This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.mft File: ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.mft (raw, json) Hash identifier: yodYsyzLBh/nckHvrRK8TVXwUA9wYY8/JSKKjnXxcHQ= Subject key identifier: 7E:42:EB:1B:DD:76:38:FC:48:23:83:2E:EC:6C:25:3A:56:D1:FD:2E Authority key identifier: 9E:D7:68:29:BA:63:14:A0:35:FD:A7:99:FC:03:70:33:66:57:08:3E Certificate issuer: /CN=9ed76829ba6314a035fda799fc0370336657083e Certificate serial: 019AF12D4C7BB3F7303FAC356851436A223A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.mft Manifest number: 11D0 Signing time: Sat 06 Dec 2025 01:01:09 +0000 Manifest this update: Sat 06 Dec 2025 01:01:09 +0000 Manifest next update: Sun 07 Dec 2025 01:01:09 +0000 Files and hashes: 1: 2naHUDZ4rUS9i5KxyQQU_cI4UeA.roa (hash: J3JrxG9uyiuiyL3c5u4IhFuOvuYSNgMUze1zOm1bwO0=) 2: ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.crl (hash: u+jqWyHZbWnavrm3rAMfizD0s6wI6qqstjQfgQp6aqA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.crl rsync://rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.mft rsync://rpki.ripe.net/repository/DEFAULT/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:4c:7b:b3:f7:30:3f:ac:35:68:51:43:6a:22:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ed76829ba6314a035fda799fc0370336657083e Validity Not Before: Dec 6 01:01:09 2025 GMT Not After : Dec 7 01:01:09 2025 GMT Subject: CN=7e42eb1bdd7638fc4823832eec6c253a56d1fd2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e9:3a:26:fb:d8:a3:81:0e:4a:31:9b:c3:26: da:b2:1b:66:b0:27:d7:fe:c1:91:84:4a:58:4a:08: 15:e0:f6:94:5f:7a:75:1b:93:d7:e8:52:0e:16:97: 61:78:76:f4:80:4a:2f:af:64:8b:14:50:ea:a4:93: cd:c9:1a:fc:cb:4f:dd:55:16:c5:1d:37:57:31:76: 77:57:eb:cd:a6:f9:42:e6:01:f1:d1:fd:e8:35:84: 61:80:14:48:4e:d3:7e:15:fb:d5:d3:b0:d3:50:04: af:5f:e4:61:c8:63:a1:9c:ee:a8:95:49:d5:e7:17: f1:ba:4d:f4:77:83:29:e5:c0:5b:71:f2:37:b5:b1: 14:bb:e5:ab:6b:07:35:e5:b1:c6:03:6d:18:0a:49: 77:f1:2f:3e:2e:79:8d:b3:02:96:9a:ad:cd:d7:18: 19:c2:c5:33:e3:95:55:2d:4e:fe:34:4e:b5:f8:6b: 70:8d:9c:e4:19:9f:5e:1a:0b:aa:b9:f0:96:5f:e8: e9:5b:42:3c:74:6a:e0:13:eb:17:89:93:5a:b7:dc: 65:96:9a:7d:34:31:3f:a5:3e:9f:51:dc:99:dc:d3: 3e:63:cb:b7:29:45:81:a9:96:39:83:af:2e:5e:04: d9:29:8a:d8:83:2d:d5:df:71:75:92:55:a0:8d:0a: 9f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:42:EB:1B:DD:76:38:FC:48:23:83:2E:EC:6C:25:3A:56:D1:FD:2E X509v3 Authority Key Identifier: keyid:9E:D7:68:29:BA:63:14:A0:35:FD:A7:99:FC:03:70:33:66:57:08:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:bd:d5:dd:2d:69:f9:6d:58:39:b4:42:62:e7:d1:a0:76:25: 4c:31:ed:87:85:2b:c8:b7:33:5c:a6:7f:e0:1e:5b:36:44:53: 8d:c2:18:14:dc:62:63:da:58:36:54:6b:96:5d:2b:33:0a:74: 1f:79:52:3e:78:0e:a3:c6:cc:ed:bd:9f:a0:6f:36:60:81:bb: 45:e1:6f:28:91:f4:11:db:e7:e2:b5:4b:b4:9c:e4:32:be:fe: c8:7c:3c:1a:1f:7a:d9:e3:bb:b3:17:e1:9a:1f:23:36:bf:2f: 3b:ca:33:47:d6:4d:aa:e7:a8:d3:ba:41:f2:3f:d2:12:aa:1a: a6:2e:3f:5d:d1:0f:a1:cd:a7:5d:45:4e:b0:d5:82:fa:de:49: 51:21:1e:04:cc:0e:1a:94:45:24:57:5f:16:fc:60:f0:22:a5: f6:98:f4:5f:2b:3d:cb:a7:d5:17:3e:0f:91:40:43:5d:e0:21: ab:07:31:3b:81:a0:5c:d0:92:50:a1:39:e9:18:39:8c:7c:0a: 28:56:a2:28:ae:92:81:f6:70:68:75:36:19:10:6b:61:52:4c: 65:dc:3a:ca:76:97:f6:d7:cb:03:4d:e8:6a:12:0b:54:1e:3f: c0:a9:7f:37:d4:be:74:86:5d:83:98:37:a0:74:fb:0f:89:b8: d2:62:35:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLUx7s/cwP6w1aFFDaiI6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllZDc2ODI5YmE2MzE0YTAzNWZkYTc5OWZjMDM3MDMzNjY1 NzA4M2UwHhcNMjUxMjA2MDEwMTA5WhcNMjUxMjA3MDEwMTA5WjAzMTEwLwYDVQQD Eyg3ZTQyZWIxYmRkNzYzOGZjNDgyMzgzMmVlYzZjMjUzYTU2ZDFmZDJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOk6JvvYo4EOSjGbwybashtmsCfX /sGRhEpYSggV4PaUX3p1G5PX6FIOFpdheHb0gEovr2SLFFDqpJPNyRr8y0/dVRbF HTdXMXZ3V+vNpvlC5gHx0f3oNYRhgBRITtN+FfvV07DTUASvX+RhyGOhnO6olUnV 5xfxuk30d4Mp5cBbcfI3tbEUu+Wrawc15bHGA20YCkl38S8+LnmNswKWmq3N1xgZ wsUz45VVLU7+NE61+GtwjZzkGZ9eGguqufCWX+jpW0I8dGrgE+sXiZNat9xllpp9 NDE/pT6fUdyZ3NM+Y8u3KUWBqZY5g68uXgTZKYrYgy3V33F1klWgjQqflwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH5C6xvddjj8SCODLuxsJTpW0f0uMB8GA1UdIwQY MBaAFJ7XaCm6YxSgNf2nmfwDcDNmVwg+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnRkb0ticGpGS0ExX2FlWl9BTndNMlpYQ0Q0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9iNWY4MGQtMmE3ZC00YmFiLWFhYWEt YmYyNjRhMjE1YjMyLzEvbnRkb0ticGpGS0ExX2FlWl9BTndNMlpYQ0Q0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9iNWY4MGQtMmE3ZC00YmFiLWFhYWEtYmYyNjRhMjE1YjMy LzEvbnRkb0ticGpGS0ExX2FlWl9BTndNMlpYQ0Q0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQb3V3S1p +W1YObRCYufRoHYlTDHth4UryLczXKZ/4B5bNkRTjcIYFNxiY9pYNlRrll0rMwp0 H3lSPngOo8bM7b2foG82YIG7ReFvKJH0Edvn4rVLtJzkMr7+yHw8Gh962eO7sxfh mh8jNr8vO8ozR9ZNqueo07pB8j/SEqoapi4/XdEPoc2nXUVOsNWC+t5JUSEeBMwO GpRFJFdfFvxg8CKl9pj0Xys9y6fVFz4PkUBDXeAhqwcxO4GgXNCSUKE56Rg5jHwK KFaiKK6SgfZwaHU2GRBrYVJMZdw6ynaX9tfLA03oahILVB4/wKl/N9S+dIZdg5g3 oHT7D4m40mI1Ww== -----END CERTIFICATE-----Generated at Sat Dec 6 11:48:05 2025 by rpki-client