This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/NTYg2kRSrIKq9MjAiBnrC4JRO4M.mft File: NTYg2kRSrIKq9MjAiBnrC4JRO4M.mft (raw, json) Hash identifier: 87A9JdOKmbzHyOgt7dx3f2s8y2R+ld/jwl6HWaMY568= Subject key identifier: 95:62:3C:31:36:95:CA:EB:FE:F6:42:4C:6F:77:09:E4:EA:DC:C9:0A Authority key identifier: 35:36:20:DA:44:52:AC:82:AA:F4:C8:C0:88:19:EB:0B:82:51:3B:83 Certificate issuer: /CN=353620da4452ac82aaf4c8c08819eb0b82513b83 Certificate serial: 019B717E7FE74E7C0123E0D756E2BCD237E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NTYg2kRSrIKq9MjAiBnrC4JRO4M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/NTYg2kRSrIKq9MjAiBnrC4JRO4M.mft Manifest number: 05FE Signing time: Tue 30 Dec 2025 23:01:14 +0000 Manifest this update: Tue 30 Dec 2025 23:01:14 +0000 Manifest next update: Wed 31 Dec 2025 23:01:14 +0000 Files and hashes: 1: NTYg2kRSrIKq9MjAiBnrC4JRO4M.crl (hash: 1jfYHxnrWUZ0mLYrl8eoBy3MnCRost2xSO1v1HB3ZkA=) 2: YYXnMCAt040NcLATlrH2pdrRzy4.roa (hash: //AxvWil0+RRuTzD9Iyynz1Qj6s3Pa74fW9rqeU5a2Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/NTYg2kRSrIKq9MjAiBnrC4JRO4M.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/NTYg2kRSrIKq9MjAiBnrC4JRO4M.mft rsync://rpki.ripe.net/repository/DEFAULT/NTYg2kRSrIKq9MjAiBnrC4JRO4M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 23:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:71:7e:7f:e7:4e:7c:01:23:e0:d7:56:e2:bc:d2:37:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=353620da4452ac82aaf4c8c08819eb0b82513b83 Validity Not Before: Dec 30 23:01:14 2025 GMT Not After : Dec 31 23:01:14 2025 GMT Subject: CN=95623c313695caebfef6424c6f7709e4eadcc90a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:ed:de:7a:8c:64:72:b1:95:d8:95:de:44:af: fc:5a:6c:5c:20:ff:d0:dd:82:42:a9:04:17:fc:5d: 7b:fc:bb:86:78:07:f9:f0:a1:52:e4:2a:bd:7e:5b: 7c:b2:9f:8b:12:22:b6:46:36:62:bf:53:7d:71:9d: 1d:23:46:2b:7d:cc:a0:de:35:4a:22:03:36:b5:8c: 0c:41:7e:82:6d:6f:b6:92:bc:98:eb:b8:e9:77:e0: 3c:51:11:c2:51:52:f7:e3:da:5d:b6:66:b0:73:4c: 6d:90:a8:48:9a:4e:8f:db:ac:cf:f1:f9:8f:f9:04: cb:d7:9a:a4:80:ab:93:f1:be:c7:15:85:8e:fa:59: 3e:ad:c7:84:3a:da:07:a4:4c:6d:80:2e:af:a5:1c: 86:27:46:20:44:bf:70:23:c8:be:65:d9:57:58:96: b9:06:c6:6c:8b:37:d0:c3:e9:18:e6:40:9c:47:79: 98:15:cd:55:e9:fc:cb:0f:16:5c:f7:d7:58:c3:e3: c7:63:d9:63:fa:05:63:53:25:00:35:42:2a:20:a9: 27:49:65:e3:fd:ab:f2:52:33:90:56:c1:93:ca:7e: e1:e0:bd:95:76:49:6e:62:34:04:4f:dc:f8:c6:e0: a3:58:7c:ad:d3:b2:47:b2:ff:d5:bb:90:f1:a6:8f: f5:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:62:3C:31:36:95:CA:EB:FE:F6:42:4C:6F:77:09:E4:EA:DC:C9:0A X509v3 Authority Key Identifier: keyid:35:36:20:DA:44:52:AC:82:AA:F4:C8:C0:88:19:EB:0B:82:51:3B:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NTYg2kRSrIKq9MjAiBnrC4JRO4M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/NTYg2kRSrIKq9MjAiBnrC4JRO4M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/NTYg2kRSrIKq9MjAiBnrC4JRO4M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:71:6b:29:f8:0f:29:30:98:b1:3e:3e:82:0f:b0:7b:93:61: ed:49:8f:60:95:59:24:dc:1b:64:bc:e4:b0:2f:b0:5d:46:0f: 4b:24:01:4a:6c:d2:ee:85:08:4f:9d:03:26:1d:bb:67:fc:50: 8f:57:00:ef:8e:b6:34:9e:fe:f4:6d:65:ff:e6:90:1c:7e:ac: 44:24:30:8f:d7:96:94:de:23:dc:b7:73:a3:4e:02:79:b9:4f: 6b:d4:e6:18:a1:2b:7e:ab:56:3b:0b:ac:7f:d3:e7:cb:8b:c6: 16:9a:8f:9b:37:31:ab:87:55:9c:78:31:2b:bf:c5:fb:e5:85: 1b:58:e6:99:e6:dd:0b:4f:3d:f3:ac:b3:fc:6a:0b:15:a9:82: b8:f2:1a:d4:4a:2c:07:81:75:51:6c:ce:c4:9e:f0:f3:2d:26: 49:9b:f5:4a:b1:f0:79:fc:bd:12:1b:34:43:50:ae:92:9d:3c: 33:44:3f:f8:23:71:60:28:8a:03:8d:46:f4:6a:41:ae:3b:90: 5e:33:e2:ba:ab:49:d6:d0:42:0d:55:44:fa:59:c2:f3:99:de: 67:25:0d:40:ae:fe:9c:11:71:c2:4d:b3:c0:15:41:98:ff:1a: 22:2a:ca:12:0d:e5:11:5e:a4:bd:ad:aa:6d:e3:12:8d:bd:f3: 1c:62:0c:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtxfn/nTnwBI+DXVuK80jfoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MzYyMGRhNDQ1MmFjODJhYWY0YzhjMDg4MTllYjBiODI1 MTNiODMwHhcNMjUxMjMwMjMwMTE0WhcNMjUxMjMxMjMwMTE0WjAzMTEwLwYDVQQD Eyg5NTYyM2MzMTM2OTVjYWViZmVmNjQyNGM2Zjc3MDllNGVhZGNjOTBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5e3eeoxkcrGV2JXeRK/8WmxcIP/Q 3YJCqQQX/F17/LuGeAf58KFS5Cq9flt8sp+LEiK2RjZiv1N9cZ0dI0Yrfcyg3jVK IgM2tYwMQX6CbW+2kryY67jpd+A8URHCUVL349pdtmawc0xtkKhImk6P26zP8fmP +QTL15qkgKuT8b7HFYWO+lk+rceEOtoHpExtgC6vpRyGJ0YgRL9wI8i+ZdlXWJa5 BsZsizfQw+kY5kCcR3mYFc1V6fzLDxZc99dYw+PHY9lj+gVjUyUANUIqIKknSWXj /avyUjOQVsGTyn7h4L2VdkluYjQET9z4xuCjWHyt07JHsv/Vu5Dxpo/16QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJViPDE2lcrr/vZCTG93CeTq3MkKMB8GA1UdIwQY MBaAFDU2INpEUqyCqvTIwIgZ6wuCUTuDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlRZZzJrUlNySUtxOU1qQWlCbnJDNEpSTzRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9iZjI2MzEtY2ZhYy00YTg3LWEzN2It NTUxNTg0ZTVjMGE0LzEvTlRZZzJrUlNySUtxOU1qQWlCbnJDNEpSTzRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9iZjI2MzEtY2ZhYy00YTg3LWEzN2ItNTUxNTg0ZTVjMGE0 LzEvTlRZZzJrUlNySUtxOU1qQWlCbnJDNEpSTzRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApHFrKfgP KTCYsT4+gg+we5Nh7UmPYJVZJNwbZLzksC+wXUYPSyQBSmzS7oUIT50DJh27Z/xQ j1cA7462NJ7+9G1l/+aQHH6sRCQwj9eWlN4j3Ldzo04CeblPa9TmGKErfqtWOwus f9Pny4vGFpqPmzcxq4dVnHgxK7/F++WFG1jmmebdC08986yz/GoLFamCuPIa1Eos B4F1UWzOxJ7w8y0mSZv1SrHwefy9Ehs0Q1Cukp08M0Q/+CNxYCiKA41G9GpBrjuQ XjPiuqtJ1tBCDVVE+lnC85neZyUNQK7+nBFxwk2zwBVBmP8aIirKEg3lEV6kva2q beMSjb3zHGIMjw== -----END CERTIFICATE-----Generated at Wed Dec 31 02:00:32 2025 by rpki-client