This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/ntDE_0qQBzKIuXZ0aUFCch9bhDU.mft File: ntDE_0qQBzKIuXZ0aUFCch9bhDU.mft (raw, json) Hash identifier: z9j39QvmAhdSl7rAHDdSHmOfl9XvyDUO9S3H37c2WU0= Subject key identifier: F0:16:BC:3A:41:22:7C:64:2B:18:C3:10:F3:E5:D0:31:04:65:49:C7 Authority key identifier: 9E:D0:C4:FF:4A:90:07:32:88:B9:76:74:69:41:42:72:1F:5B:84:35 Certificate issuer: /CN=9ed0c4ff4a90073288b97674694142721f5b8435 Certificate serial: 019AF27713635586A6182E6D0B08CE8BC3C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ntDE_0qQBzKIuXZ0aUFCch9bhDU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/ntDE_0qQBzKIuXZ0aUFCch9bhDU.mft Manifest number: 123E Signing time: Sat 06 Dec 2025 07:01:21 +0000 Manifest this update: Sat 06 Dec 2025 07:01:21 +0000 Manifest next update: Sun 07 Dec 2025 07:01:21 +0000 Files and hashes: 1: lvu-JvjbXEF_A88P3AVxK9ro79o.roa (hash: 0s/Gju+rMxr3Xpuwq8caLrN7lhLdmbw4Qi63j5N3TJk=) 2: ntDE_0qQBzKIuXZ0aUFCch9bhDU.crl (hash: TRR3O6volSmjyE9tAZ+m7VmOgFkh3K9j1L3jusAFgjo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/ntDE_0qQBzKIuXZ0aUFCch9bhDU.crl rsync://rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/ntDE_0qQBzKIuXZ0aUFCch9bhDU.mft rsync://rpki.ripe.net/repository/DEFAULT/ntDE_0qQBzKIuXZ0aUFCch9bhDU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:13:63:55:86:a6:18:2e:6d:0b:08:ce:8b:c3:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ed0c4ff4a90073288b97674694142721f5b8435 Validity Not Before: Dec 6 07:01:21 2025 GMT Not After : Dec 7 07:01:21 2025 GMT Subject: CN=f016bc3a41227c642b18c310f3e5d031046549c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b0:96:82:d8:07:fb:7d:06:e0:70:fa:c9:f1: 2e:5f:46:3a:a7:8e:b3:81:f3:2f:ff:92:46:f1:88: 05:21:ab:10:4c:37:2e:61:03:43:d9:bf:05:65:95: cc:b4:96:6a:92:03:94:65:ba:9e:a2:ef:23:ac:ea: fa:9a:ed:c7:9d:04:d3:17:6b:bb:23:67:b5:5a:33: d7:ac:9f:77:fd:8c:d6:01:fb:c8:30:25:18:ef:81: e4:d0:f3:d0:97:77:1b:86:1e:14:4b:55:5f:9b:12: 0b:6a:bb:64:9e:5a:76:f0:97:e4:23:f2:71:c1:3d: 9c:c2:6d:82:eb:8b:18:a1:c0:eb:54:1d:23:77:6c: 7e:0d:03:84:ba:2a:c0:cb:6f:20:33:21:58:ad:42: 3e:1e:73:3e:21:8f:52:a9:f9:3b:3e:77:16:06:00: 64:01:48:bb:7a:d5:30:6d:73:23:83:08:bb:6d:fc: 2b:27:7e:b1:28:b6:13:c2:06:80:61:f6:9c:b8:32: 7c:91:9e:0c:51:9e:95:b7:2d:cb:65:9e:f1:8a:1b: 80:0f:5d:be:79:23:24:1c:56:38:42:33:e9:ac:6b: e0:38:9d:d3:f1:96:e5:d8:07:3f:ce:7b:f5:df:4d: cc:03:7c:a0:8e:40:91:cd:0e:ad:3e:d6:d2:b0:b9: 54:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:16:BC:3A:41:22:7C:64:2B:18:C3:10:F3:E5:D0:31:04:65:49:C7 X509v3 Authority Key Identifier: keyid:9E:D0:C4:FF:4A:90:07:32:88:B9:76:74:69:41:42:72:1F:5B:84:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ntDE_0qQBzKIuXZ0aUFCch9bhDU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/ntDE_0qQBzKIuXZ0aUFCch9bhDU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/ntDE_0qQBzKIuXZ0aUFCch9bhDU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:46:ea:a6:cb:71:e2:97:41:9b:d7:31:75:3c:5e:95:ae:4a: 85:f7:eb:67:53:f7:02:c8:4b:86:14:1c:fd:54:59:43:54:3d: ee:89:f7:1a:f3:ec:8c:37:1b:00:0b:16:af:16:1e:e7:f0:c9: 7c:86:cd:97:db:a6:d1:f9:8a:42:72:71:50:ea:5e:e3:90:5c: 0d:9c:ca:42:c0:f6:5e:58:01:a2:f9:3f:4c:80:19:83:21:06: ed:1c:d9:63:ed:6b:14:6b:d5:32:37:05:b3:29:14:5f:b1:2e: 23:29:a5:4d:83:53:d7:9e:01:3b:33:e4:44:12:59:1a:3d:09: f2:88:92:50:5c:eb:1d:ff:28:d1:92:5c:9c:59:e5:96:78:d8: 4f:06:c9:b6:39:6b:6f:d2:e9:99:8b:15:c7:75:40:45:66:e2: ed:37:f7:5c:f0:1b:87:99:1d:8d:68:bd:5f:3c:02:9c:f9:ce: ff:e0:3f:1e:65:0f:30:7f:d4:b9:32:20:76:9f:66:a9:42:fa: 10:3b:55:f8:7b:97:64:5f:80:83:be:f5:2d:f0:ae:b1:4f:9d: ae:a6:91:a6:87:c4:97:39:db:78:ed:53:81:1f:5d:5a:db:0f: 60:ec:d0:d7:89:cf:85:4d:7c:9d:41:0c:4f:a5:b6:0a:d3:3d: 23:a9:82:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydxNjVYamGC5tCwjOi8PJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllZDBjNGZmNGE5MDA3MzI4OGI5NzY3NDY5NDE0MjcyMWY1 Yjg0MzUwHhcNMjUxMjA2MDcwMTIxWhcNMjUxMjA3MDcwMTIxWjAzMTEwLwYDVQQD EyhmMDE2YmMzYTQxMjI3YzY0MmIxOGMzMTBmM2U1ZDAzMTA0NjU0OWM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrCWgtgH+30G4HD6yfEuX0Y6p46z gfMv/5JG8YgFIasQTDcuYQND2b8FZZXMtJZqkgOUZbqeou8jrOr6mu3HnQTTF2u7 I2e1WjPXrJ93/YzWAfvIMCUY74Hk0PPQl3cbhh4US1VfmxILartknlp28JfkI/Jx wT2cwm2C64sYocDrVB0jd2x+DQOEuirAy28gMyFYrUI+HnM+IY9Sqfk7PncWBgBk AUi7etUwbXMjgwi7bfwrJ36xKLYTwgaAYfacuDJ8kZ4MUZ6Vty3LZZ7xihuAD12+ eSMkHFY4QjPprGvgOJ3T8Zbl2Ac/znv1303MA3ygjkCRzQ6tPtbSsLlUdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPAWvDpBInxkKxjDEPPl0DEEZUnHMB8GA1UdIwQY MBaAFJ7QxP9KkAcyiLl2dGlBQnIfW4Q1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnRERV8wcVFCektJdVhaMGFVRkNjaDliaERVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi85YTUwZjEtMjk0Yi00OGU0LWJlYWYt MWRjYWQ4ZTY4ZWQ5LzEvbnRERV8wcVFCektJdVhaMGFVRkNjaDliaERVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi85YTUwZjEtMjk0Yi00OGU0LWJlYWYtMWRjYWQ4ZTY4ZWQ5 LzEvbnRERV8wcVFCektJdVhaMGFVRkNjaDliaERVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzUbqpstx 4pdBm9cxdTxela5KhffrZ1P3AshLhhQc/VRZQ1Q97on3GvPsjDcbAAsWrxYe5/DJ fIbNl9um0fmKQnJxUOpe45BcDZzKQsD2XlgBovk/TIAZgyEG7RzZY+1rFGvVMjcF sykUX7EuIymlTYNT154BOzPkRBJZGj0J8oiSUFzrHf8o0ZJcnFnllnjYTwbJtjlr b9LpmYsVx3VARWbi7Tf3XPAbh5kdjWi9XzwCnPnO/+A/HmUPMH/UuTIgdp9mqUL6 EDtV+HuXZF+Ag771LfCusU+drqaRpofElznbeO1TgR9dWtsPYOzQ14nPhU18nUEM T6W2CtM9I6mCHQ== -----END CERTIFICATE-----Generated at Sat Dec 6 14:39:07 2025 by rpki-client