This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft File: NoBlGroGa0CEp-0g1_UgGyKWwZc.mft (raw, json) Hash identifier: aP/ceGTIgO4YEb+oNM+jbJD+ROiBuF0eU/r+ZMiwZPc= Subject key identifier: DC:F8:B1:EF:12:44:A8:CD:28:E8:C5:0A:A8:42:87:79:4B:5A:BF:EC Authority key identifier: 36:80:65:1A:BA:06:6B:40:84:A7:ED:20:D7:F5:20:1B:22:96:C1:97 Certificate issuer: /CN=3680651aba066b4084a7ed20d7f5201b2296c197 Certificate serial: 019B4136FD75966C57D6944A86B91DE1650D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NoBlGroGa0CEp-0g1_UgGyKWwZc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft Manifest number: 07AB Signing time: Sun 21 Dec 2025 14:01:21 +0000 Manifest this update: Sun 21 Dec 2025 14:01:21 +0000 Manifest next update: Mon 22 Dec 2025 14:01:21 +0000 Files and hashes: 1: 4WEE6M8dthgW-fAXTbXKabGLlL0.roa (hash: Vz/LsTTjIy8GCO6P/Fc6vDeS0OdzaRulpb9xjUaoVO0=) 2: NoBlGroGa0CEp-0g1_UgGyKWwZc.crl (hash: BlhB44wBabOami5XWYwatND4YLPDdCzL21Zv1sbC/qE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft rsync://rpki.ripe.net/repository/DEFAULT/NoBlGroGa0CEp-0g1_UgGyKWwZc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:36:fd:75:96:6c:57:d6:94:4a:86:b9:1d:e1:65:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3680651aba066b4084a7ed20d7f5201b2296c197 Validity Not Before: Dec 21 14:01:21 2025 GMT Not After : Dec 22 14:01:21 2025 GMT Subject: CN=dcf8b1ef1244a8cd28e8c50aa84287794b5abfec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c0:53:0a:73:93:23:a7:0c:54:ea:e9:20:74: 6d:04:e0:4a:14:cf:49:a1:46:46:f6:b7:67:31:9a: 82:3c:a2:ae:17:98:8c:67:26:82:4f:bc:a4:84:a7: 86:43:69:f7:5c:b8:63:23:54:8b:e1:3f:7a:db:7d: eb:3a:1a:4a:27:86:71:21:e4:f2:f0:71:29:a8:95: d7:cc:cd:93:41:66:fd:76:fd:ea:4b:12:d1:aa:74: 2e:d1:f6:7e:81:05:bd:c7:85:b0:56:ff:43:4f:dd: da:41:80:55:3d:d0:b2:2c:2d:64:57:4f:17:9c:37: f4:90:a2:d8:4e:7d:eb:6e:de:15:b6:f8:3f:81:9e: 99:f7:ed:6d:3f:59:eb:6c:b5:a7:09:72:eb:7e:4e: 04:30:07:ab:b5:d9:8c:38:36:39:36:a3:ad:a5:27: 63:00:14:3a:ce:b1:a1:c5:1c:b9:88:54:25:9e:04: 22:3c:45:3d:9a:aa:86:c3:3f:42:fa:dc:c1:1e:c4: 16:58:ff:32:5a:d9:14:fb:bc:11:71:34:89:ba:25: e6:d3:ee:b9:31:5d:f6:5e:b3:bd:f3:f7:63:b1:40: a8:57:8b:6d:04:8d:2b:3e:07:ee:27:78:aa:1b:03: 1f:92:dd:c7:3a:2e:7d:5d:14:8c:91:07:48:2d:d1: 9e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:F8:B1:EF:12:44:A8:CD:28:E8:C5:0A:A8:42:87:79:4B:5A:BF:EC X509v3 Authority Key Identifier: keyid:36:80:65:1A:BA:06:6B:40:84:A7:ED:20:D7:F5:20:1B:22:96:C1:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NoBlGroGa0CEp-0g1_UgGyKWwZc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:02:7e:d1:25:7a:9c:5e:09:ee:bf:ad:87:71:1c:71:78:06: b2:52:fd:e7:e3:3e:61:44:8e:d9:b5:0f:72:21:8c:d4:10:61: 5c:a1:80:ed:81:a6:f1:1b:a2:a3:3b:23:94:15:96:75:f7:22: b6:d6:5a:0c:25:8b:e9:29:a3:a2:80:8a:4e:bb:64:c9:b1:72: 3c:38:12:be:00:af:27:cd:82:f0:1d:c6:be:2c:b6:74:a3:d4: cd:65:a0:58:3e:38:94:06:d1:22:4a:9d:6c:d3:a6:8c:37:8a: 5f:e2:4b:d1:67:34:57:63:16:32:1b:c5:e2:00:f8:48:db:89: e3:37:70:0e:f5:ce:49:c2:60:62:ce:80:dd:0c:bf:15:61:76: f4:a7:b8:43:62:38:38:56:f3:23:32:98:58:d7:87:7a:ab:d5: 87:e3:82:53:96:f3:74:24:2d:ec:7b:07:c3:d9:e2:55:8f:23: e8:26:cd:16:39:30:0d:c9:fe:85:1a:a8:be:1d:fc:c8:bd:1f: 11:f2:90:54:b5:30:25:e2:5a:78:53:d0:55:d2:7a:ac:0b:55: 4b:79:57:5b:38:a9:3d:00:3c:ad:74:e2:f5:ce:66:92:03:a9: 6e:13:13:b4:ed:8e:97:5c:b8:25:5d:56:82:89:2f:c1:18:d4: 32:33:68:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBNv11lmxX1pRKhrkd4WUNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2ODA2NTFhYmEwNjZiNDA4NGE3ZWQyMGQ3ZjUyMDFiMjI5 NmMxOTcwHhcNMjUxMjIxMTQwMTIxWhcNMjUxMjIyMTQwMTIxWjAzMTEwLwYDVQQD EyhkY2Y4YjFlZjEyNDRhOGNkMjhlOGM1MGFhODQyODc3OTRiNWFiZmVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsBTCnOTI6cMVOrpIHRtBOBKFM9J oUZG9rdnMZqCPKKuF5iMZyaCT7ykhKeGQ2n3XLhjI1SL4T96233rOhpKJ4ZxIeTy 8HEpqJXXzM2TQWb9dv3qSxLRqnQu0fZ+gQW9x4WwVv9DT93aQYBVPdCyLC1kV08X nDf0kKLYTn3rbt4Vtvg/gZ6Z9+1tP1nrbLWnCXLrfk4EMAertdmMODY5NqOtpSdj ABQ6zrGhxRy5iFQlngQiPEU9mqqGwz9C+tzBHsQWWP8yWtkU+7wRcTSJuiXm0+65 MV32XrO98/djsUCoV4ttBI0rPgfuJ3iqGwMfkt3HOi59XRSMkQdILdGe/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNz4se8SRKjNKOjFCqhCh3lLWr/sMB8GA1UdIwQY MBaAFDaAZRq6BmtAhKftINf1IBsilsGXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTm9CbEdyb0dhMENFcC0wZzFfVWdHeUtXd1pjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9kMTBiOTQtNDEwNS00NWUyLWE3MDct NTIyNGNmMTNmNTg2LzEvTm9CbEdyb0dhMENFcC0wZzFfVWdHeUtXd1pjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9kMTBiOTQtNDEwNS00NWUyLWE3MDctNTIyNGNmMTNmNTg2 LzEvTm9CbEdyb0dhMENFcC0wZzFfVWdHeUtXd1pjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANAJ+0SV6 nF4J7r+th3EccXgGslL95+M+YUSO2bUPciGM1BBhXKGA7YGm8RuiozsjlBWWdfci ttZaDCWL6SmjooCKTrtkybFyPDgSvgCvJ82C8B3Gviy2dKPUzWWgWD44lAbRIkqd bNOmjDeKX+JL0Wc0V2MWMhvF4gD4SNuJ4zdwDvXOScJgYs6A3Qy/FWF29Ke4Q2I4 OFbzIzKYWNeHeqvVh+OCU5bzdCQt7HsHw9niVY8j6CbNFjkwDcn+hRqovh38yL0f EfKQVLUwJeJaeFPQVdJ6rAtVS3lXWzipPQA8rXTi9c5mkgOpbhMTtO2Ol1y4JV1W gokvwRjUMjNo5A== -----END CERTIFICATE-----Generated at Sun Dec 21 17:27:25 2025 by rpki-client