This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/e43db4-2912-48a1-a037-96c744e235b3/1/NOgf_EPqi7rcmDB4oZqtVHqJHaU.mft File: NOgf_EPqi7rcmDB4oZqtVHqJHaU.mft (raw, json) Hash identifier: B+i2U9Dazp+0OpnVpmE14ShLYQS6wtfDhgvJ3ziwPQ4= Subject key identifier: 0F:9F:12:2A:24:A6:71:EE:7D:F5:D3:DF:48:9E:57:74:71:6F:10:39 Authority key identifier: 34:E8:1F:FC:43:EA:8B:BA:DC:98:30:78:A1:9A:AD:54:7A:89:1D:A5 Certificate issuer: /CN=34e81ffc43ea8bbadc983078a19aad547a891da5 Certificate serial: 019AF209B7D8D7AD2FB47F35D090B51B6A0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NOgf_EPqi7rcmDB4oZqtVHqJHaU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/e43db4-2912-48a1-a037-96c744e235b3/1/NOgf_EPqi7rcmDB4oZqtVHqJHaU.mft Manifest number: 67 Signing time: Sat 06 Dec 2025 05:01:54 +0000 Manifest this update: Sat 06 Dec 2025 05:01:54 +0000 Manifest next update: Sun 07 Dec 2025 05:01:54 +0000 Files and hashes: 1: NOgf_EPqi7rcmDB4oZqtVHqJHaU.crl (hash: VoxpMJJdXPqjkcjwZIkJCWqeuKsKSrwdpWpdu2ODSj8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/e43db4-2912-48a1-a037-96c744e235b3/1/NOgf_EPqi7rcmDB4oZqtVHqJHaU.crl rsync://rpki.ripe.net/repository/DEFAULT/12/e43db4-2912-48a1-a037-96c744e235b3/1/NOgf_EPqi7rcmDB4oZqtVHqJHaU.mft rsync://rpki.ripe.net/repository/DEFAULT/NOgf_EPqi7rcmDB4oZqtVHqJHaU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:b7:d8:d7:ad:2f:b4:7f:35:d0:90:b5:1b:6a:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34e81ffc43ea8bbadc983078a19aad547a891da5 Validity Not Before: Dec 6 05:01:54 2025 GMT Not After : Dec 7 05:01:54 2025 GMT Subject: CN=0f9f122a24a671ee7df5d3df489e5774716f1039 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:88:9d:42:49:38:08:5c:ba:b8:bd:0b:3f:0b: 73:74:6e:76:2d:a1:20:bc:0e:44:63:98:d2:ce:b3: 3e:49:a4:4f:ae:f2:83:fa:1b:de:e9:0e:03:29:1c: 10:73:be:53:75:eb:46:42:a8:3b:82:6f:11:e6:19: 2f:6c:f0:42:36:46:8f:59:38:d3:97:24:37:5c:c9: 30:b8:42:f1:cf:c7:a5:e3:e4:e7:c5:31:cd:77:75: 04:f5:c5:7e:a3:79:cb:6f:59:16:a8:30:d1:80:6e: 49:c8:1a:fa:8e:83:30:f8:4d:e6:59:c2:c8:3e:12: b2:d8:45:66:4a:8f:3d:42:04:b2:4e:59:6c:a1:2b: e8:fb:ea:ff:11:85:1f:6b:0e:90:e7:f1:04:b0:7f: 80:d6:2a:a3:95:50:d7:b8:1b:00:2a:02:34:35:3f: 73:31:fe:1c:10:e3:f6:a0:35:c9:13:05:5f:9a:32: be:7c:fd:ea:c3:6e:7b:c0:ef:69:ef:01:7d:a7:21: 12:0c:25:80:f6:29:ab:4e:03:33:7b:36:87:ae:24: 12:f1:fc:83:4e:d7:d3:2a:7c:18:58:43:c7:b0:9e: 9e:89:dd:f8:17:3d:a6:7c:f2:5f:71:3b:61:bb:86: 94:55:03:b3:19:db:f1:c8:65:12:52:ac:e2:44:07: 58:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:9F:12:2A:24:A6:71:EE:7D:F5:D3:DF:48:9E:57:74:71:6F:10:39 X509v3 Authority Key Identifier: keyid:34:E8:1F:FC:43:EA:8B:BA:DC:98:30:78:A1:9A:AD:54:7A:89:1D:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NOgf_EPqi7rcmDB4oZqtVHqJHaU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/e43db4-2912-48a1-a037-96c744e235b3/1/NOgf_EPqi7rcmDB4oZqtVHqJHaU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/e43db4-2912-48a1-a037-96c744e235b3/1/NOgf_EPqi7rcmDB4oZqtVHqJHaU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:87:d3:31:8d:f0:a2:a1:72:26:f2:61:94:4e:69:f9:0d:51: eb:c6:73:92:97:e7:34:22:86:3e:9d:05:2a:e8:55:02:a0:5f: 79:19:53:2e:36:73:07:07:2d:e6:81:53:11:8f:1e:1e:56:94: 42:86:af:59:50:cc:b4:76:fb:7c:3a:92:77:7c:a0:9e:86:df: 8d:c0:61:ab:b6:b3:88:b8:32:34:10:ad:17:6c:8e:63:c3:b1: 95:3c:59:24:07:a3:8b:d0:01:9c:d4:ce:2e:8a:ca:23:e5:ad: 48:bb:3c:47:72:91:e1:00:ec:6b:46:a6:0f:14:31:3c:bd:88: 2b:65:10:b8:25:78:64:73:6d:54:43:d7:f6:17:65:a5:23:53: b2:2c:6d:93:81:b9:38:07:2d:01:d0:63:74:d0:8b:25:63:1f: f5:ac:0b:14:3a:22:c0:1f:38:56:46:c4:a6:32:bb:77:7a:ef: 57:bf:c8:82:08:e9:13:06:8e:ce:7f:ff:77:b3:f6:21:ed:92: ca:28:9e:24:9c:0f:4c:87:57:f5:13:24:f6:e7:a6:3c:57:4b: c3:65:4d:54:42:13:97:10:a8:19:a9:e6:24:7e:e2:66:7b:d6: 14:e5:34:16:24:f4:95:75:97:8a:2e:04:a7:8d:a0:6f:64:6f: f1:58:d1:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCbfY160vtH810JC1G2oPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0ZTgxZmZjNDNlYThiYmFkYzk4MzA3OGExOWFhZDU0N2E4 OTFkYTUwHhcNMjUxMjA2MDUwMTU0WhcNMjUxMjA3MDUwMTU0WjAzMTEwLwYDVQQD EygwZjlmMTIyYTI0YTY3MWVlN2RmNWQzZGY0ODllNTc3NDcxNmYxMDM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIidQkk4CFy6uL0LPwtzdG52LaEg vA5EY5jSzrM+SaRPrvKD+hve6Q4DKRwQc75TdetGQqg7gm8R5hkvbPBCNkaPWTjT lyQ3XMkwuELxz8el4+TnxTHNd3UE9cV+o3nLb1kWqDDRgG5JyBr6joMw+E3mWcLI PhKy2EVmSo89QgSyTllsoSvo++r/EYUfaw6Q5/EEsH+A1iqjlVDXuBsAKgI0NT9z Mf4cEOP2oDXJEwVfmjK+fP3qw257wO9p7wF9pyESDCWA9imrTgMzezaHriQS8fyD TtfTKnwYWEPHsJ6eid34Fz2mfPJfcTthu4aUVQOzGdvxyGUSUqziRAdYcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA+fEiokpnHuffXT30ieV3RxbxA5MB8GA1UdIwQY MBaAFDToH/xD6ou63JgweKGarVR6iR2lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTk9nZl9FUHFpN3JjbURCNG9acXRWSHFKSGFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lNDNkYjQtMjkxMi00OGExLWEwMzct OTZjNzQ0ZTIzNWIzLzEvTk9nZl9FUHFpN3JjbURCNG9acXRWSHFKSGFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9lNDNkYjQtMjkxMi00OGExLWEwMzctOTZjNzQ0ZTIzNWIz LzEvTk9nZl9FUHFpN3JjbURCNG9acXRWSHFKSGFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsofTMY3w oqFyJvJhlE5p+Q1R68ZzkpfnNCKGPp0FKuhVAqBfeRlTLjZzBwct5oFTEY8eHlaU QoavWVDMtHb7fDqSd3ygnobfjcBhq7aziLgyNBCtF2yOY8OxlTxZJAeji9ABnNTO LorKI+WtSLs8R3KR4QDsa0amDxQxPL2IK2UQuCV4ZHNtVEPX9hdlpSNTsixtk4G5 OActAdBjdNCLJWMf9awLFDoiwB84VkbEpjK7d3rvV7/IggjpEwaOzn//d7P2Ie2S yiieJJwPTIdX9RMk9uemPFdLw2VNVEITlxCoGanmJH7iZnvWFOU0FiT0lXWXii4E p42gb2Rv8VjR2Q== -----END CERTIFICATE-----Generated at Sat Dec 6 09:42:03 2025 by rpki-client