This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.mft File: NmFLrpbBM315e9lm59aoKojfnSk.mft (raw, json) Hash identifier: 7lJiAna2nTzwjK+l3VS/OBedN+jYzoBsuFSf3z/56Ig= Subject key identifier: CB:D2:6D:47:23:AE:1C:9A:FE:B8:67:D7:BA:B4:BA:FC:CF:6A:B3:96 Authority key identifier: 36:61:4B:AE:96:C1:33:7D:79:7B:D9:66:E7:D6:A8:2A:88:DF:9D:29 Certificate issuer: /CN=36614bae96c1337d797bd966e7d6a82a88df9d29 Certificate serial: 019B3CEBC159148BC1158DF5C85C3BEF1786 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NmFLrpbBM315e9lm59aoKojfnSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.mft Manifest number: 04B3 Signing time: Sat 20 Dec 2025 18:00:41 +0000 Manifest this update: Sat 20 Dec 2025 18:00:41 +0000 Manifest next update: Sun 21 Dec 2025 18:00:41 +0000 Files and hashes: 1: NmFLrpbBM315e9lm59aoKojfnSk.crl (hash: wioVZYOiLX12TwOBkF6Ko9k6XAp+08bVYjPxHljpWyQ=) 2: cEQi14kKuKL4ZWozyPewcuSD5kQ.roa (hash: AQa4zimuZDO+7ACyM4KJjx7KQcRwuoNCJUovJ5T5Vck=) 3: xGHkCj7QXTK91-IzTTuEVkNvzos.roa (hash: jRuba4ysEPA//Moy/YkHQHxGDPSKQ/jX38S+l3o0ZrU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.crl rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.mft rsync://rpki.ripe.net/repository/DEFAULT/NmFLrpbBM315e9lm59aoKojfnSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:eb:c1:59:14:8b:c1:15:8d:f5:c8:5c:3b:ef:17:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36614bae96c1337d797bd966e7d6a82a88df9d29 Validity Not Before: Dec 20 18:00:41 2025 GMT Not After : Dec 21 18:00:41 2025 GMT Subject: CN=cbd26d4723ae1c9afeb867d7bab4bafccf6ab396 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2d:da:9e:c8:5d:9d:f5:bc:2b:20:f9:c4:19: ec:97:ef:68:0c:e1:4b:61:a1:3f:0c:fe:1e:d6:36: 79:a3:b1:5b:e6:ab:04:23:03:47:aa:36:b2:fa:f3: 8e:e2:bc:6f:3b:74:55:4c:e5:ca:2d:87:85:48:20: 34:fa:50:5b:61:ed:c7:cf:cd:32:07:71:c9:b0:57: 10:fd:a1:68:38:44:10:54:1e:83:a9:ba:0d:30:12: af:9f:ad:3a:ad:e0:c0:fc:46:d4:04:79:50:68:fb: 39:b9:4d:10:66:4f:3e:37:18:71:3d:31:98:37:8a: ce:b1:a3:a6:66:2c:fa:a5:c8:23:6a:fc:bc:88:90: bc:68:35:74:fc:c0:fe:fd:d7:d4:60:13:d6:44:a8: e4:d4:ef:33:03:21:fa:66:e5:09:43:d3:59:e5:6a: 9c:51:cb:dd:97:1b:29:24:73:b2:59:a3:73:73:ea: 66:51:49:bb:a4:81:63:db:b2:df:c0:7c:53:68:e8: 0e:5f:cf:53:e0:7c:b7:83:d6:5f:6e:b0:13:04:93: 68:da:54:ae:0f:f6:23:09:d3:96:3e:99:dd:2f:72: dc:0a:18:5a:0b:7d:cb:a7:72:a7:6b:6f:20:5c:d8: 7f:b2:39:2f:45:0d:18:98:51:7a:0b:22:53:23:61: d2:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:D2:6D:47:23:AE:1C:9A:FE:B8:67:D7:BA:B4:BA:FC:CF:6A:B3:96 X509v3 Authority Key Identifier: keyid:36:61:4B:AE:96:C1:33:7D:79:7B:D9:66:E7:D6:A8:2A:88:DF:9D:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NmFLrpbBM315e9lm59aoKojfnSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:be:39:60:2f:bb:0d:d7:f1:35:14:70:9f:c6:61:99:7c:55: e2:9e:4d:f1:b8:e3:04:14:76:0b:87:a8:06:46:32:b5:fd:51: e6:55:92:45:34:2a:7e:59:dd:9f:71:73:8a:32:6a:af:3d:f1: e9:cb:29:37:0d:8c:c3:20:8e:b0:2d:1a:b4:65:d5:14:bb:de: d9:0c:52:c2:40:f8:bb:31:b8:ba:a4:0b:47:5b:ce:7c:07:1f: f6:4d:ab:54:06:7b:6d:1d:12:3a:34:2f:bf:a9:ee:da:c9:3b: da:e8:9d:60:b1:18:2e:59:79:53:09:3a:8a:a0:f9:12:d6:5f: dc:41:23:fe:3c:0f:df:cc:e3:b5:26:dc:f0:d0:ce:48:60:33: a0:b0:5b:7f:c2:48:ec:4c:9e:f9:86:d7:a6:68:69:5a:40:92: a9:ff:62:c7:e2:b2:63:1e:5d:f9:23:3b:6e:13:ef:75:ce:82: 4e:86:a8:97:8c:93:e3:b5:df:1c:eb:c4:61:9b:a1:a6:26:92: 87:07:e9:e7:a7:2c:96:b0:ba:1f:d8:75:e2:db:99:2c:d1:61: eb:23:36:67:d9:7d:bb:46:90:7c:71:89:6b:51:02:89:ea:7a: 6c:d0:7e:e2:f8:69:0b:5f:d2:86:ab:bf:06:65:f5:a1:ad:a4: db:9f:a3:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs868FZFIvBFY31yFw77xeGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2NjE0YmFlOTZjMTMzN2Q3OTdiZDk2NmU3ZDZhODJhODhk ZjlkMjkwHhcNMjUxMjIwMTgwMDQxWhcNMjUxMjIxMTgwMDQxWjAzMTEwLwYDVQQD EyhjYmQyNmQ0NzIzYWUxYzlhZmViODY3ZDdiYWI0YmFmY2NmNmFiMzk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuC3anshdnfW8KyD5xBnsl+9oDOFL YaE/DP4e1jZ5o7Fb5qsEIwNHqjay+vOO4rxvO3RVTOXKLYeFSCA0+lBbYe3Hz80y B3HJsFcQ/aFoOEQQVB6DqboNMBKvn606reDA/EbUBHlQaPs5uU0QZk8+NxhxPTGY N4rOsaOmZiz6pcgjavy8iJC8aDV0/MD+/dfUYBPWRKjk1O8zAyH6ZuUJQ9NZ5Wqc UcvdlxspJHOyWaNzc+pmUUm7pIFj27LfwHxTaOgOX89T4Hy3g9ZfbrATBJNo2lSu D/YjCdOWPpndL3LcChhaC33Lp3Kna28gXNh/sjkvRQ0YmFF6CyJTI2HS6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMvSbUcjrhya/rhn17q0uvzParOWMB8GA1UdIwQY MBaAFDZhS66WwTN9eXvZZufWqCqI350pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTm1GTHJwYkJNMzE1ZTlsbTU5YW9Lb2pmblNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9jZjJjYWItZTE4Mi00ZTliLWE2ZWUt YWYwMTRmYWJmNGJlLzEvTm1GTHJwYkJNMzE1ZTlsbTU5YW9Lb2pmblNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9jZjJjYWItZTE4Mi00ZTliLWE2ZWUtYWYwMTRmYWJmNGJl LzEvTm1GTHJwYkJNMzE1ZTlsbTU5YW9Lb2pmblNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF745YC+7 DdfxNRRwn8ZhmXxV4p5N8bjjBBR2C4eoBkYytf1R5lWSRTQqflndn3FzijJqrz3x 6cspNw2MwyCOsC0atGXVFLve2QxSwkD4uzG4uqQLR1vOfAcf9k2rVAZ7bR0SOjQv v6nu2sk72uidYLEYLll5Uwk6iqD5EtZf3EEj/jwP38zjtSbc8NDOSGAzoLBbf8JI 7Eye+YbXpmhpWkCSqf9ix+KyYx5d+SM7bhPvdc6CToaol4yT47XfHOvEYZuhpiaS hwfp56cslrC6H9h14tuZLNFh6yM2Z9l9u0aQfHGJa1ECiep6bNB+4vhpC1/Shqu/ BmX1oa2k25+jug== -----END CERTIFICATE-----Generated at Sat Dec 20 23:28:22 2025 by rpki-client