This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/dcb613-93eb-4e86-895b-b1e698708f59/1/nJB6oEaogfuAUFGVIBYwYCYNfzE.mft File: nJB6oEaogfuAUFGVIBYwYCYNfzE.mft (raw, json) Hash identifier: FsA4Q/M+7Teck57y5lDElorsxD7jx+U6PKDc01bH9Xc= Subject key identifier: EB:B8:C4:61:FC:28:47:24:D5:63:2D:D3:D2:DE:A0:02:94:D2:1E:72 Authority key identifier: 9C:90:7A:A0:46:A8:81:FB:80:50:51:95:20:16:30:60:26:0D:7F:31 Certificate issuer: /CN=9c907aa046a881fb8050519520163060260d7f31 Certificate serial: 019B12A6EB1760E60EC83166D6D9600B88E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nJB6oEaogfuAUFGVIBYwYCYNfzE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/dcb613-93eb-4e86-895b-b1e698708f59/1/nJB6oEaogfuAUFGVIBYwYCYNfzE.mft Manifest number: 034D Signing time: Fri 12 Dec 2025 13:01:27 +0000 Manifest this update: Fri 12 Dec 2025 13:01:27 +0000 Manifest next update: Sat 13 Dec 2025 13:01:27 +0000 Files and hashes: 1: F86xC6xwpLDuhs7A8wZygejUMX8.roa (hash: hqY5dyyDkeBwJW2ZEKNHXzfFF8UT2R+EbGGyWHizujw=) 2: nJB6oEaogfuAUFGVIBYwYCYNfzE.crl (hash: eaP1axMK4KEsdD2ahnDCml2N+j1ghg0EA/lamX9XhlA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/dcb613-93eb-4e86-895b-b1e698708f59/1/nJB6oEaogfuAUFGVIBYwYCYNfzE.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/dcb613-93eb-4e86-895b-b1e698708f59/1/nJB6oEaogfuAUFGVIBYwYCYNfzE.mft rsync://rpki.ripe.net/repository/DEFAULT/nJB6oEaogfuAUFGVIBYwYCYNfzE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:a6:eb:17:60:e6:0e:c8:31:66:d6:d9:60:0b:88:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c907aa046a881fb8050519520163060260d7f31 Validity Not Before: Dec 12 13:01:27 2025 GMT Not After : Dec 13 13:01:27 2025 GMT Subject: CN=ebb8c461fc284724d5632dd3d2dea00294d21e72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b8:13:53:19:a1:12:b3:47:09:19:ed:07:2d: b3:64:12:84:92:00:be:e5:f9:62:8b:f9:dd:40:9f: 58:56:7f:ac:7d:40:5b:3f:6d:f1:f0:c2:7b:9b:23: 6c:22:e3:24:1e:12:e2:2e:f3:81:78:80:02:94:ac: 20:91:44:7b:d7:f7:e9:0e:6f:e6:73:73:2e:76:f1: e1:73:fc:b5:e3:f7:4c:47:bd:87:e3:1b:48:92:16: 42:df:41:87:64:a5:65:ea:f8:70:f2:d0:8b:33:0e: d8:f6:aa:07:30:18:3a:59:80:3e:a3:5a:36:30:55: d5:cf:92:6c:37:c9:cb:8f:32:5a:63:15:2a:32:53: 01:a5:e4:00:1b:25:1a:c3:65:01:80:bb:22:8d:7e: 7a:9c:b0:bd:ea:12:1a:f8:5e:32:1a:e5:56:a6:fb: 4b:66:a2:23:18:0a:65:a2:c7:01:ab:04:b4:f3:08: 71:aa:3f:11:4d:d8:3f:27:9c:ed:f8:6c:33:a4:06: 28:dd:dd:23:72:47:98:86:6f:13:ac:70:45:46:6a: 4e:24:aa:7a:55:1c:d3:b9:1d:87:76:98:d3:cc:df: 73:51:04:84:cf:19:27:e2:15:cc:af:64:b8:e3:1e: 93:f5:aa:83:41:41:2d:40:59:b0:c5:08:1d:e4:d1: f6:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:B8:C4:61:FC:28:47:24:D5:63:2D:D3:D2:DE:A0:02:94:D2:1E:72 X509v3 Authority Key Identifier: keyid:9C:90:7A:A0:46:A8:81:FB:80:50:51:95:20:16:30:60:26:0D:7F:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJB6oEaogfuAUFGVIBYwYCYNfzE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/dcb613-93eb-4e86-895b-b1e698708f59/1/nJB6oEaogfuAUFGVIBYwYCYNfzE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/dcb613-93eb-4e86-895b-b1e698708f59/1/nJB6oEaogfuAUFGVIBYwYCYNfzE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:8b:73:65:d0:8d:fb:03:35:65:af:66:e1:34:4d:f0:cd:9e: e2:de:a8:e5:4d:fe:9b:3f:d9:f2:b9:3f:33:59:c4:6c:60:58: 08:00:40:5a:69:1a:a9:77:0e:33:cc:d6:8b:42:a9:1f:68:50: 81:11:a8:6e:39:4b:89:58:56:92:a7:4b:25:28:c0:d7:5e:ab: f4:c9:94:c6:d8:d1:ce:94:22:af:87:09:af:2d:0e:f8:51:f7: 58:ec:08:e3:10:ba:a6:c2:f9:ed:eb:a2:64:c9:6a:3b:dd:0c: c5:aa:29:67:3c:6d:15:cc:97:47:57:aa:c9:95:1c:a2:9b:15: fb:32:b7:32:f8:43:bc:b4:c5:2a:a1:01:12:e8:a5:e1:7b:5d: c3:82:66:48:80:17:86:33:cb:c3:65:1e:b5:02:8a:6f:d8:68: 0c:81:5b:3d:65:92:89:3d:1e:10:c9:2c:5b:7e:bb:01:24:a7: 62:da:b9:9a:73:cc:ec:c4:ad:a4:46:38:8d:0e:9b:e3:72:58: ef:4f:03:ed:70:3a:a7:94:d2:3e:94:1f:e8:7a:22:44:86:ee: 28:32:de:8c:59:f1:62:2c:79:47:1a:d9:59:92:49:b5:ed:6c: 52:8a:e2:9a:b8:ce:7c:08:50:04:0e:8c:68:59:fc:cb:60:fa: 68:2f:40:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsSpusXYOYOyDFm1tlgC4jlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljOTA3YWEwNDZhODgxZmI4MDUwNTE5NTIwMTYzMDYwMjYw ZDdmMzEwHhcNMjUxMjEyMTMwMTI3WhcNMjUxMjEzMTMwMTI3WjAzMTEwLwYDVQQD EyhlYmI4YzQ2MWZjMjg0NzI0ZDU2MzJkZDNkMmRlYTAwMjk0ZDIxZTcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7gTUxmhErNHCRntBy2zZBKEkgC+ 5flii/ndQJ9YVn+sfUBbP23x8MJ7myNsIuMkHhLiLvOBeIAClKwgkUR71/fpDm/m c3MudvHhc/y14/dMR72H4xtIkhZC30GHZKVl6vhw8tCLMw7Y9qoHMBg6WYA+o1o2 MFXVz5JsN8nLjzJaYxUqMlMBpeQAGyUaw2UBgLsijX56nLC96hIa+F4yGuVWpvtL ZqIjGAploscBqwS08whxqj8RTdg/J5zt+GwzpAYo3d0jckeYhm8TrHBFRmpOJKp6 VRzTuR2HdpjTzN9zUQSEzxkn4hXMr2S44x6T9aqDQUEtQFmwxQgd5NH2mwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOu4xGH8KEck1WMt09LeoAKU0h5yMB8GA1UdIwQY MBaAFJyQeqBGqIH7gFBRlSAWMGAmDX8xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkpCNm9FYW9nZnVBVUZHVklCWXdZQ1lOZnpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9kY2I2MTMtOTNlYi00ZTg2LTg5NWIt YjFlNjk4NzA4ZjU5LzEvbkpCNm9FYW9nZnVBVUZHVklCWXdZQ1lOZnpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9kY2I2MTMtOTNlYi00ZTg2LTg5NWItYjFlNjk4NzA4ZjU5 LzEvbkpCNm9FYW9nZnVBVUZHVklCWXdZQ1lOZnpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfItzZdCN +wM1Za9m4TRN8M2e4t6o5U3+mz/Z8rk/M1nEbGBYCABAWmkaqXcOM8zWi0KpH2hQ gRGobjlLiVhWkqdLJSjA116r9MmUxtjRzpQir4cJry0O+FH3WOwI4xC6psL57eui ZMlqO90MxaopZzxtFcyXR1eqyZUcopsV+zK3MvhDvLTFKqEBEuil4Xtdw4JmSIAX hjPLw2UetQKKb9hoDIFbPWWSiT0eEMksW367ASSnYtq5mnPM7MStpEY4jQ6b43JY 708D7XA6p5TSPpQf6HoiRIbuKDLejFnxYix5RxrZWZJJte1sUorimrjOfAhQBA6M aFn8y2D6aC9Asw== -----END CERTIFICATE-----Generated at Fri Dec 12 18:15:09 2025 by rpki-client