This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.mft File: b-NJEELvMdzG4K2OVcvhSd0MMYI.mft (raw, json) Hash identifier: Js2DrVzmsQEvbLM8aS0IC0pxGucbae4VLGB6VzQKDDs= Subject key identifier: 1A:72:1F:07:DA:A2:1D:E2:42:7E:D8:C9:EB:7F:01:04:34:68:77:9E Authority key identifier: 6F:E3:49:10:42:EF:31:DC:C6:E0:AD:8E:55:CB:E1:49:DD:0C:31:82 Certificate issuer: /CN=6fe3491042ef31dcc6e0ad8e55cbe149dd0c3182 Certificate serial: 019B2B1CE73216CAF8F78189186DD53979BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b-NJEELvMdzG4K2OVcvhSd0MMYI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.mft Manifest number: 0F46 Signing time: Wed 17 Dec 2025 07:01:13 +0000 Manifest this update: Wed 17 Dec 2025 07:01:13 +0000 Manifest next update: Thu 18 Dec 2025 07:01:13 +0000 Files and hashes: 1: ZIja49CzE0s2C9AlBaxxTa5EnBc.roa (hash: Mwwwh5zbLqqLKLq4mDwCxjzrltfztiX/y2yTkp5xrGs=) 2: b-NJEELvMdzG4K2OVcvhSd0MMYI.crl (hash: L3EO5mcm6/94aIZwzwl/ZVnouZBYo/gQps9XsiaLwoU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.mft rsync://rpki.ripe.net/repository/DEFAULT/b-NJEELvMdzG4K2OVcvhSd0MMYI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 07:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:1c:e7:32:16:ca:f8:f7:81:89:18:6d:d5:39:79:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6fe3491042ef31dcc6e0ad8e55cbe149dd0c3182 Validity Not Before: Dec 17 07:01:13 2025 GMT Not After : Dec 18 07:01:13 2025 GMT Subject: CN=1a721f07daa21de2427ed8c9eb7f01043468779e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:e2:71:d3:33:76:c7:68:3f:4e:6a:80:3d:28: 01:9f:22:3c:c2:df:45:8f:32:66:a6:16:7f:8f:e1: 4a:a1:0a:1c:a3:8d:31:f9:9f:25:c8:a7:96:ee:a7: 4f:c7:56:66:e9:57:e2:32:ff:a0:b2:88:8e:48:b1: 07:dd:51:fd:14:14:26:ca:fd:79:14:84:d7:44:f4: 4f:0f:23:ef:cd:83:8b:ff:2b:6c:a0:5b:8e:6d:a6: cf:d2:dd:ac:f1:c0:d2:a4:15:ef:81:0f:5e:a6:fc: 17:55:a4:35:a0:5e:64:2e:7b:c4:12:b4:a2:65:36: 4c:2d:01:48:8a:fe:26:4a:f5:45:01:85:2e:f4:2c: 9b:c5:38:d7:60:12:df:3a:28:58:28:bc:97:33:ba: 3c:ff:93:93:8f:57:af:3c:d9:df:a7:38:ff:cd:c6: 8a:78:07:ee:d3:88:83:8f:fb:39:ce:17:b4:e7:53: e0:77:36:40:c8:36:05:d3:c8:f7:a5:42:a2:00:80: 93:19:f0:8d:03:a9:67:7e:5e:0b:2a:ff:2c:7e:e0: 77:bd:54:07:7a:11:88:b3:4c:78:c4:e0:72:bd:db: 69:6d:ec:3f:fb:ab:0a:92:ff:09:ae:22:f3:da:02: 6b:06:72:80:ca:78:90:ea:0b:a3:80:d8:1d:c8:da: 7a:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:72:1F:07:DA:A2:1D:E2:42:7E:D8:C9:EB:7F:01:04:34:68:77:9E X509v3 Authority Key Identifier: keyid:6F:E3:49:10:42:EF:31:DC:C6:E0:AD:8E:55:CB:E1:49:DD:0C:31:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b-NJEELvMdzG4K2OVcvhSd0MMYI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:63:9c:fb:98:03:82:0c:66:35:c8:5d:00:e9:86:6a:42:c4: 99:10:52:87:c9:4a:f1:a0:c2:96:dc:f1:9d:18:c4:a1:66:9f: 18:13:8c:79:58:c6:3d:59:7f:24:99:80:ea:0a:cd:7e:4d:0d: fb:28:cb:95:a2:c7:65:20:49:b4:7d:f6:19:a0:56:2c:39:be: 99:5c:10:5c:66:d6:46:a5:2d:60:9a:12:90:c6:bf:75:90:fb: 8f:cc:24:2d:ab:f8:2d:d9:78:82:f6:f3:20:cb:8f:88:4e:3f: a4:f2:7d:3d:47:6b:a8:7a:5f:fc:86:9c:d8:ee:c1:0b:1a:89: 0a:9f:4d:af:fd:42:a0:2c:02:50:8d:ea:c2:c0:05:ca:bb:6c: eb:eb:6f:ec:1c:10:08:5c:75:70:ad:08:74:37:55:a1:cb:9c: 50:7f:e6:f7:fe:85:5c:e8:66:68:89:8a:97:b0:d4:80:e0:eb: 88:e2:1f:14:39:9b:a2:74:f1:6d:0f:b0:d8:e6:af:51:86:e5: 2e:40:a3:b2:c6:aa:64:4e:03:a9:2c:bb:d5:da:df:04:62:b1: a1:e8:a6:0e:55:10:d8:81:af:d8:ff:68:04:06:97:ac:f4:0a: 7c:e8:88:10:3e:c7:ee:1d:87:6a:cc:d4:c5:62:0b:d2:b3:43: 9d:47:71:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrHOcyFsr494GJGG3VOXm7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmZTM0OTEwNDJlZjMxZGNjNmUwYWQ4ZTU1Y2JlMTQ5ZGQw YzMxODIwHhcNMjUxMjE3MDcwMTEzWhcNMjUxMjE4MDcwMTEzWjAzMTEwLwYDVQQD EygxYTcyMWYwN2RhYTIxZGUyNDI3ZWQ4YzllYjdmMDEwNDM0Njg3NzllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8eJx0zN2x2g/TmqAPSgBnyI8wt9F jzJmphZ/j+FKoQoco40x+Z8lyKeW7qdPx1Zm6VfiMv+gsoiOSLEH3VH9FBQmyv15 FITXRPRPDyPvzYOL/ytsoFuObabP0t2s8cDSpBXvgQ9epvwXVaQ1oF5kLnvEErSi ZTZMLQFIiv4mSvVFAYUu9CybxTjXYBLfOihYKLyXM7o8/5OTj1evPNnfpzj/zcaK eAfu04iDj/s5zhe051PgdzZAyDYF08j3pUKiAICTGfCNA6lnfl4LKv8sfuB3vVQH ehGIs0x4xOByvdtpbew/+6sKkv8JriLz2gJrBnKAyniQ6gujgNgdyNp6wwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBpyHwfaoh3iQn7Yyet/AQQ0aHeeMB8GA1UdIwQY MBaAFG/jSRBC7zHcxuCtjlXL4UndDDGCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYi1OSkVFTHZNZHpHNEsyT1ZjdmhTZDBNTVlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9mODliZjAtM2Q2Zi00YjRkLWJmNDIt Yzc4YmQyMjhhOTFkLzEvYi1OSkVFTHZNZHpHNEsyT1ZjdmhTZDBNTVlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC9mODliZjAtM2Q2Zi00YjRkLWJmNDItYzc4YmQyMjhhOTFk LzEvYi1OSkVFTHZNZHpHNEsyT1ZjdmhTZDBNTVlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiWOc+5gD ggxmNchdAOmGakLEmRBSh8lK8aDCltzxnRjEoWafGBOMeVjGPVl/JJmA6grNfk0N +yjLlaLHZSBJtH32GaBWLDm+mVwQXGbWRqUtYJoSkMa/dZD7j8wkLav4Ldl4gvbz IMuPiE4/pPJ9PUdrqHpf/Iac2O7BCxqJCp9Nr/1CoCwCUI3qwsAFyrts6+tv7BwQ CFx1cK0IdDdVocucUH/m9/6FXOhmaImKl7DUgODriOIfFDmbonTxbQ+w2OavUYbl LkCjssaqZE4DqSy71drfBGKxoeimDlUQ2IGv2P9oBAaXrPQKfOiIED7H7h2HaszU xWIL0rNDnUdx3A== -----END CERTIFICATE-----Generated at Wed Dec 17 13:27:09 2025 by rpki-client