This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c5d4b2-b57f-4562-aabe-c8ceab8bc050/1/nTs_-TuDNzXKzWUs40n6MjQCQys.mft File: nTs_-TuDNzXKzWUs40n6MjQCQys.mft (raw, json) Hash identifier: MBgf2//7JtsSR3IfX1v3wqqQqkEscerEJ+djZHH33N4= Subject key identifier: C5:2B:AA:62:12:59:99:A7:65:72:1C:7B:42:5B:82:51:2F:E6:4A:50 Authority key identifier: 9D:3B:3F:F9:3B:83:37:35:CA:CD:65:2C:E3:49:FA:32:34:02:43:2B Certificate issuer: /CN=9d3b3ff93b833735cacd652ce349fa323402432b Certificate serial: 019AF27738A7A3B36665E49D9ADF8CCB1212 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nTs_-TuDNzXKzWUs40n6MjQCQys.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/c5d4b2-b57f-4562-aabe-c8ceab8bc050/1/nTs_-TuDNzXKzWUs40n6MjQCQys.mft Manifest number: 1693 Signing time: Sat 06 Dec 2025 07:01:30 +0000 Manifest this update: Sat 06 Dec 2025 07:01:30 +0000 Manifest next update: Sun 07 Dec 2025 07:01:30 +0000 Files and hashes: 1: F8WpKfkO6WPBdgcnLvLi6tQEwfY.roa (hash: aC9X5Qw0ukYXbx0znES1kvpxFjIQA5ZR++ffurv/QKw=) 2: nTs_-TuDNzXKzWUs40n6MjQCQys.crl (hash: ogogvzaPUl7/l9rGkmfBzJ0fGmh6Q2cD2y1HrdPAMnA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/c5d4b2-b57f-4562-aabe-c8ceab8bc050/1/nTs_-TuDNzXKzWUs40n6MjQCQys.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/c5d4b2-b57f-4562-aabe-c8ceab8bc050/1/nTs_-TuDNzXKzWUs40n6MjQCQys.mft rsync://rpki.ripe.net/repository/DEFAULT/nTs_-TuDNzXKzWUs40n6MjQCQys.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:38:a7:a3:b3:66:65:e4:9d:9a:df:8c:cb:12:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d3b3ff93b833735cacd652ce349fa323402432b Validity Not Before: Dec 6 07:01:30 2025 GMT Not After : Dec 7 07:01:30 2025 GMT Subject: CN=c52baa62125999a765721c7b425b82512fe64a50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:5f:d4:22:f2:19:fb:77:1e:47:8b:83:16:cb: df:81:59:d0:51:f1:41:ef:3c:75:86:4a:47:ca:35: 53:2b:9c:d5:e6:f8:d4:d5:c4:a9:e5:af:a7:bb:04: 9a:38:64:17:9d:ff:3f:aa:39:77:55:a4:f4:17:9e: a8:ad:01:bc:3a:97:27:b8:a6:7b:b8:9e:1a:1c:d9: 74:25:f4:d1:00:bf:d1:5e:93:14:3a:5d:a8:08:59: ea:0c:3b:f2:6f:ab:31:39:af:2d:92:9c:29:f9:29: 15:07:18:cf:ca:5b:92:57:d6:b3:53:3a:d9:2c:ed: d4:53:62:21:76:dd:30:e5:ea:e7:0d:e3:25:73:3e: d0:68:f5:36:3e:11:47:f6:3b:dc:d2:99:6e:0d:44: 59:df:27:16:df:bf:f0:ff:5b:68:c0:57:f1:c4:57: 39:c6:89:1c:9d:fe:1c:28:e3:bd:0b:3c:cf:eb:74: f8:bb:80:2d:c9:45:73:a3:fe:bb:e4:a8:12:be:6d: c5:a0:af:39:4c:a8:89:a4:18:6e:ad:ce:35:c3:09: f6:65:86:90:43:53:42:64:b8:f3:bd:1f:4a:6d:69: 24:3f:09:42:4b:11:f5:16:76:4f:d4:13:93:a9:6d: 6e:92:b4:b2:ef:dd:86:d6:2e:4a:9d:bf:ed:1f:a3: 49:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:2B:AA:62:12:59:99:A7:65:72:1C:7B:42:5B:82:51:2F:E6:4A:50 X509v3 Authority Key Identifier: keyid:9D:3B:3F:F9:3B:83:37:35:CA:CD:65:2C:E3:49:FA:32:34:02:43:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nTs_-TuDNzXKzWUs40n6MjQCQys.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c5d4b2-b57f-4562-aabe-c8ceab8bc050/1/nTs_-TuDNzXKzWUs40n6MjQCQys.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c5d4b2-b57f-4562-aabe-c8ceab8bc050/1/nTs_-TuDNzXKzWUs40n6MjQCQys.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:bb:05:a2:9a:d9:37:70:82:d4:af:b9:5e:0c:2a:1a:e4:5b: e2:39:e1:d0:20:8e:83:11:72:da:a4:00:82:64:31:58:97:e5: 5e:a3:18:75:e6:a7:51:d6:3a:e3:71:7b:24:2c:be:c2:69:c8: 9f:40:7a:9d:bd:8c:f6:a0:6d:06:83:8b:d5:d9:42:d5:b2:77: a5:0a:da:1f:b0:b4:9d:21:ee:a3:19:8c:5d:43:0b:57:66:da: 99:eb:83:8e:e6:ce:ce:87:ed:b0:82:ab:52:2a:3e:fe:c6:22: 9f:09:d9:5b:06:6b:81:00:47:d7:6a:5a:06:21:50:fc:9b:e7: 1d:22:a5:f2:78:6e:2d:a8:91:db:b7:62:94:7d:a8:fe:6d:cd: 12:33:7a:f5:ef:8c:4b:35:3b:9e:54:65:3b:70:03:67:2f:b8: 7a:23:01:f3:69:a0:85:53:d8:7d:f3:d4:3c:2e:d8:84:81:35: a0:83:ac:48:2b:9e:23:7b:6e:dd:2b:d3:bd:8e:d4:8e:b6:38: 7e:f3:fa:84:06:68:79:cb:4b:25:9d:37:38:a0:e6:3a:83:fa: a6:08:54:74:1a:f7:94:9c:dc:db:ef:3b:d7:eb:16:c4:41:fb: b9:04:68:ff:01:be:5f:a9:d8:56:04:04:d5:f4:a1:2a:0c:16: 08:a4:aa:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydzino7NmZeSdmt+MyxISMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkM2IzZmY5M2I4MzM3MzVjYWNkNjUyY2UzNDlmYTMyMzQw MjQzMmIwHhcNMjUxMjA2MDcwMTMwWhcNMjUxMjA3MDcwMTMwWjAzMTEwLwYDVQQD EyhjNTJiYWE2MjEyNTk5OWE3NjU3MjFjN2I0MjViODI1MTJmZTY0YTUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjl/UIvIZ+3ceR4uDFsvfgVnQUfFB 7zx1hkpHyjVTK5zV5vjU1cSp5a+nuwSaOGQXnf8/qjl3VaT0F56orQG8OpcnuKZ7 uJ4aHNl0JfTRAL/RXpMUOl2oCFnqDDvyb6sxOa8tkpwp+SkVBxjPyluSV9azUzrZ LO3UU2Ihdt0w5ernDeMlcz7QaPU2PhFH9jvc0pluDURZ3ycW37/w/1towFfxxFc5 xokcnf4cKOO9CzzP63T4u4AtyUVzo/675KgSvm3FoK85TKiJpBhurc41wwn2ZYaQ Q1NCZLjzvR9KbWkkPwlCSxH1FnZP1BOTqW1ukrSy792G1i5Knb/tH6NJfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMUrqmISWZmnZXIce0JbglEv5kpQMB8GA1UdIwQY MBaAFJ07P/k7gzc1ys1lLONJ+jI0AkMrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblRzXy1UdUROelhLeldVczQwbjZNalFDUXlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9jNWQ0YjItYjU3Zi00NTYyLWFhYmUt YzhjZWFiOGJjMDUwLzEvblRzXy1UdUROelhLeldVczQwbjZNalFDUXlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi9jNWQ0YjItYjU3Zi00NTYyLWFhYmUtYzhjZWFiOGJjMDUw LzEvblRzXy1UdUROelhLeldVczQwbjZNalFDUXlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKLsFoprZ N3CC1K+5XgwqGuRb4jnh0CCOgxFy2qQAgmQxWJflXqMYdeanUdY643F7JCy+wmnI n0B6nb2M9qBtBoOL1dlC1bJ3pQraH7C0nSHuoxmMXUMLV2bameuDjubOzoftsIKr Uio+/sYinwnZWwZrgQBH12paBiFQ/JvnHSKl8nhuLaiR27dilH2o/m3NEjN69e+M SzU7nlRlO3ADZy+4eiMB82mghVPYffPUPC7YhIE1oIOsSCueI3tu3SvTvY7UjrY4 fvP6hAZoectLJZ03OKDmOoP6pghUdBr3lJzc2+871+sWxEH7uQRo/wG+X6nYVgQE 1fShKgwWCKSqkA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:19:16 2025 by rpki-client