This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/e35ac1-05d1-406d-b668-36eaf7948531/1/NltKurcWrRQHqQLlF2Vg7MN8lm0.mft File: NltKurcWrRQHqQLlF2Vg7MN8lm0.mft (raw, json) Hash identifier: ehp6HxT/PuNt/GmOP3dd3dLi6BcWPgGRHuNbtMfWHY4= Subject key identifier: 01:8C:E1:4A:7F:12:27:FF:8B:FE:48:B4:26:2B:01:97:30:01:5E:19 Authority key identifier: 36:5B:4A:BA:B7:16:AD:14:07:A9:02:E5:17:65:60:EC:C3:7C:96:6D Certificate issuer: /CN=365b4abab716ad1407a902e5176560ecc37c966d Certificate serial: 019B0F00A465D84BDEEDAB2EABCF08B3AA3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NltKurcWrRQHqQLlF2Vg7MN8lm0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/e35ac1-05d1-406d-b668-36eaf7948531/1/NltKurcWrRQHqQLlF2Vg7MN8lm0.mft Manifest number: 10D7 Signing time: Thu 11 Dec 2025 20:00:58 +0000 Manifest this update: Thu 11 Dec 2025 20:00:58 +0000 Manifest next update: Fri 12 Dec 2025 20:00:58 +0000 Files and hashes: 1: 663owoCy0geoSEBq18zjFiT7Z94.roa (hash: 1TSeYE3XDa7rGIOANkOioACjFE0zrxWJZSCcKrx3NcU=) 2: KIM-NbEkTbitOU_rhpt4qAs9-Oo.roa (hash: H4xfbttPRqY/FlOJMk6QaNDUIdoa4V9nPRdLB2/KbPU=) 3: LD0Ui4wMeU8IWaHDiSVwgyowOUw.roa (hash: 31h6z+WARy6dkl6qHeADOyyrJnTIy/84Jsu1HRgGL7A=) 4: NltKurcWrRQHqQLlF2Vg7MN8lm0.crl (hash: f3ZJfZigwlbRerx8LN+iWlz9JmYmWqYHblDKB27UCJ4=) 5: u8gM57Vzy83m5elKcN7yP_JfkD0.roa (hash: 11ORynfloHVoIfYWzniyOLKFlZYtVFhIVMRALKTSBUQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/e35ac1-05d1-406d-b668-36eaf7948531/1/NltKurcWrRQHqQLlF2Vg7MN8lm0.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/e35ac1-05d1-406d-b668-36eaf7948531/1/NltKurcWrRQHqQLlF2Vg7MN8lm0.mft rsync://rpki.ripe.net/repository/DEFAULT/NltKurcWrRQHqQLlF2Vg7MN8lm0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:00:a4:65:d8:4b:de:ed:ab:2e:ab:cf:08:b3:aa:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=365b4abab716ad1407a902e5176560ecc37c966d Validity Not Before: Dec 11 20:00:58 2025 GMT Not After : Dec 12 20:00:58 2025 GMT Subject: CN=018ce14a7f1227ff8bfe48b4262b019730015e19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:77:b8:1f:1f:92:4c:aa:52:f0:e0:54:cd:da: 09:1c:a3:71:1a:fd:63:c5:36:d8:c4:1d:04:96:00: 9c:b2:17:55:12:a5:b0:d4:09:0a:04:8d:a5:cb:c8: a0:30:60:ce:0f:3a:1e:2b:8f:f0:20:a3:a9:83:57: 68:4c:eb:0a:12:90:d8:dc:9e:da:c2:11:39:e0:2c: fa:2b:85:27:16:4f:00:bd:08:75:8f:80:50:32:8f: a8:f7:e5:e5:65:0d:df:cc:63:7c:dc:04:5e:b1:de: 7d:5a:b1:bd:6a:82:fc:e4:03:50:f9:00:5f:fb:10: f0:4e:e6:d3:8d:0e:ff:0f:4d:47:08:5c:7a:63:a1: 00:13:e6:94:7c:dc:25:2c:cd:93:48:85:c8:fc:8d: 72:27:ff:ec:23:6e:fc:4e:96:ec:03:1d:b2:73:c2: 85:3e:22:35:06:3b:30:e0:db:f3:ca:eb:83:3b:e9: 09:81:c0:fa:3f:35:00:45:49:8a:10:a2:04:96:06: 42:6a:48:64:4f:94:a0:f7:0d:8d:9b:bc:19:6d:3b: 80:3d:80:b4:0f:88:15:7e:79:d1:33:ad:6a:36:83: 17:ae:fe:0e:d6:4b:2a:d5:06:c0:ea:98:0e:85:45: 17:0b:24:a0:29:a4:66:5c:38:35:f8:71:ff:dd:a3: ae:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:8C:E1:4A:7F:12:27:FF:8B:FE:48:B4:26:2B:01:97:30:01:5E:19 X509v3 Authority Key Identifier: keyid:36:5B:4A:BA:B7:16:AD:14:07:A9:02:E5:17:65:60:EC:C3:7C:96:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NltKurcWrRQHqQLlF2Vg7MN8lm0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e35ac1-05d1-406d-b668-36eaf7948531/1/NltKurcWrRQHqQLlF2Vg7MN8lm0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e35ac1-05d1-406d-b668-36eaf7948531/1/NltKurcWrRQHqQLlF2Vg7MN8lm0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:7d:75:80:da:af:3e:8c:0c:9a:14:4e:06:52:87:71:2c:7c: 43:9a:aa:fa:f1:46:d9:68:38:8d:90:83:8b:93:3e:4c:8f:24: d4:cf:4a:fe:fb:07:4a:f2:82:4f:44:9b:6a:7a:20:b7:ba:73: 63:92:49:3b:39:12:4c:6d:87:67:d5:18:a3:c0:f6:76:2a:a3: 3b:a3:bb:56:ed:c3:bf:d8:5f:4f:14:2f:87:88:9e:61:ce:ff: 3e:29:57:bc:52:91:10:1b:de:df:6c:8d:87:70:55:6b:06:43: b3:48:64:cf:0c:c6:c0:36:d2:0d:77:ef:73:df:b7:cd:97:9e: 4c:7e:f1:bc:46:05:ab:4f:a0:f2:85:41:e9:c3:99:44:ba:59: c7:df:eb:68:ff:d9:40:ba:93:94:ea:a3:19:16:52:4a:6e:4d: 68:b6:45:d9:7a:3b:59:40:42:67:02:df:f2:04:a6:3f:47:87: 3a:e7:79:01:45:c0:48:99:6a:13:c5:99:5f:78:c6:2b:18:86: 28:3d:1e:a7:bc:1c:cf:60:78:d4:45:fe:5b:0b:c5:a8:1a:3b: 89:b6:b7:17:8f:e0:bc:4a:1c:7b:4b:d7:d6:32:c4:a4:24:97: 82:3e:3b:45:c4:fc:0c:28:e1:c2:73:09:35:e6:06:3d:da:7f: 4a:88:77:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPAKRl2Eve7asuq88Is6o7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2NWI0YWJhYjcxNmFkMTQwN2E5MDJlNTE3NjU2MGVjYzM3 Yzk2NmQwHhcNMjUxMjExMjAwMDU4WhcNMjUxMjEyMjAwMDU4WjAzMTEwLwYDVQQD EygwMThjZTE0YTdmMTIyN2ZmOGJmZTQ4YjQyNjJiMDE5NzMwMDE1ZTE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3e4Hx+STKpS8OBUzdoJHKNxGv1j xTbYxB0ElgCcshdVEqWw1AkKBI2ly8igMGDODzoeK4/wIKOpg1doTOsKEpDY3J7a whE54Cz6K4UnFk8AvQh1j4BQMo+o9+XlZQ3fzGN83AResd59WrG9aoL85ANQ+QBf +xDwTubTjQ7/D01HCFx6Y6EAE+aUfNwlLM2TSIXI/I1yJ//sI278TpbsAx2yc8KF PiI1Bjsw4NvzyuuDO+kJgcD6PzUARUmKEKIElgZCakhkT5Sg9w2Nm7wZbTuAPYC0 D4gVfnnRM61qNoMXrv4O1ksq1QbA6pgOhUUXCySgKaRmXDg1+HH/3aOuvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAGM4Up/Eif/i/5ItCYrAZcwAV4ZMB8GA1UdIwQY MBaAFDZbSrq3Fq0UB6kC5RdlYOzDfJZtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmx0S3VyY1dyUlFIcVFMbEYyVmc3TU44bG0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9lMzVhYzEtMDVkMS00MDZkLWI2Njgt MzZlYWY3OTQ4NTMxLzEvTmx0S3VyY1dyUlFIcVFMbEYyVmc3TU44bG0wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS9lMzVhYzEtMDVkMS00MDZkLWI2NjgtMzZlYWY3OTQ4NTMx LzEvTmx0S3VyY1dyUlFIcVFMbEYyVmc3TU44bG0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEH11gNqv PowMmhROBlKHcSx8Q5qq+vFG2Wg4jZCDi5M+TI8k1M9K/vsHSvKCT0Sbanogt7pz Y5JJOzkSTG2HZ9UYo8D2diqjO6O7Vu3Dv9hfTxQvh4ieYc7/PilXvFKREBve32yN h3BVawZDs0hkzwzGwDbSDXfvc9+3zZeeTH7xvEYFq0+g8oVB6cOZRLpZx9/raP/Z QLqTlOqjGRZSSm5NaLZF2Xo7WUBCZwLf8gSmP0eHOud5AUXASJlqE8WZX3jGKxiG KD0ep7wcz2B41EX+WwvFqBo7iba3F4/gvEoce0vX1jLEpCSXgj47RcT8DCjhwnMJ NeYGPdp/Soh3Gg== -----END CERTIFICATE-----Generated at Thu Dec 11 23:06:36 2025 by rpki-client