This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft File: NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft (raw, json) Hash identifier: 1ivXw8Uomzk6WzmkLENZUzo96n/I2VXmfYK+cFfwnzA= Subject key identifier: 1B:9A:00:AB:AF:31:85:C2:DD:29:3D:4C:FE:94:D9:8F:C5:06:81:CD Authority key identifier: 36:26:1C:26:17:56:FA:03:AC:57:D1:BF:C4:DB:85:6E:F8:08:97:5A Certificate issuer: /CN=36261c261756fa03ac57d1bfc4db856ef808975a Certificate serial: 019B6DD842FD6F05346717C57506C37A05FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NiYcJhdW-gOsV9G_xNuFbvgIl1o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft Manifest number: 15AE Signing time: Tue 30 Dec 2025 06:00:47 +0000 Manifest this update: Tue 30 Dec 2025 06:00:47 +0000 Manifest next update: Wed 31 Dec 2025 06:00:47 +0000 Files and hashes: 1: NiYcJhdW-gOsV9G_xNuFbvgIl1o.crl (hash: uZD9XQ+NaVyl536la24Ut0Drk3hQGrUBcU+2qkLIMQ4=) 2: dYJMd1xHra4qPvxWQ63pWL2NPkE.roa (hash: lMxX8BkZ02l91WMGdaFajJSu4NcGeGtSFmauEg/qSlI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft rsync://rpki.ripe.net/repository/DEFAULT/NiYcJhdW-gOsV9G_xNuFbvgIl1o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 06:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6d:d8:42:fd:6f:05:34:67:17:c5:75:06:c3:7a:05:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36261c261756fa03ac57d1bfc4db856ef808975a Validity Not Before: Dec 30 06:00:47 2025 GMT Not After : Dec 31 06:00:47 2025 GMT Subject: CN=1b9a00abaf3185c2dd293d4cfe94d98fc50681cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:74:af:8e:32:6d:1a:e8:c0:aa:33:6e:6b:c6: 78:90:2f:e1:dd:b1:fe:28:43:47:8b:cc:fa:4e:fc: 70:75:b0:ec:97:bf:51:7f:33:f4:a0:42:5a:df:02: 18:ae:cc:a4:5b:9f:a5:ce:45:fe:d1:1f:f6:b9:97: 45:f9:f5:61:56:6b:d3:d9:2f:6b:05:50:09:d4:0a: a6:d4:46:4a:78:d1:f9:db:cc:9a:07:4e:1b:7f:db: d6:59:fe:74:dc:ea:a2:47:9b:2b:1f:02:07:7e:1b: 76:03:b3:1b:74:3c:23:6e:85:26:80:55:67:41:ea: 07:0f:67:59:79:e8:4d:8d:2c:0d:78:07:09:f8:d0: b8:8b:c6:b5:2b:a6:4e:b7:50:fa:c2:a4:f0:56:21: 72:3f:2c:fd:96:cb:9e:d9:da:a9:64:9c:16:87:9c: ea:e7:04:dd:2f:55:d8:1a:9f:09:37:40:54:03:50: 46:38:9f:aa:32:28:df:6b:0e:b2:cd:f4:47:b8:af: b9:99:0d:de:05:8b:72:98:af:8a:37:b0:e1:83:56: 06:bd:00:57:ee:7b:c5:dc:ec:ba:b5:97:ff:5d:f7: 4c:f8:1b:91:8c:2b:da:5d:9d:54:ef:45:db:4b:d8: 2f:4c:a8:8f:38:fd:ae:46:31:e7:8b:bd:9c:a5:7a: 62:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:9A:00:AB:AF:31:85:C2:DD:29:3D:4C:FE:94:D9:8F:C5:06:81:CD X509v3 Authority Key Identifier: keyid:36:26:1C:26:17:56:FA:03:AC:57:D1:BF:C4:DB:85:6E:F8:08:97:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiYcJhdW-gOsV9G_xNuFbvgIl1o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:8c:35:7b:0e:e1:76:03:8e:a9:f8:37:38:98:19:6a:23:91: 54:5f:0a:47:b5:4e:c6:3f:1b:4f:fc:c5:41:b1:53:6c:69:56: e0:2b:4b:06:7c:e6:e6:27:60:f0:34:41:7e:96:46:b3:c9:3c: e4:72:a4:02:58:26:60:4d:a9:c9:de:32:82:87:e1:1b:3e:7c: 33:cc:fc:60:28:7b:36:e8:3b:0e:2a:73:3d:03:65:77:58:02: 5e:fc:d2:40:15:cf:1b:ff:e4:24:23:7c:f5:92:26:e1:d5:5a: a9:f2:ab:c2:30:1a:1d:d8:e7:3f:63:e8:f4:71:df:89:df:6b: e3:e5:d6:e7:fc:79:67:ca:76:48:f6:95:fc:da:f7:cc:28:32: d6:c9:57:07:90:c1:15:ed:b3:f6:e3:50:56:06:89:21:ec:4e: 68:fe:11:c4:60:7e:23:d5:09:4e:2d:db:04:64:b9:f8:22:75: 12:83:f5:16:0d:b0:61:0b:71:da:a9:5b:1f:89:1b:52:eb:8c: ae:36:45:c3:f0:99:d3:f3:a1:c2:15:3e:e5:bd:5a:05:24:5a: f6:95:73:1d:13:39:61:3e:2a:a1:e5:b5:58:a9:67:83:47:84: bf:51:1e:b6:06:36:d6:8b:91:8c:28:c4:76:05:d2:6c:5e:7c: 47:5f:2a:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtt2EL9bwU0ZxfFdQbDegX+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2MjYxYzI2MTc1NmZhMDNhYzU3ZDFiZmM0ZGI4NTZlZjgw ODk3NWEwHhcNMjUxMjMwMDYwMDQ3WhcNMjUxMjMxMDYwMDQ3WjAzMTEwLwYDVQQD EygxYjlhMDBhYmFmMzE4NWMyZGQyOTNkNGNmZTk0ZDk4ZmM1MDY4MWNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHSvjjJtGujAqjNua8Z4kC/h3bH+ KENHi8z6TvxwdbDsl79RfzP0oEJa3wIYrsykW5+lzkX+0R/2uZdF+fVhVmvT2S9r BVAJ1Aqm1EZKeNH528yaB04bf9vWWf503OqiR5srHwIHfht2A7MbdDwjboUmgFVn QeoHD2dZeehNjSwNeAcJ+NC4i8a1K6ZOt1D6wqTwViFyPyz9lsue2dqpZJwWh5zq 5wTdL1XYGp8JN0BUA1BGOJ+qMijfaw6yzfRHuK+5mQ3eBYtymK+KN7Dhg1YGvQBX 7nvF3Oy6tZf/XfdM+BuRjCvaXZ1U70XbS9gvTKiPOP2uRjHni72cpXpiyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBuaAKuvMYXC3Sk9TP6U2Y/FBoHNMB8GA1UdIwQY MBaAFDYmHCYXVvoDrFfRv8TbhW74CJdaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmlZY0poZFctZ09zVjlHX3hOdUZidmdJbDFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8wYmFiMWYtOTJkNi00MmYwLWI5NTIt NDQyYzA4MGFlNTQxLzEvTmlZY0poZFctZ09zVjlHX3hOdUZidmdJbDFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS8wYmFiMWYtOTJkNi00MmYwLWI5NTItNDQyYzA4MGFlNTQx LzEvTmlZY0poZFctZ09zVjlHX3hOdUZidmdJbDFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY4w1ew7h dgOOqfg3OJgZaiORVF8KR7VOxj8bT/zFQbFTbGlW4CtLBnzm5idg8DRBfpZGs8k8 5HKkAlgmYE2pyd4ygofhGz58M8z8YCh7Nug7DipzPQNld1gCXvzSQBXPG//kJCN8 9ZIm4dVaqfKrwjAaHdjnP2Po9HHfid9r4+XW5/x5Z8p2SPaV/Nr3zCgy1slXB5DB Fe2z9uNQVgaJIexOaP4RxGB+I9UJTi3bBGS5+CJ1EoP1Fg2wYQtx2qlbH4kbUuuM rjZFw/CZ0/OhwhU+5b1aBSRa9pVzHRM5YT4qoeW1WKlng0eEv1EetgY21ouRjCjE dgXSbF58R18qMQ== -----END CERTIFICATE-----Generated at Tue Dec 30 14:59:38 2025 by rpki-client