This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.mft File: ntjaOohRtHbeS_Ob9QwDfZS2dUE.mft (raw, json) Hash identifier: EK+oHPCULIEI88nRPWqh8WjjYH5eL3OkwRMtctrMrFU= Subject key identifier: A2:FA:43:E4:09:F3:C8:9B:C2:0C:94:5A:53:30:A5:E7:61:C3:6B:1F Authority key identifier: 9E:D8:DA:3A:88:51:B4:76:DE:4B:F3:9B:F5:0C:03:7D:94:B6:75:41 Certificate issuer: /CN=9ed8da3a8851b476de4bf39bf50c037d94b67541 Certificate serial: 019B2B8A90436CB8870A47BFF6E0324C8BBC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ntjaOohRtHbeS_Ob9QwDfZS2dUE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.mft Manifest number: 07D1 Signing time: Wed 17 Dec 2025 09:00:59 +0000 Manifest this update: Wed 17 Dec 2025 09:00:59 +0000 Manifest next update: Thu 18 Dec 2025 09:00:59 +0000 Files and hashes: 1: ntjaOohRtHbeS_Ob9QwDfZS2dUE.crl (hash: ZzSt+NbkylvAUgGHKnQqPzqFTR3QENl2HBB2X7DbDxs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.crl rsync://rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.mft rsync://rpki.ripe.net/repository/DEFAULT/ntjaOohRtHbeS_Ob9QwDfZS2dUE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 09:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:8a:90:43:6c:b8:87:0a:47:bf:f6:e0:32:4c:8b:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ed8da3a8851b476de4bf39bf50c037d94b67541 Validity Not Before: Dec 17 09:00:59 2025 GMT Not After : Dec 18 09:00:59 2025 GMT Subject: CN=a2fa43e409f3c89bc20c945a5330a5e761c36b1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:24:3a:b6:ab:01:d4:08:cc:92:de:70:d0:27: e5:e7:4a:d1:f9:26:d9:19:97:25:e1:03:c2:83:d1: 76:8f:40:d7:3b:41:17:53:24:b7:5d:40:81:08:6d: 5e:fb:c0:4b:39:a8:ab:73:10:b3:be:c4:91:64:80: 5f:5e:4e:98:f5:6a:e0:f7:ee:03:ac:70:66:bf:df: be:3f:7a:96:00:76:ae:d5:8d:a7:33:d3:8f:86:96: 52:ee:ba:fd:be:05:71:f4:36:f8:44:65:df:7a:44: 93:b4:da:3b:d1:03:80:3c:94:a4:5d:54:70:2f:1b: 6e:69:71:cf:7f:c1:90:c5:4b:d8:3a:f2:0f:e1:1a: c5:4e:f6:b6:d6:6d:53:f4:2b:8a:4c:35:76:c2:52: 53:3d:cf:f6:b1:26:2e:94:27:21:09:ae:15:e7:c8: 13:a9:4d:52:81:33:42:c3:aa:e1:6c:21:f7:27:92: 9e:5d:4a:e9:69:b3:30:70:7a:48:be:0c:60:aa:a0: 0f:35:af:43:ef:97:38:31:14:27:bb:00:56:58:a9: 92:6c:3d:d4:bc:8e:91:56:b8:2c:ea:c8:f4:65:d1: a7:19:be:b4:06:28:96:11:fc:1b:b4:80:98:58:3f: 5e:de:be:9f:4a:64:91:22:68:05:69:c6:55:a6:fd: 76:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:FA:43:E4:09:F3:C8:9B:C2:0C:94:5A:53:30:A5:E7:61:C3:6B:1F X509v3 Authority Key Identifier: keyid:9E:D8:DA:3A:88:51:B4:76:DE:4B:F3:9B:F5:0C:03:7D:94:B6:75:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ntjaOohRtHbeS_Ob9QwDfZS2dUE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:3f:48:39:74:85:0b:60:85:3d:40:fb:70:0f:32:a1:f9:77: 26:9f:46:b8:3d:b9:64:5d:22:90:83:a0:a6:6b:2f:bc:df:ec: a4:44:3f:7c:fa:89:64:29:c1:62:c9:25:90:ee:e8:84:78:78: 60:0f:fe:e2:42:2d:41:f9:dd:02:01:32:86:2c:32:78:39:4b: f5:4b:49:26:1c:1a:92:bd:e0:af:b7:95:93:64:fb:26:e6:e3: ef:4d:9e:32:5f:54:49:fb:af:3d:9d:a6:9e:d0:33:ca:3e:74: 19:24:2e:33:78:49:a9:dd:18:80:98:ba:63:4a:81:07:bd:ba: f8:c3:47:44:6f:60:33:b7:8a:f9:42:04:9f:43:a2:ab:59:b8: 5f:f1:4f:15:88:c5:59:91:6e:17:81:57:65:68:f5:c6:e7:8a: 63:ed:10:55:5c:d9:9d:3e:e7:dd:56:dc:48:d4:14:11:2d:09: 55:59:8e:91:24:6a:80:19:c0:07:3e:da:03:3c:62:83:a0:d9: e8:ce:2f:57:16:dc:0e:34:29:88:19:e9:21:cd:eb:dc:05:9b: b7:8d:95:5b:81:0e:09:34:b2:9d:cd:72:c9:4c:83:0c:a8:7f: ca:79:c4:5b:27:1f:ff:81:ff:57:51:83:6c:66:b1:5a:f7:be: 4a:5a:55:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsripBDbLiHCke/9uAyTIu8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllZDhkYTNhODg1MWI0NzZkZTRiZjM5YmY1MGMwMzdkOTRi Njc1NDEwHhcNMjUxMjE3MDkwMDU5WhcNMjUxMjE4MDkwMDU5WjAzMTEwLwYDVQQD EyhhMmZhNDNlNDA5ZjNjODliYzIwYzk0NWE1MzMwYTVlNzYxYzM2YjFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSQ6tqsB1AjMkt5w0Cfl50rR+SbZ GZcl4QPCg9F2j0DXO0EXUyS3XUCBCG1e+8BLOaircxCzvsSRZIBfXk6Y9Wrg9+4D rHBmv9++P3qWAHau1Y2nM9OPhpZS7rr9vgVx9Db4RGXfekSTtNo70QOAPJSkXVRw LxtuaXHPf8GQxUvYOvIP4RrFTva21m1T9CuKTDV2wlJTPc/2sSYulCchCa4V58gT qU1SgTNCw6rhbCH3J5KeXUrpabMwcHpIvgxgqqAPNa9D75c4MRQnuwBWWKmSbD3U vI6RVrgs6sj0ZdGnGb60BiiWEfwbtICYWD9e3r6fSmSRImgFacZVpv125QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKL6Q+QJ88ibwgyUWlMwpedhw2sfMB8GA1UdIwQY MBaAFJ7Y2jqIUbR23kvzm/UMA32UtnVBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnRqYU9vaFJ0SGJlU19PYjlRd0RmWlMyZFVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9lOGVkOGMtNDUzNC00MmI3LWI4NDYt MDU3YzM3NDJhMWE1LzEvbnRqYU9vaFJ0SGJlU19PYjlRd0RmWlMyZFVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS9lOGVkOGMtNDUzNC00MmI3LWI4NDYtMDU3YzM3NDJhMWE1 LzEvbnRqYU9vaFJ0SGJlU19PYjlRd0RmWlMyZFVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeD9IOXSF C2CFPUD7cA8yofl3Jp9GuD25ZF0ikIOgpmsvvN/spEQ/fPqJZCnBYsklkO7ohHh4 YA/+4kItQfndAgEyhiwyeDlL9UtJJhwakr3gr7eVk2T7Jubj702eMl9USfuvPZ2m ntAzyj50GSQuM3hJqd0YgJi6Y0qBB726+MNHRG9gM7eK+UIEn0Oiq1m4X/FPFYjF WZFuF4FXZWj1xueKY+0QVVzZnT7n3VbcSNQUES0JVVmOkSRqgBnABz7aAzxig6DZ 6M4vVxbcDjQpiBnpIc3r3AWbt42VW4EOCTSync1yyUyDDKh/ynnEWycf/4H/V1GD bGaxWve+SlpVUA== -----END CERTIFICATE-----Generated at Wed Dec 17 13:47:34 2025 by rpki-client