This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/No41oF8nB7WnQcKnL15Ls0ybCag.mft File: No41oF8nB7WnQcKnL15Ls0ybCag.mft (raw, json) Hash identifier: 5FcGoyqc+xuEeG/QAnYpMKCX23aq5anDhXwa8l1djcQ= Subject key identifier: F9:A4:CA:82:C3:17:F8:C9:ED:9D:C8:B3:93:C7:0B:1C:7C:F2:EB:2E Authority key identifier: 36:8E:35:A0:5F:27:07:B5:A7:41:C2:A7:2F:5E:4B:B3:4C:9B:09:A8 Certificate issuer: /CN=368e35a05f2707b5a741c2a72f5e4bb34c9b09a8 Certificate serial: 019B3C46C7C6030C12FB37FF9A982BFD29F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/No41oF8nB7WnQcKnL15Ls0ybCag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/No41oF8nB7WnQcKnL15Ls0ybCag.mft Manifest number: 1786 Signing time: Sat 20 Dec 2025 15:00:30 +0000 Manifest this update: Sat 20 Dec 2025 15:00:30 +0000 Manifest next update: Sun 21 Dec 2025 15:00:30 +0000 Files and hashes: 1: L7FYC8e89xGKnty6O1mK_Gb2H5U.roa (hash: McrAWYa182W0VDulttkCRb8Sku8UBSHS1nLFi0h9Euw=) 2: No41oF8nB7WnQcKnL15Ls0ybCag.crl (hash: SJqyrYqcYidAL4DJGHzbJMN0AsTaSqRuQBylTP6X8rs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/No41oF8nB7WnQcKnL15Ls0ybCag.crl rsync://rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/No41oF8nB7WnQcKnL15Ls0ybCag.mft rsync://rpki.ripe.net/repository/DEFAULT/No41oF8nB7WnQcKnL15Ls0ybCag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:46:c7:c6:03:0c:12:fb:37:ff:9a:98:2b:fd:29:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=368e35a05f2707b5a741c2a72f5e4bb34c9b09a8 Validity Not Before: Dec 20 15:00:30 2025 GMT Not After : Dec 21 15:00:30 2025 GMT Subject: CN=f9a4ca82c317f8c9ed9dc8b393c70b1c7cf2eb2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:35:8c:00:cb:14:51:30:fb:47:48:ca:f9:f0: d9:35:0a:7a:f6:55:33:71:30:a4:f0:48:75:ba:0b: 16:fb:0d:d4:a9:7d:d2:94:2e:d8:5a:33:d8:88:cd: 4a:d1:36:9e:44:ed:b5:12:84:bb:07:b8:82:02:18: 7b:f2:65:6c:67:64:75:f5:40:15:29:cc:32:a4:d7: 98:4d:36:5a:a2:35:bb:e3:28:7f:1d:8d:cb:5d:1e: 1a:f2:93:20:91:02:12:1f:60:1d:59:59:45:a5:57: eb:42:31:01:fd:62:bc:2f:8d:7e:1b:d3:9d:5a:42: 7b:38:a0:12:31:36:76:69:04:6f:35:2b:37:25:4a: 37:b0:17:82:df:c4:b0:d8:a0:e7:08:3f:ec:6e:1c: 99:e6:84:4f:23:20:8f:48:86:ae:29:f6:d8:82:b5: e5:5e:e7:46:c9:e2:2d:89:78:8f:00:e9:64:43:8b: 94:82:96:f4:4a:a8:83:f7:8e:4e:c8:ad:d3:4a:58: d3:7a:2a:cb:1c:01:81:8e:21:1d:8f:23:5e:ac:24: 69:1c:1e:18:ad:d4:60:6e:a4:d9:0d:67:6b:6f:c0: 24:ea:5e:95:db:ea:7b:9d:b0:64:14:2a:ee:40:03: df:09:79:0e:fc:69:56:4d:24:d5:b5:7d:a3:94:b2: 08:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:A4:CA:82:C3:17:F8:C9:ED:9D:C8:B3:93:C7:0B:1C:7C:F2:EB:2E X509v3 Authority Key Identifier: keyid:36:8E:35:A0:5F:27:07:B5:A7:41:C2:A7:2F:5E:4B:B3:4C:9B:09:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/No41oF8nB7WnQcKnL15Ls0ybCag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/No41oF8nB7WnQcKnL15Ls0ybCag.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/No41oF8nB7WnQcKnL15Ls0ybCag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:48:ed:d1:c8:30:ce:b2:00:6a:0b:fb:4f:b3:71:67:04:26: 46:8e:3a:01:cc:5c:c1:1d:75:64:70:cf:dd:fa:c1:f0:07:26: 98:a0:97:50:8f:b8:80:8f:96:c1:21:37:17:59:23:a5:9d:66: a0:b0:a8:23:96:89:44:f6:2f:f5:95:30:bd:a8:e3:2d:cf:75: 4f:09:af:c8:6d:bb:c0:6a:75:63:ca:d1:a1:3a:19:7e:cd:45: dc:60:3d:e1:30:26:92:53:c9:85:e5:77:85:3f:ef:33:40:8f: 05:0b:66:5e:23:7c:e0:63:45:bb:70:9a:f2:c1:45:16:9c:21: ae:e5:20:e6:0b:a2:93:c2:f9:cd:f1:7e:48:5c:8f:f7:05:1e: 66:4c:5f:8d:e4:53:35:67:31:3c:4f:9d:c3:fd:87:72:f5:33: 47:30:60:5d:77:92:7f:30:ae:cd:eb:59:23:24:54:c1:03:24: 15:29:e4:f8:d6:cb:7a:c8:c7:16:eb:88:cb:c4:44:3d:57:20: cc:a4:68:39:4d:31:20:a0:51:8c:78:81:ec:ff:c1:0a:e5:ff: ba:66:c4:47:e0:aa:d0:89:3c:d6:d1:bc:9d:ed:98:2e:d7:77: 53:ea:8e:b6:f3:17:1e:28:93:e7:4a:6f:ae:a1:95:88:fb:c7: 8f:91:27:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8RsfGAwwS+zf/mpgr/Sn4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2OGUzNWEwNWYyNzA3YjVhNzQxYzJhNzJmNWU0YmIzNGM5 YjA5YTgwHhcNMjUxMjIwMTUwMDMwWhcNMjUxMjIxMTUwMDMwWjAzMTEwLwYDVQQD EyhmOWE0Y2E4MmMzMTdmOGM5ZWQ5ZGM4YjM5M2M3MGIxYzdjZjJlYjJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1jWMAMsUUTD7R0jK+fDZNQp69lUz cTCk8Eh1ugsW+w3UqX3SlC7YWjPYiM1K0TaeRO21EoS7B7iCAhh78mVsZ2R19UAV KcwypNeYTTZaojW74yh/HY3LXR4a8pMgkQISH2AdWVlFpVfrQjEB/WK8L41+G9Od WkJ7OKASMTZ2aQRvNSs3JUo3sBeC38Sw2KDnCD/sbhyZ5oRPIyCPSIauKfbYgrXl XudGyeItiXiPAOlkQ4uUgpb0SqiD945OyK3TSljTeirLHAGBjiEdjyNerCRpHB4Y rdRgbqTZDWdrb8Ak6l6V2+p7nbBkFCruQAPfCXkO/GlWTSTVtX2jlLIIIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPmkyoLDF/jJ7Z3Is5PHCxx88usuMB8GA1UdIwQY MBaAFDaONaBfJwe1p0HCpy9eS7NMmwmoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTm80MW9GOG5CN1duUWNLbkwxNUxzMHliQ2FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9iYjU0ZDEtODkyZC00NzExLWE5Y2Yt NzZmMTM1YzRmMzExLzEvTm80MW9GOG5CN1duUWNLbkwxNUxzMHliQ2FnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS9iYjU0ZDEtODkyZC00NzExLWE5Y2YtNzZmMTM1YzRmMzEx LzEvTm80MW9GOG5CN1duUWNLbkwxNUxzMHliQ2FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApUjt0cgw zrIAagv7T7NxZwQmRo46AcxcwR11ZHDP3frB8AcmmKCXUI+4gI+WwSE3F1kjpZ1m oLCoI5aJRPYv9ZUwvajjLc91TwmvyG27wGp1Y8rRoToZfs1F3GA94TAmklPJheV3 hT/vM0CPBQtmXiN84GNFu3Ca8sFFFpwhruUg5guik8L5zfF+SFyP9wUeZkxfjeRT NWcxPE+dw/2HcvUzRzBgXXeSfzCuzetZIyRUwQMkFSnk+NbLesjHFuuIy8REPVcg zKRoOU0xIKBRjHiB7P/BCuX/umbER+Cq0Ik81tG8ne2YLtd3U+qOtvMXHiiT50pv rqGViPvHj5En1w== -----END CERTIFICATE-----Generated at Sat Dec 20 21:15:55 2025 by rpki-client