This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/NTYg2kRSrIKq9MjAiBnrC4JRO4M.mft File: NTYg2kRSrIKq9MjAiBnrC4JRO4M.mft (raw, json) Hash identifier: 1yE6l/LhzTUn3l811a3uFDtQvi6LMl+7IECRr7BFwCo= Subject key identifier: 1C:63:99:78:67:3D:BD:36:87:70:6E:68:6A:34:8C:80:D6:CB:E4:A5 Authority key identifier: 35:36:20:DA:44:52:AC:82:AA:F4:C8:C0:88:19:EB:0B:82:51:3B:83 Certificate issuer: /CN=353620da4452ac82aaf4c8c08819eb0b82513b83 Certificate serial: 019AF2097DE6899DCF6FD2BE69A7407DAB2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NTYg2kRSrIKq9MjAiBnrC4JRO4M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/NTYg2kRSrIKq9MjAiBnrC4JRO4M.mft Manifest number: 05BC Signing time: Sat 06 Dec 2025 05:01:39 +0000 Manifest this update: Sat 06 Dec 2025 05:01:39 +0000 Manifest next update: Sun 07 Dec 2025 05:01:39 +0000 Files and hashes: 1: NTYg2kRSrIKq9MjAiBnrC4JRO4M.crl (hash: 8tnv9QhwOlSFdyvo87Pa5664kY0wKUAXY/7KvGXzVTs=) 2: YYXnMCAt040NcLATlrH2pdrRzy4.roa (hash: //AxvWil0+RRuTzD9Iyynz1Qj6s3Pa74fW9rqeU5a2Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/NTYg2kRSrIKq9MjAiBnrC4JRO4M.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/NTYg2kRSrIKq9MjAiBnrC4JRO4M.mft rsync://rpki.ripe.net/repository/DEFAULT/NTYg2kRSrIKq9MjAiBnrC4JRO4M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:7d:e6:89:9d:cf:6f:d2:be:69:a7:40:7d:ab:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=353620da4452ac82aaf4c8c08819eb0b82513b83 Validity Not Before: Dec 6 05:01:39 2025 GMT Not After : Dec 7 05:01:39 2025 GMT Subject: CN=1c639978673dbd3687706e686a348c80d6cbe4a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f0:09:4f:c0:41:70:f4:22:27:be:98:a8:08: f7:66:47:16:52:b6:c5:52:c5:8b:85:20:70:6b:b2: 93:9a:e6:25:c4:a4:0f:42:63:46:87:59:c2:ea:c9: 9d:9b:ff:10:d0:bc:be:bc:55:58:87:fd:fd:9d:31: a4:91:29:3f:98:af:57:6b:9f:d8:1f:f3:9b:2d:81: 21:f8:1b:53:b2:54:f6:da:ce:82:4c:45:30:22:d0: df:06:a1:2a:54:12:42:84:49:35:e3:f2:05:de:d7: 35:c5:75:d3:68:f3:f0:de:af:6a:ff:33:6a:8f:74: 21:bf:08:3d:a1:aa:31:55:cd:03:b9:13:e7:0a:3b: 51:94:a8:fc:38:98:e9:ec:33:a2:9c:4e:c7:5e:18: d4:f0:ec:22:45:c9:3e:2b:55:ef:d6:81:2d:5c:f7: 29:bd:c5:12:93:c7:05:22:63:1e:fb:40:f0:fe:17: 8f:b6:33:e3:f5:ad:b6:26:73:62:e0:3a:b8:45:77: 7a:27:02:df:d9:52:d4:ac:1f:ad:d2:44:3f:95:3a: 36:fc:6a:19:31:3e:ed:86:cb:33:59:c1:d6:59:95: ea:48:97:8c:d2:e5:65:67:23:8d:10:f3:d2:1b:4e: 04:9b:4e:b9:63:18:5a:15:8c:72:17:1b:d7:1e:39: cb:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:63:99:78:67:3D:BD:36:87:70:6E:68:6A:34:8C:80:D6:CB:E4:A5 X509v3 Authority Key Identifier: keyid:35:36:20:DA:44:52:AC:82:AA:F4:C8:C0:88:19:EB:0B:82:51:3B:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NTYg2kRSrIKq9MjAiBnrC4JRO4M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/NTYg2kRSrIKq9MjAiBnrC4JRO4M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/NTYg2kRSrIKq9MjAiBnrC4JRO4M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:4a:c5:cd:6c:63:38:d3:91:b1:1d:40:12:65:e8:fb:68:d0: eb:e9:0a:ba:1c:b2:1d:d9:4a:ce:22:fe:6e:5e:53:80:41:60: 89:73:96:31:b8:5a:c1:3e:04:73:4e:21:4d:2e:86:37:f3:a9: 39:b6:0b:ae:d3:c4:8c:b0:ce:b5:d9:70:03:7e:13:79:93:3a: f6:f0:a1:5f:ac:c3:e8:37:2e:de:e7:b3:56:ce:01:7b:1e:3c: 6b:73:66:ad:34:af:12:26:8d:20:08:6f:91:10:75:e8:4a:7f: 9d:81:50:33:6e:5a:b6:b8:bc:80:e6:f1:c5:05:c8:a2:96:a3: 65:24:85:f3:25:5b:92:7c:64:46:87:a1:7a:64:0a:89:d0:16: d6:ab:23:08:46:4e:2c:49:46:ed:a1:08:77:db:2a:c8:4e:52: fb:e7:2c:ff:0d:43:aa:e9:4c:84:51:95:53:76:1a:9c:3f:e5: 87:4e:ac:36:a5:1a:a7:d2:84:8f:9f:e1:3f:34:d7:11:b8:7e: 99:f0:17:d5:39:76:e2:0a:84:58:b1:70:5c:7a:2b:f3:19:2f: ca:2b:79:b3:db:33:da:71:6d:1f:99:38:9c:51:dd:2a:4f:e9: dc:33:2b:c8:c6:8f:a3:54:28:23:2e:34:f5:77:48:59:41:42: ed:aa:2f:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCX3miZ3Pb9K+aadAfasvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MzYyMGRhNDQ1MmFjODJhYWY0YzhjMDg4MTllYjBiODI1 MTNiODMwHhcNMjUxMjA2MDUwMTM5WhcNMjUxMjA3MDUwMTM5WjAzMTEwLwYDVQQD EygxYzYzOTk3ODY3M2RiZDM2ODc3MDZlNjg2YTM0OGM4MGQ2Y2JlNGE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvAJT8BBcPQiJ76YqAj3ZkcWUrbF UsWLhSBwa7KTmuYlxKQPQmNGh1nC6smdm/8Q0Ly+vFVYh/39nTGkkSk/mK9Xa5/Y H/ObLYEh+BtTslT22s6CTEUwItDfBqEqVBJChEk14/IF3tc1xXXTaPPw3q9q/zNq j3Qhvwg9oaoxVc0DuRPnCjtRlKj8OJjp7DOinE7HXhjU8OwiRck+K1Xv1oEtXPcp vcUSk8cFImMe+0Dw/hePtjPj9a22JnNi4Dq4RXd6JwLf2VLUrB+t0kQ/lTo2/GoZ MT7thsszWcHWWZXqSJeM0uVlZyONEPPSG04Em065YxhaFYxyFxvXHjnL+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBxjmXhnPb02h3BuaGo0jIDWy+SlMB8GA1UdIwQY MBaAFDU2INpEUqyCqvTIwIgZ6wuCUTuDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlRZZzJrUlNySUtxOU1qQWlCbnJDNEpSTzRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9iZjI2MzEtY2ZhYy00YTg3LWEzN2It NTUxNTg0ZTVjMGE0LzEvTlRZZzJrUlNySUtxOU1qQWlCbnJDNEpSTzRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9iZjI2MzEtY2ZhYy00YTg3LWEzN2ItNTUxNTg0ZTVjMGE0 LzEvTlRZZzJrUlNySUtxOU1qQWlCbnJDNEpSTzRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhkrFzWxj ONORsR1AEmXo+2jQ6+kKuhyyHdlKziL+bl5TgEFgiXOWMbhawT4Ec04hTS6GN/Op ObYLrtPEjLDOtdlwA34TeZM69vChX6zD6Dcu3uezVs4Bex48a3NmrTSvEiaNIAhv kRB16Ep/nYFQM25atri8gObxxQXIopajZSSF8yVbknxkRoehemQKidAW1qsjCEZO LElG7aEId9sqyE5S++cs/w1DqulMhFGVU3YanD/lh06sNqUap9KEj5/hPzTXEbh+ mfAX1Tl24gqEWLFwXHor8xkvyit5s9sz2nFtH5k4nFHdKk/p3DMryMaPo1QoIy40 9XdIWUFC7aovNw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:39:23 2025 by rpki-client