This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c5d4b2-b57f-4562-aabe-c8ceab8bc050/1/nTs_-TuDNzXKzWUs40n6MjQCQys.mft File: nTs_-TuDNzXKzWUs40n6MjQCQys.mft (raw, json) Hash identifier: bE1g7JNCUAMF0jFGFNVZuapz4zFSVggabpFcJNU8udU= Subject key identifier: C4:F0:12:EE:40:AD:D3:6E:D7:04:09:99:DE:21:18:43:FE:82:36:68 Authority key identifier: 9D:3B:3F:F9:3B:83:37:35:CA:CD:65:2C:E3:49:FA:32:34:02:43:2B Certificate issuer: /CN=9d3b3ff93b833735cacd652ce349fa323402432b Certificate serial: 019B0D80BDA3F488C5E896A35C45268939DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nTs_-TuDNzXKzWUs40n6MjQCQys.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/c5d4b2-b57f-4562-aabe-c8ceab8bc050/1/nTs_-TuDNzXKzWUs40n6MjQCQys.mft Manifest number: 16A1 Signing time: Thu 11 Dec 2025 13:01:39 +0000 Manifest this update: Thu 11 Dec 2025 13:01:39 +0000 Manifest next update: Fri 12 Dec 2025 13:01:39 +0000 Files and hashes: 1: F8WpKfkO6WPBdgcnLvLi6tQEwfY.roa (hash: aC9X5Qw0ukYXbx0znES1kvpxFjIQA5ZR++ffurv/QKw=) 2: nTs_-TuDNzXKzWUs40n6MjQCQys.crl (hash: erL8uAru8sln2+Skj/poXCLF/MIJQXGf5YlxCeOMFA4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/c5d4b2-b57f-4562-aabe-c8ceab8bc050/1/nTs_-TuDNzXKzWUs40n6MjQCQys.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/c5d4b2-b57f-4562-aabe-c8ceab8bc050/1/nTs_-TuDNzXKzWUs40n6MjQCQys.mft rsync://rpki.ripe.net/repository/DEFAULT/nTs_-TuDNzXKzWUs40n6MjQCQys.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 13:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:80:bd:a3:f4:88:c5:e8:96:a3:5c:45:26:89:39:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d3b3ff93b833735cacd652ce349fa323402432b Validity Not Before: Dec 11 13:01:39 2025 GMT Not After : Dec 12 13:01:39 2025 GMT Subject: CN=c4f012ee40add36ed7040999de211843fe823668 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f9:3e:6c:f6:2e:83:96:7c:d7:79:2f:8d:86: fb:04:c0:e8:70:87:a9:9b:81:77:cd:26:a5:2c:82: a4:10:a0:14:d2:e5:b6:e5:48:41:49:e5:e8:89:15: 32:35:9a:b2:b7:e1:4e:ac:b7:28:9f:48:72:44:58: 1d:b6:9c:6a:e7:35:cb:c7:b7:56:a3:60:b5:ff:4d: c1:3d:83:d1:c6:07:7f:b7:37:b1:f1:6f:dc:d4:1f: b6:e7:21:54:54:15:f4:fd:86:07:42:b7:ee:33:b8: 99:09:0c:15:57:37:19:86:e5:4d:fc:fa:e7:56:f0: 0e:b5:84:97:71:e1:0a:7d:96:e4:fe:58:6d:7a:31: e0:82:47:00:bb:62:54:40:b6:77:13:7b:a5:2c:ac: 76:23:a4:2c:ad:e2:46:3e:98:40:05:5f:17:c7:a4: 8a:ac:2d:b8:e1:fb:6c:d4:b2:d2:6b:5a:ed:67:39: 3f:12:77:fe:62:c1:c6:f1:b5:4c:7a:29:e6:f3:88: 48:11:24:a8:f7:a6:1a:e2:ec:2f:68:a4:cd:a0:f0: 46:66:6c:4a:bb:5f:33:45:41:f8:72:e8:7b:ca:ca: 8b:b4:00:1c:fd:43:c3:55:94:bb:e5:5a:be:b6:e6: 61:67:58:a8:5b:e7:5d:06:18:3d:96:3b:80:e2:57: 3c:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:F0:12:EE:40:AD:D3:6E:D7:04:09:99:DE:21:18:43:FE:82:36:68 X509v3 Authority Key Identifier: keyid:9D:3B:3F:F9:3B:83:37:35:CA:CD:65:2C:E3:49:FA:32:34:02:43:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nTs_-TuDNzXKzWUs40n6MjQCQys.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c5d4b2-b57f-4562-aabe-c8ceab8bc050/1/nTs_-TuDNzXKzWUs40n6MjQCQys.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c5d4b2-b57f-4562-aabe-c8ceab8bc050/1/nTs_-TuDNzXKzWUs40n6MjQCQys.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:80:ba:da:7e:bd:63:f3:eb:ca:ab:01:bd:b1:ae:2c:34:e4: 4a:90:94:27:50:0e:8e:9e:10:76:20:3e:46:90:7b:fc:c1:d7: d9:ff:90:ef:6c:5b:1d:c6:09:35:e9:f8:13:71:1e:ed:d7:8f: 22:45:80:ac:29:22:7d:8a:de:ce:9b:19:87:94:70:df:4d:c3: ce:52:41:27:c0:a1:e4:10:13:d1:b1:f8:b3:56:3d:e4:c6:71: f6:e7:14:26:fa:7c:34:c9:5e:df:ab:49:b6:14:34:b0:4a:2d: 2d:c2:b0:46:17:ae:aa:82:23:14:9a:4b:e4:5d:ee:13:92:e2: 01:50:e5:0c:a1:3b:5f:bf:e5:b0:ba:85:31:08:a0:84:5e:b2: 2c:2e:ad:da:57:86:ea:d1:29:e3:21:b9:8b:92:65:1f:26:60: 09:87:8e:b0:e3:0c:06:7c:51:18:ed:6b:68:cd:7e:83:80:2d: 17:d7:a2:e7:13:c1:1d:65:d1:a5:fd:2f:91:6a:c3:ce:eb:e8: 16:48:00:89:d7:54:5b:6e:6f:16:6f:d7:60:da:dd:e8:3a:09: c0:ff:6e:44:32:7e:5a:ba:08:ed:2c:bf:ac:2b:04:08:6c:fd: 42:70:f4:ad:fa:d6:3b:6c:14:e4:81:63:21:93:12:60:78:c2: 57:b4:d1:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsNgL2j9IjF6JajXEUmiTnfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkM2IzZmY5M2I4MzM3MzVjYWNkNjUyY2UzNDlmYTMyMzQw MjQzMmIwHhcNMjUxMjExMTMwMTM5WhcNMjUxMjEyMTMwMTM5WjAzMTEwLwYDVQQD EyhjNGYwMTJlZTQwYWRkMzZlZDcwNDA5OTlkZTIxMTg0M2ZlODIzNjY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovk+bPYug5Z813kvjYb7BMDocIep m4F3zSalLIKkEKAU0uW25UhBSeXoiRUyNZqyt+FOrLcon0hyRFgdtpxq5zXLx7dW o2C1/03BPYPRxgd/tzex8W/c1B+25yFUVBX0/YYHQrfuM7iZCQwVVzcZhuVN/Prn VvAOtYSXceEKfZbk/lhtejHggkcAu2JUQLZ3E3ulLKx2I6QsreJGPphABV8Xx6SK rC244fts1LLSa1rtZzk/Enf+YsHG8bVMeinm84hIESSo96Ya4uwvaKTNoPBGZmxK u18zRUH4cuh7ysqLtAAc/UPDVZS75Vq+tuZhZ1ioW+ddBhg9ljuA4lc8eQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMTwEu5ArdNu1wQJmd4hGEP+gjZoMB8GA1UdIwQY MBaAFJ07P/k7gzc1ys1lLONJ+jI0AkMrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblRzXy1UdUROelhLeldVczQwbjZNalFDUXlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9jNWQ0YjItYjU3Zi00NTYyLWFhYmUt YzhjZWFiOGJjMDUwLzEvblRzXy1UdUROelhLeldVczQwbjZNalFDUXlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi9jNWQ0YjItYjU3Zi00NTYyLWFhYmUtYzhjZWFiOGJjMDUw LzEvblRzXy1UdUROelhLeldVczQwbjZNalFDUXlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy4C62n69 Y/PryqsBvbGuLDTkSpCUJ1AOjp4QdiA+RpB7/MHX2f+Q72xbHcYJNen4E3Ee7deP IkWArCkifYrezpsZh5Rw303DzlJBJ8Ch5BAT0bH4s1Y95MZx9ucUJvp8NMle36tJ thQ0sEotLcKwRheuqoIjFJpL5F3uE5LiAVDlDKE7X7/lsLqFMQighF6yLC6t2leG 6tEp4yG5i5JlHyZgCYeOsOMMBnxRGO1raM1+g4AtF9ei5xPBHWXRpf0vkWrDzuvo FkgAiddUW25vFm/XYNrd6DoJwP9uRDJ+WroI7Sy/rCsECGz9QnD0rfrWO2wU5IFj IZMSYHjCV7TRHQ== -----END CERTIFICATE-----Generated at Thu Dec 11 22:53:21 2025 by rpki-client