This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.mft File: nbtiWqVb2O81QQr93Sorw1iiXtE.mft (raw, json) Hash identifier: V/OrjxtElnzdx3DQJ1mh5Mhsle3G+xnMNJToAHhyPME= Subject key identifier: 16:62:20:57:82:16:29:F0:5A:23:66:F2:E6:63:76:52:AF:32:1F:9F Authority key identifier: 9D:BB:62:5A:A5:5B:D8:EF:35:41:0A:FD:DD:2A:2B:C3:58:A2:5E:D1 Certificate issuer: /CN=9dbb625aa55bd8ef35410afddd2a2bc358a25ed1 Certificate serial: 019B0EC9A0B3816C33D1725DC4779CF2109A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nbtiWqVb2O81QQr93Sorw1iiXtE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.mft Manifest number: 0479 Signing time: Thu 11 Dec 2025 19:00:53 +0000 Manifest this update: Thu 11 Dec 2025 19:00:53 +0000 Manifest next update: Fri 12 Dec 2025 19:00:53 +0000 Files and hashes: 1: F_kIbrNoezU2xST1IGJ7znM97So.roa (hash: SL4bD3bCY+6YeKuV14y0PigmsFs9RgYCxYhDjlPIAW4=) 2: nbtiWqVb2O81QQr93Sorw1iiXtE.crl (hash: SnHMHzuVDn/pFqCWHL+L7pDT75YXkRrsS+88wiCoW04=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.crl rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.mft rsync://rpki.ripe.net/repository/DEFAULT/nbtiWqVb2O81QQr93Sorw1iiXtE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:c9:a0:b3:81:6c:33:d1:72:5d:c4:77:9c:f2:10:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9dbb625aa55bd8ef35410afddd2a2bc358a25ed1 Validity Not Before: Dec 11 19:00:53 2025 GMT Not After : Dec 12 19:00:53 2025 GMT Subject: CN=16622057821629f05a2366f2e6637652af321f9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:10:f8:ae:f0:f7:7e:2c:da:5e:8a:52:83:5b: d0:1f:f5:b1:f7:5a:fc:5b:4c:fd:f9:5a:a7:da:69: e3:33:46:57:01:bb:c0:fb:69:39:3e:ec:4f:4c:56: ae:5e:99:05:14:88:2e:90:21:6f:23:28:b4:1e:ed: 74:14:5b:b4:59:3a:70:56:21:1a:1b:9a:88:03:d5: 93:62:6c:85:5e:0c:54:2e:76:8a:6b:37:84:a9:97: 26:1c:cd:04:b7:65:1b:c3:b9:14:7d:46:50:60:1e: 05:d5:4b:98:d3:2c:36:65:46:47:62:7b:09:0e:1a: 42:f2:bd:93:25:18:d4:23:51:c9:5f:ee:6d:ee:19: ec:99:e8:0c:e2:39:34:37:5a:44:dc:50:74:f7:ad: 7a:e9:6e:57:7c:fd:d7:24:ff:81:bd:84:91:bf:a4: 7f:c2:43:2c:84:f4:78:b1:96:f4:68:96:55:b5:5b: f7:b1:8c:22:d2:44:70:e9:85:ec:36:9e:c2:0d:c7: d3:3b:7e:c6:76:e1:a6:f6:59:a8:af:33:05:f3:dd: 3f:da:fb:d9:20:4e:b8:2f:ca:e5:28:ce:c7:4a:b8: da:99:ae:cf:b1:43:cf:ed:13:e6:b1:f4:b0:dc:70: aa:bb:32:7d:4f:67:2b:c0:8f:b3:61:01:8a:ad:19: 69:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:62:20:57:82:16:29:F0:5A:23:66:F2:E6:63:76:52:AF:32:1F:9F X509v3 Authority Key Identifier: keyid:9D:BB:62:5A:A5:5B:D8:EF:35:41:0A:FD:DD:2A:2B:C3:58:A2:5E:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nbtiWqVb2O81QQr93Sorw1iiXtE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:eb:20:b9:b5:c4:09:e3:c2:ad:40:44:fe:61:8f:d8:01:31: 0f:ae:2f:92:2b:a9:89:61:1e:12:73:bb:62:33:e5:4c:a0:a6: 0b:01:9b:b5:0a:98:05:bf:d3:2b:ed:18:06:4e:6e:b6:22:6d: 98:af:77:45:1d:78:13:12:f6:00:68:9f:46:35:bb:ac:20:03: 1e:9a:45:4c:f7:45:e0:e9:4a:44:fa:4c:de:78:44:42:1a:cc: e8:27:70:0c:19:32:83:53:fb:a2:ff:87:11:2b:5b:df:7c:42: 3a:d1:01:2a:c2:62:39:6b:9d:0f:7a:e5:44:f8:10:06:3d:6f: 25:8a:a5:a5:bc:f0:11:12:1a:5d:4a:c4:b4:af:7f:46:49:42: 00:9d:2d:92:28:ef:68:6e:2d:95:e9:43:9c:b0:83:dc:d8:66: 7a:cc:7b:0c:60:b0:ec:82:d2:c1:89:ca:46:65:3f:e8:67:57: 56:a8:ff:ed:64:0c:91:2f:7d:63:61:dc:eb:e3:8f:82:4f:9d: e8:a7:6c:ab:15:fe:26:e5:63:73:a1:ec:ed:57:09:77:66:87: 6c:dc:96:04:78:ef:0f:8e:b0:58:a8:50:c1:25:f0:c8:20:e1: b4:fb:cf:b8:26:79:0f:40:66:f1:5a:de:d8:68:1a:d8:c6:f2: 70:0a:5f:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOyaCzgWwz0XJdxHec8hCaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkYmI2MjVhYTU1YmQ4ZWYzNTQxMGFmZGRkMmEyYmMzNThh MjVlZDEwHhcNMjUxMjExMTkwMDUzWhcNMjUxMjEyMTkwMDUzWjAzMTEwLwYDVQQD EygxNjYyMjA1NzgyMTYyOWYwNWEyMzY2ZjJlNjYzNzY1MmFmMzIxZjlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBD4rvD3fizaXopSg1vQH/Wx91r8 W0z9+Vqn2mnjM0ZXAbvA+2k5PuxPTFauXpkFFIgukCFvIyi0Hu10FFu0WTpwViEa G5qIA9WTYmyFXgxULnaKazeEqZcmHM0Et2Ubw7kUfUZQYB4F1UuY0yw2ZUZHYnsJ DhpC8r2TJRjUI1HJX+5t7hnsmegM4jk0N1pE3FB096166W5XfP3XJP+BvYSRv6R/ wkMshPR4sZb0aJZVtVv3sYwi0kRw6YXsNp7CDcfTO37GduGm9lmorzMF890/2vvZ IE64L8rlKM7HSrjama7PsUPP7RPmsfSw3HCquzJ9T2crwI+zYQGKrRlpnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBZiIFeCFinwWiNm8uZjdlKvMh+fMB8GA1UdIwQY MBaAFJ27YlqlW9jvNUEK/d0qK8NYol7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmJ0aVdxVmIyTzgxUVFyOTNTb3J3MWlpWHRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9jMzNhMTMtYTU0Yi00NWJiLWIwZDQt YTQ5YjcyYTFjZmUyLzEvbmJ0aVdxVmIyTzgxUVFyOTNTb3J3MWlpWHRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9jMzNhMTMtYTU0Yi00NWJiLWIwZDQtYTQ5YjcyYTFjZmUy LzEvbmJ0aVdxVmIyTzgxUVFyOTNTb3J3MWlpWHRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACOsgubXE CePCrUBE/mGP2AExD64vkiupiWEeEnO7YjPlTKCmCwGbtQqYBb/TK+0YBk5utiJt mK93RR14ExL2AGifRjW7rCADHppFTPdF4OlKRPpM3nhEQhrM6CdwDBkyg1P7ov+H EStb33xCOtEBKsJiOWudD3rlRPgQBj1vJYqlpbzwERIaXUrEtK9/RklCAJ0tkijv aG4tlelDnLCD3Nhmesx7DGCw7ILSwYnKRmU/6GdXVqj/7WQMkS99Y2Hc6+OPgk+d 6KdsqxX+JuVjc6Hs7VcJd2aHbNyWBHjvD46wWKhQwSXwyCDhtPvPuCZ5D0Bm8Vre 2Gga2MbycApfFA== -----END CERTIFICATE-----Generated at Fri Dec 12 04:00:16 2025 by rpki-client