This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/5ee153-21a9-41e9-a599-6c442324ca3c/1/nTW9eP7OI2XlsT9SOIfS2NakU_k.mft File: nTW9eP7OI2XlsT9SOIfS2NakU_k.mft (raw, json) Hash identifier: Knjlzdpz6Gq95WzzR9NzG9xRr994ZtHGie0GG/bDXFg= Subject key identifier: 15:05:F1:C3:56:6D:37:B5:15:0E:39:48:8E:88:11:7D:F3:CC:56:CA Authority key identifier: 9D:35:BD:78:FE:CE:23:65:E5:B1:3F:52:38:87:D2:D8:D6:A4:53:F9 Certificate issuer: /CN=9d35bd78fece2365e5b13f523887d2d8d6a453f9 Certificate serial: 019AF2AD7FA9529B539E8C2534AF87364AD3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nTW9eP7OI2XlsT9SOIfS2NakU_k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/5ee153-21a9-41e9-a599-6c442324ca3c/1/nTW9eP7OI2XlsT9SOIfS2NakU_k.mft Manifest number: 0184 Signing time: Sat 06 Dec 2025 08:00:47 +0000 Manifest this update: Sat 06 Dec 2025 08:00:47 +0000 Manifest next update: Sun 07 Dec 2025 08:00:47 +0000 Files and hashes: 1: nTW9eP7OI2XlsT9SOIfS2NakU_k.crl (hash: LTeRBEsN1RBRFFc9ZPD44EzlOUUo3FFvtR4zngYQCIU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/5ee153-21a9-41e9-a599-6c442324ca3c/1/nTW9eP7OI2XlsT9SOIfS2NakU_k.crl rsync://rpki.ripe.net/repository/DEFAULT/59/5ee153-21a9-41e9-a599-6c442324ca3c/1/nTW9eP7OI2XlsT9SOIfS2NakU_k.mft rsync://rpki.ripe.net/repository/DEFAULT/nTW9eP7OI2XlsT9SOIfS2NakU_k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:7f:a9:52:9b:53:9e:8c:25:34:af:87:36:4a:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d35bd78fece2365e5b13f523887d2d8d6a453f9 Validity Not Before: Dec 6 08:00:47 2025 GMT Not After : Dec 7 08:00:47 2025 GMT Subject: CN=1505f1c3566d37b5150e39488e88117df3cc56ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:4d:b9:ea:b3:86:c3:da:ef:b8:d9:24:b4:82: bf:02:d5:b8:63:f6:41:f8:e3:4e:96:a6:02:16:00: 14:e5:39:1c:74:b8:9e:02:c8:45:7a:e1:01:10:0b: 2c:2f:c5:4c:e5:9e:27:ba:ef:cb:e7:1d:f9:de:bb: 2d:9c:f6:84:95:27:13:f0:54:72:b4:7d:b6:0f:ff: 5c:09:03:6f:1e:ef:f0:b3:4d:78:59:30:0a:73:3d: 16:ff:80:7e:91:74:d1:b0:f6:c9:ec:14:4b:cf:13: b5:84:78:12:1b:42:97:2f:e4:c9:d5:bf:fd:9d:d7: 04:28:3e:72:39:f7:10:51:9a:06:d0:b0:4e:00:8a: 10:8f:46:9b:04:5a:25:91:ff:f4:3e:1a:f6:1a:6f: 1c:63:7e:f1:be:9b:f0:89:18:fa:f9:f2:09:19:ec: 23:83:de:54:c8:ed:de:6e:39:f4:4a:5e:3b:25:8c: e5:ff:31:69:60:85:44:24:ed:d1:6b:00:4b:25:29: 9c:50:26:47:76:82:5d:df:39:6a:4a:19:64:4f:1e: 05:7c:46:17:c2:4f:3a:d4:bb:e7:03:11:cc:ce:2a: 23:51:24:35:b5:b5:99:f4:31:fc:ed:3e:3c:5d:b6: 42:73:af:12:7f:99:84:9a:cd:9c:fe:11:ef:13:ba: 09:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:05:F1:C3:56:6D:37:B5:15:0E:39:48:8E:88:11:7D:F3:CC:56:CA X509v3 Authority Key Identifier: keyid:9D:35:BD:78:FE:CE:23:65:E5:B1:3F:52:38:87:D2:D8:D6:A4:53:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nTW9eP7OI2XlsT9SOIfS2NakU_k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/5ee153-21a9-41e9-a599-6c442324ca3c/1/nTW9eP7OI2XlsT9SOIfS2NakU_k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/5ee153-21a9-41e9-a599-6c442324ca3c/1/nTW9eP7OI2XlsT9SOIfS2NakU_k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:7f:66:d3:ff:36:8c:61:11:8b:b2:fe:1a:88:d7:41:02:3a: ac:6c:55:fa:c1:b2:8c:58:66:b3:25:08:8c:2e:9e:b9:d3:10: 51:ca:ab:5e:48:c8:f9:f1:0d:a3:6c:63:0f:86:a2:53:64:79: b3:4a:7a:21:0a:bb:29:12:25:7b:56:de:c6:fc:7a:c5:e3:8e: 73:62:1a:37:9b:23:78:d8:75:1c:b8:f1:ae:ac:76:c5:ab:ef: 18:6f:9f:84:30:2d:e7:40:ac:96:e9:c3:18:4c:22:ce:80:a4: d2:2b:77:77:cb:97:8d:c8:6c:1b:6c:89:81:cd:61:0a:97:49: e0:39:d6:2c:26:32:d5:c5:09:c1:5f:c5:59:a2:90:33:5f:59: 68:f7:c6:20:f3:01:d7:42:fb:0e:00:b2:d4:0e:49:40:11:b4: b2:92:18:b3:17:79:20:7c:07:42:76:62:2b:47:84:9c:7f:f1: 7c:d9:8c:c5:0e:fb:dd:12:ef:f8:0f:e1:4e:b2:b0:c0:82:1b: 74:38:c9:f8:0a:52:48:a3:a8:88:3b:01:4f:e6:a3:11:bc:f0: 9a:3f:ce:0f:b1:6f:54:42:bc:90:bf:60:fb:06:3e:04:d3:6d: 7f:f9:4a:43:1f:a4:fd:d0:2f:83:a9:bf:91:fb:8b:7e:6c:51: 0c:84:82:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrX+pUptTnowlNK+HNkrTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMzViZDc4ZmVjZTIzNjVlNWIxM2Y1MjM4ODdkMmQ4ZDZh NDUzZjkwHhcNMjUxMjA2MDgwMDQ3WhcNMjUxMjA3MDgwMDQ3WjAzMTEwLwYDVQQD EygxNTA1ZjFjMzU2NmQzN2I1MTUwZTM5NDg4ZTg4MTE3ZGYzY2M1NmNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0256rOGw9rvuNkktIK/AtW4Y/ZB +ONOlqYCFgAU5TkcdLieAshFeuEBEAssL8VM5Z4nuu/L5x353rstnPaElScT8FRy tH22D/9cCQNvHu/ws014WTAKcz0W/4B+kXTRsPbJ7BRLzxO1hHgSG0KXL+TJ1b/9 ndcEKD5yOfcQUZoG0LBOAIoQj0abBFolkf/0Phr2Gm8cY37xvpvwiRj6+fIJGewj g95UyO3ebjn0Sl47JYzl/zFpYIVEJO3RawBLJSmcUCZHdoJd3zlqShlkTx4FfEYX wk861LvnAxHMziojUSQ1tbWZ9DH87T48XbZCc68Sf5mEms2c/hHvE7oJJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBUF8cNWbTe1FQ45SI6IEX3zzFbKMB8GA1UdIwQY MBaAFJ01vXj+ziNl5bE/UjiH0tjWpFP5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblRXOWVQN09JMlhsc1Q5U09JZlMyTmFrVV9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS81ZWUxNTMtMjFhOS00MWU5LWE1OTkt NmM0NDIzMjRjYTNjLzEvblRXOWVQN09JMlhsc1Q5U09JZlMyTmFrVV9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS81ZWUxNTMtMjFhOS00MWU5LWE1OTktNmM0NDIzMjRjYTNj LzEvblRXOWVQN09JMlhsc1Q5U09JZlMyTmFrVV9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeX9m0/82 jGERi7L+GojXQQI6rGxV+sGyjFhmsyUIjC6eudMQUcqrXkjI+fENo2xjD4aiU2R5 s0p6IQq7KRIle1bexvx6xeOOc2IaN5sjeNh1HLjxrqx2xavvGG+fhDAt50CslunD GEwizoCk0it3d8uXjchsG2yJgc1hCpdJ4DnWLCYy1cUJwV/FWaKQM19ZaPfGIPMB 10L7DgCy1A5JQBG0spIYsxd5IHwHQnZiK0eEnH/xfNmMxQ773RLv+A/hTrKwwIIb dDjJ+ApSSKOoiDsBT+ajEbzwmj/OD7FvVEK8kL9g+wY+BNNtf/lKQx+k/dAvg6m/ kfuLfmxRDISC0g== -----END CERTIFICATE-----Generated at Sat Dec 6 13:45:47 2025 by rpki-client