This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/6b0e0e-8be5-4bf9-b427-70d63107d05d/1/nOItyiotsKWf5WaByNHEBnenRbU.mft File: nOItyiotsKWf5WaByNHEBnenRbU.mft (raw, json) Hash identifier: OGV8WBx+lChpR/fFqqRTCx36dg53zXJjCXD9o0xan/c= Subject key identifier: 86:94:BA:87:04:45:D2:69:71:A0:0D:9C:54:0E:5D:17:16:D5:22:F6 Authority key identifier: 9C:E2:2D:CA:2A:2D:B0:A5:9F:E5:66:81:C8:D1:C4:06:77:A7:45:B5 Certificate issuer: /CN=9ce22dca2a2db0a59fe56681c8d1c40677a745b5 Certificate serial: 019AF50A1321EB393F60D6359C9124E00020 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nOItyiotsKWf5WaByNHEBnenRbU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/6b0e0e-8be5-4bf9-b427-70d63107d05d/1/nOItyiotsKWf5WaByNHEBnenRbU.mft Manifest number: 1321 Signing time: Sat 06 Dec 2025 19:01:09 +0000 Manifest this update: Sat 06 Dec 2025 19:01:09 +0000 Manifest next update: Sun 07 Dec 2025 19:01:09 +0000 Files and hashes: 1: SgrL7DiM5GSLyUl02rPic8LO2xM.roa (hash: mfGk2oXMS3Dskm6xFi6bjI6ao91mV5GgJuEh/2dC5PU=) 2: nOItyiotsKWf5WaByNHEBnenRbU.crl (hash: HEH6zcCNktzYesSNycTgzw137rF6VEuFJuxfhQDaTpQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/6b0e0e-8be5-4bf9-b427-70d63107d05d/1/nOItyiotsKWf5WaByNHEBnenRbU.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/6b0e0e-8be5-4bf9-b427-70d63107d05d/1/nOItyiotsKWf5WaByNHEBnenRbU.mft rsync://rpki.ripe.net/repository/DEFAULT/nOItyiotsKWf5WaByNHEBnenRbU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:13:21:eb:39:3f:60:d6:35:9c:91:24:e0:00:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ce22dca2a2db0a59fe56681c8d1c40677a745b5 Validity Not Before: Dec 6 19:01:09 2025 GMT Not After : Dec 7 19:01:09 2025 GMT Subject: CN=8694ba870445d26971a00d9c540e5d1716d522f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:05:fd:12:e5:b1:29:8f:49:72:29:51:52:2c: 04:44:a7:9f:aa:0f:35:74:05:bb:9a:63:5d:90:11: 14:37:96:68:98:0a:d1:c5:d0:da:d4:c4:33:22:ac: 1f:37:59:a9:e1:72:3c:26:7a:d8:88:f1:6e:86:19: 07:f9:7b:8e:0b:aa:0d:54:ce:5a:a9:72:06:7e:e2: 12:2a:3b:17:85:2b:b4:c9:0f:19:e3:74:c2:85:7d: 69:9e:b0:21:f0:95:ef:f1:94:de:33:40:f8:b2:36: ec:13:0c:e9:0b:55:8a:8c:8e:e8:4d:fa:4d:c8:31: b4:d7:4d:2e:ac:dd:68:1c:4b:b1:9c:fb:9b:ae:58: 2c:f1:d1:a9:89:c6:7c:7b:09:b2:21:c2:e3:ba:7c: 58:62:06:de:14:95:7d:4d:72:85:8f:fd:41:86:89: 82:5d:0d:71:7c:04:fd:f0:4e:55:d3:e5:f5:45:6e: 41:ce:80:f9:2b:8b:19:d1:59:38:59:74:2a:bf:71: 4c:10:43:ae:a3:29:6e:c6:2a:f7:73:f1:e4:e6:d0: 81:45:57:52:b6:8f:c1:11:24:23:0d:ea:a6:e6:c8: 17:69:f4:51:25:ff:2f:ef:a8:f5:8a:cf:26:78:09: 3b:5f:ce:f1:2f:a4:ce:ff:ff:ef:f9:f2:6e:cc:77: 41:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:94:BA:87:04:45:D2:69:71:A0:0D:9C:54:0E:5D:17:16:D5:22:F6 X509v3 Authority Key Identifier: keyid:9C:E2:2D:CA:2A:2D:B0:A5:9F:E5:66:81:C8:D1:C4:06:77:A7:45:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nOItyiotsKWf5WaByNHEBnenRbU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6b0e0e-8be5-4bf9-b427-70d63107d05d/1/nOItyiotsKWf5WaByNHEBnenRbU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6b0e0e-8be5-4bf9-b427-70d63107d05d/1/nOItyiotsKWf5WaByNHEBnenRbU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:e4:13:3b:04:2c:c4:5b:22:7d:09:da:e0:16:69:1e:64:65: ae:c7:23:dd:63:e5:a9:c7:62:c5:8d:fa:ec:1a:c2:ed:46:75: 56:d1:25:09:b0:5d:5a:44:64:1f:82:55:73:3e:2d:2a:a6:47: f6:da:cc:46:fc:bc:ca:b6:cc:c1:0b:f8:d8:b3:d2:9b:51:5e: 29:0d:7b:6e:48:20:6e:42:8f:85:35:09:cd:83:d9:7d:25:24: 1d:5e:35:df:98:49:ef:08:10:5d:91:38:1b:e6:21:27:87:d4: c1:31:7c:5f:4c:4d:dc:8b:c5:d4:eb:e0:95:a2:92:56:58:7d: f1:ed:cb:86:6e:42:1e:59:43:f4:ca:dd:ca:08:93:84:43:a4: f0:df:ee:34:d0:f6:77:67:5c:05:32:09:8e:d8:50:22:b8:1d: 1b:d4:2c:4a:a7:92:77:7f:5d:0f:28:2c:0c:d8:ff:7c:62:2d: a8:23:f9:20:81:51:a2:78:dd:aa:23:50:87:3b:89:68:3b:c0: ab:48:38:e8:17:19:ba:07:8e:8f:7d:93:62:27:72:18:e7:f1: 06:69:63:38:60:ff:29:dd:a4:ed:01:b0:c6:a0:56:71:c0:21: 90:2c:57:2b:72:98:59:24:f0:c6:51:bf:e8:50:f2:8f:f1:18: 4f:f6:55:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1ChMh6zk/YNY1nJEk4AAgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljZTIyZGNhMmEyZGIwYTU5ZmU1NjY4MWM4ZDFjNDA2Nzdh NzQ1YjUwHhcNMjUxMjA2MTkwMTA5WhcNMjUxMjA3MTkwMTA5WjAzMTEwLwYDVQQD Eyg4Njk0YmE4NzA0NDVkMjY5NzFhMDBkOWM1NDBlNWQxNzE2ZDUyMmY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowX9EuWxKY9JcilRUiwERKefqg81 dAW7mmNdkBEUN5ZomArRxdDa1MQzIqwfN1mp4XI8JnrYiPFuhhkH+XuOC6oNVM5a qXIGfuISKjsXhSu0yQ8Z43TChX1pnrAh8JXv8ZTeM0D4sjbsEwzpC1WKjI7oTfpN yDG0100urN1oHEuxnPubrlgs8dGpicZ8ewmyIcLjunxYYgbeFJV9TXKFj/1BhomC XQ1xfAT98E5V0+X1RW5BzoD5K4sZ0Vk4WXQqv3FMEEOuoyluxir3c/Hk5tCBRVdS to/BESQjDeqm5sgXafRRJf8v76j1is8meAk7X87xL6TO///v+fJuzHdBlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIaUuocERdJpcaANnFQOXRcW1SL2MB8GA1UdIwQY MBaAFJziLcoqLbCln+VmgcjRxAZ3p0W1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbk9JdHlpb3RzS1dmNVdhQnlOSEVCbmVuUmJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC82YjBlMGUtOGJlNS00YmY5LWI0Mjct NzBkNjMxMDdkMDVkLzEvbk9JdHlpb3RzS1dmNVdhQnlOSEVCbmVuUmJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC82YjBlMGUtOGJlNS00YmY5LWI0MjctNzBkNjMxMDdkMDVk LzEvbk9JdHlpb3RzS1dmNVdhQnlOSEVCbmVuUmJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIeQTOwQs xFsifQna4BZpHmRlrscj3WPlqcdixY367BrC7UZ1VtElCbBdWkRkH4JVcz4tKqZH 9trMRvy8yrbMwQv42LPSm1FeKQ17bkggbkKPhTUJzYPZfSUkHV4135hJ7wgQXZE4 G+YhJ4fUwTF8X0xN3IvF1OvglaKSVlh98e3Lhm5CHllD9MrdygiThEOk8N/uNND2 d2dcBTIJjthQIrgdG9QsSqeSd39dDygsDNj/fGItqCP5IIFRonjdqiNQhzuJaDvA q0g46BcZugeOj32TYidyGOfxBmljOGD/Kd2k7QGwxqBWccAhkCxXK3KYWSTwxlG/ 6FDyj/EYT/ZVqw== -----END CERTIFICATE-----Generated at Sun Dec 7 03:14:50 2025 by rpki-client