This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/nOTmWuzJXURqDLZAuXZvoPgVDjw.mft File: nOTmWuzJXURqDLZAuXZvoPgVDjw.mft (raw, json) Hash identifier: gqhgF5WOE6jxa+I834f8JrYBG3ZsZdVP65auFbw9pMM= Subject key identifier: 4F:CF:B0:9D:36:58:BA:06:05:C2:CF:C1:E2:86:73:4E:A3:BD:59:FB Authority key identifier: 9C:E4:E6:5A:EC:C9:5D:44:6A:0C:B6:40:B9:76:6F:A0:F8:15:0E:3C Certificate issuer: /CN=9ce4e65aecc95d446a0cb640b9766fa0f8150e3c Certificate serial: 019AF31C3485EDD808E81B62EE6EC9E5EC35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nOTmWuzJXURqDLZAuXZvoPgVDjw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/nOTmWuzJXURqDLZAuXZvoPgVDjw.mft Manifest number: 1065 Signing time: Sat 06 Dec 2025 10:01:43 +0000 Manifest this update: Sat 06 Dec 2025 10:01:43 +0000 Manifest next update: Sun 07 Dec 2025 10:01:43 +0000 Files and hashes: 1: nOTmWuzJXURqDLZAuXZvoPgVDjw.crl (hash: a9CRSsG+3zNbDrOO6eE2ThQtfUSxL4uTmg4zfjcwDCw=) 2: wnex2LpnDh2tDYAOL_JlA2jqYbg.roa (hash: jkFPmngwGBf/VR9fqzS0+q+xo9EQNuNbpIxHsY+rxw0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/nOTmWuzJXURqDLZAuXZvoPgVDjw.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/nOTmWuzJXURqDLZAuXZvoPgVDjw.mft rsync://rpki.ripe.net/repository/DEFAULT/nOTmWuzJXURqDLZAuXZvoPgVDjw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:34:85:ed:d8:08:e8:1b:62:ee:6e:c9:e5:ec:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ce4e65aecc95d446a0cb640b9766fa0f8150e3c Validity Not Before: Dec 6 10:01:43 2025 GMT Not After : Dec 7 10:01:43 2025 GMT Subject: CN=4fcfb09d3658ba0605c2cfc1e286734ea3bd59fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c2:62:04:01:c0:51:82:ab:63:61:a0:e6:8f: 52:e3:d1:4d:93:8b:04:05:13:bd:82:9c:f9:98:f0: 17:f7:f0:a4:fa:4e:06:f6:7e:a0:ce:69:db:fd:5b: d1:e9:e4:9c:5e:3d:99:5a:c4:c0:ee:52:90:d8:fe: 96:37:49:05:87:3c:f5:1a:8a:d5:3b:3f:42:85:d7: 6a:18:28:26:fd:e5:f3:03:a1:4b:c0:7f:df:51:df: fb:43:41:e8:23:6d:d3:ef:6b:3a:b3:e6:cd:9a:25: 81:59:51:f8:1c:82:56:db:20:19:5b:76:d2:ce:60: 29:00:73:a6:37:f6:7c:d6:f8:80:b6:21:9a:72:28: 48:40:c3:b7:51:d0:63:ca:eb:47:1f:2c:9b:0a:90: 89:0f:09:44:06:7c:ab:25:0d:c2:75:34:70:35:3a: 88:99:f1:5e:0e:10:95:fa:c1:7d:bb:e6:f7:17:0b: a7:bb:f6:79:db:0f:fc:4f:d2:47:1d:30:9d:41:30: 87:44:8d:e8:9a:b4:ee:e0:54:8a:e5:76:30:4b:8d: 11:e4:e7:6c:d9:30:1f:06:89:07:ff:98:b3:b0:c7: 1c:5c:81:58:3a:f0:b1:bf:9e:4f:f1:87:e0:67:85: f7:96:73:9b:df:06:78:f0:fb:2c:0b:39:be:24:a9: 47:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:CF:B0:9D:36:58:BA:06:05:C2:CF:C1:E2:86:73:4E:A3:BD:59:FB X509v3 Authority Key Identifier: keyid:9C:E4:E6:5A:EC:C9:5D:44:6A:0C:B6:40:B9:76:6F:A0:F8:15:0E:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nOTmWuzJXURqDLZAuXZvoPgVDjw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/nOTmWuzJXURqDLZAuXZvoPgVDjw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/nOTmWuzJXURqDLZAuXZvoPgVDjw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:40:67:cd:c3:1a:eb:f7:dc:e1:53:e2:e8:f1:dd:38:e1:c0: 35:8c:f8:01:fd:f6:7d:3c:80:78:5d:9d:56:ab:f3:38:6f:e3: c7:68:bf:b2:c0:c7:f3:ea:04:cd:a6:ec:22:ba:7f:cb:af:15: bf:19:ee:c4:74:44:05:d8:cb:f1:62:53:bd:d2:4d:bb:ee:e1: 57:d2:3d:f5:d0:60:67:9e:9c:67:94:a1:57:26:30:d5:4e:47: 55:a3:12:ec:3b:fe:82:57:5e:80:e0:10:81:98:f7:b0:b9:e7: 95:73:f3:dd:13:7c:64:e4:fd:b1:83:fa:14:6b:a6:eb:1c:fe: db:49:ad:b5:00:df:1a:75:60:f9:0f:ae:6a:5d:ba:80:20:ec: de:69:00:fe:be:d1:6e:d9:48:57:67:72:a5:07:7c:ca:3d:eb: 58:c3:e7:5f:e6:25:49:fe:d3:f9:6f:2b:5b:da:1b:01:15:32: a6:59:97:3f:05:6b:71:21:41:f6:08:5c:a9:7b:d2:29:97:2f: 80:62:61:c4:81:5d:c9:f7:d5:62:06:1b:d9:87:66:ee:a3:92: 7c:9b:41:7e:65:a5:f9:6e:a9:83:85:29:5b:17:b0:9f:6a:66: 05:72:b6:05:1a:fc:d2:c7:7c:88:2f:ca:29:59:b6:39:f9:c7: ee:84:cb:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHDSF7dgI6Bti7m7J5ew1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljZTRlNjVhZWNjOTVkNDQ2YTBjYjY0MGI5NzY2ZmEwZjgx NTBlM2MwHhcNMjUxMjA2MTAwMTQzWhcNMjUxMjA3MTAwMTQzWjAzMTEwLwYDVQQD Eyg0ZmNmYjA5ZDM2NThiYTA2MDVjMmNmYzFlMjg2NzM0ZWEzYmQ1OWZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMJiBAHAUYKrY2Gg5o9S49FNk4sE BRO9gpz5mPAX9/Ck+k4G9n6gzmnb/VvR6eScXj2ZWsTA7lKQ2P6WN0kFhzz1GorV Oz9ChddqGCgm/eXzA6FLwH/fUd/7Q0HoI23T72s6s+bNmiWBWVH4HIJW2yAZW3bS zmApAHOmN/Z81viAtiGacihIQMO3UdBjyutHHyybCpCJDwlEBnyrJQ3CdTRwNTqI mfFeDhCV+sF9u+b3Fwunu/Z52w/8T9JHHTCdQTCHRI3omrTu4FSK5XYwS40R5Ods 2TAfBokH/5izsMccXIFYOvCxv55P8YfgZ4X3lnOb3wZ48PssCzm+JKlH1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE/PsJ02WLoGBcLPweKGc06jvVn7MB8GA1UdIwQY MBaAFJzk5lrsyV1Eagy2QLl2b6D4FQ48MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbk9UbVd1ekpYVVJxRExaQXVYWnZvUGdWRGp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9lZDRlMmMtZTVhZC00MTdhLTg3ODgt MTE4MjQ0MDZiZDVkLzEvbk9UbVd1ekpYVVJxRExaQXVYWnZvUGdWRGp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9lZDRlMmMtZTVhZC00MTdhLTg3ODgtMTE4MjQ0MDZiZDVk LzEvbk9UbVd1ekpYVVJxRExaQXVYWnZvUGdWRGp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp0BnzcMa 6/fc4VPi6PHdOOHANYz4Af32fTyAeF2dVqvzOG/jx2i/ssDH8+oEzabsIrp/y68V vxnuxHREBdjL8WJTvdJNu+7hV9I99dBgZ56cZ5ShVyYw1U5HVaMS7Dv+gldegOAQ gZj3sLnnlXPz3RN8ZOT9sYP6FGum6xz+20mttQDfGnVg+Q+ual26gCDs3mkA/r7R btlIV2dypQd8yj3rWMPnX+YlSf7T+W8rW9obARUyplmXPwVrcSFB9ghcqXvSKZcv gGJhxIFdyffVYgYb2Ydm7qOSfJtBfmWl+W6pg4UpWxewn2pmBXK2BRr80sd8iC/K KVm2OfnH7oTL0A== -----END CERTIFICATE-----Generated at Sat Dec 6 13:33:57 2025 by rpki-client