This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/6b0e0e-8be5-4bf9-b427-70d63107d05d/1/nOItyiotsKWf5WaByNHEBnenRbU.mft File: nOItyiotsKWf5WaByNHEBnenRbU.mft (raw, json) Hash identifier: XbNsv1kqLrLtgqohVGhU1uLB+ipd+kaHIojIrJMDYSo= Subject key identifier: 57:66:08:A1:A3:3C:17:20:39:AE:E1:A2:A0:D9:D6:DD:BE:35:A4:DF Authority key identifier: 9C:E2:2D:CA:2A:2D:B0:A5:9F:E5:66:81:C8:D1:C4:06:77:A7:45:B5 Certificate issuer: /CN=9ce22dca2a2db0a59fe56681c8d1c40677a745b5 Certificate serial: 019B3E6C31EB8358A701DCAB064A1F0D269E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nOItyiotsKWf5WaByNHEBnenRbU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/6b0e0e-8be5-4bf9-b427-70d63107d05d/1/nOItyiotsKWf5WaByNHEBnenRbU.mft Manifest number: 1347 Signing time: Sun 21 Dec 2025 01:00:36 +0000 Manifest this update: Sun 21 Dec 2025 01:00:36 +0000 Manifest next update: Mon 22 Dec 2025 01:00:36 +0000 Files and hashes: 1: SgrL7DiM5GSLyUl02rPic8LO2xM.roa (hash: mfGk2oXMS3Dskm6xFi6bjI6ao91mV5GgJuEh/2dC5PU=) 2: nOItyiotsKWf5WaByNHEBnenRbU.crl (hash: Kprkd7qNxMH4TWgBmBLNKNJj+lAB2z5Ni+3+oSv/7no=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/6b0e0e-8be5-4bf9-b427-70d63107d05d/1/nOItyiotsKWf5WaByNHEBnenRbU.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/6b0e0e-8be5-4bf9-b427-70d63107d05d/1/nOItyiotsKWf5WaByNHEBnenRbU.mft rsync://rpki.ripe.net/repository/DEFAULT/nOItyiotsKWf5WaByNHEBnenRbU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:31:eb:83:58:a7:01:dc:ab:06:4a:1f:0d:26:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ce22dca2a2db0a59fe56681c8d1c40677a745b5 Validity Not Before: Dec 21 01:00:36 2025 GMT Not After : Dec 22 01:00:36 2025 GMT Subject: CN=576608a1a33c172039aee1a2a0d9d6ddbe35a4df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:16:1c:09:db:0d:9e:36:2a:7d:1c:a4:1d:5e: ae:0e:f4:2a:d1:f0:e9:32:af:25:bd:54:d8:17:90: d0:89:1a:e2:f8:8a:93:2b:13:2c:4b:8d:a2:d3:2c: d7:7e:23:48:5c:74:95:e5:ef:d8:23:fa:fc:08:65: f1:fb:eb:0c:3a:cf:66:84:cf:fa:69:b9:3e:89:fc: f7:09:53:96:9f:38:c5:2a:4b:13:b0:d4:be:5f:79: 0f:2d:46:45:b2:90:dd:36:8d:57:e9:af:cd:a3:b0: 32:1a:51:52:a4:bb:b4:54:f7:99:43:ab:4d:7c:5a: 01:fc:ae:86:5b:06:ee:28:4c:5e:d2:39:6d:66:2c: d8:b6:0f:40:88:9a:15:1f:12:25:a3:7e:60:e7:aa: 35:37:68:34:4d:6d:9e:be:21:27:01:be:04:e3:8c: fd:5e:0c:06:76:d8:0a:cc:8a:dc:17:18:f6:fb:8d: 5b:cd:f7:58:72:5d:df:35:8c:87:c7:fb:63:ae:37: a1:96:0d:f5:51:10:58:cf:76:23:bc:1d:5d:fe:10: f2:45:52:76:74:69:a1:7e:eb:5a:f9:ba:f9:d2:70: 96:de:54:34:b8:25:6f:98:e0:29:13:9c:e1:75:b5: e6:bd:52:06:b4:e6:2e:de:1c:40:a1:78:2d:9b:d8: 2d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:66:08:A1:A3:3C:17:20:39:AE:E1:A2:A0:D9:D6:DD:BE:35:A4:DF X509v3 Authority Key Identifier: keyid:9C:E2:2D:CA:2A:2D:B0:A5:9F:E5:66:81:C8:D1:C4:06:77:A7:45:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nOItyiotsKWf5WaByNHEBnenRbU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6b0e0e-8be5-4bf9-b427-70d63107d05d/1/nOItyiotsKWf5WaByNHEBnenRbU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6b0e0e-8be5-4bf9-b427-70d63107d05d/1/nOItyiotsKWf5WaByNHEBnenRbU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:6a:66:d8:8d:35:db:39:e3:38:5c:85:a1:ff:58:cd:89:db: 39:e6:70:7c:b8:ab:c8:b4:81:4c:73:88:8b:20:a8:80:8b:d0: 73:60:c2:c7:95:3f:bd:95:e9:b2:ea:40:44:c0:01:59:3b:9c: 48:92:2c:bd:a2:bf:b7:00:96:a6:32:dd:df:0c:58:d2:08:54: 6e:92:71:f8:7c:44:44:ec:0d:ae:a0:d9:4e:bf:90:bc:4a:ab: 61:3c:f7:d5:1c:60:4f:32:60:96:7d:4b:99:b5:cf:75:a9:d0: f7:c8:da:5f:01:99:ed:fb:8b:0c:e5:59:5f:90:44:7b:78:36: 9a:41:22:63:b7:ce:2b:01:00:fc:4c:4c:1e:d8:2f:53:d1:42: 74:29:eb:e7:0a:0f:03:cf:4e:21:26:b8:8f:d2:82:ee:af:14: d4:ee:ae:b0:c3:2f:3a:f5:50:fe:c6:2b:6d:d2:df:2f:be:15: 05:a3:dd:e3:1d:dd:07:8b:9d:6a:2c:7f:5e:f3:03:34:52:8b: 3e:8f:13:17:87:3f:0b:06:a7:b7:96:89:90:d7:dc:37:db:78: 0c:3d:0e:d9:09:6e:37:d4:28:c0:29:4a:e5:34:79:1a:d8:dd: c7:90:ea:a0:f7:20:63:bb:9d:5c:99:c6:b0:de:da:f9:97:16: 4b:04:fc:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bDHrg1inAdyrBkofDSaeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljZTIyZGNhMmEyZGIwYTU5ZmU1NjY4MWM4ZDFjNDA2Nzdh NzQ1YjUwHhcNMjUxMjIxMDEwMDM2WhcNMjUxMjIyMDEwMDM2WjAzMTEwLwYDVQQD Eyg1NzY2MDhhMWEzM2MxNzIwMzlhZWUxYTJhMGQ5ZDZkZGJlMzVhNGRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhYcCdsNnjYqfRykHV6uDvQq0fDp Mq8lvVTYF5DQiRri+IqTKxMsS42i0yzXfiNIXHSV5e/YI/r8CGXx++sMOs9mhM/6 abk+ifz3CVOWnzjFKksTsNS+X3kPLUZFspDdNo1X6a/No7AyGlFSpLu0VPeZQ6tN fFoB/K6GWwbuKExe0jltZizYtg9AiJoVHxIlo35g56o1N2g0TW2eviEnAb4E44z9 XgwGdtgKzIrcFxj2+41bzfdYcl3fNYyHx/tjrjehlg31URBYz3YjvB1d/hDyRVJ2 dGmhfuta+br50nCW3lQ0uCVvmOApE5zhdbXmvVIGtOYu3hxAoXgtm9gtKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFdmCKGjPBcgOa7hoqDZ1t2+NaTfMB8GA1UdIwQY MBaAFJziLcoqLbCln+VmgcjRxAZ3p0W1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbk9JdHlpb3RzS1dmNVdhQnlOSEVCbmVuUmJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC82YjBlMGUtOGJlNS00YmY5LWI0Mjct NzBkNjMxMDdkMDVkLzEvbk9JdHlpb3RzS1dmNVdhQnlOSEVCbmVuUmJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC82YjBlMGUtOGJlNS00YmY5LWI0MjctNzBkNjMxMDdkMDVk LzEvbk9JdHlpb3RzS1dmNVdhQnlOSEVCbmVuUmJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa2pm2I01 2znjOFyFof9YzYnbOeZwfLiryLSBTHOIiyCogIvQc2DCx5U/vZXpsupARMABWTuc SJIsvaK/twCWpjLd3wxY0ghUbpJx+HxEROwNrqDZTr+QvEqrYTz31RxgTzJgln1L mbXPdanQ98jaXwGZ7fuLDOVZX5BEe3g2mkEiY7fOKwEA/ExMHtgvU9FCdCnr5woP A89OISa4j9KC7q8U1O6usMMvOvVQ/sYrbdLfL74VBaPd4x3dB4udaix/XvMDNFKL Po8TF4c/Cwant5aJkNfcN9t4DD0O2QluN9QowClK5TR5Gtjdx5DqoPcgY7udXJnG sN7a+ZcWSwT8bA== -----END CERTIFICATE-----Generated at Sun Dec 21 06:54:19 2025 by rpki-client