This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.mft File: nTbpG2LT3HwTeiiqoAbt6bnqH-Q.mft (raw, json) Hash identifier: bjzgfFKVzIzf3EzWBWleqgrO+Z/pmY7R2GWbdaMVCh8= Subject key identifier: 39:1E:06:E3:11:26:AD:77:7C:BA:44:DA:7B:52:01:1A:C2:7D:1C:26 Authority key identifier: 9D:36:E9:1B:62:D3:DC:7C:13:7A:28:AA:A0:06:ED:E9:B9:EA:1F:E4 Certificate issuer: /CN=9d36e91b62d3dc7c137a28aaa006ede9b9ea1fe4 Certificate serial: 019AF465500725567A355CCC4C6083EF5470 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.mft Manifest number: 0F2D Signing time: Sat 06 Dec 2025 16:01:11 +0000 Manifest this update: Sat 06 Dec 2025 16:01:11 +0000 Manifest next update: Sun 07 Dec 2025 16:01:11 +0000 Files and hashes: 1: 1-Vqync9hKf6VKIrN5RpK5cxJuZ4.roa (hash: MtCth/AQ0N933cYX7VqkRS/iFY3KEw9X6YIsPg3Pp/U=) 2: OXX9g3YRUJUzVcg_bBkk4JValdo.roa (hash: ZCgBMUHW1tIAOZ4DRx/DGMhGuGDo8XA3rdIaP/zAdak=) 3: nTbpG2LT3HwTeiiqoAbt6bnqH-Q.crl (hash: 9kDLjc8x6tsSuXZmIy++JauaPxcC/H7hNqdCFMjLhSk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.mft rsync://rpki.ripe.net/repository/DEFAULT/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:50:07:25:56:7a:35:5c:cc:4c:60:83:ef:54:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d36e91b62d3dc7c137a28aaa006ede9b9ea1fe4 Validity Not Before: Dec 6 16:01:11 2025 GMT Not After : Dec 7 16:01:11 2025 GMT Subject: CN=391e06e31126ad777cba44da7b52011ac27d1c26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d5:3e:58:56:80:b4:de:31:25:84:b6:a4:19: 82:a2:f2:f3:e5:8a:71:84:47:27:1c:32:b5:5e:70: d2:a8:ae:ba:51:e7:51:f2:63:8e:a9:f5:af:1d:d6: 37:36:26:dd:42:b1:8d:53:a6:f5:b2:a8:39:90:dd: e3:a9:eb:d5:82:c3:20:52:33:4d:44:85:b3:21:69: 9f:3a:74:1c:fa:5c:74:1a:bd:ed:99:63:67:2c:55: 1c:d7:e7:83:34:36:6a:bd:12:ba:1a:52:11:1a:a1: 75:e6:8d:86:78:27:d1:01:93:2c:6c:33:72:89:1c: 01:ba:9b:23:74:f6:a9:f1:a2:c2:9b:64:de:d2:39: 62:4e:0f:bb:82:44:1c:fd:e1:8a:14:7b:be:0e:2c: a7:47:f5:96:69:59:be:a1:67:a6:e5:17:49:fd:da: a7:d8:6f:a2:6e:58:87:1c:8c:21:84:04:3e:e1:3c: 4d:65:de:98:49:61:b8:83:0c:f9:36:33:11:84:4c: 54:2e:07:cc:d8:8d:6e:fe:d1:25:fc:3d:37:56:6f: aa:d8:e6:db:8a:3b:f5:05:81:40:f7:67:c5:84:59: a3:96:98:76:ed:b7:76:fb:fb:ee:ac:95:b9:04:6c: 1d:8f:a5:a2:ed:4a:ca:98:17:65:e2:6a:52:88:47: 7c:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:1E:06:E3:11:26:AD:77:7C:BA:44:DA:7B:52:01:1A:C2:7D:1C:26 X509v3 Authority Key Identifier: keyid:9D:36:E9:1B:62:D3:DC:7C:13:7A:28:AA:A0:06:ED:E9:B9:EA:1F:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:ad:49:8e:58:bf:c4:e3:de:10:69:ed:74:f6:14:34:3c:46: 46:c0:7a:26:37:06:a8:bf:3b:f0:0d:4c:7f:a2:a8:6b:f4:77: 86:b2:cb:99:9a:e6:ba:02:92:72:aa:5f:38:a7:aa:ed:ce:cc: d5:72:d9:03:b3:e4:24:ee:52:98:b3:b5:c2:48:a4:f5:42:e8: f0:20:b0:69:f6:89:73:12:3c:1d:09:a0:96:46:f4:60:74:1d: 19:9a:9c:08:fd:0a:6a:1a:c9:f1:da:f6:cf:03:05:54:c8:0d: 07:5f:4c:06:5f:df:a6:b0:b3:67:82:a2:11:99:ee:1d:b8:f9: 20:9e:6d:ee:57:c4:5f:82:12:52:b8:57:16:2b:9a:da:47:fb: 39:1d:7f:ee:60:40:a5:b2:d2:4a:34:84:73:5c:f2:bc:50:2f: 0c:5e:e3:94:b4:5d:8f:22:40:e5:e8:bd:4f:79:db:77:7b:78: 97:21:c8:2c:cd:3f:a0:2f:5a:94:f4:44:fb:e5:c0:f2:46:ea: 4b:76:10:5e:17:e7:fb:c1:14:22:73:aa:9d:35:b6:a3:76:5e: 35:50:9d:80:ac:ce:5a:14:6b:d4:e9:a4:d7:3b:08:83:08:b0: 90:10:46:18:81:2c:81:20:7a:3d:62:bd:8d:1f:45:e0:06:db: d2:5f:9f:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZVAHJVZ6NVzMTGCD71RwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMzZlOTFiNjJkM2RjN2MxMzdhMjhhYWEwMDZlZGU5Yjll YTFmZTQwHhcNMjUxMjA2MTYwMTExWhcNMjUxMjA3MTYwMTExWjAzMTEwLwYDVQQD EygzOTFlMDZlMzExMjZhZDc3N2NiYTQ0ZGE3YjUyMDExYWMyN2QxYzI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttU+WFaAtN4xJYS2pBmCovLz5Ypx hEcnHDK1XnDSqK66UedR8mOOqfWvHdY3NibdQrGNU6b1sqg5kN3jqevVgsMgUjNN RIWzIWmfOnQc+lx0Gr3tmWNnLFUc1+eDNDZqvRK6GlIRGqF15o2GeCfRAZMsbDNy iRwBupsjdPap8aLCm2Te0jliTg+7gkQc/eGKFHu+DiynR/WWaVm+oWem5RdJ/dqn 2G+ibliHHIwhhAQ+4TxNZd6YSWG4gwz5NjMRhExULgfM2I1u/tEl/D03Vm+q2Obb ijv1BYFA92fFhFmjlph27bd2+/vurJW5BGwdj6Wi7UrKmBdl4mpSiEd8oQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDkeBuMRJq13fLpE2ntSARrCfRwmMB8GA1UdIwQY MBaAFJ026Rti09x8E3ooqqAG7em56h/kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblRicEcyTFQzSHdUZWlpcW9BYnQ2Ym5xSC1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9jMjg0Y2QtYjJiNy00OTExLWIyMGIt YjJjZWE3NjkwODM3LzEvblRicEcyTFQzSHdUZWlpcW9BYnQ2Ym5xSC1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS9jMjg0Y2QtYjJiNy00OTExLWIyMGItYjJjZWE3NjkwODM3 LzEvblRicEcyTFQzSHdUZWlpcW9BYnQ2Ym5xSC1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhK1Jjli/ xOPeEGntdPYUNDxGRsB6JjcGqL878A1Mf6Koa/R3hrLLmZrmugKScqpfOKeq7c7M 1XLZA7PkJO5SmLO1wkik9ULo8CCwafaJcxI8HQmglkb0YHQdGZqcCP0KahrJ8dr2 zwMFVMgNB19MBl/fprCzZ4KiEZnuHbj5IJ5t7lfEX4ISUrhXFiua2kf7OR1/7mBA pbLSSjSEc1zyvFAvDF7jlLRdjyJA5ei9T3nbd3t4lyHILM0/oC9alPRE++XA8kbq S3YQXhfn+8EUInOqnTW2o3ZeNVCdgKzOWhRr1Omk1zsIgwiwkBBGGIEsgSB6PWK9 jR9F4Abb0l+fAw== -----END CERTIFICATE-----Generated at Sat Dec 6 21:20:13 2025 by rpki-client