This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.mft File: nBOUdoyaOaYRJnTXN1lypmlrRoA.mft (raw, json) Hash identifier: DVMHCzhhmcjr8/jZHU9AfQh2RAg/mU6Ehfflm6MfGA8= Subject key identifier: CA:A6:94:56:32:56:76:44:89:0B:0A:7E:37:10:D0:F6:39:A0:6A:16 Authority key identifier: 9C:13:94:76:8C:9A:39:A6:11:26:74:D7:37:59:72:A6:69:6B:46:80 Certificate issuer: /CN=9c1394768c9a39a6112674d7375972a6696b4680 Certificate serial: 019B3EA397CD6AD4499990326E402F1B66CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nBOUdoyaOaYRJnTXN1lypmlrRoA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.mft Manifest number: 0AFC Signing time: Sun 21 Dec 2025 02:01:06 +0000 Manifest this update: Sun 21 Dec 2025 02:01:06 +0000 Manifest next update: Mon 22 Dec 2025 02:01:06 +0000 Files and hashes: 1: nBOUdoyaOaYRJnTXN1lypmlrRoA.crl (hash: 7Ddze++JuKwpXBlcwcYfFZWLJAvNtU0NXxNxQwAZ1rs=) 2: naPzLZcFHsUMBLgsbgPGJCO-CF0.roa (hash: nIyF1z3b3iwZq0quO5N0o2X6gTB8LSfxugEcTz9j98Q=) 3: xvsRInrWKS5s7BFPqZmvGE0s2hc.roa (hash: vqluH5uE90JrgU5HmvgOgqmyqSAabArFrkPQ0aAKYvU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.crl rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.mft rsync://rpki.ripe.net/repository/DEFAULT/nBOUdoyaOaYRJnTXN1lypmlrRoA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:97:cd:6a:d4:49:99:90:32:6e:40:2f:1b:66:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c1394768c9a39a6112674d7375972a6696b4680 Validity Not Before: Dec 21 02:01:06 2025 GMT Not After : Dec 22 02:01:06 2025 GMT Subject: CN=caa6945632567644890b0a7e3710d0f639a06a16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:0d:41:b2:3d:d3:39:70:32:73:36:6a:d5:35: 05:a6:c7:2a:e9:a1:84:39:e0:4f:af:40:9f:95:ce: 25:1f:18:83:a7:c6:43:82:a0:ba:01:c3:40:13:84: 2f:a3:a6:2e:94:4c:5f:8c:52:0f:b5:bb:e7:7e:72: 7b:ba:2f:7e:09:74:7b:88:48:40:27:5a:3c:78:80: 8c:b0:71:cb:91:78:7d:7d:15:de:8c:53:c6:dd:96: ae:ac:70:a8:6d:97:6e:d3:8b:60:49:c9:32:d3:21: 02:1a:2c:bd:cd:e7:b8:0c:01:7e:67:8e:f1:61:aa: b9:29:f6:c5:6f:3c:29:97:78:92:96:2a:d3:97:a1: 53:05:d0:8c:d3:a0:1a:75:06:43:6f:65:1e:fe:ad: b6:9d:01:4a:c9:8e:1c:23:28:34:3d:e8:4b:ad:5d: da:f4:6e:53:41:e6:e0:05:4a:5f:bc:31:ed:9d:d6: ec:a1:68:ec:68:23:30:8b:13:8d:0b:38:d7:ab:62: cf:dd:33:00:a4:17:11:6d:3b:e6:19:67:70:8a:d6: 4e:fb:02:13:6c:06:75:98:80:ac:12:d7:24:2a:c7: 4f:02:7a:2d:d9:8f:5d:2a:6d:09:fc:f7:5f:72:62: c3:7b:fe:c4:fd:f7:20:15:1a:30:1c:f0:59:f7:7d: 68:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:A6:94:56:32:56:76:44:89:0B:0A:7E:37:10:D0:F6:39:A0:6A:16 X509v3 Authority Key Identifier: keyid:9C:13:94:76:8C:9A:39:A6:11:26:74:D7:37:59:72:A6:69:6B:46:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nBOUdoyaOaYRJnTXN1lypmlrRoA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:fe:a6:96:bf:22:e2:ea:4b:89:36:e7:59:2a:74:34:6f:a2: ee:3f:e4:5c:d0:18:ac:27:1f:d6:14:bf:d3:50:73:7d:fb:ca: 7c:f7:f8:37:65:37:e0:bd:da:68:f4:50:ac:6c:7a:a0:0a:9f: 6f:41:89:ad:79:e3:16:89:63:d3:03:73:ce:4e:df:f9:72:cb: 98:bd:e0:33:12:71:2b:d5:46:f5:70:61:aa:cf:cb:65:62:54: 19:fd:b3:76:d8:da:6d:c9:8e:1f:0f:f5:e4:ec:54:95:09:49: 53:30:e7:a8:39:ae:b4:94:b3:66:11:cc:34:a8:4b:db:fd:87: c3:59:94:bf:2f:7a:e8:5e:80:b5:c5:b7:6e:2c:11:19:de:20: de:01:44:ae:fb:4e:2f:23:0b:0b:e1:28:3a:71:43:99:75:12: 93:1a:78:2d:90:5d:fd:3f:47:83:b3:bf:9d:22:e4:51:03:71: 3e:06:b4:70:4d:24:97:a5:80:7d:ee:64:de:07:3c:30:67:46: ee:a2:ce:1d:61:50:90:1c:1f:1d:9a:d0:8e:f3:07:2b:48:ef: 48:25:58:74:be:a5:e6:0b:28:51:33:b1:60:7c:a3:98:dd:bc: 50:de:95:6a:9f:33:07:38:40:c9:a9:64:a8:67:4f:5d:5c:25: f1:fc:0f:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+o5fNatRJmZAybkAvG2bNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljMTM5NDc2OGM5YTM5YTYxMTI2NzRkNzM3NTk3MmE2Njk2 YjQ2ODAwHhcNMjUxMjIxMDIwMTA2WhcNMjUxMjIyMDIwMTA2WjAzMTEwLwYDVQQD EyhjYWE2OTQ1NjMyNTY3NjQ0ODkwYjBhN2UzNzEwZDBmNjM5YTA2YTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoA1Bsj3TOXAyczZq1TUFpscq6aGE OeBPr0Cflc4lHxiDp8ZDgqC6AcNAE4Qvo6YulExfjFIPtbvnfnJ7ui9+CXR7iEhA J1o8eICMsHHLkXh9fRXejFPG3ZaurHCobZdu04tgScky0yECGiy9zee4DAF+Z47x Yaq5KfbFbzwpl3iSlirTl6FTBdCM06AadQZDb2Ue/q22nQFKyY4cIyg0PehLrV3a 9G5TQebgBUpfvDHtndbsoWjsaCMwixONCzjXq2LP3TMApBcRbTvmGWdwitZO+wIT bAZ1mICsEtckKsdPAnot2Y9dKm0J/PdfcmLDe/7E/fcgFRowHPBZ931oZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMqmlFYyVnZEiQsKfjcQ0PY5oGoWMB8GA1UdIwQY MBaAFJwTlHaMmjmmESZ01zdZcqZpa0aAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkJPVWRveWFPYVlSSm5UWE4xbHlwbWxyUm9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8zZTcyMTAtMDUyOC00NDU2LWI2OGUt YTcxM2ExOTE1YzkwLzEvbkJPVWRveWFPYVlSSm5UWE4xbHlwbWxyUm9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy8zZTcyMTAtMDUyOC00NDU2LWI2OGUtYTcxM2ExOTE1Yzkw LzEvbkJPVWRveWFPYVlSSm5UWE4xbHlwbWxyUm9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe/6mlr8i 4upLiTbnWSp0NG+i7j/kXNAYrCcf1hS/01BzffvKfPf4N2U34L3aaPRQrGx6oAqf b0GJrXnjFolj0wNzzk7f+XLLmL3gMxJxK9VG9XBhqs/LZWJUGf2zdtjabcmOHw/1 5OxUlQlJUzDnqDmutJSzZhHMNKhL2/2Hw1mUvy966F6AtcW3biwRGd4g3gFErvtO LyMLC+EoOnFDmXUSkxp4LZBd/T9Hg7O/nSLkUQNxPga0cE0kl6WAfe5k3gc8MGdG 7qLOHWFQkBwfHZrQjvMHK0jvSCVYdL6l5gsoUTOxYHyjmN28UN6Vap8zBzhAyalk qGdPXVwl8fwPvA== -----END CERTIFICATE-----Generated at Sun Dec 21 07:41:24 2025 by rpki-client