzG4K2OVcvhSd0MMYI.mft (raw, json) Hash identifier: o4j95P0If7T+rBxbTJa6M3kQZg1EpwZSp2mMfTb1j/8= Subject key identifier: C1:D0:72:86:08:81:7C:6B:20:1F:0A:58:EA:1E:6D:D2:45:2F:E5:46 Authority key identifier: 6F:E3:49:10:42:EF:31:DC:C6:E0:AD:8E:55:CB:E1:49:DD:0C:31:82 Certificate issuer: /CN=6fe3491042ef31dcc6e0ad8e55cbe149dd0c3182 Certificate serial: 019B0E267E8A2F128A39B25845F967CE1C1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b-NJEELvMdzG4K2OVcvhSd0MMYI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.mft Manifest number: 0F37 Signing time: Thu 11 Dec 2025 16:02:42 +0000 Manifest this update: Thu 11 Dec 2025 16:02:42 +0000 Manifest next update: Fri 12 Dec 2025 16:02:42 +0000 Files and hashes: 1: ZIja49CzE0s2C9AlBaxxTa5EnBc.roa (hash: Mwwwh5zbLqqLKLq4mDwCxjzrltfztiX/y2yTkp5xrGs=) 2: b-NJEELvMdzG4K2OVcvhSd0MMYI.crl (hash: fAbq1PcNVa/RwObjH/vY9d4TdDwh8F+ycSmgpBKnKuY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.mft rsync://rpki.ripe.net/repository/DEFAULT/b-NJEELvMdzG4K2OVcvhSd0MMYI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:26:7e:8a:2f:12:8a:39:b2:58:45:f9:67:ce:1c:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6fe3491042ef31dcc6e0ad8e55cbe149dd0c3182 Validity Not Before: Dec 11 16:02:42 2025 GMT Not After : Dec 12 16:02:42 2025 GMT Subject: CN=c1d0728608817c6b201f0a58ea1e6dd2452fe546 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:96:7d:6f:4e:be:6c:d8:46:e4:61:96:5f:97: 5f:16:8c:8b:69:2b:fa:b3:20:40:dc:3a:6d:60:31: 88:47:99:aa:5b:b9:aa:e1:03:8f:0c:bb:ea:5a:05: 04:68:e5:e7:3e:8d:c3:7a:16:57:39:6d:5c:84:0f: ec:9a:88:28:1b:bc:f7:ba:7d:bf:16:d0:7e:f2:c4: 07:4c:e9:dd:90:8d:a2:20:97:c2:4d:6c:24:bf:24: 74:de:a7:ca:df:9f:37:8c:18:0a:52:6e:84:1f:ed: 0b:4b:dd:b1:ab:61:4e:2e:af:e3:ab:48:a7:51:fe: 8d:df:d2:f2:46:88:4b:4d:9b:50:45:e9:72:b1:c2: d4:72:9e:b6:e2:55:97:59:1b:5f:a9:de:83:29:a7: bc:c7:f9:26:6f:98:db:77:28:64:31:4f:6f:84:06: a0:1f:f8:f3:cc:a2:98:3a:c7:e8:0c:ad:eb:87:0d: 4f:e2:dd:13:f1:72:0d:64:c5:ef:4d:6b:43:ca:17: 18:ea:1e:5a:76:b3:1e:b3:ea:fc:23:e5:21:ef:09: 85:51:b0:f0:21:6b:5a:22:8b:a2:02:e9:88:87:a5: ff:62:15:9a:3c:05:58:c0:32:c6:af:6a:81:de:5b: fd:95:cc:d4:da:ae:be:cb:1d:67:da:90:c4:13:09: 7a:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:D0:72:86:08:81:7C:6B:20:1F:0A:58:EA:1E:6D:D2:45:2F:E5:46 X509v3 Authority Key Identifier: keyid:6F:E3:49:10:42:EF:31:DC:C6:E0:AD:8E:55:CB:E1:49:DD:0C:31:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b-NJEELvMdzG4K2OVcvhSd0MMYI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:6e:67:a1:82:16:7f:f3:42:0b:72:5f:df:ae:ee:26:ef:55: cb:29:87:d6:dd:a0:54:ee:9f:e9:bb:bd:d7:97:dc:f4:0d:a2: 58:2d:2f:e3:98:6c:f8:1f:c8:db:7c:89:0c:af:37:25:8b:e3: ce:a5:42:c0:e3:ab:24:1b:37:82:ce:a0:2a:ed:9b:ba:d5:24: 35:83:f5:c2:4b:f3:36:cd:7f:f4:e3:e8:4f:4f:a0:06:50:06: 7e:76:aa:4b:64:68:70:92:96:7e:94:ca:59:c4:d3:79:9e:d5: 11:01:d8:a1:6f:6e:79:79:ce:4d:e0:38:87:07:43:fa:57:c1: 8c:3b:66:a1:64:74:ac:6a:45:5c:bd:ad:ca:f4:7a:11:93:e4: 21:56:06:e9:9c:9f:e3:59:91:6f:1b:9f:32:d1:95:87:04:69: 4b:8d:50:54:f1:7c:02:7f:1c:7c:79:66:53:fc:da:ad:b1:68: 45:1f:d5:99:d1:d1:9f:35:eb:9b:a8:3b:92:a4:4c:3b:15:9c: ed:9f:af:fd:e7:dc:d8:35:87:a0:88:91:31:e6:d9:f6:df:d6: d6:75:25:36:b2:be:05:29:39:99:71:17:64:b9:36:49:d4:d7: 52:13:7e:d5:3d:ed:b7:64:d5:55:68:15:a4:f7:18:68:5f:45: 58:ee:1b:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJn6KLxKKObJYRflnzhweMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmZTM0OTEwNDJlZjMxZGNjNmUwYWQ4ZTU1Y2JlMTQ5ZGQw YzMxODIwHhcNMjUxMjExMTYwMjQyWhcNMjUxMjEyMTYwMjQyWjAzMTEwLwYDVQQD EyhjMWQwNzI4NjA4ODE3YzZiMjAxZjBhNThlYTFlNmRkMjQ1MmZlNTQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJZ9b06+bNhG5GGWX5dfFoyLaSv6 syBA3DptYDGIR5mqW7mq4QOPDLvqWgUEaOXnPo3DehZXOW1chA/smogoG7z3un2/ FtB+8sQHTOndkI2iIJfCTWwkvyR03qfK3583jBgKUm6EH+0LS92xq2FOLq/jq0in Uf6N39LyRohLTZtQRelyscLUcp624lWXWRtfqd6DKae8x/kmb5jbdyhkMU9vhAag H/jzzKKYOsfoDK3rhw1P4t0T8XINZMXvTWtDyhcY6h5adrMes+r8I+Uh7wmFUbDw IWtaIouiAumIh6X/YhWaPAVYwDLGr2qB3lv9lczU2q6+yx1n2pDEEwl6awIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMHQcoYIgXxrIB8KWOoebdJFL+VGMB8GA1UdIwQY MBaAFG/jSRBC7zHcxuCtjlXL4UndDDGCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYi1OSkVFTHZNZHpHNEsyT1ZjdmhTZDBNTVlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9mODliZjAtM2Q2Zi00YjRkLWJmNDIt Yzc4YmQyMjhhOTFkLzEvYi1OSkVFTHZNZHpHNEsyT1ZjdmhTZDBNTVlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC9mODliZjAtM2Q2Zi00YjRkLWJmNDItYzc4YmQyMjhhOTFk LzEvYi1OSkVFTHZNZHpHNEsyT1ZjdmhTZDBNTVlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnW5noYIW f/NCC3Jf367uJu9VyymH1t2gVO6f6bu915fc9A2iWC0v45hs+B/I23yJDK83JYvj zqVCwOOrJBs3gs6gKu2butUkNYP1wkvzNs1/9OPoT0+gBlAGfnaqS2RocJKWfpTK WcTTeZ7VEQHYoW9ueXnOTeA4hwdD+lfBjDtmoWR0rGpFXL2tyvR6EZPkIVYG6Zyf 41mRbxufMtGVhwRpS41QVPF8An8cfHlmU/zarbFoRR/VmdHRnzXrm6g7kqRMOxWc 7Z+v/efc2DWHoIiRMebZ9t/W1nUlNrK+BSk5mXEXZLk2SdTXUhN+1T3tt2TVVWgV pPcYaF9FWO4b3w== -----END CERTIFICATE-----Generated at Thu Dec 11 22:42:37 2025 by rpki-client