This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft File: NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft (raw, json) Hash identifier: GeA9/61ayFxPZ5o1Kz8MDZoQicWSeNYF5ns8el10aQE= Subject key identifier: 6B:77:EB:CC:8A:FA:80:80:ED:9C:46:75:9E:DA:40:FA:32:B7:83:1E Authority key identifier: 36:26:1C:26:17:56:FA:03:AC:57:D1:BF:C4:DB:85:6E:F8:08:97:5A Certificate issuer: /CN=36261c261756fa03ac57d1bfc4db856ef808975a Certificate serial: 019B52CF0A721C6A2E5FCCC2E8615A95F167 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NiYcJhdW-gOsV9G_xNuFbvgIl1o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft Manifest number: 15A0 Signing time: Thu 25 Dec 2025 00:00:58 +0000 Manifest this update: Thu 25 Dec 2025 00:00:58 +0000 Manifest next update: Fri 26 Dec 2025 00:00:58 +0000 Files and hashes: 1: NiYcJhdW-gOsV9G_xNuFbvgIl1o.crl (hash: K1U2KVmQmD/SA+ILy25n+ghNF/Fd2ney6LLH8wv6QKQ=) 2: dYJMd1xHra4qPvxWQ63pWL2NPkE.roa (hash: lMxX8BkZ02l91WMGdaFajJSu4NcGeGtSFmauEg/qSlI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft rsync://rpki.ripe.net/repository/DEFAULT/NiYcJhdW-gOsV9G_xNuFbvgIl1o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 00:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:cf:0a:72:1c:6a:2e:5f:cc:c2:e8:61:5a:95:f1:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36261c261756fa03ac57d1bfc4db856ef808975a Validity Not Before: Dec 25 00:00:58 2025 GMT Not After : Dec 26 00:00:58 2025 GMT Subject: CN=6b77ebcc8afa8080ed9c46759eda40fa32b7831e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:89:68:4b:d9:32:e3:f9:1b:2b:fd:c1:8b:7e: 91:cf:42:b9:0d:ea:14:89:67:4a:e8:9a:72:6a:04: c6:54:81:65:be:61:83:63:75:ec:27:b6:d5:e4:60: 53:e8:36:6c:6a:c2:0b:c1:eb:84:26:84:1a:1c:90: 37:47:4a:e3:d0:2a:53:84:a8:49:c3:72:24:eb:0e: ef:71:02:db:5e:6a:17:1b:7f:64:8c:7c:44:ac:20: 88:b2:de:3f:4d:ab:5c:c3:84:00:09:b4:f7:43:76: 00:b6:f1:14:85:dc:50:d9:75:58:38:90:b1:44:f6: f2:8c:e9:f4:43:23:d1:89:2f:12:b2:11:8a:ee:4d: 21:d5:81:4c:73:34:dc:1e:98:39:ed:5c:26:7a:c2: 79:0f:db:a5:5a:ab:08:5c:ee:dc:b7:62:f7:07:0d: a7:6a:00:54:f9:7f:48:23:cf:58:ec:21:68:1b:9e: 03:32:ac:46:f3:48:7b:4b:d4:1b:5f:c4:b3:7c:5f: 4f:ee:8e:98:7d:ab:43:d4:fc:7a:fb:f9:18:f0:62: 11:65:f8:87:6d:91:d9:02:3c:90:da:af:0c:8d:48: 0a:6b:2b:fd:32:c7:c1:33:2a:d9:09:93:bc:da:02: d2:3d:74:16:69:7d:e5:c9:f1:ff:dc:f8:d9:a3:22: 88:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:77:EB:CC:8A:FA:80:80:ED:9C:46:75:9E:DA:40:FA:32:B7:83:1E X509v3 Authority Key Identifier: keyid:36:26:1C:26:17:56:FA:03:AC:57:D1:BF:C4:DB:85:6E:F8:08:97:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiYcJhdW-gOsV9G_xNuFbvgIl1o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:39:ed:f0:eb:2a:83:c5:32:29:c5:a5:c2:d8:b7:d8:f4:7c: 56:88:e5:0d:24:6d:e3:ae:52:e0:1a:9a:a0:33:ac:97:60:0b: 06:a2:e6:f5:71:d3:ce:47:2a:dd:42:26:01:da:08:ef:27:29: 58:57:66:35:7d:ca:78:aa:1e:dd:2c:e7:a2:8a:ff:22:62:15: 38:23:de:6c:e6:fb:c2:74:1f:80:96:64:fb:15:76:43:93:60: 86:3c:d1:b0:cb:77:5f:ef:df:3d:f8:3d:bc:31:43:eb:16:3d: 3c:b2:f5:56:36:52:c7:8d:00:1d:c4:e0:04:9e:96:17:12:26: b3:21:a3:9e:4c:92:43:79:88:fd:85:2d:15:b1:0a:71:d6:3f: 2a:0c:ce:d1:8d:1f:1d:1c:fc:8d:11:b2:dd:ea:51:15:1c:3b: 4e:94:5c:05:18:c9:f5:75:92:08:34:8d:de:29:8d:cc:2f:ac: 1b:f6:18:a0:b1:b3:16:0d:cd:ff:71:00:a1:98:66:56:6b:2b: d1:ce:0b:f7:ec:48:63:dc:7a:c5:bf:c0:74:28:13:da:3f:2c: d2:da:1b:de:f6:28:9c:d9:6b:3b:4b:05:69:d8:40:00:a3:39: 88:40:60:c7:2b:44:59:8d:47:48:72:d0:86:d6:9f:28:2d:6f: ca:ee:a1:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSzwpyHGouX8zC6GFalfFnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2MjYxYzI2MTc1NmZhMDNhYzU3ZDFiZmM0ZGI4NTZlZjgw ODk3NWEwHhcNMjUxMjI1MDAwMDU4WhcNMjUxMjI2MDAwMDU4WjAzMTEwLwYDVQQD Eyg2Yjc3ZWJjYzhhZmE4MDgwZWQ5YzQ2NzU5ZWRhNDBmYTMyYjc4MzFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4loS9ky4/kbK/3Bi36Rz0K5DeoU iWdK6JpyagTGVIFlvmGDY3XsJ7bV5GBT6DZsasILweuEJoQaHJA3R0rj0CpThKhJ w3Ik6w7vcQLbXmoXG39kjHxErCCIst4/Tatcw4QACbT3Q3YAtvEUhdxQ2XVYOJCx RPbyjOn0QyPRiS8SshGK7k0h1YFMczTcHpg57VwmesJ5D9ulWqsIXO7ct2L3Bw2n agBU+X9II89Y7CFoG54DMqxG80h7S9QbX8SzfF9P7o6YfatD1Px6+/kY8GIRZfiH bZHZAjyQ2q8MjUgKayv9MsfBMyrZCZO82gLSPXQWaX3lyfH/3PjZoyKINwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGt368yK+oCA7ZxGdZ7aQPoyt4MeMB8GA1UdIwQY MBaAFDYmHCYXVvoDrFfRv8TbhW74CJdaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmlZY0poZFctZ09zVjlHX3hOdUZidmdJbDFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8wYmFiMWYtOTJkNi00MmYwLWI5NTIt NDQyYzA4MGFlNTQxLzEvTmlZY0poZFctZ09zVjlHX3hOdUZidmdJbDFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS8wYmFiMWYtOTJkNi00MmYwLWI5NTItNDQyYzA4MGFlNTQx LzEvTmlZY0poZFctZ09zVjlHX3hOdUZidmdJbDFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFTnt8Osq g8UyKcWlwti32PR8VojlDSRt465S4BqaoDOsl2ALBqLm9XHTzkcq3UImAdoI7ycp WFdmNX3KeKoe3Sznoor/ImIVOCPebOb7wnQfgJZk+xV2Q5NghjzRsMt3X+/fPfg9 vDFD6xY9PLL1VjZSx40AHcTgBJ6WFxImsyGjnkySQ3mI/YUtFbEKcdY/KgzO0Y0f HRz8jRGy3epRFRw7TpRcBRjJ9XWSCDSN3imNzC+sG/YYoLGzFg3N/3EAoZhmVmsr 0c4L9+xIY9x6xb/AdCgT2j8s0tob3vYonNlrO0sFadhAAKM5iEBgxytEWY1HSHLQ htafKC1vyu6hwQ== -----END CERTIFICATE-----Generated at Thu Dec 25 07:02:53 2025 by rpki-client