This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.mft File: 97NANTBJjYJfLniKB2UDvJ3OFXQ.mft (raw, json) Hash identifier: Mmuotzf8JvNUz/Y4bYxO25Zdf1GTx7eCupbnd/dk2JI= Subject key identifier: 53:C1:EA:D2:C3:DE:52:81:E3:AA:B5:64:E4:F6:6A:31:35:56:B8:42 Authority key identifier: F7:B3:40:35:30:49:8D:82:5F:2E:78:8A:07:65:03:BC:9D:CE:15:74 Certificate issuer: /CN=f7b3403530498d825f2e788a076503bc9dce1574 Certificate serial: 019AF208CA072AF26E59C5B84111418B3CA6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/97NANTBJjYJfLniKB2UDvJ3OFXQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.mft Manifest number: 0835 Signing time: Sat 06 Dec 2025 05:00:53 +0000 Manifest this update: Sat 06 Dec 2025 05:00:53 +0000 Manifest next update: Sun 07 Dec 2025 05:00:53 +0000 Files and hashes: 1: 97NANTBJjYJfLniKB2UDvJ3OFXQ.crl (hash: ngR3yu4DiNquxh+uaYLyDQ2c0No87VxBE7yxFvyP0iY=) 2: wilpaK1V0r35ZNvUw0OLpxxalHM.roa (hash: cc48kr9ntP1AGZHGu6VbcBWoFsvg/tsNceyhXPWuzak=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.mft rsync://rpki.ripe.net/repository/DEFAULT/97NANTBJjYJfLniKB2UDvJ3OFXQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:ca:07:2a:f2:6e:59:c5:b8:41:11:41:8b:3c:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7b3403530498d825f2e788a076503bc9dce1574 Validity Not Before: Dec 6 05:00:53 2025 GMT Not After : Dec 7 05:00:53 2025 GMT Subject: CN=53c1ead2c3de5281e3aab564e4f66a313556b842 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:94:15:a3:1b:d2:9b:c9:24:e0:df:e6:ec:68: 9a:3e:82:49:15:28:12:cc:d7:89:93:7c:22:d4:6d: a3:81:c4:7a:74:00:00:20:cf:4c:21:07:66:f8:c7: fc:31:2f:ef:49:bb:f1:29:5f:ad:1a:fa:46:76:b2: e4:ab:a0:ee:fd:5f:42:09:f6:aa:f9:f0:49:d8:9f: 82:54:d9:72:94:fe:fb:25:a2:0e:db:9d:cf:6b:a1: ba:43:43:82:53:9b:4e:d5:b3:3c:5c:06:ce:0c:5f: b5:c4:e3:97:86:22:07:25:23:ec:61:80:a3:24:21: c6:5f:ad:13:52:19:8d:00:f6:ae:e6:ae:c4:a8:f7: 9b:bc:1b:f8:32:7a:02:46:4f:eb:17:fc:19:cc:a4: e1:89:46:a2:c3:9e:86:da:d0:39:0e:6c:d9:84:21: 39:be:5c:d7:72:b2:36:19:7e:c0:f9:9b:ef:f8:6e: 78:0d:0e:45:64:08:7f:74:86:91:1f:a8:e9:6c:d1: 6e:e1:55:d4:b2:7e:b5:37:9f:fe:ae:68:2f:31:92: d0:cc:6d:cc:84:d2:2f:9c:99:32:23:90:2a:4a:d6: d7:eb:a1:78:0a:ed:c2:70:cf:be:ad:0f:14:36:2a: 98:1b:ae:b6:50:53:bf:d7:62:11:61:1d:c2:34:00: 21:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:C1:EA:D2:C3:DE:52:81:E3:AA:B5:64:E4:F6:6A:31:35:56:B8:42 X509v3 Authority Key Identifier: keyid:F7:B3:40:35:30:49:8D:82:5F:2E:78:8A:07:65:03:BC:9D:CE:15:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97NANTBJjYJfLniKB2UDvJ3OFXQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:a7:bc:7c:9d:fe:6e:50:d6:b3:d7:23:29:4d:02:3d:6c:1f: 0e:da:af:3f:4e:8d:f6:e5:d5:c3:58:d2:f2:31:b8:1b:08:f5: 05:30:fa:7d:1c:0b:65:16:5a:57:5b:4d:eb:7d:cf:87:65:46: 88:06:17:2d:f8:b3:06:f1:ff:ad:67:ae:d2:b0:f1:7a:01:8f: 55:f3:f9:e9:8f:c8:88:67:73:56:51:d0:92:6a:03:18:e8:8e: c4:f2:1d:ba:10:b8:57:63:47:ed:61:3e:03:99:41:5b:5c:68: c3:4c:31:5b:b0:5f:12:86:a1:b2:fe:b1:64:9a:6c:77:5a:e2: b6:5a:92:2b:41:06:4b:97:2f:28:93:f8:5a:f0:2b:4b:85:e3: 96:b5:20:cc:e5:73:42:95:39:5a:66:d3:b6:4e:1b:58:f5:1d: 73:f4:c1:54:6e:8b:ad:46:57:6d:ab:b1:cf:fc:18:e7:40:86: 91:c5:cc:e5:e7:6b:14:25:5a:09:c0:eb:20:a9:7b:14:28:8c: ff:83:2d:1f:df:a0:78:cf:91:e5:12:ad:ba:27:43:d2:72:38: 93:60:c3:8f:d6:01:02:03:e3:f4:e0:08:ba:ea:88:10:4c:c5: f0:df:a3:13:80:13:53:b3:e6:18:2f:a9:ee:43:7a:fd:ef:ef: 04:06:98:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCMoHKvJuWcW4QRFBizymMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3YjM0MDM1MzA0OThkODI1ZjJlNzg4YTA3NjUwM2JjOWRj ZTE1NzQwHhcNMjUxMjA2MDUwMDUzWhcNMjUxMjA3MDUwMDUzWjAzMTEwLwYDVQQD Eyg1M2MxZWFkMmMzZGU1MjgxZTNhYWI1NjRlNGY2NmEzMTM1NTZiODQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2JQVoxvSm8kk4N/m7GiaPoJJFSgS zNeJk3wi1G2jgcR6dAAAIM9MIQdm+Mf8MS/vSbvxKV+tGvpGdrLkq6Du/V9CCfaq +fBJ2J+CVNlylP77JaIO253Pa6G6Q0OCU5tO1bM8XAbODF+1xOOXhiIHJSPsYYCj JCHGX60TUhmNAPau5q7EqPebvBv4MnoCRk/rF/wZzKThiUaiw56G2tA5DmzZhCE5 vlzXcrI2GX7A+Zvv+G54DQ5FZAh/dIaRH6jpbNFu4VXUsn61N5/+rmgvMZLQzG3M hNIvnJkyI5AqStbX66F4Cu3CcM++rQ8UNiqYG662UFO/12IRYR3CNAAhuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFPB6tLD3lKB46q1ZOT2ajE1VrhCMB8GA1UdIwQY MBaAFPezQDUwSY2CXy54igdlA7ydzhV0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTdOQU5UQkpqWUpmTG5pS0IyVUR2SjNPRlhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi82NmU3MGMtNjQ3MS00NTkyLWExMzQt NDBkZDJjNzVmMWI3LzEvOTdOQU5UQkpqWUpmTG5pS0IyVUR2SjNPRlhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi82NmU3MGMtNjQ3MS00NTkyLWExMzQtNDBkZDJjNzVmMWI3 LzEvOTdOQU5UQkpqWUpmTG5pS0IyVUR2SjNPRlhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFae8fJ3+ blDWs9cjKU0CPWwfDtqvP06N9uXVw1jS8jG4Gwj1BTD6fRwLZRZaV1tN633Ph2VG iAYXLfizBvH/rWeu0rDxegGPVfP56Y/IiGdzVlHQkmoDGOiOxPIduhC4V2NH7WE+ A5lBW1xow0wxW7BfEoahsv6xZJpsd1ritlqSK0EGS5cvKJP4WvArS4XjlrUgzOVz QpU5WmbTtk4bWPUdc/TBVG6LrUZXbauxz/wY50CGkcXM5edrFCVaCcDrIKl7FCiM /4MtH9+geM+R5RKtuidD0nI4k2DDj9YBAgPj9OAIuuqIEEzF8N+jE4ATU7PmGC+p 7kN6/e/vBAaYNw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:11:08 2025 by rpki-client