This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/e35ac1-05d1-406d-b668-36eaf7948531/1/NltKurcWrRQHqQLlF2Vg7MN8lm0.mft File: NltKurcWrRQHqQLlF2Vg7MN8lm0.mft (raw, json) Hash identifier: P8cx/lEv3xDXFsg3wxkELYQxB625cpazGOBHRE3I6+8= Subject key identifier: 76:55:E4:A2:66:F0:4C:A3:B1:06:52:5C:BA:13:BF:B5:A7:3D:02:1C Authority key identifier: 36:5B:4A:BA:B7:16:AD:14:07:A9:02:E5:17:65:60:EC:C3:7C:96:6D Certificate issuer: /CN=365b4abab716ad1407a902e5176560ecc37c966d Certificate serial: 019AF20906B664783CC8C6D9DC320AF95DC3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NltKurcWrRQHqQLlF2Vg7MN8lm0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/e35ac1-05d1-406d-b668-36eaf7948531/1/NltKurcWrRQHqQLlF2Vg7MN8lm0.mft Manifest number: 10C8 Signing time: Sat 06 Dec 2025 05:01:09 +0000 Manifest this update: Sat 06 Dec 2025 05:01:09 +0000 Manifest next update: Sun 07 Dec 2025 05:01:09 +0000 Files and hashes: 1: 663owoCy0geoSEBq18zjFiT7Z94.roa (hash: 1TSeYE3XDa7rGIOANkOioACjFE0zrxWJZSCcKrx3NcU=) 2: KIM-NbEkTbitOU_rhpt4qAs9-Oo.roa (hash: H4xfbttPRqY/FlOJMk6QaNDUIdoa4V9nPRdLB2/KbPU=) 3: LD0Ui4wMeU8IWaHDiSVwgyowOUw.roa (hash: 31h6z+WARy6dkl6qHeADOyyrJnTIy/84Jsu1HRgGL7A=) 4: NltKurcWrRQHqQLlF2Vg7MN8lm0.crl (hash: TCOObBz4UDtY48Lmm2lqfVahRfnArYi9Si7iOl4WYmE=) 5: u8gM57Vzy83m5elKcN7yP_JfkD0.roa (hash: 11ORynfloHVoIfYWzniyOLKFlZYtVFhIVMRALKTSBUQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/e35ac1-05d1-406d-b668-36eaf7948531/1/NltKurcWrRQHqQLlF2Vg7MN8lm0.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/e35ac1-05d1-406d-b668-36eaf7948531/1/NltKurcWrRQHqQLlF2Vg7MN8lm0.mft rsync://rpki.ripe.net/repository/DEFAULT/NltKurcWrRQHqQLlF2Vg7MN8lm0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:06:b6:64:78:3c:c8:c6:d9:dc:32:0a:f9:5d:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=365b4abab716ad1407a902e5176560ecc37c966d Validity Not Before: Dec 6 05:01:09 2025 GMT Not After : Dec 7 05:01:09 2025 GMT Subject: CN=7655e4a266f04ca3b106525cba13bfb5a73d021c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:e0:4d:f4:6d:52:4d:69:d6:88:47:9d:85:e1: 84:9f:a8:a3:11:83:74:ac:b3:60:85:6e:63:fc:87: 8f:ef:dc:1e:62:ab:ea:96:f8:cd:e7:c8:15:b4:37: 30:f3:25:65:d4:cb:46:26:56:51:a2:a6:ae:91:d6: 52:b2:e9:d4:56:99:cd:9c:97:be:f0:a7:eb:bc:78: 5a:7f:03:0d:5c:d8:b4:d6:85:a8:4d:b4:9f:90:e1: c9:c4:fb:b8:f0:ea:26:de:31:89:d6:0e:b3:6a:56: e1:cb:64:49:91:c0:79:99:8d:2a:df:89:9c:ff:03: ec:dd:be:9c:22:a4:00:52:2b:14:b2:5a:99:b8:8d: c7:78:30:51:9f:7e:09:7f:fb:ef:e0:c5:8b:5a:93: e9:24:8e:02:6b:6f:32:58:56:79:47:d5:ba:69:6d: 93:f1:a0:d9:d6:19:33:d5:93:91:1b:93:64:42:7a: b9:20:e8:ec:da:b3:ad:71:0d:33:e6:5c:6c:6f:92: 62:24:97:a3:68:f0:d5:4a:d1:80:c4:a0:c3:dd:da: d7:e5:5c:20:42:d8:17:bd:5e:ba:91:a6:fd:08:68: ba:39:93:a7:e2:7e:c4:9a:9a:73:67:8f:c5:59:d1: a5:60:89:90:68:49:82:9b:be:0e:14:61:14:47:35: 57:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:55:E4:A2:66:F0:4C:A3:B1:06:52:5C:BA:13:BF:B5:A7:3D:02:1C X509v3 Authority Key Identifier: keyid:36:5B:4A:BA:B7:16:AD:14:07:A9:02:E5:17:65:60:EC:C3:7C:96:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NltKurcWrRQHqQLlF2Vg7MN8lm0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e35ac1-05d1-406d-b668-36eaf7948531/1/NltKurcWrRQHqQLlF2Vg7MN8lm0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e35ac1-05d1-406d-b668-36eaf7948531/1/NltKurcWrRQHqQLlF2Vg7MN8lm0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:6a:e2:c6:d8:29:bf:46:17:fc:1b:00:1c:a6:56:09:a0:6f: 67:44:be:61:06:92:fc:a4:11:f5:08:0f:83:11:96:72:f0:3b: 90:9e:74:93:c5:e5:b3:8a:ca:32:39:07:97:a4:68:65:0a:5b: c8:da:31:04:84:8b:47:81:d6:73:1d:31:ae:bb:c4:a0:ae:81: 08:c3:17:47:94:68:4d:56:97:ee:94:34:cd:e1:d2:ab:96:29: b6:94:3d:4e:86:62:58:96:3c:ae:78:ea:55:fa:9b:e1:59:ee: c1:95:9f:c6:5c:7d:11:be:e8:e0:1f:f5:0c:a8:ea:12:b8:3d: 59:59:f9:27:1a:fa:27:96:e9:c9:34:da:76:21:78:95:27:45: c8:78:dc:dc:2b:e2:04:cd:72:7f:19:75:ce:68:af:66:5e:86: 75:61:c7:00:12:5e:22:fd:80:ea:32:08:8b:01:e0:b3:a6:ea: e8:ad:53:a0:5d:b3:9e:e4:99:da:41:bb:02:83:85:4c:ec:56: f9:93:5b:82:30:41:e1:63:be:57:a1:6d:59:b8:d5:b9:bf:4b: ff:9b:e7:89:b9:b0:d1:15:20:b3:e3:23:d4:5c:11:6f:16:bc: 57:1b:bc:64:0e:9b:0d:7c:ac:db:62:45:ba:d2:99:36:89:2a: 31:65:03:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCQa2ZHg8yMbZ3DIK+V3DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2NWI0YWJhYjcxNmFkMTQwN2E5MDJlNTE3NjU2MGVjYzM3 Yzk2NmQwHhcNMjUxMjA2MDUwMTA5WhcNMjUxMjA3MDUwMTA5WjAzMTEwLwYDVQQD Eyg3NjU1ZTRhMjY2ZjA0Y2EzYjEwNjUyNWNiYTEzYmZiNWE3M2QwMjFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1uBN9G1STWnWiEedheGEn6ijEYN0 rLNghW5j/IeP79weYqvqlvjN58gVtDcw8yVl1MtGJlZRoqaukdZSsunUVpnNnJe+ 8KfrvHhafwMNXNi01oWoTbSfkOHJxPu48Oom3jGJ1g6zalbhy2RJkcB5mY0q34mc /wPs3b6cIqQAUisUslqZuI3HeDBRn34Jf/vv4MWLWpPpJI4Ca28yWFZ5R9W6aW2T 8aDZ1hkz1ZORG5NkQnq5IOjs2rOtcQ0z5lxsb5JiJJejaPDVStGAxKDD3drX5Vwg QtgXvV66kab9CGi6OZOn4n7EmppzZ4/FWdGlYImQaEmCm74OFGEURzVXowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHZV5KJm8EyjsQZSXLoTv7WnPQIcMB8GA1UdIwQY MBaAFDZbSrq3Fq0UB6kC5RdlYOzDfJZtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmx0S3VyY1dyUlFIcVFMbEYyVmc3TU44bG0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9lMzVhYzEtMDVkMS00MDZkLWI2Njgt MzZlYWY3OTQ4NTMxLzEvTmx0S3VyY1dyUlFIcVFMbEYyVmc3TU44bG0wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS9lMzVhYzEtMDVkMS00MDZkLWI2NjgtMzZlYWY3OTQ4NTMx LzEvTmx0S3VyY1dyUlFIcVFMbEYyVmc3TU44bG0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZWrixtgp v0YX/BsAHKZWCaBvZ0S+YQaS/KQR9QgPgxGWcvA7kJ50k8Xls4rKMjkHl6RoZQpb yNoxBISLR4HWcx0xrrvEoK6BCMMXR5RoTVaX7pQ0zeHSq5YptpQ9ToZiWJY8rnjq Vfqb4VnuwZWfxlx9Eb7o4B/1DKjqErg9WVn5Jxr6J5bpyTTadiF4lSdFyHjc3Cvi BM1yfxl1zmivZl6GdWHHABJeIv2A6jIIiwHgs6bq6K1ToF2znuSZ2kG7AoOFTOxW +ZNbgjBB4WO+V6FtWbjVub9L/5vnibmw0RUgs+Mj1FwRbxa8Vxu8ZA6bDXys22JF utKZNokqMWUD1Q== -----END CERTIFICATE-----Generated at Sat Dec 6 11:38:45 2025 by rpki-client