This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/NNDsesTDkeTsup0KN0kZGxjr-TQ.mft File: NNDsesTDkeTsup0KN0kZGxjr-TQ.mft (raw, json) Hash identifier: tA940zo56YldNEmZiJzwPtYjYCxRlaqFlpQnNIjc0Q8= Subject key identifier: 4D:AC:B9:A2:84:2C:9C:92:55:ED:01:04:58:16:E3:20:F6:8D:3B:4E Authority key identifier: 34:D0:EC:7A:C4:C3:91:E4:EC:BA:9D:0A:37:49:19:1B:18:EB:F9:34 Certificate issuer: /CN=34d0ec7ac4c391e4ecba9d0a3749191b18ebf934 Certificate serial: 019B3AC680756A386C0A239FBD4DF4469E10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NNDsesTDkeTsup0KN0kZGxjr-TQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/NNDsesTDkeTsup0KN0kZGxjr-TQ.mft Manifest number: 100A Signing time: Sat 20 Dec 2025 08:00:46 +0000 Manifest this update: Sat 20 Dec 2025 08:00:46 +0000 Manifest next update: Sun 21 Dec 2025 08:00:46 +0000 Files and hashes: 1: DrsXtqunxYOYM23d3mYOmcIvG5c.roa (hash: uw0TXDNaq9rLWuq4JI39+UZWRzoXMIxEtdGdl2jRFWU=) 2: NNDsesTDkeTsup0KN0kZGxjr-TQ.crl (hash: hcF45n3Qtp0opk5V95/4XUVRy6eR33Um1mixFkH8Q7k=) 3: Yzl-TsBruLbp6clu7Q2IexOaQIA.roa (hash: h8cj0MpyodNclAF4X/OllC8+HNKuBQ3B2EFgEqM9+5A=) 4: Z_1dKKg5j_ZVIIzCoIHjWYwlm20.roa (hash: jvis9yjIVYHSkVBmx62d0kYrYZu0QAElVmLUpHW0GZM=) 5: fSqRfFQj3Q__dsTUhVMBI1HPSHg.roa (hash: Y+WWgHfgxkTIhIEndSO+xaSkFkDz1wgH6w0m5aWvWfU=) 6: pI3W8C1ZxuPusTptKHP1u0YPtbM.roa (hash: CThv60vq5lrTC7BFI5QFq4GFsEIpVjwpFNsuFKoLpYE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/NNDsesTDkeTsup0KN0kZGxjr-TQ.crl rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/NNDsesTDkeTsup0KN0kZGxjr-TQ.mft rsync://rpki.ripe.net/repository/DEFAULT/NNDsesTDkeTsup0KN0kZGxjr-TQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:c6:80:75:6a:38:6c:0a:23:9f:bd:4d:f4:46:9e:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34d0ec7ac4c391e4ecba9d0a3749191b18ebf934 Validity Not Before: Dec 20 08:00:46 2025 GMT Not After : Dec 21 08:00:46 2025 GMT Subject: CN=4dacb9a2842c9c9255ed01045816e320f68d3b4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:bd:47:40:db:95:73:4b:ee:79:11:d5:00:df: 09:40:ce:d9:3f:c6:e0:3c:22:8d:79:77:01:07:51: 79:80:bd:37:1e:e7:27:07:7c:52:f3:16:f9:14:71: b4:71:ae:13:0d:17:f1:88:54:f9:b1:34:f6:f2:c6: 27:31:92:40:d6:3c:cc:a6:ce:16:08:f3:48:07:8c: 41:81:02:b4:2d:05:30:e2:ac:16:df:20:83:04:49: 7b:bb:9e:e2:3b:a3:7e:bb:2a:70:45:57:6c:05:0f: 56:e8:30:94:fe:ba:37:01:a2:4b:fe:e2:dd:6c:ad: 0d:da:15:d4:8f:57:3c:ba:7e:55:8b:1e:ad:21:56: 34:b1:f1:4b:ac:4d:dc:db:a2:d2:97:c3:3d:4e:4c: 93:4e:8f:90:16:ad:9f:ea:f7:cd:5b:a0:27:06:36: a7:4a:91:a7:c7:8a:c8:c2:3c:98:61:e2:af:42:5d: e9:27:61:f4:bc:92:f2:27:73:dd:d9:b5:93:66:60: 4d:c1:bf:11:f7:0a:ad:8c:e3:b4:30:b1:54:c9:93: 90:c8:33:08:f0:55:1c:64:02:25:56:a6:51:6d:4b: fb:19:ce:29:37:74:fc:43:c0:86:6e:7e:7f:c7:c6: d1:16:9d:d5:d9:ca:07:3b:3c:b5:18:33:cc:59:7c: b1:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:AC:B9:A2:84:2C:9C:92:55:ED:01:04:58:16:E3:20:F6:8D:3B:4E X509v3 Authority Key Identifier: keyid:34:D0:EC:7A:C4:C3:91:E4:EC:BA:9D:0A:37:49:19:1B:18:EB:F9:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NNDsesTDkeTsup0KN0kZGxjr-TQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/NNDsesTDkeTsup0KN0kZGxjr-TQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/NNDsesTDkeTsup0KN0kZGxjr-TQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:89:72:42:0e:d0:ea:92:e7:78:f2:0f:44:a3:3c:11:28:7a: 6e:f0:4d:68:92:27:d2:ca:8c:89:a6:29:b2:3f:9f:ca:89:e7: b0:87:0f:e3:a5:d1:b1:b4:07:71:ae:05:00:f7:4a:03:a0:2b: dc:bd:4a:b8:c1:83:7f:6c:a0:46:53:de:6e:55:70:91:91:32: 17:3c:78:cb:2a:a7:f6:37:3d:fb:60:57:2f:79:a5:7d:97:93: a9:06:89:6a:1a:08:8d:d5:3d:a5:38:7d:6b:76:e8:97:5d:74: 8b:3a:c9:f8:2d:fb:1e:69:06:1c:3e:c6:a4:8c:31:60:ea:6e: 09:b3:a5:58:2f:cc:f3:a4:25:8e:d4:c1:ca:e8:61:0a:f7:4b: 9f:9c:96:06:b2:79:5f:8e:d4:29:01:bb:a5:5b:c9:b4:67:d9: 39:07:b9:34:0d:55:39:36:28:b2:6b:11:ae:53:82:c6:5b:6c: f3:8a:4c:7f:d1:a5:d5:78:88:2f:9e:86:6b:48:ad:76:64:b0: 1e:45:5b:b3:36:eb:da:dc:0d:1c:6c:b7:58:75:7f:d9:8a:e6: f4:44:d0:dd:a8:6a:39:c1:44:33:e5:a9:79:42:03:25:bb:88: cb:0a:c7:fe:81:f4:b1:6f:8d:be:ab:19:03:6d:d5:fb:a3:b0: de:4d:fa:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6xoB1ajhsCiOfvU30Rp4QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0ZDBlYzdhYzRjMzkxZTRlY2JhOWQwYTM3NDkxOTFiMThl YmY5MzQwHhcNMjUxMjIwMDgwMDQ2WhcNMjUxMjIxMDgwMDQ2WjAzMTEwLwYDVQQD Eyg0ZGFjYjlhMjg0MmM5YzkyNTVlZDAxMDQ1ODE2ZTMyMGY2OGQzYjRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2b1HQNuVc0vueRHVAN8JQM7ZP8bg PCKNeXcBB1F5gL03HucnB3xS8xb5FHG0ca4TDRfxiFT5sTT28sYnMZJA1jzMps4W CPNIB4xBgQK0LQUw4qwW3yCDBEl7u57iO6N+uypwRVdsBQ9W6DCU/ro3AaJL/uLd bK0N2hXUj1c8un5Vix6tIVY0sfFLrE3c26LSl8M9TkyTTo+QFq2f6vfNW6AnBjan SpGnx4rIwjyYYeKvQl3pJ2H0vJLyJ3Pd2bWTZmBNwb8R9wqtjOO0MLFUyZOQyDMI 8FUcZAIlVqZRbUv7Gc4pN3T8Q8CGbn5/x8bRFp3V2coHOzy1GDPMWXyxEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE2suaKELJySVe0BBFgW4yD2jTtOMB8GA1UdIwQY MBaAFDTQ7HrEw5Hk7LqdCjdJGRsY6/k0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTk5Ec2VzVERrZVRzdXAwS04wa1pHeGpyLVRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9mN2Y1M2QtMDY4Yy00NDRlLWFkMWUt YjdjMjY5NmJhZTUwLzEvTk5Ec2VzVERrZVRzdXAwS04wa1pHeGpyLVRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9mN2Y1M2QtMDY4Yy00NDRlLWFkMWUtYjdjMjY5NmJhZTUw LzEvTk5Ec2VzVERrZVRzdXAwS04wa1pHeGpyLVRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATYlyQg7Q 6pLnePIPRKM8ESh6bvBNaJIn0sqMiaYpsj+fyonnsIcP46XRsbQHca4FAPdKA6Ar 3L1KuMGDf2ygRlPeblVwkZEyFzx4yyqn9jc9+2BXL3mlfZeTqQaJahoIjdU9pTh9 a3bol110izrJ+C37HmkGHD7GpIwxYOpuCbOlWC/M86QljtTByuhhCvdLn5yWBrJ5 X47UKQG7pVvJtGfZOQe5NA1VOTYosmsRrlOCxlts84pMf9Gl1XiIL56Ga0itdmSw HkVbszbr2twNHGy3WHV/2Yrm9ETQ3ahqOcFEM+WpeUIDJbuIywrH/oH0sW+NvqsZ A23V+6Ow3k36aw== -----END CERTIFICATE-----Generated at Sat Dec 20 10:31:42 2025 by rpki-client