This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.mft File: ntjaOohRtHbeS_Ob9QwDfZS2dUE.mft (raw, json) Hash identifier: lV/ZUGhzmuOqFZwjSXh4BRgPXOz32vSxrml8rZuUoOE= Subject key identifier: D1:49:7A:BF:0B:3F:79:BA:32:04:0A:19:38:9F:5B:ED:2A:AF:2D:8F Authority key identifier: 9E:D8:DA:3A:88:51:B4:76:DE:4B:F3:9B:F5:0C:03:7D:94:B6:75:41 Certificate issuer: /CN=9ed8da3a8851b476de4bf39bf50c037d94b67541 Certificate serial: 019B2F6708BE7664DFAC01A50C68F8C3023F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ntjaOohRtHbeS_Ob9QwDfZS2dUE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.mft Manifest number: 07D3 Signing time: Thu 18 Dec 2025 03:00:40 +0000 Manifest this update: Thu 18 Dec 2025 03:00:40 +0000 Manifest next update: Fri 19 Dec 2025 03:00:40 +0000 Files and hashes: 1: ntjaOohRtHbeS_Ob9QwDfZS2dUE.crl (hash: TRFTKqs57EwVqnZwD+7LmO61YAkEpeDYZa/9jPIxrM4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.crl rsync://rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.mft rsync://rpki.ripe.net/repository/DEFAULT/ntjaOohRtHbeS_Ob9QwDfZS2dUE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 03:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:67:08:be:76:64:df:ac:01:a5:0c:68:f8:c3:02:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ed8da3a8851b476de4bf39bf50c037d94b67541 Validity Not Before: Dec 18 03:00:40 2025 GMT Not After : Dec 19 03:00:40 2025 GMT Subject: CN=d1497abf0b3f79ba32040a19389f5bed2aaf2d8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:fa:03:5b:ba:33:b9:77:be:fb:ee:85:cd:2a: 7b:c9:89:aa:55:51:1f:ad:0f:26:71:e5:44:66:d8: e5:6d:e7:f9:6c:66:ab:21:70:b6:d1:09:d4:8e:17: df:1f:13:6c:aa:3a:18:2b:98:5a:48:12:19:ab:53: f1:25:95:07:c9:7d:ca:91:12:af:d9:8c:d9:df:c0: 4a:d8:99:ac:2b:78:cc:48:ed:6b:b2:9e:b5:53:97: 1a:15:6e:b2:65:df:d6:b4:50:61:47:87:45:d0:28: c3:7e:57:7f:05:4e:83:91:5b:cc:90:f1:82:8f:93: 15:d9:dc:33:dd:46:18:eb:73:ad:0c:27:98:05:db: e8:81:ad:c6:84:03:0f:dc:3b:55:d2:d8:00:8f:09: f0:56:04:53:e8:e1:a8:fa:9f:b7:60:4b:9a:22:e1: 90:fe:19:b3:b4:64:5c:ed:d6:42:78:11:09:f0:ff: 73:b9:7d:42:a8:b1:59:41:d0:87:96:3e:14:f7:d2: 14:40:59:e6:43:5b:a8:07:4f:4d:03:1b:91:38:dd: 27:25:ec:f8:9c:d6:fd:af:0e:cb:c5:d6:73:f5:df: f0:1a:75:eb:e5:3d:3d:36:02:94:2a:36:84:71:d9: 81:cf:59:a6:19:2d:9e:b3:c7:96:5a:27:d8:41:e3: 7d:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:49:7A:BF:0B:3F:79:BA:32:04:0A:19:38:9F:5B:ED:2A:AF:2D:8F X509v3 Authority Key Identifier: keyid:9E:D8:DA:3A:88:51:B4:76:DE:4B:F3:9B:F5:0C:03:7D:94:B6:75:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ntjaOohRtHbeS_Ob9QwDfZS2dUE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:88:62:e5:c3:bb:7e:31:35:92:72:37:4d:9a:4f:ba:ae:8b: c4:1c:ef:8c:81:fe:b6:dc:07:e1:8d:2e:6a:78:53:7b:08:0d: 4e:b1:26:45:60:dd:61:a0:01:c8:b3:2f:34:ba:6f:e0:77:ee: 6a:60:c9:d0:cd:93:90:a6:48:1f:cb:a7:80:ed:45:05:73:73: fc:3e:7c:7a:ad:52:df:a1:aa:a2:35:f8:63:40:85:80:e1:38: 50:b2:dc:84:6c:e9:9c:61:45:dc:a3:eb:40:af:15:5e:10:5f: 0e:b0:94:9b:c7:95:96:41:35:5f:d2:54:44:3e:db:2b:1f:2e: d0:35:9e:04:e7:0b:95:a7:b8:42:b0:d3:87:52:b2:cd:4e:01: e1:6a:c1:c6:d7:1f:23:95:60:12:d7:d0:b8:16:95:a4:2c:86: 99:c1:c1:05:df:17:b4:5d:79:c6:9d:48:e3:fe:86:49:c5:eb: aa:53:60:7b:04:4b:16:6d:bf:0b:b2:c3:26:62:89:13:20:48: 29:a1:cc:6c:bb:4d:cc:c1:c8:0b:ab:f1:75:d5:42:74:69:08: 1c:ee:1c:41:5f:1f:5b:6c:eb:5d:60:0a:aa:47:ff:93:9a:7e: 9e:18:85:21:1b:a5:fc:5f:a4:42:a7:19:bc:53:84:35:e0:66: fb:74:b9:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvZwi+dmTfrAGlDGj4wwI/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllZDhkYTNhODg1MWI0NzZkZTRiZjM5YmY1MGMwMzdkOTRi Njc1NDEwHhcNMjUxMjE4MDMwMDQwWhcNMjUxMjE5MDMwMDQwWjAzMTEwLwYDVQQD EyhkMTQ5N2FiZjBiM2Y3OWJhMzIwNDBhMTkzODlmNWJlZDJhYWYyZDhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5voDW7ozuXe+++6FzSp7yYmqVVEf rQ8mceVEZtjlbef5bGarIXC20QnUjhffHxNsqjoYK5haSBIZq1PxJZUHyX3KkRKv 2YzZ38BK2JmsK3jMSO1rsp61U5caFW6yZd/WtFBhR4dF0CjDfld/BU6DkVvMkPGC j5MV2dwz3UYY63OtDCeYBdvoga3GhAMP3DtV0tgAjwnwVgRT6OGo+p+3YEuaIuGQ /hmztGRc7dZCeBEJ8P9zuX1CqLFZQdCHlj4U99IUQFnmQ1uoB09NAxuRON0nJez4 nNb9rw7LxdZz9d/wGnXr5T09NgKUKjaEcdmBz1mmGS2es8eWWifYQeN9UQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNFJer8LP3m6MgQKGTifW+0qry2PMB8GA1UdIwQY MBaAFJ7Y2jqIUbR23kvzm/UMA32UtnVBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnRqYU9vaFJ0SGJlU19PYjlRd0RmWlMyZFVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9lOGVkOGMtNDUzNC00MmI3LWI4NDYt MDU3YzM3NDJhMWE1LzEvbnRqYU9vaFJ0SGJlU19PYjlRd0RmWlMyZFVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS9lOGVkOGMtNDUzNC00MmI3LWI4NDYtMDU3YzM3NDJhMWE1 LzEvbnRqYU9vaFJ0SGJlU19PYjlRd0RmWlMyZFVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYohi5cO7 fjE1knI3TZpPuq6LxBzvjIH+ttwH4Y0uanhTewgNTrEmRWDdYaAByLMvNLpv4Hfu amDJ0M2TkKZIH8ungO1FBXNz/D58eq1S36GqojX4Y0CFgOE4ULLchGzpnGFF3KPr QK8VXhBfDrCUm8eVlkE1X9JURD7bKx8u0DWeBOcLlae4QrDTh1KyzU4B4WrBxtcf I5VgEtfQuBaVpCyGmcHBBd8XtF15xp1I4/6GScXrqlNgewRLFm2/C7LDJmKJEyBI KaHMbLtNzMHIC6vxddVCdGkIHO4cQV8fW2zrXWAKqkf/k5p+nhiFIRul/F+kQqcZ vFOENeBm+3S52A== -----END CERTIFICATE-----Generated at Thu Dec 18 09:51:13 2025 by rpki-client