This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.mft File: ntjaOohRtHbeS_Ob9QwDfZS2dUE.mft (raw, json) Hash identifier: 40TlivI+caqfameVBvbr6hdxSE+SOAcFV0TcXCI8UxE= Subject key identifier: 3E:BB:AE:8B:E4:B4:69:E9:E8:CA:C1:3E:FA:1F:13:DE:A1:EC:C2:54 Authority key identifier: 9E:D8:DA:3A:88:51:B4:76:DE:4B:F3:9B:F5:0C:03:7D:94:B6:75:41 Certificate issuer: /CN=9ed8da3a8851b476de4bf39bf50c037d94b67541 Certificate serial: 019AF19AB0B988C22E0A13D65D97864AF804 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ntjaOohRtHbeS_Ob9QwDfZS2dUE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.mft Manifest number: 07B3 Signing time: Sat 06 Dec 2025 03:00:38 +0000 Manifest this update: Sat 06 Dec 2025 03:00:38 +0000 Manifest next update: Sun 07 Dec 2025 03:00:38 +0000 Files and hashes: 1: ntjaOohRtHbeS_Ob9QwDfZS2dUE.crl (hash: Fx1S5wzG05R0qk8yUXPXdg1+PQ2RcAg/ufWRWbOWvPU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.crl rsync://rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.mft rsync://rpki.ripe.net/repository/DEFAULT/ntjaOohRtHbeS_Ob9QwDfZS2dUE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:b0:b9:88:c2:2e:0a:13:d6:5d:97:86:4a:f8:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ed8da3a8851b476de4bf39bf50c037d94b67541 Validity Not Before: Dec 6 03:00:38 2025 GMT Not After : Dec 7 03:00:38 2025 GMT Subject: CN=3ebbae8be4b469e9e8cac13efa1f13dea1ecc254 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:e3:d4:3e:2e:7b:44:1d:fc:bb:83:39:fb:24: 76:8e:0d:d1:97:27:12:64:3f:57:aa:3f:7b:d8:11: 2d:21:7b:f4:dd:16:f2:71:59:10:91:a5:22:c8:30: 61:0f:29:8d:13:ab:e3:c3:34:e2:3b:8d:8e:03:04: df:3d:16:31:4a:b3:8d:1e:6e:a3:6f:17:53:ab:e6: c4:b2:71:b9:a4:2d:2e:8a:84:69:99:27:22:66:84: 33:24:74:2c:2b:5e:ea:e6:4e:2c:0e:48:bb:77:e9: ac:9d:b5:d7:1c:85:f7:b6:31:3a:c8:83:ed:63:98: 17:fa:89:fc:8e:e0:0d:c7:66:ea:22:1b:40:02:bc: a1:79:b5:90:0f:7c:29:d2:ba:82:3f:38:42:86:3a: fc:84:b9:08:8a:21:4c:fe:8d:9c:87:f9:b4:04:1b: 8a:52:86:5f:d4:1d:cc:44:4c:27:d8:94:7a:80:ba: ca:8f:b4:37:c7:cb:f5:0a:63:c3:b3:9e:08:07:35: 46:11:95:82:88:17:dd:f4:4a:43:23:f9:10:c5:e0: 19:80:a5:6f:bf:8e:0b:14:af:57:a9:1e:32:cc:a3: 89:1b:22:8c:6f:0d:cc:b0:b8:20:d5:b6:f5:50:d1: 7b:fd:10:b8:f3:b0:4a:ec:f5:2a:03:d1:60:18:15: fd:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:BB:AE:8B:E4:B4:69:E9:E8:CA:C1:3E:FA:1F:13:DE:A1:EC:C2:54 X509v3 Authority Key Identifier: keyid:9E:D8:DA:3A:88:51:B4:76:DE:4B:F3:9B:F5:0C:03:7D:94:B6:75:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ntjaOohRtHbeS_Ob9QwDfZS2dUE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:16:e4:e5:19:63:44:31:eb:77:a6:d4:a6:75:b4:32:9f:c8: f8:0b:4d:3b:f6:86:a8:25:da:11:1f:c9:03:f5:06:b4:3e:aa: 21:98:8f:3c:05:e9:be:f4:52:eb:d7:e1:fa:0f:d6:60:dc:6a: 06:10:4d:5f:61:48:cb:23:31:21:5a:a0:df:ab:1d:e0:a9:db: ce:ce:3e:24:3b:1a:9c:84:17:6d:04:33:36:50:f7:c0:75:17: 78:93:b1:2f:5f:10:3d:57:45:3e:1d:81:a2:df:80:70:4b:c0: 4d:8d:f5:48:21:59:4e:b5:d1:d3:04:d4:2e:d4:d0:a3:f9:2b: eb:61:86:21:24:b5:68:0e:db:5a:a9:95:5b:a9:04:b1:1f:a5: 09:d0:9e:17:fb:5d:30:47:94:59:3d:f8:3f:21:0a:56:17:73: 50:84:79:cd:2a:47:7f:8a:68:30:b5:e3:6a:89:e1:71:85:ba: 0b:ca:51:b2:cd:82:59:70:e6:14:da:9c:3b:90:0f:ee:94:b7: fb:db:18:f5:c7:cf:1a:25:c2:c3:e4:4f:76:08:a6:ec:31:62: 25:18:e4:36:c2:dd:10:15:7b:47:fb:74:7d:a1:5f:fb:08:b0: de:cf:29:a6:ef:73:b5:bc:85:3e:72:09:d1:16:16:22:d4:c1: cd:7a:16:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmrC5iMIuChPWXZeGSvgEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllZDhkYTNhODg1MWI0NzZkZTRiZjM5YmY1MGMwMzdkOTRi Njc1NDEwHhcNMjUxMjA2MDMwMDM4WhcNMjUxMjA3MDMwMDM4WjAzMTEwLwYDVQQD EygzZWJiYWU4YmU0YjQ2OWU5ZThjYWMxM2VmYTFmMTNkZWExZWNjMjU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjuPUPi57RB38u4M5+yR2jg3RlycS ZD9Xqj972BEtIXv03RbycVkQkaUiyDBhDymNE6vjwzTiO42OAwTfPRYxSrONHm6j bxdTq+bEsnG5pC0uioRpmSciZoQzJHQsK17q5k4sDki7d+msnbXXHIX3tjE6yIPt Y5gX+on8juANx2bqIhtAAryhebWQD3wp0rqCPzhChjr8hLkIiiFM/o2ch/m0BBuK UoZf1B3MREwn2JR6gLrKj7Q3x8v1CmPDs54IBzVGEZWCiBfd9EpDI/kQxeAZgKVv v44LFK9XqR4yzKOJGyKMbw3MsLgg1bb1UNF7/RC487BK7PUqA9FgGBX96QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD67rovktGnp6MrBPvofE96h7MJUMB8GA1UdIwQY MBaAFJ7Y2jqIUbR23kvzm/UMA32UtnVBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnRqYU9vaFJ0SGJlU19PYjlRd0RmWlMyZFVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9lOGVkOGMtNDUzNC00MmI3LWI4NDYt MDU3YzM3NDJhMWE1LzEvbnRqYU9vaFJ0SGJlU19PYjlRd0RmWlMyZFVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS9lOGVkOGMtNDUzNC00MmI3LWI4NDYtMDU3YzM3NDJhMWE1 LzEvbnRqYU9vaFJ0SGJlU19PYjlRd0RmWlMyZFVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbBbk5Rlj RDHrd6bUpnW0Mp/I+AtNO/aGqCXaER/JA/UGtD6qIZiPPAXpvvRS69fh+g/WYNxq BhBNX2FIyyMxIVqg36sd4Knbzs4+JDsanIQXbQQzNlD3wHUXeJOxL18QPVdFPh2B ot+AcEvATY31SCFZTrXR0wTULtTQo/kr62GGISS1aA7bWqmVW6kEsR+lCdCeF/td MEeUWT34PyEKVhdzUIR5zSpHf4poMLXjaonhcYW6C8pRss2CWXDmFNqcO5AP7pS3 +9sY9cfPGiXCw+RPdgim7DFiJRjkNsLdEBV7R/t0faFf+wiw3s8ppu9ztbyFPnIJ 0RYWItTBzXoWmw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:27:03 2025 by rpki-client