This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/eecca5-c339-4918-a0a8-f61ec85d0f57/1/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.mft File: NtjBpzsVlRCdJgZ7QpH3HcHbmVc.mft (raw, json) Hash identifier: 4UGhupOiEnkzL/jixpz1K8IU9CTPUjX6qws20LfadUU= Subject key identifier: 38:56:12:2B:BA:B0:34:95:6C:43:13:CC:BF:9C:E5:BC:C0:95:5C:6D Authority key identifier: 36:D8:C1:A7:3B:15:95:10:9D:26:06:7B:42:91:F7:1D:C1:DB:99:57 Certificate issuer: /CN=36d8c1a73b1595109d26067b4291f71dc1db9957 Certificate serial: 019B31C43A9B1AE4E8FF4CC88BB4B14ED8D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/eecca5-c339-4918-a0a8-f61ec85d0f57/1/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.mft Manifest number: 118E Signing time: Thu 18 Dec 2025 14:01:42 +0000 Manifest this update: Thu 18 Dec 2025 14:01:42 +0000 Manifest next update: Fri 19 Dec 2025 14:01:42 +0000 Files and hashes: 1: NtjBpzsVlRCdJgZ7QpH3HcHbmVc.crl (hash: rwRcSv/fM1IIWDrseQXL+/RBVwE6BfHustb0+UPGbaU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/eecca5-c339-4918-a0a8-f61ec85d0f57/1/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.crl rsync://rpki.ripe.net/repository/DEFAULT/47/eecca5-c339-4918-a0a8-f61ec85d0f57/1/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.mft rsync://rpki.ripe.net/repository/DEFAULT/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:c4:3a:9b:1a:e4:e8:ff:4c:c8:8b:b4:b1:4e:d8:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36d8c1a73b1595109d26067b4291f71dc1db9957 Validity Not Before: Dec 18 14:01:42 2025 GMT Not After : Dec 19 14:01:42 2025 GMT Subject: CN=3856122bbab034956c4313ccbf9ce5bcc0955c6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:91:3f:6d:ec:d3:23:13:fc:55:e0:7a:3a:ea: b6:19:86:c5:f6:bb:b3:40:d3:7e:85:ed:68:67:e6: 7a:5d:9c:e9:55:c7:1d:6a:07:dc:ed:8b:f4:8e:d8: bf:9b:93:9e:fa:29:86:a0:14:fd:c6:22:74:53:a1: 45:2a:09:bb:d6:0a:7f:a4:fb:5a:8b:db:b1:c6:1b: 6d:81:27:05:8b:58:b2:2e:e6:f7:05:e8:71:5d:ae: a6:c4:2d:3b:64:25:4a:cb:b6:41:5a:9a:39:74:73: 16:d9:8e:ce:18:b2:36:17:d4:e4:68:98:b6:41:df: b3:07:41:ac:2a:17:cb:aa:fd:11:09:bc:28:97:4e: f9:fd:9c:bc:26:56:e4:ab:b0:ea:20:f6:ec:ee:4a: a2:a5:d6:b4:fe:17:74:11:ca:53:4a:4f:d6:50:4c: 42:29:99:e6:83:aa:11:65:3c:29:31:d2:9e:f2:d4: 65:17:b6:3f:0d:02:02:6d:7a:b6:ee:9b:ad:ea:f7: 51:38:aa:db:d2:46:3e:28:06:d3:ca:12:0b:90:3a: 3e:37:13:7a:c3:2d:31:e0:17:ec:6e:67:10:21:e2: 21:4b:4f:3f:49:fa:f4:f6:58:c0:39:05:47:39:dc: c0:76:cf:36:fa:fe:48:ee:d1:a9:13:c4:bc:10:b0: d5:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:56:12:2B:BA:B0:34:95:6C:43:13:CC:BF:9C:E5:BC:C0:95:5C:6D X509v3 Authority Key Identifier: keyid:36:D8:C1:A7:3B:15:95:10:9D:26:06:7B:42:91:F7:1D:C1:DB:99:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/eecca5-c339-4918-a0a8-f61ec85d0f57/1/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/eecca5-c339-4918-a0a8-f61ec85d0f57/1/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:e9:26:30:0b:33:b6:e3:64:0f:a9:a2:8f:a9:06:b1:7d:09: 3e:57:09:c5:e1:0e:5a:9f:a5:7a:1c:d4:03:0c:0e:42:f2:1e: ca:d8:5f:ce:fb:70:d3:12:2c:75:b9:70:57:78:bc:55:99:87: af:68:42:b5:1e:ca:49:31:31:12:81:cf:8d:08:f7:66:60:ba: ed:f4:a8:af:43:3e:d0:d4:4f:8b:ca:b0:3f:4c:30:54:e5:5b: cb:d6:1b:35:6e:61:c4:c7:af:c1:53:52:2e:8f:89:02:79:b4: 40:4d:95:ff:40:6b:2e:07:a1:10:01:f0:6a:55:c8:59:e3:cf: 8d:f9:14:cb:b0:5e:a5:2d:b2:44:d1:59:8f:44:97:b8:ae:e8: 8a:d8:a4:06:1e:5a:56:43:0e:2d:e4:bb:f4:6a:dc:e8:fd:ad: e6:02:2d:95:5a:1c:d5:7e:58:74:e0:bb:99:9e:17:83:0e:1f: 95:6d:3f:1a:c1:80:3f:26:0c:49:bd:52:45:12:e1:3c:bd:c1: 59:c8:d1:6a:9d:1a:56:74:97:7c:87:9e:c4:77:08:cc:78:a0: 46:7f:3e:b0:53:7c:3a:e9:7c:6f:5b:10:88:d6:ba:61:f7:dd: 40:ed:99:35:67:7c:24:1b:46:46:dc:a4:1f:51:ce:83:65:56: 5e:2c:b9:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxxDqbGuTo/0zIi7SxTtjQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2ZDhjMWE3M2IxNTk1MTA5ZDI2MDY3YjQyOTFmNzFkYzFk Yjk5NTcwHhcNMjUxMjE4MTQwMTQyWhcNMjUxMjE5MTQwMTQyWjAzMTEwLwYDVQQD EygzODU2MTIyYmJhYjAzNDk1NmM0MzEzY2NiZjljZTViY2MwOTU1YzZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJE/bezTIxP8VeB6Ouq2GYbF9ruz QNN+he1oZ+Z6XZzpVccdagfc7Yv0jti/m5Oe+imGoBT9xiJ0U6FFKgm71gp/pPta i9uxxhttgScFi1iyLub3BehxXa6mxC07ZCVKy7ZBWpo5dHMW2Y7OGLI2F9TkaJi2 Qd+zB0GsKhfLqv0RCbwol075/Zy8Jlbkq7DqIPbs7kqipda0/hd0EcpTSk/WUExC KZnmg6oRZTwpMdKe8tRlF7Y/DQICbXq27put6vdROKrb0kY+KAbTyhILkDo+NxN6 wy0x4BfsbmcQIeIhS08/Sfr09ljAOQVHOdzAds82+v5I7tGpE8S8ELDVgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDhWEiu6sDSVbEMTzL+c5bzAlVxtMB8GA1UdIwQY MBaAFDbYwac7FZUQnSYGe0KR9x3B25lXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnRqQnB6c1ZsUkNkSmdaN1FwSDNIY0hibVZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9lZWNjYTUtYzMzOS00OTE4LWEwYTgt ZjYxZWM4NWQwZjU3LzEvTnRqQnB6c1ZsUkNkSmdaN1FwSDNIY0hibVZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9lZWNjYTUtYzMzOS00OTE4LWEwYTgtZjYxZWM4NWQwZjU3 LzEvTnRqQnB6c1ZsUkNkSmdaN1FwSDNIY0hibVZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR+kmMAsz tuNkD6mij6kGsX0JPlcJxeEOWp+lehzUAwwOQvIeythfzvtw0xIsdblwV3i8VZmH r2hCtR7KSTExEoHPjQj3ZmC67fSor0M+0NRPi8qwP0wwVOVby9YbNW5hxMevwVNS Lo+JAnm0QE2V/0BrLgehEAHwalXIWePPjfkUy7BepS2yRNFZj0SXuK7oitikBh5a VkMOLeS79Grc6P2t5gItlVoc1X5YdOC7mZ4Xgw4flW0/GsGAPyYMSb1SRRLhPL3B WcjRap0aVnSXfIeexHcIzHigRn8+sFN8Oul8b1sQiNa6YffdQO2ZNWd8JBtGRtyk H1HOg2VWXiy5/g== -----END CERTIFICATE-----Generated at Thu Dec 18 18:37:17 2025 by rpki-client