This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/nOTmWuzJXURqDLZAuXZvoPgVDjw.mft File: nOTmWuzJXURqDLZAuXZvoPgVDjw.mft (raw, json) Hash identifier: Q4L6Dvx5cIvTQg5TaIF29CDzLNEqKBtsiOV4EDUhb9M= Subject key identifier: 2F:A5:23:23:FF:BD:76:0A:29:9E:70:D9:43:05:31:79:EC:4E:02:F0 Authority key identifier: 9C:E4:E6:5A:EC:C9:5D:44:6A:0C:B6:40:B9:76:6F:A0:F8:15:0E:3C Certificate issuer: /CN=9ce4e65aecc95d446a0cb640b9766fa0f8150e3c Certificate serial: 019B3C7FDA5F4C9E0D4B852868E7A86E27B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nOTmWuzJXURqDLZAuXZvoPgVDjw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/nOTmWuzJXURqDLZAuXZvoPgVDjw.mft Manifest number: 108B Signing time: Sat 20 Dec 2025 16:02:50 +0000 Manifest this update: Sat 20 Dec 2025 16:02:50 +0000 Manifest next update: Sun 21 Dec 2025 16:02:50 +0000 Files and hashes: 1: nOTmWuzJXURqDLZAuXZvoPgVDjw.crl (hash: wsCk1apuBji7Dqe5JW90ld7WX4Xu3nJI5O556xk0EGs=) 2: wnex2LpnDh2tDYAOL_JlA2jqYbg.roa (hash: jkFPmngwGBf/VR9fqzS0+q+xo9EQNuNbpIxHsY+rxw0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/nOTmWuzJXURqDLZAuXZvoPgVDjw.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/nOTmWuzJXURqDLZAuXZvoPgVDjw.mft rsync://rpki.ripe.net/repository/DEFAULT/nOTmWuzJXURqDLZAuXZvoPgVDjw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 16:02:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:da:5f:4c:9e:0d:4b:85:28:68:e7:a8:6e:27:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ce4e65aecc95d446a0cb640b9766fa0f8150e3c Validity Not Before: Dec 20 16:02:50 2025 GMT Not After : Dec 21 16:02:50 2025 GMT Subject: CN=2fa52323ffbd760a299e70d943053179ec4e02f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b5:6b:96:3b:83:19:3d:40:10:5b:11:9e:95: a6:b4:fc:35:6c:4a:61:f3:23:9f:0d:82:d7:4b:40: 2f:1a:6e:4c:92:41:e5:14:99:62:c8:8e:7b:ef:c3: 26:39:37:eb:6d:76:64:80:81:50:f0:91:5f:73:eb: 06:80:45:e4:78:c7:9e:ec:41:39:14:f2:b5:19:e7: 68:8a:1f:82:be:78:bf:b8:c7:f0:01:11:94:fb:15: ed:80:2d:da:81:3b:1a:ad:c5:ad:90:f7:3e:c9:75: ee:66:6b:3d:48:47:04:25:84:16:65:fd:5e:d7:d3: 88:8b:92:11:4a:09:9a:09:30:2e:1a:ce:3b:73:8e: b0:ef:59:d8:d7:d1:8a:a8:79:d3:a6:b0:c6:2d:10: f9:d4:b3:c5:2a:75:9a:21:4a:cc:08:b3:6a:f5:28: d2:60:60:d8:bf:c2:e5:9e:e4:eb:94:3d:5e:c1:be: e3:6f:ad:e0:81:09:73:78:e0:b9:77:a9:4e:ef:4a: 3a:34:68:11:1f:d0:86:33:d0:39:9d:fb:69:51:78: 66:67:22:98:8e:a9:7c:c7:ed:f9:c6:a9:22:94:19: 05:4c:0f:ab:07:a6:d4:4c:59:29:a7:94:47:c5:8c: 12:89:fd:d4:0f:73:24:e5:2d:74:da:0b:b8:b1:48: 52:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:A5:23:23:FF:BD:76:0A:29:9E:70:D9:43:05:31:79:EC:4E:02:F0 X509v3 Authority Key Identifier: keyid:9C:E4:E6:5A:EC:C9:5D:44:6A:0C:B6:40:B9:76:6F:A0:F8:15:0E:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nOTmWuzJXURqDLZAuXZvoPgVDjw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/nOTmWuzJXURqDLZAuXZvoPgVDjw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/nOTmWuzJXURqDLZAuXZvoPgVDjw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:f6:6d:ca:51:63:47:c0:68:46:c4:0c:5f:48:0e:e0:e1:b3: ae:aa:f2:65:3c:b7:a0:36:a2:b3:82:8f:77:9b:f1:0d:23:32: 0b:78:f3:d6:08:ee:3b:4e:7c:07:79:a3:73:24:67:a3:78:84: 39:03:b0:c8:8f:6c:64:35:0a:1c:9a:5a:12:e2:6f:73:80:f5: 51:cf:eb:8e:e7:0a:b4:9a:13:28:78:90:9c:a2:ca:75:f5:a1: 33:86:c0:a4:b0:18:ea:45:7e:f8:e4:2a:88:31:3d:4a:d6:aa: c2:78:a9:2f:0b:ed:6a:2b:7c:42:6b:7a:d1:58:9b:37:c4:34: 3b:cc:54:13:3d:95:66:24:4c:a9:a4:ea:ee:94:9d:02:15:5f: 78:67:30:b0:92:16:ba:b0:da:a3:58:6e:63:7c:7a:cc:45:15: 44:9f:d6:20:ae:fb:5b:58:4a:9e:5a:13:d3:28:b9:53:3a:0c: 06:40:78:d0:29:5a:55:34:0d:8d:64:03:71:a2:18:8a:ab:e4: f2:70:81:25:fa:c1:7f:e0:4e:a9:bc:d3:2b:e6:10:7d:98:69: 7a:da:91:26:7e:91:bd:24:79:80:46:bd:81:c2:ac:30:f7:bd: 7f:f9:6b:7c:37:f2:de:04:14:87:ba:68:a2:6e:6c:82:60:db: c6:7f:9d:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8f9pfTJ4NS4UoaOeobie0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljZTRlNjVhZWNjOTVkNDQ2YTBjYjY0MGI5NzY2ZmEwZjgx NTBlM2MwHhcNMjUxMjIwMTYwMjUwWhcNMjUxMjIxMTYwMjUwWjAzMTEwLwYDVQQD EygyZmE1MjMyM2ZmYmQ3NjBhMjk5ZTcwZDk0MzA1MzE3OWVjNGUwMmYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLVrljuDGT1AEFsRnpWmtPw1bEph 8yOfDYLXS0AvGm5MkkHlFJliyI5778MmOTfrbXZkgIFQ8JFfc+sGgEXkeMee7EE5 FPK1Gedoih+Cvni/uMfwARGU+xXtgC3agTsarcWtkPc+yXXuZms9SEcEJYQWZf1e 19OIi5IRSgmaCTAuGs47c46w71nY19GKqHnTprDGLRD51LPFKnWaIUrMCLNq9SjS YGDYv8LlnuTrlD1ewb7jb63ggQlzeOC5d6lO70o6NGgRH9CGM9A5nftpUXhmZyKY jql8x+35xqkilBkFTA+rB6bUTFkpp5RHxYwSif3UD3Mk5S102gu4sUhSTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC+lIyP/vXYKKZ5w2UMFMXnsTgLwMB8GA1UdIwQY MBaAFJzk5lrsyV1Eagy2QLl2b6D4FQ48MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbk9UbVd1ekpYVVJxRExaQXVYWnZvUGdWRGp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9lZDRlMmMtZTVhZC00MTdhLTg3ODgt MTE4MjQ0MDZiZDVkLzEvbk9UbVd1ekpYVVJxRExaQXVYWnZvUGdWRGp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9lZDRlMmMtZTVhZC00MTdhLTg3ODgtMTE4MjQ0MDZiZDVk LzEvbk9UbVd1ekpYVVJxRExaQXVYWnZvUGdWRGp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAafZtylFj R8BoRsQMX0gO4OGzrqryZTy3oDais4KPd5vxDSMyC3jz1gjuO058B3mjcyRno3iE OQOwyI9sZDUKHJpaEuJvc4D1Uc/rjucKtJoTKHiQnKLKdfWhM4bApLAY6kV++OQq iDE9StaqwnipLwvtait8Qmt60VibN8Q0O8xUEz2VZiRMqaTq7pSdAhVfeGcwsJIW urDao1huY3x6zEUVRJ/WIK77W1hKnloT0yi5UzoMBkB40ClaVTQNjWQDcaIYiqvk 8nCBJfrBf+BOqbzTK+YQfZhpetqRJn6RvSR5gEa9gcKsMPe9f/lrfDfy3gQUh7po om5sgmDbxn+d/A== -----END CERTIFICATE-----Generated at Sun Dec 21 02:09:52 2025 by rpki-client