This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/ntDE_0qQBzKIuXZ0aUFCch9bhDU.mft File: ntDE_0qQBzKIuXZ0aUFCch9bhDU.mft (raw, json) Hash identifier: fToeBdXlYabSZMgLy2trBb2BZPIEM4Cjgc0tTyZtG0o= Subject key identifier: 61:12:21:42:4D:EE:36:DE:F5:C2:F2:E0:6F:BF:F8:89:59:F9:E5:7D Authority key identifier: 9E:D0:C4:FF:4A:90:07:32:88:B9:76:74:69:41:42:72:1F:5B:84:35 Certificate issuer: /CN=9ed0c4ff4a90073288b97674694142721f5b8435 Certificate serial: 019B4F293E53C7D715C50B391243CF0BC319 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ntDE_0qQBzKIuXZ0aUFCch9bhDU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/ntDE_0qQBzKIuXZ0aUFCch9bhDU.mft Manifest number: 126E Signing time: Wed 24 Dec 2025 07:01:01 +0000 Manifest this update: Wed 24 Dec 2025 07:01:01 +0000 Manifest next update: Thu 25 Dec 2025 07:01:01 +0000 Files and hashes: 1: lvu-JvjbXEF_A88P3AVxK9ro79o.roa (hash: 0s/Gju+rMxr3Xpuwq8caLrN7lhLdmbw4Qi63j5N3TJk=) 2: ntDE_0qQBzKIuXZ0aUFCch9bhDU.crl (hash: AXphsd9fqt0MMJioDhbdlkkaDqDgpBKJ1j9NFnKFe1M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/ntDE_0qQBzKIuXZ0aUFCch9bhDU.crl rsync://rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/ntDE_0qQBzKIuXZ0aUFCch9bhDU.mft rsync://rpki.ripe.net/repository/DEFAULT/ntDE_0qQBzKIuXZ0aUFCch9bhDU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 07:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:29:3e:53:c7:d7:15:c5:0b:39:12:43:cf:0b:c3:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ed0c4ff4a90073288b97674694142721f5b8435 Validity Not Before: Dec 24 07:01:01 2025 GMT Not After : Dec 25 07:01:01 2025 GMT Subject: CN=611221424dee36def5c2f2e06fbff88959f9e57d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:ec:e6:1d:db:61:cd:90:af:46:05:7a:85:79: 1e:35:d6:fc:4b:39:2d:65:a7:b0:3c:e9:ad:76:93: 87:3e:e7:f7:a1:fc:9d:f7:58:cf:91:11:9c:04:17: 4b:01:67:ff:b2:d0:db:0f:18:d6:db:3b:7c:ff:21: 8e:5e:31:c1:60:a1:d1:64:94:ab:fe:5e:b7:23:b9: b9:a2:2a:15:55:b6:3a:70:08:a8:19:8e:e0:a5:8b: af:a9:7e:46:7f:58:2c:a9:1c:13:a0:b3:bd:f1:13: 7d:aa:2c:3b:b9:2e:75:56:47:47:76:bb:11:47:57: 03:38:f1:c2:42:31:6d:44:86:4d:f2:a3:fd:a1:3c: 38:ff:12:b9:c7:9e:36:24:27:ec:88:f9:08:4e:80: 56:c4:97:ab:b7:88:dd:ba:0c:78:d0:a3:66:15:3d: a6:da:6e:6d:69:11:fd:b2:79:e6:8c:70:97:c4:cd: f5:c8:35:30:48:55:b7:35:e5:7f:68:4e:ad:a0:cf: 54:56:a9:d4:79:32:de:3e:0d:51:4b:7b:ae:fa:84: 8f:14:07:27:7c:4a:69:ae:bf:9e:b6:52:2c:cf:29: 00:f8:d7:91:cf:6b:75:c1:bf:0d:81:37:d4:33:be: c5:3d:35:bb:6a:ea:84:dc:86:43:78:16:61:87:e0: ea:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:12:21:42:4D:EE:36:DE:F5:C2:F2:E0:6F:BF:F8:89:59:F9:E5:7D X509v3 Authority Key Identifier: keyid:9E:D0:C4:FF:4A:90:07:32:88:B9:76:74:69:41:42:72:1F:5B:84:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ntDE_0qQBzKIuXZ0aUFCch9bhDU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/ntDE_0qQBzKIuXZ0aUFCch9bhDU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/ntDE_0qQBzKIuXZ0aUFCch9bhDU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:77:3c:7c:a6:ba:21:9b:41:fa:86:69:12:ac:1b:d8:8d:9e: 18:c5:25:ed:92:50:e2:8b:2e:5e:cf:9a:52:f8:ba:60:19:6d: 60:c6:3c:ee:75:d5:3f:c1:b0:dd:00:4a:b5:59:44:c8:4d:e7: 9c:e3:00:78:7d:3b:2f:25:d5:e5:bb:db:44:a3:30:0b:e4:f6: 85:9e:35:81:61:d4:fd:22:ee:cb:a1:c7:13:ad:3f:ec:52:8c: df:96:e6:a7:bf:db:ad:98:a8:a5:18:0d:f2:1f:17:9c:c9:a4: 1f:f1:1b:ad:2c:de:04:15:e3:12:71:70:a8:37:71:18:59:66: f1:bd:fe:89:9c:a4:4b:e6:66:33:ed:fe:57:76:b3:28:cd:9c: 8f:8b:7e:18:74:52:bd:86:cc:9a:f3:fc:a5:9c:89:8e:1b:60: 48:09:28:85:17:20:4e:4b:43:1d:64:43:41:77:9c:42:a3:b0: 7d:e8:3f:1c:b8:71:01:6a:9e:9d:9c:5f:c4:5c:21:05:c2:39: c2:48:df:0b:91:52:84:ea:38:a0:68:65:14:11:32:c5:cd:b0: e8:f2:2e:da:cf:1a:cc:20:d7:69:7a:48:b2:0c:60:ce:e1:e4: 9b:b2:66:c5:67:c7:a4:8d:7d:8c:d1:13:07:fb:2d:6c:da:7a: 55:82:66:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPKT5Tx9cVxQs5EkPPC8MZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllZDBjNGZmNGE5MDA3MzI4OGI5NzY3NDY5NDE0MjcyMWY1 Yjg0MzUwHhcNMjUxMjI0MDcwMTAxWhcNMjUxMjI1MDcwMTAxWjAzMTEwLwYDVQQD Eyg2MTEyMjE0MjRkZWUzNmRlZjVjMmYyZTA2ZmJmZjg4OTU5ZjllNTdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmezmHdthzZCvRgV6hXkeNdb8Szkt ZaewPOmtdpOHPuf3ofyd91jPkRGcBBdLAWf/stDbDxjW2zt8/yGOXjHBYKHRZJSr /l63I7m5oioVVbY6cAioGY7gpYuvqX5Gf1gsqRwToLO98RN9qiw7uS51VkdHdrsR R1cDOPHCQjFtRIZN8qP9oTw4/xK5x542JCfsiPkIToBWxJert4jdugx40KNmFT2m 2m5taRH9snnmjHCXxM31yDUwSFW3NeV/aE6toM9UVqnUeTLePg1RS3uu+oSPFAcn fEpprr+etlIszykA+NeRz2t1wb8NgTfUM77FPTW7auqE3IZDeBZhh+Dq5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGESIUJN7jbe9cLy4G+/+IlZ+eV9MB8GA1UdIwQY MBaAFJ7QxP9KkAcyiLl2dGlBQnIfW4Q1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnRERV8wcVFCektJdVhaMGFVRkNjaDliaERVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi85YTUwZjEtMjk0Yi00OGU0LWJlYWYt MWRjYWQ4ZTY4ZWQ5LzEvbnRERV8wcVFCektJdVhaMGFVRkNjaDliaERVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi85YTUwZjEtMjk0Yi00OGU0LWJlYWYtMWRjYWQ4ZTY4ZWQ5 LzEvbnRERV8wcVFCektJdVhaMGFVRkNjaDliaERVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzXc8fKa6 IZtB+oZpEqwb2I2eGMUl7ZJQ4osuXs+aUvi6YBltYMY87nXVP8Gw3QBKtVlEyE3n nOMAeH07LyXV5bvbRKMwC+T2hZ41gWHU/SLuy6HHE60/7FKM35bmp7/brZiopRgN 8h8XnMmkH/EbrSzeBBXjEnFwqDdxGFlm8b3+iZykS+ZmM+3+V3azKM2cj4t+GHRS vYbMmvP8pZyJjhtgSAkohRcgTktDHWRDQXecQqOwfeg/HLhxAWqenZxfxFwhBcI5 wkjfC5FShOo4oGhlFBEyxc2w6PIu2s8azCDXaXpIsgxgzuHkm7JmxWfHpI19jNET B/stbNp6VYJm3g== -----END CERTIFICATE-----Generated at Wed Dec 24 15:46:16 2025 by rpki-client