This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.mft File: nTbpG2LT3HwTeiiqoAbt6bnqH-Q.mft (raw, json) Hash identifier: OIQ8vA9+NkiZWmQqtYvI0beZhkUN9qj6JvAOR7Y7o7g= Subject key identifier: 73:27:76:74:0C:25:B2:57:AD:38:59:EB:E0:A5:B2:0C:AC:7F:A9:3E Authority key identifier: 9D:36:E9:1B:62:D3:DC:7C:13:7A:28:AA:A0:06:ED:E9:B9:EA:1F:E4 Certificate issuer: /CN=9d36e91b62d3dc7c137a28aaa006ede9b9ea1fe4 Certificate serial: 019B341FCDB95ADE416EED35941BA92C09B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.mft Manifest number: 0F4E Signing time: Fri 19 Dec 2025 01:00:58 +0000 Manifest this update: Fri 19 Dec 2025 01:00:58 +0000 Manifest next update: Sat 20 Dec 2025 01:00:58 +0000 Files and hashes: 1: 1-Vqync9hKf6VKIrN5RpK5cxJuZ4.roa (hash: MtCth/AQ0N933cYX7VqkRS/iFY3KEw9X6YIsPg3Pp/U=) 2: OXX9g3YRUJUzVcg_bBkk4JValdo.roa (hash: ZCgBMUHW1tIAOZ4DRx/DGMhGuGDo8XA3rdIaP/zAdak=) 3: nTbpG2LT3HwTeiiqoAbt6bnqH-Q.crl (hash: 45mHx7ktBdftZ3/YayzFo+8x1KbXrb6ZERFC2r2CUOc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.mft rsync://rpki.ripe.net/repository/DEFAULT/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:1f:cd:b9:5a:de:41:6e:ed:35:94:1b:a9:2c:09:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d36e91b62d3dc7c137a28aaa006ede9b9ea1fe4 Validity Not Before: Dec 19 01:00:58 2025 GMT Not After : Dec 20 01:00:58 2025 GMT Subject: CN=732776740c25b257ad3859ebe0a5b20cac7fa93e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:83:b2:c9:dc:0a:98:99:7e:52:84:5a:79:93: ff:18:3d:5b:a9:40:11:6f:b9:29:93:6a:d1:91:82: a1:06:87:60:88:61:1a:1d:3c:25:bb:e2:c8:6f:6b: 2a:3b:82:c5:e4:b1:ec:ae:f0:3c:41:08:94:cf:49: 1f:02:a1:ba:51:70:9b:47:0f:61:7d:06:a7:75:f6: 71:a4:41:4b:e9:77:bc:1b:4b:e8:3d:24:65:1f:0c: e6:95:1c:5a:68:01:ae:e0:b6:f9:8b:97:0c:dc:18: 13:e4:e6:b8:27:f6:f6:eb:a7:05:63:17:70:96:c3: fe:b0:53:f4:50:88:a8:28:ca:04:00:77:c6:d9:f7: 5f:e3:6c:55:e4:49:b7:b7:86:73:25:61:a0:50:af: bf:b2:40:17:15:13:7a:a8:b8:25:17:cc:9f:4d:20: 67:c8:9d:17:a2:3e:81:eb:90:aa:ba:3c:3b:88:1a: ea:4d:13:dc:ac:5e:fd:9e:e9:c7:95:19:a1:4c:fb: a0:70:3d:3a:a6:90:5b:eb:70:c2:52:44:be:0e:64: 13:c9:85:dd:62:07:93:61:82:40:e0:38:10:fb:36: 58:b1:16:1f:9a:dd:56:41:ea:19:5d:9a:41:ba:db: 02:bc:4a:74:07:87:16:bb:a0:02:78:01:51:51:4a: ce:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:27:76:74:0C:25:B2:57:AD:38:59:EB:E0:A5:B2:0C:AC:7F:A9:3E X509v3 Authority Key Identifier: keyid:9D:36:E9:1B:62:D3:DC:7C:13:7A:28:AA:A0:06:ED:E9:B9:EA:1F:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:7d:a0:64:f3:66:be:69:3c:de:3f:e6:7e:8f:b5:7d:98:31: b3:27:05:da:a5:81:e5:3f:fe:01:76:8a:1e:75:f6:c2:18:62: d8:20:69:ef:3e:2d:77:8d:6e:0e:bf:fa:89:04:45:26:3f:fe: fe:10:62:2f:a2:10:a7:45:bb:4d:d0:13:15:16:08:97:67:db: 21:34:4d:72:9c:a6:52:67:b9:e7:2e:94:06:52:a6:a0:2c:85: 6f:1b:87:11:c5:b8:c6:8a:eb:d6:24:c2:d7:f4:e7:0d:e6:ed: a4:c1:04:0b:ae:6c:ae:5b:b2:53:f9:61:f4:74:76:50:7c:96: 9e:d2:30:25:48:db:d4:1b:01:e8:26:ca:61:b1:1c:0b:97:3f: b8:ab:d1:7e:ae:b1:a2:ea:b7:b6:33:bd:2a:27:92:51:7e:dd: 41:cb:97:7b:a4:68:a6:03:54:d8:1a:70:75:1f:15:31:4d:29: ff:c7:d9:33:34:37:33:5e:9b:f2:40:24:87:74:64:f5:70:4e: 8f:d6:ea:3c:8c:f0:bf:18:2c:c0:62:c9:dc:dd:5f:a6:31:c7: cb:d9:2a:87:22:36:ca:a6:f0:6c:61:75:ad:a1:97:33:b2:ba: fd:ca:5f:3d:e5:e9:30:0f:ff:c3:a9:0a:5a:56:6f:2b:5d:a0: 3e:ec:f7:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0H825Wt5Bbu01lBupLAmyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMzZlOTFiNjJkM2RjN2MxMzdhMjhhYWEwMDZlZGU5Yjll YTFmZTQwHhcNMjUxMjE5MDEwMDU4WhcNMjUxMjIwMDEwMDU4WjAzMTEwLwYDVQQD Eyg3MzI3NzY3NDBjMjViMjU3YWQzODU5ZWJlMGE1YjIwY2FjN2ZhOTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA14OyydwKmJl+UoRaeZP/GD1bqUAR b7kpk2rRkYKhBodgiGEaHTwlu+LIb2sqO4LF5LHsrvA8QQiUz0kfAqG6UXCbRw9h fQandfZxpEFL6Xe8G0voPSRlHwzmlRxaaAGu4Lb5i5cM3BgT5Oa4J/b266cFYxdw lsP+sFP0UIioKMoEAHfG2fdf42xV5Em3t4ZzJWGgUK+/skAXFRN6qLglF8yfTSBn yJ0Xoj6B65Cqujw7iBrqTRPcrF79nunHlRmhTPugcD06ppBb63DCUkS+DmQTyYXd YgeTYYJA4DgQ+zZYsRYfmt1WQeoZXZpButsCvEp0B4cWu6ACeAFRUUrOYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHMndnQMJbJXrThZ6+Clsgysf6k+MB8GA1UdIwQY MBaAFJ026Rti09x8E3ooqqAG7em56h/kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblRicEcyTFQzSHdUZWlpcW9BYnQ2Ym5xSC1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9jMjg0Y2QtYjJiNy00OTExLWIyMGIt YjJjZWE3NjkwODM3LzEvblRicEcyTFQzSHdUZWlpcW9BYnQ2Ym5xSC1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS9jMjg0Y2QtYjJiNy00OTExLWIyMGItYjJjZWE3NjkwODM3 LzEvblRicEcyTFQzSHdUZWlpcW9BYnQ2Ym5xSC1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUX2gZPNm vmk83j/mfo+1fZgxsycF2qWB5T/+AXaKHnX2whhi2CBp7z4td41uDr/6iQRFJj/+ /hBiL6IQp0W7TdATFRYIl2fbITRNcpymUme55y6UBlKmoCyFbxuHEcW4xorr1iTC 1/TnDebtpMEEC65srluyU/lh9HR2UHyWntIwJUjb1BsB6CbKYbEcC5c/uKvRfq6x ouq3tjO9KieSUX7dQcuXe6RopgNU2BpwdR8VMU0p/8fZMzQ3M16b8kAkh3Rk9XBO j9bqPIzwvxgswGLJ3N1fpjHHy9kqhyI2yqbwbGF1raGXM7K6/cpfPeXpMA//w6kK WlZvK12gPuz3dA== -----END CERTIFICATE-----Generated at Fri Dec 19 03:09:31 2025 by rpki-client