This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/NTYg2kRSrIKq9MjAiBnrC4JRO4M.mft File: NTYg2kRSrIKq9MjAiBnrC4JRO4M.mft (raw, json) Hash identifier: cMkC93xCMRfLHlm3heHo111kKXiC90/3gsmtHf7PfDg= Subject key identifier: F0:21:75:0C:49:FB:F1:1E:FA:1D:B0:75:D0:76:3D:1E:FD:89:6F:AF Authority key identifier: 35:36:20:DA:44:52:AC:82:AA:F4:C8:C0:88:19:EB:0B:82:51:3B:83 Certificate issuer: /CN=353620da4452ac82aaf4c8c08819eb0b82513b83 Certificate serial: 019B413709225BD01E42729CEBADBA72E3D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NTYg2kRSrIKq9MjAiBnrC4JRO4M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/NTYg2kRSrIKq9MjAiBnrC4JRO4M.mft Manifest number: 05E5 Signing time: Sun 21 Dec 2025 14:01:24 +0000 Manifest this update: Sun 21 Dec 2025 14:01:24 +0000 Manifest next update: Mon 22 Dec 2025 14:01:24 +0000 Files and hashes: 1: NTYg2kRSrIKq9MjAiBnrC4JRO4M.crl (hash: 7ED4zcn0S6GBA1xtJu4ToJ0AuMTVEnf6CQdupAKgsG8=) 2: YYXnMCAt040NcLATlrH2pdrRzy4.roa (hash: //AxvWil0+RRuTzD9Iyynz1Qj6s3Pa74fW9rqeU5a2Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/NTYg2kRSrIKq9MjAiBnrC4JRO4M.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/NTYg2kRSrIKq9MjAiBnrC4JRO4M.mft rsync://rpki.ripe.net/repository/DEFAULT/NTYg2kRSrIKq9MjAiBnrC4JRO4M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:37:09:22:5b:d0:1e:42:72:9c:eb:ad:ba:72:e3:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=353620da4452ac82aaf4c8c08819eb0b82513b83 Validity Not Before: Dec 21 14:01:24 2025 GMT Not After : Dec 22 14:01:24 2025 GMT Subject: CN=f021750c49fbf11efa1db075d0763d1efd896faf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:22:ab:65:dc:23:df:f5:a7:c3:8a:99:51:a8: e9:04:7c:3a:d2:df:9c:2b:ac:8f:d2:8e:94:7a:4c: b4:fb:34:4b:7d:5e:58:ce:54:14:25:26:82:78:2a: b3:9d:0c:58:9f:35:36:d9:b8:d2:73:15:c9:2b:ef: 24:3e:17:82:66:9e:95:ec:a4:89:ad:89:24:db:c8: 27:63:45:af:54:9d:1d:29:20:05:8e:ef:dd:95:de: bc:3b:a9:b9:4c:e4:c7:3d:ee:1e:64:b4:b4:28:84: 7a:d9:2e:99:a7:22:bc:af:51:bd:f4:f1:11:db:4e: 2e:30:8e:85:83:29:27:77:fc:b5:73:8f:ea:52:43: 6e:f2:13:e8:10:28:c7:22:db:a1:42:54:a2:a9:18: b4:e6:6e:b8:0e:76:bd:e0:86:99:40:b2:94:98:cd: cc:fa:96:73:f1:34:6e:9f:39:b7:87:39:c9:37:fa: 0d:13:fe:22:8b:4e:02:69:d4:1e:f0:22:0b:5a:d5: 93:bc:c8:7e:2d:fe:86:dc:7c:ab:73:8d:e4:32:5b: 6a:65:5a:da:e7:38:6a:bd:54:7a:6c:94:16:6f:45: a8:39:45:d0:d3:4d:56:79:7c:fe:dc:33:d4:36:a1: 1b:f6:79:18:c8:da:67:a5:07:a5:cc:6b:8c:6d:49: 49:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:21:75:0C:49:FB:F1:1E:FA:1D:B0:75:D0:76:3D:1E:FD:89:6F:AF X509v3 Authority Key Identifier: keyid:35:36:20:DA:44:52:AC:82:AA:F4:C8:C0:88:19:EB:0B:82:51:3B:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NTYg2kRSrIKq9MjAiBnrC4JRO4M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/NTYg2kRSrIKq9MjAiBnrC4JRO4M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/NTYg2kRSrIKq9MjAiBnrC4JRO4M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:d4:87:0d:bc:4f:f6:f3:8d:ac:d7:c5:38:e5:3d:6f:fa:f2: 8c:68:5b:4d:0c:bb:a4:66:ca:7d:df:9c:b4:76:ad:7e:ca:06: bd:66:71:b1:d3:ff:1e:ec:41:21:e0:e6:b5:33:0f:1e:ba:de: 1a:c4:dc:22:9a:c1:fb:05:08:e9:e2:2c:95:7f:a0:bd:b8:d8: 18:08:62:56:da:c0:b5:3f:db:5c:e5:bd:c8:ff:d3:87:47:7e: 78:5b:73:2b:0b:7b:58:37:c7:24:65:b9:d5:60:a8:a9:b5:c3: 1b:36:a4:01:64:5c:9e:e4:18:9a:11:d6:bb:db:8a:51:0e:1a: 41:0a:05:ea:82:74:62:b5:77:a8:61:e5:8c:a8:7d:f4:74:76: 52:e3:2b:12:14:eb:74:87:95:45:80:1f:da:59:21:13:da:cd: 8b:b9:8b:64:f8:8f:40:49:07:27:c4:98:49:0d:72:cd:f6:a7: 8b:15:52:d5:10:6f:59:96:7a:9a:33:e7:f9:f0:ed:9d:2e:ab: 5a:4d:97:51:e0:b2:bd:99:d4:d1:44:2c:4f:87:95:8e:02:ce: dd:6b:26:c7:80:43:04:2c:87:29:69:2d:d4:0b:3f:99:eb:bf: df:69:17:f0:b3:06:84:b4:3e:36:94:b2:46:8a:d0:5a:87:60: c0:c6:e4:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBNwkiW9AeQnKc6626cuPUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MzYyMGRhNDQ1MmFjODJhYWY0YzhjMDg4MTllYjBiODI1 MTNiODMwHhcNMjUxMjIxMTQwMTI0WhcNMjUxMjIyMTQwMTI0WjAzMTEwLwYDVQQD EyhmMDIxNzUwYzQ5ZmJmMTFlZmExZGIwNzVkMDc2M2QxZWZkODk2ZmFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCKrZdwj3/Wnw4qZUajpBHw60t+c K6yP0o6Ueky0+zRLfV5YzlQUJSaCeCqznQxYnzU22bjScxXJK+8kPheCZp6V7KSJ rYkk28gnY0WvVJ0dKSAFju/dld68O6m5TOTHPe4eZLS0KIR62S6ZpyK8r1G99PER 204uMI6Fgyknd/y1c4/qUkNu8hPoECjHItuhQlSiqRi05m64Dna94IaZQLKUmM3M +pZz8TRunzm3hznJN/oNE/4ii04CadQe8CILWtWTvMh+Lf6G3Hyrc43kMltqZVra 5zhqvVR6bJQWb0WoOUXQ001WeXz+3DPUNqEb9nkYyNpnpQelzGuMbUlJ+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPAhdQxJ+/Ee+h2wddB2PR79iW+vMB8GA1UdIwQY MBaAFDU2INpEUqyCqvTIwIgZ6wuCUTuDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlRZZzJrUlNySUtxOU1qQWlCbnJDNEpSTzRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9iZjI2MzEtY2ZhYy00YTg3LWEzN2It NTUxNTg0ZTVjMGE0LzEvTlRZZzJrUlNySUtxOU1qQWlCbnJDNEpSTzRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9iZjI2MzEtY2ZhYy00YTg3LWEzN2ItNTUxNTg0ZTVjMGE0 LzEvTlRZZzJrUlNySUtxOU1qQWlCbnJDNEpSTzRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABdSHDbxP 9vONrNfFOOU9b/ryjGhbTQy7pGbKfd+ctHatfsoGvWZxsdP/HuxBIeDmtTMPHrre GsTcIprB+wUI6eIslX+gvbjYGAhiVtrAtT/bXOW9yP/Th0d+eFtzKwt7WDfHJGW5 1WCoqbXDGzakAWRcnuQYmhHWu9uKUQ4aQQoF6oJ0YrV3qGHljKh99HR2UuMrEhTr dIeVRYAf2lkhE9rNi7mLZPiPQEkHJ8SYSQ1yzfanixVS1RBvWZZ6mjPn+fDtnS6r Wk2XUeCyvZnU0UQsT4eVjgLO3Wsmx4BDBCyHKWkt1As/meu/32kX8LMGhLQ+NpSy RorQWodgwMbkUw== -----END CERTIFICATE-----Generated at Sun Dec 21 17:15:19 2025 by rpki-client