This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.mft File: 97NANTBJjYJfLniKB2UDvJ3OFXQ.mft (raw, json) Hash identifier: FcZYIWloyVKya6xKJM3MrWPnIAotP3Teokn+MRwRntg= Subject key identifier: 49:B1:2F:25:46:83:01:0F:79:3A:B1:7E:3F:76:66:EF:58:45:F3:B0 Authority key identifier: F7:B3:40:35:30:49:8D:82:5F:2E:78:8A:07:65:03:BC:9D:CE:15:74 Certificate issuer: /CN=f7b3403530498d825f2e788a076503bc9dce1574 Certificate serial: 019B0D1224759A2F88F5742FA4070D889C5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/97NANTBJjYJfLniKB2UDvJ3OFXQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.mft Manifest number: 0843 Signing time: Thu 11 Dec 2025 11:00:51 +0000 Manifest this update: Thu 11 Dec 2025 11:00:51 +0000 Manifest next update: Fri 12 Dec 2025 11:00:51 +0000 Files and hashes: 1: 97NANTBJjYJfLniKB2UDvJ3OFXQ.crl (hash: zQvoUwlZsORg8jVLe0UjE2xGpx9PjVH/Oe9KXJ1I0YA=) 2: wilpaK1V0r35ZNvUw0OLpxxalHM.roa (hash: cc48kr9ntP1AGZHGu6VbcBWoFsvg/tsNceyhXPWuzak=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.mft rsync://rpki.ripe.net/repository/DEFAULT/97NANTBJjYJfLniKB2UDvJ3OFXQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 11:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:12:24:75:9a:2f:88:f5:74:2f:a4:07:0d:88:9c:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7b3403530498d825f2e788a076503bc9dce1574 Validity Not Before: Dec 11 11:00:51 2025 GMT Not After : Dec 12 11:00:51 2025 GMT Subject: CN=49b12f254683010f793ab17e3f7666ef5845f3b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:19:20:3f:cd:b2:b0:41:8e:19:97:09:26:38: c1:4b:fb:5d:e3:95:46:34:da:ae:2f:62:d3:d7:97: 54:c7:dc:14:64:29:d5:f6:42:35:ee:00:cc:00:6c: 2e:c2:af:19:e9:e4:13:f0:9f:8c:2f:92:fc:f3:a8: 7b:87:0e:c8:fc:d2:54:98:e3:c2:67:e2:34:58:9e: 06:6b:41:0d:02:a6:86:9f:5f:3b:e6:2e:26:66:29: 91:8c:61:31:b7:d2:82:a4:b5:69:05:b2:37:12:68: 41:62:e6:10:01:df:06:ba:86:a0:76:22:f5:0c:01: e7:51:f3:8d:5d:94:a1:37:dc:09:11:ba:68:ec:bb: b6:a8:28:8f:8e:a8:b8:54:cb:0a:b8:d8:66:68:24: 03:fb:8d:d2:69:bf:3a:06:33:0f:b3:ca:cb:0d:18: 0f:84:3d:74:d2:b3:92:43:b4:c3:8b:ba:73:0c:06: 53:da:9f:dd:90:f8:d7:86:33:74:f3:5c:4f:7a:d5: 2c:3c:56:09:8c:87:20:3a:31:70:cf:9c:50:05:2a: 01:be:9a:6b:82:17:8f:44:7e:f6:6a:c8:95:6e:bf: bf:86:59:d4:2b:47:b8:d6:3c:49:cc:d1:e1:60:1a: 69:dc:4c:12:47:c3:f8:4e:a7:69:aa:56:83:f9:bc: 4a:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:B1:2F:25:46:83:01:0F:79:3A:B1:7E:3F:76:66:EF:58:45:F3:B0 X509v3 Authority Key Identifier: keyid:F7:B3:40:35:30:49:8D:82:5F:2E:78:8A:07:65:03:BC:9D:CE:15:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97NANTBJjYJfLniKB2UDvJ3OFXQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:bf:e2:f7:33:6f:53:4b:88:d7:b6:fb:42:4e:c2:bb:2e:3d: 85:ce:be:c7:d5:c5:f0:25:9d:e6:09:e2:de:2b:be:1d:94:9e: 11:de:77:4d:fb:34:91:fe:62:4b:58:cd:0a:91:56:63:76:13: c8:8a:9b:7e:07:87:0d:d7:c9:8b:0e:09:de:95:7f:8f:d9:5a: ca:02:24:d3:79:3e:00:ba:38:c3:76:47:57:e7:44:61:19:02: 85:3e:92:51:c8:89:0d:0f:ee:2f:b4:e5:d3:bf:bc:aa:94:bf: 4d:7c:08:27:f4:62:5a:de:23:17:47:df:85:e3:eb:8e:54:10: 66:70:6c:70:55:9c:3f:51:2a:e2:35:86:a0:b0:c9:b6:e6:6b: b0:4b:6a:95:cc:6a:f1:5a:ff:79:c0:63:0d:d0:50:20:42:1e: 96:92:9f:13:bc:b8:18:64:fb:34:e9:94:f8:9a:90:99:72:bb: 1c:c2:59:ac:75:5c:1e:58:b8:75:8b:a0:9c:47:af:aa:eb:09: fa:5a:5b:ff:a3:08:54:87:83:fc:7f:63:82:6f:6f:f6:03:ca: a3:b9:f8:64:c6:12:02:2b:7c:7b:42:e2:06:bf:3b:57:0a:14: e8:97:d3:64:6e:6b:c2:0d:e0:26:ba:d0:d6:07:94:58:8e:91: f6:a0:f2:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsNEiR1mi+I9XQvpAcNiJxfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3YjM0MDM1MzA0OThkODI1ZjJlNzg4YTA3NjUwM2JjOWRj ZTE1NzQwHhcNMjUxMjExMTEwMDUxWhcNMjUxMjEyMTEwMDUxWjAzMTEwLwYDVQQD Eyg0OWIxMmYyNTQ2ODMwMTBmNzkzYWIxN2UzZjc2NjZlZjU4NDVmM2IwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhkgP82ysEGOGZcJJjjBS/td45VG NNquL2LT15dUx9wUZCnV9kI17gDMAGwuwq8Z6eQT8J+ML5L886h7hw7I/NJUmOPC Z+I0WJ4Ga0ENAqaGn1875i4mZimRjGExt9KCpLVpBbI3EmhBYuYQAd8GuoagdiL1 DAHnUfONXZShN9wJEbpo7Lu2qCiPjqi4VMsKuNhmaCQD+43Sab86BjMPs8rLDRgP hD100rOSQ7TDi7pzDAZT2p/dkPjXhjN081xPetUsPFYJjIcgOjFwz5xQBSoBvppr ghePRH72asiVbr+/hlnUK0e41jxJzNHhYBpp3EwSR8P4TqdpqlaD+bxKGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEmxLyVGgwEPeTqxfj92Zu9YRfOwMB8GA1UdIwQY MBaAFPezQDUwSY2CXy54igdlA7ydzhV0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTdOQU5UQkpqWUpmTG5pS0IyVUR2SjNPRlhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi82NmU3MGMtNjQ3MS00NTkyLWExMzQt NDBkZDJjNzVmMWI3LzEvOTdOQU5UQkpqWUpmTG5pS0IyVUR2SjNPRlhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi82NmU3MGMtNjQ3MS00NTkyLWExMzQtNDBkZDJjNzVmMWI3 LzEvOTdOQU5UQkpqWUpmTG5pS0IyVUR2SjNPRlhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV7/i9zNv U0uI17b7Qk7Cuy49hc6+x9XF8CWd5gni3iu+HZSeEd53Tfs0kf5iS1jNCpFWY3YT yIqbfgeHDdfJiw4J3pV/j9laygIk03k+ALo4w3ZHV+dEYRkChT6SUciJDQ/uL7Tl 07+8qpS/TXwIJ/RiWt4jF0ffhePrjlQQZnBscFWcP1Eq4jWGoLDJtuZrsEtqlcxq 8Vr/ecBjDdBQIEIelpKfE7y4GGT7NOmU+JqQmXK7HMJZrHVcHli4dYugnEevqusJ +lpb/6MIVIeD/H9jgm9v9gPKo7n4ZMYSAit8e0LiBr87VwoU6JfTZG5rwg3gJrrQ 1geUWI6R9qDyKA== -----END CERTIFICATE-----Generated at Thu Dec 11 19:32:36 2025 by rpki-client