This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/4b5cf1-4320-44c2-9358-e07f959356a1/1/NkITiw7v_lajLMuqWNb_5u3D8p4.mft File: NkITiw7v_lajLMuqWNb_5u3D8p4.mft (raw, json) Hash identifier: KRL4MbIlNQjABH3ZsaKbZz3Xt0iDs1MiGZpzdMHThsc= Subject key identifier: 1B:E5:21:7E:94:01:BF:EA:BC:74:51:AE:AA:84:02:30:F9:69:44:7A Authority key identifier: 36:42:13:8B:0E:EF:FE:56:A3:2C:CB:AA:58:D6:FF:E6:ED:C3:F2:9E Certificate issuer: /CN=3642138b0eeffe56a32ccbaa58d6ffe6edc3f29e Certificate serial: 019B34C4626E3717FAB6C50755DF37F4ADB1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NkITiw7v_lajLMuqWNb_5u3D8p4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/4b5cf1-4320-44c2-9358-e07f959356a1/1/NkITiw7v_lajLMuqWNb_5u3D8p4.mft Manifest number: 0688 Signing time: Fri 19 Dec 2025 04:00:44 +0000 Manifest this update: Fri 19 Dec 2025 04:00:44 +0000 Manifest next update: Sat 20 Dec 2025 04:00:44 +0000 Files and hashes: 1: NkITiw7v_lajLMuqWNb_5u3D8p4.crl (hash: udh12eFeKs///W9631x7xD9H3OFnIjCOz3dDuZwZp6M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/4b5cf1-4320-44c2-9358-e07f959356a1/1/NkITiw7v_lajLMuqWNb_5u3D8p4.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/4b5cf1-4320-44c2-9358-e07f959356a1/1/NkITiw7v_lajLMuqWNb_5u3D8p4.mft rsync://rpki.ripe.net/repository/DEFAULT/NkITiw7v_lajLMuqWNb_5u3D8p4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c4:62:6e:37:17:fa:b6:c5:07:55:df:37:f4:ad:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3642138b0eeffe56a32ccbaa58d6ffe6edc3f29e Validity Not Before: Dec 19 04:00:44 2025 GMT Not After : Dec 20 04:00:44 2025 GMT Subject: CN=1be5217e9401bfeabc7451aeaa840230f969447a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:46:8f:d7:bd:cc:3d:e1:a1:cf:88:5b:88:03: 2c:82:4b:a2:47:75:b3:26:a0:42:dd:5f:fc:31:21: 3e:3a:5c:54:fe:67:df:e6:19:68:e9:cf:d5:e2:c9: cf:8d:07:dd:8c:20:5d:77:36:77:2d:22:43:61:f1: ba:19:38:c4:2f:bf:36:99:6f:d5:1e:8b:76:30:03: b6:94:ef:6b:d4:23:66:ce:0e:cd:f7:f2:fd:71:fa: c8:d2:3b:b2:cf:34:61:c1:96:f9:f2:10:4a:68:cf: 71:86:40:54:a8:49:d6:ec:ed:ba:9c:98:f8:a9:89: 4a:a0:63:3c:83:38:a9:16:37:3f:11:4e:9a:f1:df: 3e:65:4e:44:69:c8:f2:5c:e0:5b:96:ad:13:5f:e5: c3:12:25:44:d3:b4:02:7c:32:ec:ef:bf:d1:e9:e6: a2:8b:43:91:d7:b5:e6:9c:e9:99:9b:91:f2:39:2e: b4:56:7d:d1:b4:d8:28:b0:cf:64:0d:39:b6:f3:5f: b9:21:6f:fa:3d:d8:3b:7c:e1:96:87:9f:ae:15:97: 7b:8c:f7:98:cf:5e:2d:62:1d:3b:3d:54:02:d7:37: b3:03:08:43:c3:df:c9:fb:0a:03:e2:20:5c:f1:af: 29:0e:f3:c1:25:1f:c2:99:01:55:97:44:90:f3:23: 9f:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:E5:21:7E:94:01:BF:EA:BC:74:51:AE:AA:84:02:30:F9:69:44:7A X509v3 Authority Key Identifier: keyid:36:42:13:8B:0E:EF:FE:56:A3:2C:CB:AA:58:D6:FF:E6:ED:C3:F2:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkITiw7v_lajLMuqWNb_5u3D8p4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4b5cf1-4320-44c2-9358-e07f959356a1/1/NkITiw7v_lajLMuqWNb_5u3D8p4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4b5cf1-4320-44c2-9358-e07f959356a1/1/NkITiw7v_lajLMuqWNb_5u3D8p4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:88:ac:b9:5d:c8:bd:d9:b8:d7:d2:e7:dd:c6:3c:2d:f4:f5: a4:8e:16:80:5d:e9:bd:9f:96:62:19:28:40:eb:d5:92:63:d3: ba:91:d4:2b:ca:94:be:20:54:b5:df:45:f5:98:24:51:97:b7: 5a:90:de:37:04:fe:cd:13:04:09:aa:39:ef:38:8f:dc:d3:12: 17:61:4f:d9:90:57:08:59:2a:97:d7:03:6b:e7:9b:16:5d:5d: 91:79:94:a2:70:bc:1b:e1:8e:13:51:84:f8:be:1e:fd:7d:8f: cf:52:28:64:d1:4e:df:95:8f:e6:65:12:e2:ee:44:ad:ef:37: 7a:79:2e:4a:d3:a8:ec:8a:66:ec:ff:6f:79:76:6a:f5:61:eb: c2:19:e6:e5:b1:38:fd:ca:b4:7c:ab:46:63:74:2d:13:cf:0f: 11:ff:c8:98:6e:6d:1e:36:c0:5b:91:57:2a:c4:82:bd:ca:49: ee:7f:5e:63:19:50:d3:0d:2f:ce:a3:e1:d6:03:16:89:da:f9: 2d:7f:07:ee:8e:88:4e:49:8e:15:89:91:fc:e1:93:69:f0:38: bf:4e:ab:b0:9d:5c:ba:26:81:d2:1f:38:20:2a:10:81:8d:07: 26:43:34:ef:1e:ab:72:6e:e8:10:fd:1c:eb:ba:dc:a2:bd:c3: bb:12:f5:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xGJuNxf6tsUHVd839K2xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2NDIxMzhiMGVlZmZlNTZhMzJjY2JhYTU4ZDZmZmU2ZWRj M2YyOWUwHhcNMjUxMjE5MDQwMDQ0WhcNMjUxMjIwMDQwMDQ0WjAzMTEwLwYDVQQD EygxYmU1MjE3ZTk0MDFiZmVhYmM3NDUxYWVhYTg0MDIzMGY5Njk0NDdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0EaP173MPeGhz4hbiAMsgkuiR3Wz JqBC3V/8MSE+OlxU/mff5hlo6c/V4snPjQfdjCBddzZ3LSJDYfG6GTjEL782mW/V Hot2MAO2lO9r1CNmzg7N9/L9cfrI0juyzzRhwZb58hBKaM9xhkBUqEnW7O26nJj4 qYlKoGM8gzipFjc/EU6a8d8+ZU5EacjyXOBblq0TX+XDEiVE07QCfDLs77/R6eai i0OR17XmnOmZm5HyOS60Vn3RtNgosM9kDTm281+5IW/6Pdg7fOGWh5+uFZd7jPeY z14tYh07PVQC1zezAwhDw9/J+woD4iBc8a8pDvPBJR/CmQFVl0SQ8yOf6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBvlIX6UAb/qvHRRrqqEAjD5aUR6MB8GA1UdIwQY MBaAFDZCE4sO7/5WoyzLqljW/+btw/KeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmtJVGl3N3ZfbGFqTE11cVdOYl81dTNEOHA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS80YjVjZjEtNDMyMC00NGMyLTkzNTgt ZTA3Zjk1OTM1NmExLzEvTmtJVGl3N3ZfbGFqTE11cVdOYl81dTNEOHA0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS80YjVjZjEtNDMyMC00NGMyLTkzNTgtZTA3Zjk1OTM1NmEx LzEvTmtJVGl3N3ZfbGFqTE11cVdOYl81dTNEOHA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjYisuV3I vdm419Ln3cY8LfT1pI4WgF3pvZ+WYhkoQOvVkmPTupHUK8qUviBUtd9F9ZgkUZe3 WpDeNwT+zRMECao57ziP3NMSF2FP2ZBXCFkql9cDa+ebFl1dkXmUonC8G+GOE1GE +L4e/X2Pz1IoZNFO35WP5mUS4u5Ere83enkuStOo7Ipm7P9veXZq9WHrwhnm5bE4 /cq0fKtGY3QtE88PEf/ImG5tHjbAW5FXKsSCvcpJ7n9eYxlQ0w0vzqPh1gMWidr5 LX8H7o6ITkmOFYmR/OGTafA4v06rsJ1cuiaB0h84ICoQgY0HJkM07x6rcm7oEP0c 67rcor3DuxL1JA== -----END CERTIFICATE-----Generated at Fri Dec 19 05:42:37 2025 by rpki-client