This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/cbb741-b692-4f09-8cba-c6aec68ab364/1/NhF6aBWpGEeNP4wA1nGlcWa_7so.mft File: NhF6aBWpGEeNP4wA1nGlcWa_7so.mft (raw, json) Hash identifier: G4v7mN5vqltXu/dPqziOmyBCsR53/IGcn4WrodUNsjo= Subject key identifier: E2:FF:AF:CA:EB:0A:0A:F4:B8:14:AE:11:12:13:79:CB:93:30:F4:C5 Authority key identifier: 36:11:7A:68:15:A9:18:47:8D:3F:8C:00:D6:71:A5:71:66:BF:EE:CA Certificate issuer: /CN=36117a6815a918478d3f8c00d671a57166bfeeca Certificate serial: 019B687B15456474B2F5A2288512255090D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhF6aBWpGEeNP4wA1nGlcWa_7so.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/cbb741-b692-4f09-8cba-c6aec68ab364/1/NhF6aBWpGEeNP4wA1nGlcWa_7so.mft Manifest number: 0838 Signing time: Mon 29 Dec 2025 05:00:55 +0000 Manifest this update: Mon 29 Dec 2025 05:00:55 +0000 Manifest next update: Tue 30 Dec 2025 05:00:55 +0000 Files and hashes: 1: NhF6aBWpGEeNP4wA1nGlcWa_7so.crl (hash: 0FWibrmH1R9TO8D0lv29L6gcjf26G6jW9CgoDTHlUGg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/cbb741-b692-4f09-8cba-c6aec68ab364/1/NhF6aBWpGEeNP4wA1nGlcWa_7so.crl rsync://rpki.ripe.net/repository/DEFAULT/18/cbb741-b692-4f09-8cba-c6aec68ab364/1/NhF6aBWpGEeNP4wA1nGlcWa_7so.mft rsync://rpki.ripe.net/repository/DEFAULT/NhF6aBWpGEeNP4wA1nGlcWa_7so.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 05:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:68:7b:15:45:64:74:b2:f5:a2:28:85:12:25:50:90:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36117a6815a918478d3f8c00d671a57166bfeeca Validity Not Before: Dec 29 05:00:55 2025 GMT Not After : Dec 30 05:00:55 2025 GMT Subject: CN=e2ffafcaeb0a0af4b814ae11121379cb9330f4c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:eb:f9:87:86:4d:79:da:7a:8e:46:80:e8:b1: 5a:bd:ad:8c:c5:45:6d:99:e1:fb:07:84:21:61:15: de:ca:b9:09:e0:60:20:1c:d5:c4:10:cc:70:b3:2c: e6:76:80:28:62:4b:23:6d:fe:99:22:62:44:a4:00: 74:af:4b:ef:7a:ca:03:ec:c9:ab:73:85:55:c0:e2: c4:9d:18:2e:68:40:63:fd:65:da:80:a4:53:f6:61: 02:ad:97:10:18:1d:0d:96:79:8a:17:fe:85:32:cd: b2:10:a8:7a:0a:a2:51:26:ed:d2:e5:55:a6:5c:10: d6:0e:3c:52:cc:40:81:94:5b:46:4b:a6:ce:b7:ef: 2c:9a:66:54:60:6a:7f:26:aa:08:7b:25:68:18:c4: 4b:34:de:0d:ce:0b:e3:8f:00:a1:c8:3a:6b:1c:63: 2c:d5:1c:da:84:1c:58:62:40:da:92:b1:11:fb:a6: 23:70:08:bc:05:01:32:bb:28:98:d6:6b:b5:ca:60: f2:d8:6c:01:9d:85:a8:9c:74:c3:fa:e1:5f:c3:7e: ea:05:5f:f8:0c:17:1e:7f:d5:1c:6b:ce:45:c6:30: dc:22:98:12:f2:6f:44:d8:32:f7:4f:71:bb:86:3b: 6b:a2:bc:80:09:76:79:51:45:b9:62:11:47:5b:a3: 9b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:FF:AF:CA:EB:0A:0A:F4:B8:14:AE:11:12:13:79:CB:93:30:F4:C5 X509v3 Authority Key Identifier: keyid:36:11:7A:68:15:A9:18:47:8D:3F:8C:00:D6:71:A5:71:66:BF:EE:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhF6aBWpGEeNP4wA1nGlcWa_7so.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cbb741-b692-4f09-8cba-c6aec68ab364/1/NhF6aBWpGEeNP4wA1nGlcWa_7so.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cbb741-b692-4f09-8cba-c6aec68ab364/1/NhF6aBWpGEeNP4wA1nGlcWa_7so.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:76:94:5d:9e:10:30:06:ad:de:01:a3:07:d0:77:d0:03:a6: 18:73:15:0f:ed:0f:7b:31:95:66:a5:87:0a:04:3c:78:27:96: 94:b0:d8:2c:32:12:41:88:41:a5:b5:5c:be:10:79:60:67:51: 52:0b:2b:b1:cb:b5:45:fa:0e:a9:45:d0:62:e7:ab:0f:4a:6d: a8:cc:9e:0d:51:a2:5c:ab:18:ec:39:fc:c8:62:74:95:93:57: 58:57:7c:50:98:bb:0d:96:70:22:42:14:56:55:fd:c9:68:59: 04:3d:fa:85:6a:1c:41:a6:3c:1a:01:22:6e:7f:94:87:c7:cd: 58:34:78:bf:25:61:93:d9:e8:d0:08:4c:20:97:46:ec:35:6c: c4:74:c1:b4:f1:3b:34:cf:f8:48:ca:ef:07:8e:06:e9:c4:0a: 94:8c:a7:ac:38:94:6a:e0:1d:22:57:60:ad:f7:8e:82:c8:1a: d3:a8:c2:d1:ff:eb:30:2e:f2:11:82:e5:b8:1a:e8:75:cb:01: cb:a8:b7:42:6d:cd:13:54:ba:2c:09:0e:02:18:f3:2e:c0:3f: d1:e7:92:79:99:97:64:04:b8:08:b9:37:a9:f8:88:ae:8e:5a: 66:17:d0:32:a5:06:61:ab:8c:fc:42:2f:e3:ba:ff:e6:05:aa: 6c:a2:8d:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtoexVFZHSy9aIohRIlUJDTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2MTE3YTY4MTVhOTE4NDc4ZDNmOGMwMGQ2NzFhNTcxNjZi ZmVlY2EwHhcNMjUxMjI5MDUwMDU1WhcNMjUxMjMwMDUwMDU1WjAzMTEwLwYDVQQD EyhlMmZmYWZjYWViMGEwYWY0YjgxNGFlMTExMjEzNzljYjkzMzBmNGM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruv5h4ZNedp6jkaA6LFava2MxUVt meH7B4QhYRXeyrkJ4GAgHNXEEMxwsyzmdoAoYksjbf6ZImJEpAB0r0vvesoD7Mmr c4VVwOLEnRguaEBj/WXagKRT9mECrZcQGB0NlnmKF/6FMs2yEKh6CqJRJu3S5VWm XBDWDjxSzECBlFtGS6bOt+8smmZUYGp/JqoIeyVoGMRLNN4NzgvjjwChyDprHGMs 1RzahBxYYkDakrER+6YjcAi8BQEyuyiY1mu1ymDy2GwBnYWonHTD+uFfw37qBV/4 DBcef9Uca85FxjDcIpgS8m9E2DL3T3G7hjtroryACXZ5UUW5YhFHW6ObTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOL/r8rrCgr0uBSuERITecuTMPTFMB8GA1UdIwQY MBaAFDYRemgVqRhHjT+MANZxpXFmv+7KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmhGNmFCV3BHRWVOUDR3QTFuR2xjV2FfN3NvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9jYmI3NDEtYjY5Mi00ZjA5LThjYmEt YzZhZWM2OGFiMzY0LzEvTmhGNmFCV3BHRWVOUDR3QTFuR2xjV2FfN3NvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9jYmI3NDEtYjY5Mi00ZjA5LThjYmEtYzZhZWM2OGFiMzY0 LzEvTmhGNmFCV3BHRWVOUDR3QTFuR2xjV2FfN3NvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg3aUXZ4Q MAat3gGjB9B30AOmGHMVD+0PezGVZqWHCgQ8eCeWlLDYLDISQYhBpbVcvhB5YGdR Ugsrscu1RfoOqUXQYuerD0ptqMyeDVGiXKsY7Dn8yGJ0lZNXWFd8UJi7DZZwIkIU VlX9yWhZBD36hWocQaY8GgEibn+Uh8fNWDR4vyVhk9no0AhMIJdG7DVsxHTBtPE7 NM/4SMrvB44G6cQKlIynrDiUauAdIldgrfeOgsga06jC0f/rMC7yEYLluBrodcsB y6i3Qm3NE1S6LAkOAhjzLsA/0eeSeZmXZAS4CLk3qfiIro5aZhfQMqUGYauM/EIv 47r/5gWqbKKNHA== -----END CERTIFICATE-----Generated at Mon Dec 29 10:01:32 2025 by rpki-client