This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.mft File: ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.mft (raw, json) Hash identifier: hIjlnXYNEnGsqk7y0n8XS0g1bH0Qeo7QU/uDLoHauxk= Subject key identifier: 29:78:9A:33:1A:DB:7F:24:A8:1B:AF:BC:42:6C:FE:59:53:37:AB:25 Authority key identifier: 9E:D7:68:29:BA:63:14:A0:35:FD:A7:99:FC:03:70:33:66:57:08:3E Certificate issuer: /CN=9ed76829ba6314a035fda799fc0370336657083e Certificate serial: 019B4626B6303E3332B37E99163517C11932 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.mft Manifest number: 11FC Signing time: Mon 22 Dec 2025 13:01:40 +0000 Manifest this update: Mon 22 Dec 2025 13:01:40 +0000 Manifest next update: Tue 23 Dec 2025 13:01:40 +0000 Files and hashes: 1: 2naHUDZ4rUS9i5KxyQQU_cI4UeA.roa (hash: J3JrxG9uyiuiyL3c5u4IhFuOvuYSNgMUze1zOm1bwO0=) 2: ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.crl (hash: PzIBxEQU+LTxEV0dkhSESn2u09nPj5Ygps7lsBXF3ew=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.crl rsync://rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.mft rsync://rpki.ripe.net/repository/DEFAULT/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 13:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:26:b6:30:3e:33:32:b3:7e:99:16:35:17:c1:19:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ed76829ba6314a035fda799fc0370336657083e Validity Not Before: Dec 22 13:01:40 2025 GMT Not After : Dec 23 13:01:40 2025 GMT Subject: CN=29789a331adb7f24a81bafbc426cfe595337ab25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:cb:f9:dd:51:ac:92:ff:99:9a:4e:54:ac:c5: a2:0f:5f:f2:d1:4c:72:eb:32:e8:9e:82:ae:62:3f: f4:8b:75:2e:9c:d4:90:1d:6c:f3:19:b2:0c:40:f4: be:4e:04:0f:fa:56:59:5b:d2:e3:5f:18:92:e8:9e: dc:9d:ef:86:c2:ae:87:19:ee:30:a1:7e:87:d7:bf: 08:03:3a:f5:54:29:4e:29:66:f7:7e:ba:66:cd:54: c4:40:8d:c4:f4:56:53:2b:2a:d8:49:de:c5:36:91: b9:28:60:98:1e:13:82:d4:c3:e5:5b:6d:43:f5:55: 36:18:ee:f7:e0:b1:95:89:86:5f:64:71:5a:09:2c: 74:86:ce:48:2f:af:09:08:c0:26:84:db:fe:ba:90: 83:98:f7:ee:cb:94:f1:69:7c:ba:e2:7c:da:4b:5a: 5a:37:16:03:36:7c:ce:ad:06:bd:ec:f3:c4:27:12: 66:50:06:f6:ab:70:28:f2:90:37:bd:7b:47:e7:00: d2:3b:46:2d:b5:77:f4:44:ba:39:26:99:52:51:f9: 05:39:7b:07:b4:86:5e:24:c1:ef:10:b6:dd:99:86: 83:35:44:bf:f4:1e:31:be:bc:4f:28:10:a0:a4:2b: 26:8f:5e:b7:a7:e5:d9:55:a8:32:62:00:2f:2e:48: 2e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:78:9A:33:1A:DB:7F:24:A8:1B:AF:BC:42:6C:FE:59:53:37:AB:25 X509v3 Authority Key Identifier: keyid:9E:D7:68:29:BA:63:14:A0:35:FD:A7:99:FC:03:70:33:66:57:08:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:12:3a:7e:49:d7:65:f2:54:c5:e7:38:b1:0a:c6:66:3e:da: df:a4:60:43:b7:da:37:58:b7:a2:15:f3:e5:a0:80:95:30:31: d8:28:34:f1:ff:a8:82:6d:02:32:11:49:3d:c9:56:72:37:c7: 5a:d2:45:df:06:dd:0e:24:59:30:35:eb:81:a4:26:82:d4:e3: 54:ae:3d:d1:df:c2:60:15:31:8c:b2:43:99:12:a0:e1:1c:86: e0:3d:d3:d9:4f:9c:98:81:7c:e3:f9:d4:7e:a9:b1:9b:80:c8: da:5e:1b:ef:cd:e8:33:c8:78:ea:de:57:60:87:45:4f:b9:0c: 88:66:c8:29:cd:e2:50:41:96:71:08:8e:4e:9d:08:69:88:14: 0b:b9:c7:bc:90:13:53:d5:26:06:4c:fb:9d:06:72:3f:1d:56: 73:7b:ac:8c:99:d0:a8:8e:90:4b:28:ec:b7:ba:b7:3b:b4:ac: 40:66:fa:02:b7:8a:34:6e:82:97:92:c4:07:ab:6e:0e:c6:a0: b9:1d:13:b6:a2:24:8b:c5:9b:96:5f:5e:d4:dc:a6:40:55:30: 22:6a:17:78:9a:da:5b:d5:ac:fb:ac:78:52:f4:52:87:55:c7: fa:56:9f:ef:de:84:60:69:77:3e:3b:e6:c8:d3:2c:59:94:ed: 0c:e0:b5:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGJrYwPjMys36ZFjUXwRkyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllZDc2ODI5YmE2MzE0YTAzNWZkYTc5OWZjMDM3MDMzNjY1 NzA4M2UwHhcNMjUxMjIyMTMwMTQwWhcNMjUxMjIzMTMwMTQwWjAzMTEwLwYDVQQD EygyOTc4OWEzMzFhZGI3ZjI0YTgxYmFmYmM0MjZjZmU1OTUzMzdhYjI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMv53VGskv+Zmk5UrMWiD1/y0Uxy 6zLonoKuYj/0i3UunNSQHWzzGbIMQPS+TgQP+lZZW9LjXxiS6J7cne+Gwq6HGe4w oX6H178IAzr1VClOKWb3frpmzVTEQI3E9FZTKyrYSd7FNpG5KGCYHhOC1MPlW21D 9VU2GO734LGViYZfZHFaCSx0hs5IL68JCMAmhNv+upCDmPfuy5TxaXy64nzaS1pa NxYDNnzOrQa97PPEJxJmUAb2q3Ao8pA3vXtH5wDSO0YttXf0RLo5JplSUfkFOXsH tIZeJMHvELbdmYaDNUS/9B4xvrxPKBCgpCsmj163p+XZVagyYgAvLkguLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCl4mjMa238kqBuvvEJs/llTN6slMB8GA1UdIwQY MBaAFJ7XaCm6YxSgNf2nmfwDcDNmVwg+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnRkb0ticGpGS0ExX2FlWl9BTndNMlpYQ0Q0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9iNWY4MGQtMmE3ZC00YmFiLWFhYWEt YmYyNjRhMjE1YjMyLzEvbnRkb0ticGpGS0ExX2FlWl9BTndNMlpYQ0Q0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9iNWY4MGQtMmE3ZC00YmFiLWFhYWEtYmYyNjRhMjE1YjMy LzEvbnRkb0ticGpGS0ExX2FlWl9BTndNMlpYQ0Q0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATBI6fknX ZfJUxec4sQrGZj7a36RgQ7faN1i3ohXz5aCAlTAx2Cg08f+ogm0CMhFJPclWcjfH WtJF3wbdDiRZMDXrgaQmgtTjVK490d/CYBUxjLJDmRKg4RyG4D3T2U+cmIF84/nU fqmxm4DI2l4b783oM8h46t5XYIdFT7kMiGbIKc3iUEGWcQiOTp0IaYgUC7nHvJAT U9UmBkz7nQZyPx1Wc3usjJnQqI6QSyjst7q3O7SsQGb6AreKNG6Cl5LEB6tuDsag uR0TtqIki8Wbll9e1NymQFUwImoXeJraW9Ws+6x4UvRSh1XH+laf796EYGl3Pjvm yNMsWZTtDOC1tA== -----END CERTIFICATE-----Generated at Mon Dec 22 19:08:22 2025 by rpki-client