This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.mft File: nT67qfosrShqyRJ2V1dF9hXo-nE.mft (raw, json) Hash identifier: Z2uDDCpym+s0GarnxEcYQiZhJh0iSrKn+3rDgvDS36M= Subject key identifier: B3:65:87:48:8B:FD:A7:5B:19:9B:2D:BD:84:12:8F:72:DB:6C:72:EF Authority key identifier: 9D:3E:BB:A9:FA:2C:AD:28:6A:C9:12:76:57:57:45:F6:15:E8:FA:71 Certificate issuer: /CN=9d3ebba9fa2cad286ac91276575745f615e8fa71 Certificate serial: 019B6DD89DC877B6CA08E47210127E9885C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nT67qfosrShqyRJ2V1dF9hXo-nE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.mft Manifest number: 0B3B Signing time: Tue 30 Dec 2025 06:01:11 +0000 Manifest this update: Tue 30 Dec 2025 06:01:11 +0000 Manifest next update: Wed 31 Dec 2025 06:01:11 +0000 Files and hashes: 1: _O2K9lYrU1ufrJyVF92JtVYbIao.roa (hash: opCkasUjE09S1Hv7hZM9HKqW92oCRoLsRmm8L97k62Q=) 2: nT67qfosrShqyRJ2V1dF9hXo-nE.crl (hash: waU/ujkvemhw2qArr7AjwioTp+t5SSdIcCaxyfyxHAc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.mft rsync://rpki.ripe.net/repository/DEFAULT/nT67qfosrShqyRJ2V1dF9hXo-nE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 06:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6d:d8:9d:c8:77:b6:ca:08:e4:72:10:12:7e:98:85:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d3ebba9fa2cad286ac91276575745f615e8fa71 Validity Not Before: Dec 30 06:01:11 2025 GMT Not After : Dec 31 06:01:11 2025 GMT Subject: CN=b36587488bfda75b199b2dbd84128f72db6c72ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:7a:20:97:91:84:d0:db:f5:01:4d:83:20:9e: 23:dd:68:0e:98:b3:f4:32:27:29:12:c1:f9:e8:82: e8:de:c7:09:c1:6e:6e:8e:44:3b:c2:e4:e9:b7:fd: 67:f5:b1:98:a0:bc:65:f8:a6:66:52:c1:47:22:a0: 4f:52:4e:54:11:04:a1:09:fe:73:cf:c6:f9:d9:58: 4f:42:82:48:b3:ef:af:0b:87:6d:fc:6a:38:2e:93: d4:a7:33:db:c1:13:83:b9:10:d6:ad:29:45:6d:f4: 6a:2c:ec:35:b8:db:a1:48:46:5b:b6:80:a4:2a:f5: 07:1f:99:1a:cc:2a:9a:8c:1f:cc:ad:93:b9:d5:d7: c3:c0:ad:81:f2:82:e2:71:22:04:da:f9:d5:73:0a: db:4e:48:d4:b6:84:06:6d:41:06:fa:68:a2:b7:1f: b2:fd:61:14:ea:19:36:ab:1b:38:78:3a:86:db:0d: 97:01:d8:c4:61:f4:99:ce:72:f8:77:f8:88:0c:26: ba:e3:f7:42:97:11:02:77:88:73:9a:0c:3e:b7:3b: 4f:26:95:db:9a:4c:eb:56:2d:1b:d7:49:82:7b:1c: 9d:e7:35:31:84:83:cc:92:97:42:4d:a2:65:c8:33: 3f:ea:e8:9c:03:c7:14:ce:11:75:69:82:d4:a4:4b: 87:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:65:87:48:8B:FD:A7:5B:19:9B:2D:BD:84:12:8F:72:DB:6C:72:EF X509v3 Authority Key Identifier: keyid:9D:3E:BB:A9:FA:2C:AD:28:6A:C9:12:76:57:57:45:F6:15:E8:FA:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nT67qfosrShqyRJ2V1dF9hXo-nE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:45:b4:49:0b:bb:70:53:33:0f:b4:a9:cf:75:4b:5a:84:76: 57:49:48:b8:2a:21:db:8a:db:f3:88:d4:26:07:ef:15:d7:2f: 82:e3:37:5f:8d:e6:97:b0:18:8a:db:03:11:4e:ce:89:11:0f: b5:aa:7d:18:96:9a:b6:18:f3:d5:f0:0e:ed:28:44:6b:1b:03: 07:b2:98:28:7c:d6:32:c0:79:7a:95:ea:9b:63:36:b3:57:2c: 0f:ef:49:6e:f3:6f:f4:05:4d:76:74:ab:b8:ca:1c:93:04:9e: f7:07:ce:c5:7c:d0:1f:20:01:5d:57:7b:39:c9:cc:27:ca:ba: 6b:37:05:34:e4:30:b5:2d:29:53:2c:c9:ee:56:c8:01:4e:c5: 15:3a:e3:fe:39:8d:6b:93:ef:2d:37:24:7d:50:66:79:61:50: b9:29:49:14:c8:9c:55:27:58:06:bd:d4:22:51:3d:65:c1:c5: 15:c8:f0:04:44:e1:07:5d:be:89:1a:91:22:fa:3e:37:34:d5: c0:80:c4:69:b4:d7:bf:20:df:d2:a6:39:c9:ab:1e:84:cb:8e: 51:99:bb:d3:a1:1c:a6:a9:78:bf:12:73:b4:00:da:13:97:f8: 86:34:a9:28:d4:4d:a8:b6:77:30:c7:73:1f:09:56:81:48:47: 0c:91:f6:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtt2J3Id7bKCORyEBJ+mIXFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkM2ViYmE5ZmEyY2FkMjg2YWM5MTI3NjU3NTc0NWY2MTVl OGZhNzEwHhcNMjUxMjMwMDYwMTExWhcNMjUxMjMxMDYwMTExWjAzMTEwLwYDVQQD EyhiMzY1ODc0ODhiZmRhNzViMTk5YjJkYmQ4NDEyOGY3MmRiNmM3MmVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3ogl5GE0Nv1AU2DIJ4j3WgOmLP0 MicpEsH56ILo3scJwW5ujkQ7wuTpt/1n9bGYoLxl+KZmUsFHIqBPUk5UEQShCf5z z8b52VhPQoJIs++vC4dt/Go4LpPUpzPbwRODuRDWrSlFbfRqLOw1uNuhSEZbtoCk KvUHH5kazCqajB/MrZO51dfDwK2B8oLicSIE2vnVcwrbTkjUtoQGbUEG+miitx+y /WEU6hk2qxs4eDqG2w2XAdjEYfSZznL4d/iIDCa64/dClxECd4hzmgw+tztPJpXb mkzrVi0b10mCexyd5zUxhIPMkpdCTaJlyDM/6uicA8cUzhF1aYLUpEuHDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLNlh0iL/adbGZstvYQSj3LbbHLvMB8GA1UdIwQY MBaAFJ0+u6n6LK0oaskSdldXRfYV6PpxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblQ2N3Fmb3NyU2hxeVJKMlYxZEY5aFhvLW5FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi85ZmY5YzctZDMyOS00NWE2LTg5OGEt OWQ5NTlhYmNlNTI2LzEvblQ2N3Fmb3NyU2hxeVJKMlYxZEY5aFhvLW5FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi85ZmY5YzctZDMyOS00NWE2LTg5OGEtOWQ5NTlhYmNlNTI2 LzEvblQ2N3Fmb3NyU2hxeVJKMlYxZEY5aFhvLW5FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARkW0SQu7 cFMzD7Spz3VLWoR2V0lIuCoh24rb84jUJgfvFdcvguM3X43ml7AYitsDEU7OiREP tap9GJaathjz1fAO7ShEaxsDB7KYKHzWMsB5epXqm2M2s1csD+9JbvNv9AVNdnSr uMockwSe9wfOxXzQHyABXVd7OcnMJ8q6azcFNOQwtS0pUyzJ7lbIAU7FFTrj/jmN a5PvLTckfVBmeWFQuSlJFMicVSdYBr3UIlE9ZcHFFcjwBEThB12+iRqRIvo+NzTV wIDEabTXvyDf0qY5yasehMuOUZm706Ecpql4vxJztADaE5f4hjSpKNRNqLZ3MMdz HwlWgUhHDJH2Sg== -----END CERTIFICATE-----Generated at Tue Dec 30 14:59:14 2025 by rpki-client