This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/981b50-03ab-414b-a310-bdc5d6cb2141/1/ntoJbbyNWaRCchzBadautkn1_T8.mft File: ntoJbbyNWaRCchzBadautkn1_T8.mft (raw, json) Hash identifier: 4Hd+RCQ1eUJeoe1DVI6XQENemTdbcGKa89BDHC6vDCs= Subject key identifier: 9D:B6:BE:AE:74:11:4B:29:F7:74:91:CD:16:E8:29:C4:B9:88:B6:32 Authority key identifier: 9E:DA:09:6D:BC:8D:59:A4:42:72:1C:C1:69:D6:AE:B6:49:F5:FD:3F Certificate issuer: /CN=9eda096dbc8d59a442721cc169d6aeb649f5fd3f Certificate serial: 019AF19B314D0DE9A4981B69128E6DBB6A41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ntoJbbyNWaRCchzBadautkn1_T8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/981b50-03ab-414b-a310-bdc5d6cb2141/1/ntoJbbyNWaRCchzBadautkn1_T8.mft Manifest number: 0C14 Signing time: Sat 06 Dec 2025 03:01:11 +0000 Manifest this update: Sat 06 Dec 2025 03:01:11 +0000 Manifest next update: Sun 07 Dec 2025 03:01:11 +0000 Files and hashes: 1: lBu7CwE3UJV_l_-xHUG1qoahCTQ.roa (hash: fQvVs4QYMOjRdLpo5ySosD6udSmF5lBQB4/GrAlIHkM=) 2: ntoJbbyNWaRCchzBadautkn1_T8.crl (hash: QeNmDjPkWVVaJTI9Fy4jdV26ZjQvDuezR/o2QZqkH1c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/981b50-03ab-414b-a310-bdc5d6cb2141/1/ntoJbbyNWaRCchzBadautkn1_T8.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/981b50-03ab-414b-a310-bdc5d6cb2141/1/ntoJbbyNWaRCchzBadautkn1_T8.mft rsync://rpki.ripe.net/repository/DEFAULT/ntoJbbyNWaRCchzBadautkn1_T8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:31:4d:0d:e9:a4:98:1b:69:12:8e:6d:bb:6a:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9eda096dbc8d59a442721cc169d6aeb649f5fd3f Validity Not Before: Dec 6 03:01:11 2025 GMT Not After : Dec 7 03:01:11 2025 GMT Subject: CN=9db6beae74114b29f77491cd16e829c4b988b632 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:cd:81:e3:2d:28:2b:2e:11:e9:56:25:21:7b: 39:da:56:54:a9:b2:c1:f8:fb:ff:b1:1d:4f:08:02: 40:88:9f:85:d1:8c:f5:d3:bb:a3:1d:8f:90:a7:bb: 7b:02:d9:52:ec:88:e0:40:28:62:f6:4b:61:d3:2a: 0a:78:7d:6c:8c:e5:e4:fc:74:bc:2f:63:bd:72:80: 72:03:66:4a:3b:23:31:d9:24:a5:d1:47:cd:10:2c: b5:49:8d:26:ff:81:02:c9:22:58:2b:2c:72:5a:76: 8f:69:f8:da:8c:fd:35:6b:9a:62:b5:17:32:5f:13: 50:e7:8f:ed:25:ed:93:99:7a:c1:39:65:ab:3e:a4: 58:41:87:f1:8d:47:55:f3:de:de:ac:89:6d:22:4e: bf:1a:09:f2:ba:f0:72:0b:11:50:7d:c0:c2:00:83: a9:ae:3c:73:c3:bf:dd:fe:13:31:fa:7b:f8:25:45: b5:69:96:79:ef:25:b7:36:6b:ef:ab:93:37:b7:f4: df:90:b4:bd:7a:d8:30:37:c8:b4:aa:43:62:62:b7: 0c:81:0d:61:1a:96:58:e7:3b:d2:4c:b0:9e:8b:a5: 04:c6:59:6e:a7:c3:ac:b1:b6:a6:05:14:bd:2f:0d: 33:65:00:f3:e2:50:3b:46:98:75:07:7d:c2:60:9b: 72:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:B6:BE:AE:74:11:4B:29:F7:74:91:CD:16:E8:29:C4:B9:88:B6:32 X509v3 Authority Key Identifier: keyid:9E:DA:09:6D:BC:8D:59:A4:42:72:1C:C1:69:D6:AE:B6:49:F5:FD:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ntoJbbyNWaRCchzBadautkn1_T8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/981b50-03ab-414b-a310-bdc5d6cb2141/1/ntoJbbyNWaRCchzBadautkn1_T8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/981b50-03ab-414b-a310-bdc5d6cb2141/1/ntoJbbyNWaRCchzBadautkn1_T8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:ea:47:26:22:3a:fa:d3:f3:3e:83:87:bd:f7:24:99:38:2f: 01:93:5c:70:c3:65:fe:8c:95:df:64:c1:51:c1:03:fd:b7:53: 1f:fd:48:f0:2f:e7:f8:71:49:2f:09:d1:0d:37:fd:49:04:0f: 49:9d:3b:11:e2:7a:30:64:4d:7e:bd:1e:e5:68:0f:f6:49:a7: 7e:76:f6:f6:6f:2d:52:38:4c:70:de:1a:be:2c:68:b1:31:c9: 0c:ed:d0:e0:2a:0b:ba:ad:74:ec:33:0e:e4:2d:73:d9:93:4d: 4e:cf:33:cb:63:dd:eb:80:a6:d5:54:02:8a:7b:e9:9f:e6:67: 34:41:04:e8:9e:eb:ea:6e:8d:0d:f5:04:30:d2:4b:1f:a2:da: 4f:56:26:b7:55:38:6d:1d:74:ca:3c:9b:01:2b:07:ef:21:1a: 66:1b:3a:c5:b8:3e:3d:8b:94:01:81:da:7d:57:00:ac:a0:de: 47:f4:0c:72:21:cd:fc:09:4c:f5:c9:cc:70:52:1d:bc:a6:e9: 4c:60:91:67:f9:0b:96:10:11:7e:a0:3c:ae:99:6a:ae:84:2b: 87:56:0d:ea:5b:59:47:43:0c:dc:bb:f3:aa:e5:94:cd:12:d5: 50:82:af:11:0f:9c:38:5b:d6:2c:47:62:ba:11:f9:37:25:ac: 34:d5:d4:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmzFNDemkmBtpEo5tu2pBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllZGEwOTZkYmM4ZDU5YTQ0MjcyMWNjMTY5ZDZhZWI2NDlm NWZkM2YwHhcNMjUxMjA2MDMwMTExWhcNMjUxMjA3MDMwMTExWjAzMTEwLwYDVQQD Eyg5ZGI2YmVhZTc0MTE0YjI5Zjc3NDkxY2QxNmU4MjljNGI5ODhiNjMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmM2B4y0oKy4R6VYlIXs52lZUqbLB +Pv/sR1PCAJAiJ+F0Yz107ujHY+Qp7t7AtlS7IjgQChi9kth0yoKeH1sjOXk/HS8 L2O9coByA2ZKOyMx2SSl0UfNECy1SY0m/4ECySJYKyxyWnaPafjajP01a5pitRcy XxNQ54/tJe2TmXrBOWWrPqRYQYfxjUdV897erIltIk6/GgnyuvByCxFQfcDCAIOp rjxzw7/d/hMx+nv4JUW1aZZ57yW3Nmvvq5M3t/TfkLS9etgwN8i0qkNiYrcMgQ1h GpZY5zvSTLCei6UExllup8OssbamBRS9Lw0zZQDz4lA7Rph1B33CYJty+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ22vq50EUsp93SRzRboKcS5iLYyMB8GA1UdIwQY MBaAFJ7aCW28jVmkQnIcwWnWrrZJ9f0/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnRvSmJieU5XYVJDY2h6QmFkYXV0a24xX1Q4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi85ODFiNTAtMDNhYi00MTRiLWEzMTAt YmRjNWQ2Y2IyMTQxLzEvbnRvSmJieU5XYVJDY2h6QmFkYXV0a24xX1Q4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi85ODFiNTAtMDNhYi00MTRiLWEzMTAtYmRjNWQ2Y2IyMTQx LzEvbnRvSmJieU5XYVJDY2h6QmFkYXV0a24xX1Q4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfOpHJiI6 +tPzPoOHvfckmTgvAZNccMNl/oyV32TBUcED/bdTH/1I8C/n+HFJLwnRDTf9SQQP SZ07EeJ6MGRNfr0e5WgP9kmnfnb29m8tUjhMcN4avixosTHJDO3Q4CoLuq107DMO 5C1z2ZNNTs8zy2Pd64Cm1VQCinvpn+ZnNEEE6J7r6m6NDfUEMNJLH6LaT1Ymt1U4 bR10yjybASsH7yEaZhs6xbg+PYuUAYHafVcArKDeR/QMciHN/AlM9cnMcFIdvKbp TGCRZ/kLlhARfqA8rplqroQrh1YN6ltZR0MM3LvzquWUzRLVUIKvEQ+cOFvWLEdi uhH5NyWsNNXUrA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:25:30 2025 by rpki-client