This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/99ef87-f86c-4fac-84b6-316b03d502cc/1/neBXM--4s3ZMqT7jQJiIadlmA6o.mft File: neBXM--4s3ZMqT7jQJiIadlmA6o.mft (raw, json) Hash identifier: xDrK/ydr39jyKjtJkWJO8s/R6ixcUk+GfbEG79BrLnI= Subject key identifier: F7:75:A2:88:5C:99:2D:79:C9:7E:5A:4B:C6:78:0F:D5:85:35:5A:D8 Authority key identifier: 9D:E0:57:33:EF:B8:B3:76:4C:A9:3E:E3:40:98:88:69:D9:66:03:AA Certificate issuer: /CN=9de05733efb8b3764ca93ee340988869d96603aa Certificate serial: 019B5DF77C7104AFF744AF9B9F7BF4528013 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/neBXM--4s3ZMqT7jQJiIadlmA6o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/99ef87-f86c-4fac-84b6-316b03d502cc/1/neBXM--4s3ZMqT7jQJiIadlmA6o.mft Manifest number: 07C9 Signing time: Sat 27 Dec 2025 04:00:58 +0000 Manifest this update: Sat 27 Dec 2025 04:00:58 +0000 Manifest next update: Sun 28 Dec 2025 04:00:58 +0000 Files and hashes: 1: neBXM--4s3ZMqT7jQJiIadlmA6o.crl (hash: GMnqi1A3m1b8pyWrCSoBIy2eFRWCZ/BqN9ArJLh1W3o=) 2: sqmMGt0eDKyreQvWI_6aFaF0fMI.roa (hash: qdLfu3h3QsYojhl/lJoW5BgE1PTZ02X+GGEq14T1m/g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/99ef87-f86c-4fac-84b6-316b03d502cc/1/neBXM--4s3ZMqT7jQJiIadlmA6o.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/99ef87-f86c-4fac-84b6-316b03d502cc/1/neBXM--4s3ZMqT7jQJiIadlmA6o.mft rsync://rpki.ripe.net/repository/DEFAULT/neBXM--4s3ZMqT7jQJiIadlmA6o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5d:f7:7c:71:04:af:f7:44:af:9b:9f:7b:f4:52:80:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9de05733efb8b3764ca93ee340988869d96603aa Validity Not Before: Dec 27 04:00:58 2025 GMT Not After : Dec 28 04:00:58 2025 GMT Subject: CN=f775a2885c992d79c97e5a4bc6780fd585355ad8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:98:35:41:0b:94:4f:4d:8f:1f:49:e7:bc:2d: eb:0a:e6:67:62:41:e6:8e:f5:34:0a:b0:ea:ec:c1: 7e:0a:cb:35:24:b4:fe:f0:00:a1:f7:7e:1d:44:b8: 7d:22:e8:f7:6b:23:e5:85:5b:5f:e7:5a:7f:74:44: d5:bb:e8:5d:ee:66:fb:67:9c:5c:6b:eb:39:f4:2c: 9b:1b:a5:29:82:5d:3a:4d:c7:c8:bf:20:12:7e:f7: 8b:78:82:7e:0c:f2:0c:7b:1f:e6:62:56:bb:5f:6e: a3:06:11:df:8d:b2:01:43:74:76:bc:60:28:8b:9a: 65:55:97:e6:c7:26:b5:b0:ea:6a:59:72:2e:36:2a: 88:54:a3:8a:69:e1:5a:57:68:f2:6b:6c:a0:0b:4b: 51:ad:f4:50:83:b9:f8:87:07:15:96:5e:02:9e:ac: c2:ce:bb:d0:0e:54:25:fa:db:ab:36:3f:29:da:76: 85:a6:79:bb:6b:24:1d:f2:87:aa:4d:88:7b:af:86: 47:9e:ee:30:22:b7:85:24:76:0f:ba:f0:d2:1a:51: 86:c1:49:f3:74:f6:43:1a:5c:e0:be:d5:32:47:34: f4:4b:2a:d3:ba:99:44:7c:f5:43:b2:bd:f9:49:74: b8:bd:fc:1e:d8:8b:2a:d3:a6:99:08:e8:c0:d4:3b: f2:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:75:A2:88:5C:99:2D:79:C9:7E:5A:4B:C6:78:0F:D5:85:35:5A:D8 X509v3 Authority Key Identifier: keyid:9D:E0:57:33:EF:B8:B3:76:4C:A9:3E:E3:40:98:88:69:D9:66:03:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/neBXM--4s3ZMqT7jQJiIadlmA6o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/99ef87-f86c-4fac-84b6-316b03d502cc/1/neBXM--4s3ZMqT7jQJiIadlmA6o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/99ef87-f86c-4fac-84b6-316b03d502cc/1/neBXM--4s3ZMqT7jQJiIadlmA6o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:ed:8c:0c:db:e6:5f:c7:21:4e:12:2c:b5:f5:84:bf:56:27: f6:25:49:2c:2b:8d:8d:50:15:a6:41:9d:3b:bd:2e:05:d5:99: db:28:ff:33:29:62:58:99:63:97:e7:28:68:ee:d6:31:ef:3d: 4f:74:46:93:d8:b5:f9:36:d3:bc:2a:f7:9d:93:85:7f:dd:d2: c0:fa:0f:83:bd:5b:84:da:5e:d0:20:a5:99:ef:74:77:7d:a3: 47:eb:f9:55:30:87:7c:30:ca:11:46:1e:67:4b:2e:45:ce:41: ae:e9:16:c7:a3:97:96:56:95:f6:1f:0e:3b:12:62:44:56:51: 4d:af:51:6d:03:ee:e1:39:3a:02:fa:75:a9:3d:e3:d5:b7:3f: 21:91:41:2b:33:3b:34:19:23:43:76:46:ec:ac:4a:54:c3:d5: d0:80:6d:f1:bc:ca:be:46:d5:eb:95:4b:9f:ea:86:9b:e5:72: ab:2c:c0:71:0a:69:bc:99:35:b9:6f:29:d0:13:e7:4d:ee:30: 4e:2c:a4:02:65:ae:3d:e8:5f:80:68:97:06:0c:f2:a9:53:ca: c1:a2:f3:cf:c7:05:45:00:25:a2:b5:e6:2f:92:3b:ad:dc:7b: 15:11:86:8b:14:f0:94:0b:91:f7:2d:a7:ee:be:ad:12:ae:d3: fb:65:f4:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtd93xxBK/3RK+bn3v0UoATMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkZTA1NzMzZWZiOGIzNzY0Y2E5M2VlMzQwOTg4ODY5ZDk2 NjAzYWEwHhcNMjUxMjI3MDQwMDU4WhcNMjUxMjI4MDQwMDU4WjAzMTEwLwYDVQQD EyhmNzc1YTI4ODVjOTkyZDc5Yzk3ZTVhNGJjNjc4MGZkNTg1MzU1YWQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZg1QQuUT02PH0nnvC3rCuZnYkHm jvU0CrDq7MF+Css1JLT+8ACh934dRLh9Iuj3ayPlhVtf51p/dETVu+hd7mb7Z5xc a+s59CybG6Upgl06TcfIvyASfveLeIJ+DPIMex/mYla7X26jBhHfjbIBQ3R2vGAo i5plVZfmxya1sOpqWXIuNiqIVKOKaeFaV2jya2ygC0tRrfRQg7n4hwcVll4CnqzC zrvQDlQl+turNj8p2naFpnm7ayQd8oeqTYh7r4ZHnu4wIreFJHYPuvDSGlGGwUnz dPZDGlzgvtUyRzT0SyrTuplEfPVDsr35SXS4vfwe2Isq06aZCOjA1DvywwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPd1oohcmS15yX5aS8Z4D9WFNVrYMB8GA1UdIwQY MBaAFJ3gVzPvuLN2TKk+40CYiGnZZgOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmVCWE0tLTRzM1pNcVQ3alFKaUlhZGxtQTZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC85OWVmODctZjg2Yy00ZmFjLTg0YjYt MzE2YjAzZDUwMmNjLzEvbmVCWE0tLTRzM1pNcVQ3alFKaUlhZGxtQTZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC85OWVmODctZjg2Yy00ZmFjLTg0YjYtMzE2YjAzZDUwMmNj LzEvbmVCWE0tLTRzM1pNcVQ3alFKaUlhZGxtQTZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPO2MDNvm X8chThIstfWEv1Yn9iVJLCuNjVAVpkGdO70uBdWZ2yj/MyliWJljl+coaO7WMe89 T3RGk9i1+TbTvCr3nZOFf93SwPoPg71bhNpe0CClme90d32jR+v5VTCHfDDKEUYe Z0suRc5BrukWx6OXllaV9h8OOxJiRFZRTa9RbQPu4Tk6Avp1qT3j1bc/IZFBKzM7 NBkjQ3ZG7KxKVMPV0IBt8bzKvkbV65VLn+qGm+VyqyzAcQppvJk1uW8p0BPnTe4w TiykAmWuPehfgGiXBgzyqVPKwaLzz8cFRQAlorXmL5I7rdx7FRGGixTwlAuR9y2n 7r6tEq7T+2X0wQ== -----END CERTIFICATE-----Generated at Sat Dec 27 06:17:30 2025 by rpki-client