This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/1bde39-b6d5-46ec-a813-26ef96643d84/1/noBwLuah3L864lehmUFfWbgzjqQ.mft File: noBwLuah3L864lehmUFfWbgzjqQ.mft (raw, json) Hash identifier: peFVIy24HJvIG6P+og+q3XK0m03RpS8O9Q1lzaY0+JU= Subject key identifier: 2E:87:C4:CA:7F:84:29:35:2B:46:2B:3C:C5:DE:EE:ED:8A:9E:2A:66 Authority key identifier: 9E:80:70:2E:E6:A1:DC:BF:3A:E2:57:A1:99:41:5F:59:B8:33:8E:A4 Certificate issuer: /CN=9e80702ee6a1dcbf3ae257a199415f59b8338ea4 Certificate serial: 019B60538DD8A6B63DA264F77EA4F836EEB4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/noBwLuah3L864lehmUFfWbgzjqQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/1bde39-b6d5-46ec-a813-26ef96643d84/1/noBwLuah3L864lehmUFfWbgzjqQ.mft Manifest number: 179B Signing time: Sat 27 Dec 2025 15:00:47 +0000 Manifest this update: Sat 27 Dec 2025 15:00:47 +0000 Manifest next update: Sun 28 Dec 2025 15:00:47 +0000 Files and hashes: 1: 4r39zvWrkYP2asO0kOUkjIaBE5M.roa (hash: v58EqYlL6LzlpEJ1F9DVvqr5mbMv8/9nhYAa/WADapg=) 2: noBwLuah3L864lehmUFfWbgzjqQ.crl (hash: r+0BgPQdz1x8mkJnR6hbUgh7v2T8dAiiIJI/VZ81XTE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/1bde39-b6d5-46ec-a813-26ef96643d84/1/noBwLuah3L864lehmUFfWbgzjqQ.crl rsync://rpki.ripe.net/repository/DEFAULT/36/1bde39-b6d5-46ec-a813-26ef96643d84/1/noBwLuah3L864lehmUFfWbgzjqQ.mft rsync://rpki.ripe.net/repository/DEFAULT/noBwLuah3L864lehmUFfWbgzjqQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 15:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:60:53:8d:d8:a6:b6:3d:a2:64:f7:7e:a4:f8:36:ee:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e80702ee6a1dcbf3ae257a199415f59b8338ea4 Validity Not Before: Dec 27 15:00:47 2025 GMT Not After : Dec 28 15:00:47 2025 GMT Subject: CN=2e87c4ca7f8429352b462b3cc5deeeed8a9e2a66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:9e:42:2b:dd:e6:b0:f2:3e:d9:90:c4:11:8d: 36:c1:0c:f1:9f:fe:08:80:74:66:63:1b:2b:cf:d3: 8f:e8:ca:f8:09:40:5b:b6:d8:e6:4c:bf:a8:78:cc: 40:cf:75:a1:2a:96:4f:7d:ab:7d:56:c6:f5:7a:28: b0:5a:77:10:14:67:09:6d:20:5e:ea:c2:65:fc:b0: 53:f0:26:93:96:5c:ba:77:77:ce:ed:69:a3:54:e3: d0:a3:0b:ae:82:3d:bf:82:67:27:79:19:ce:1a:48: b3:f3:00:b3:b4:5e:c6:ec:54:d7:f2:e9:24:50:f2: 48:11:b8:63:0b:1e:58:1a:37:d9:c9:8e:c0:92:e6: 20:48:ca:e4:3a:f7:2d:35:c6:3f:31:f0:99:02:c2: 69:ec:67:a5:10:d7:bb:17:0a:de:ac:66:b1:0e:43: 03:46:d1:c8:7c:81:b2:d5:d2:b8:1c:f0:9c:a4:7f: 58:f0:90:f6:c1:9d:80:d6:8f:ea:d6:41:d5:1e:c3: a5:df:45:77:ef:a9:79:55:30:cf:ac:d0:17:54:a7: a8:44:11:89:7e:6c:8c:63:6a:bb:b0:26:1e:7d:04: 10:4e:ca:c5:0a:2a:99:ba:2e:9b:e5:51:4a:8f:0a: 71:f3:87:56:37:02:09:0b:9b:6a:65:2f:ad:dc:8a: 66:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:87:C4:CA:7F:84:29:35:2B:46:2B:3C:C5:DE:EE:ED:8A:9E:2A:66 X509v3 Authority Key Identifier: keyid:9E:80:70:2E:E6:A1:DC:BF:3A:E2:57:A1:99:41:5F:59:B8:33:8E:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/noBwLuah3L864lehmUFfWbgzjqQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1bde39-b6d5-46ec-a813-26ef96643d84/1/noBwLuah3L864lehmUFfWbgzjqQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1bde39-b6d5-46ec-a813-26ef96643d84/1/noBwLuah3L864lehmUFfWbgzjqQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:63:44:28:8f:7c:54:5b:ec:ac:51:02:a5:e4:67:35:aa:64: 07:34:54:22:2d:95:88:6d:c7:95:93:b4:9c:e4:df:ca:1c:09: ab:73:04:26:0e:7a:f2:2f:15:ec:d0:ad:dd:d8:83:a5:7c:43: 77:72:e1:78:eb:ed:2e:a3:3f:46:7b:82:6f:85:67:03:27:af: b7:53:d4:45:fd:de:e9:83:0c:e2:8d:20:dd:ad:1e:3d:e4:a8: 58:85:f6:c6:59:69:da:c6:51:dc:30:1b:95:7d:3b:62:f8:35: 8a:95:63:a0:11:60:5e:54:de:b7:8c:cd:d1:0f:f7:d0:fd:7e: 2f:4e:ca:77:2d:55:dc:46:80:5b:4b:8a:8d:73:a6:39:2e:0e: 51:d0:87:d2:05:69:f9:f1:20:6e:ff:66:2e:5d:bb:65:95:9a: 79:ed:d8:f9:dd:9b:79:55:07:75:f7:3c:4a:3a:de:85:83:e8: 6e:78:02:74:a5:63:fe:78:a1:c3:d4:27:b2:8a:45:5f:c1:57: 9b:fa:af:90:57:be:cb:9f:a4:c8:ff:bd:dd:0f:72:0a:21:f8: 4b:06:08:00:77:8f:2b:27:f7:a4:69:ff:d1:05:cb:41:70:af: 1f:9e:0c:73:d5:99:f2:a7:75:6b:b9:61:86:0f:13:1d:22:0f: 33:5b:b5:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtgU43YprY9omT3fqT4Nu60MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllODA3MDJlZTZhMWRjYmYzYWUyNTdhMTk5NDE1ZjU5Yjgz MzhlYTQwHhcNMjUxMjI3MTUwMDQ3WhcNMjUxMjI4MTUwMDQ3WjAzMTEwLwYDVQQD EygyZTg3YzRjYTdmODQyOTM1MmI0NjJiM2NjNWRlZWVlZDhhOWUyYTY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm55CK93msPI+2ZDEEY02wQzxn/4I gHRmYxsrz9OP6Mr4CUBbttjmTL+oeMxAz3WhKpZPfat9Vsb1eiiwWncQFGcJbSBe 6sJl/LBT8CaTlly6d3fO7WmjVOPQowuugj2/gmcneRnOGkiz8wCztF7G7FTX8ukk UPJIEbhjCx5YGjfZyY7AkuYgSMrkOvctNcY/MfCZAsJp7GelENe7FwrerGaxDkMD RtHIfIGy1dK4HPCcpH9Y8JD2wZ2A1o/q1kHVHsOl30V376l5VTDPrNAXVKeoRBGJ fmyMY2q7sCYefQQQTsrFCiqZui6b5VFKjwpx84dWNwIJC5tqZS+t3IpmtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC6HxMp/hCk1K0YrPMXe7u2KnipmMB8GA1UdIwQY MBaAFJ6AcC7mody/OuJXoZlBX1m4M46kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbm9Cd0x1YWgzTDg2NGxlaG1VRmZXYmd6anFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8xYmRlMzktYjZkNS00NmVjLWE4MTMt MjZlZjk2NjQzZDg0LzEvbm9Cd0x1YWgzTDg2NGxlaG1VRmZXYmd6anFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8xYmRlMzktYjZkNS00NmVjLWE4MTMtMjZlZjk2NjQzZDg0 LzEvbm9Cd0x1YWgzTDg2NGxlaG1VRmZXYmd6anFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPWNEKI98 VFvsrFECpeRnNapkBzRUIi2ViG3HlZO0nOTfyhwJq3MEJg568i8V7NCt3diDpXxD d3LheOvtLqM/RnuCb4VnAyevt1PURf3e6YMM4o0g3a0ePeSoWIX2xllp2sZR3DAb lX07Yvg1ipVjoBFgXlTet4zN0Q/30P1+L07Kdy1V3EaAW0uKjXOmOS4OUdCH0gVp +fEgbv9mLl27ZZWaee3Y+d2beVUHdfc8SjrehYPobngCdKVj/nihw9QnsopFX8FX m/qvkFe+y5+kyP+93Q9yCiH4SwYIAHePKyf3pGn/0QXLQXCvH54Mc9WZ8qd1a7lh hg8THSIPM1u1xQ== -----END CERTIFICATE-----Generated at Sat Dec 27 19:27:56 2025 by rpki-client