This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.mft File: Nd-0pbxbdb2UqkR7oz9VVxlxzPY.mft (raw, json) Hash identifier: cboQ2qXuqHSLLSxsbh6un3NGQo7X7mi6EK9oommeNFs= Subject key identifier: 44:BE:13:4A:2B:9C:8F:4B:8C:DC:23:A2:BF:9E:4E:0B:BE:32:36:12 Authority key identifier: 35:DF:B4:A5:BC:5B:75:BD:94:AA:44:7B:A3:3F:55:57:19:71:CC:F6 Certificate issuer: /CN=35dfb4a5bc5b75bd94aa447ba33f55571971ccf6 Certificate serial: 019B3D90DEDCB6413D4E27E449391E891E34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.mft Manifest number: 05D6 Signing time: Sat 20 Dec 2025 21:01:02 +0000 Manifest this update: Sat 20 Dec 2025 21:01:02 +0000 Manifest next update: Sun 21 Dec 2025 21:01:02 +0000 Files and hashes: 1: Nd-0pbxbdb2UqkR7oz9VVxlxzPY.crl (hash: DIN2R7Wr7UTh8EpCdqOdHU4UL7DioG7nLOUtcqbXMTo=) 2: mlswz8Ncs32ae7C2It5n-o0yiHo.roa (hash: S5ligNAG6F0uIgpXYHQu/GqcrGyX5LZG4CQQfjCfuRI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.crl rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.mft rsync://rpki.ripe.net/repository/DEFAULT/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:de:dc:b6:41:3d:4e:27:e4:49:39:1e:89:1e:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35dfb4a5bc5b75bd94aa447ba33f55571971ccf6 Validity Not Before: Dec 20 21:01:02 2025 GMT Not After : Dec 21 21:01:02 2025 GMT Subject: CN=44be134a2b9c8f4b8cdc23a2bf9e4e0bbe323612 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:2e:21:73:2b:f2:40:b6:70:22:36:01:2e:42: 70:5b:c0:9c:70:43:fd:83:10:25:6c:01:c2:05:f2: 70:8e:c5:b7:33:ba:85:c4:25:a3:ca:61:a1:85:16: 4c:16:9f:a2:fd:7a:65:f2:94:12:e3:4c:05:ab:95: c2:27:69:b1:ab:07:1f:22:91:52:dd:f2:0e:42:fe: 2b:22:45:83:f8:d5:14:4f:79:f2:db:de:78:4f:f2: b9:fb:3a:ba:b0:4c:34:f5:76:4d:44:aa:4c:08:01: fe:30:33:6d:98:aa:de:00:38:54:03:52:74:7b:fb: e3:45:33:0a:85:48:c0:dc:f5:b4:85:19:f5:66:01: 2b:c3:25:2a:2f:5b:3e:0d:16:96:e1:2c:b7:87:00: 34:ea:b5:0b:c7:5a:a5:7f:4f:d3:34:3b:91:00:5b: 50:3e:48:75:b5:af:16:74:f5:dc:17:f3:53:83:ed: b5:23:ec:fd:94:fd:d6:ca:b9:45:fc:2f:a8:7f:35: ab:8b:83:db:68:8a:23:03:9d:b9:a2:94:89:e4:13: cc:50:d1:cd:63:30:54:78:c3:27:4c:81:5a:97:34: 4c:f8:ac:00:36:eb:3b:5b:f5:9f:17:a7:76:04:6e: d1:9d:e7:42:b7:ba:54:7a:f8:6b:5f:7d:18:ee:e8: 01:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:BE:13:4A:2B:9C:8F:4B:8C:DC:23:A2:BF:9E:4E:0B:BE:32:36:12 X509v3 Authority Key Identifier: keyid:35:DF:B4:A5:BC:5B:75:BD:94:AA:44:7B:A3:3F:55:57:19:71:CC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:58:56:0c:b8:1d:7b:51:56:1a:e1:4f:43:de:03:d6:58:d6: 3b:49:c6:f3:39:f4:7a:44:2a:45:0e:bb:73:9b:d8:7e:47:04: b1:0b:75:26:49:54:bd:f4:a1:52:e0:0c:24:9e:ad:c9:81:ff: a8:4f:05:46:a7:a5:49:2c:16:ce:e1:24:b7:3e:d1:fa:ea:0e: 68:00:1c:79:ff:1b:2a:88:e7:d0:09:8f:08:22:c9:87:1b:b2: ab:a5:12:a0:44:26:92:d6:1a:c7:40:38:7f:f4:df:63:f0:c2: 8a:db:85:a6:eb:96:1d:c0:d8:12:db:c2:af:ae:8e:0b:fb:22: 09:08:02:8a:7b:ae:d4:50:45:8c:bb:6b:ef:61:3c:49:2b:56: db:d6:4f:45:08:68:41:db:8a:37:ce:ba:6c:13:56:30:5e:b6: 4e:f8:aa:a0:a1:f7:35:82:6b:4d:f9:02:c6:3b:f2:c8:8c:ed: df:56:b3:11:4e:5c:a4:11:19:cf:6f:43:88:bc:a5:46:e6:69: d5:33:37:65:e4:ab:a5:09:a6:e7:37:ef:6f:e6:3d:dd:03:4a: 15:eb:88:89:72:75:eb:50:ca:e9:40:d1:04:54:24:b5:70:a5: 5c:f4:02:82:6b:5b:c1:5b:56:e6:23:ce:9f:da:1f:ae:fd:3f: 5d:05:fc:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kN7ctkE9TifkSTkeiR40MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1ZGZiNGE1YmM1Yjc1YmQ5NGFhNDQ3YmEzM2Y1NTU3MTk3 MWNjZjYwHhcNMjUxMjIwMjEwMTAyWhcNMjUxMjIxMjEwMTAyWjAzMTEwLwYDVQQD Eyg0NGJlMTM0YTJiOWM4ZjRiOGNkYzIzYTJiZjllNGUwYmJlMzIzNjEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1i4hcyvyQLZwIjYBLkJwW8CccEP9 gxAlbAHCBfJwjsW3M7qFxCWjymGhhRZMFp+i/Xpl8pQS40wFq5XCJ2mxqwcfIpFS 3fIOQv4rIkWD+NUUT3ny2954T/K5+zq6sEw09XZNRKpMCAH+MDNtmKreADhUA1J0 e/vjRTMKhUjA3PW0hRn1ZgErwyUqL1s+DRaW4Sy3hwA06rULx1qlf0/TNDuRAFtQ Pkh1ta8WdPXcF/NTg+21I+z9lP3WyrlF/C+ofzWri4PbaIojA525opSJ5BPMUNHN YzBUeMMnTIFalzRM+KwANus7W/WfF6d2BG7RnedCt7pUevhrX30Y7ugB/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFES+E0ornI9LjNwjor+eTgu+MjYSMB8GA1UdIwQY MBaAFDXftKW8W3W9lKpEe6M/VVcZccz2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmQtMHBieGJkYjJVcWtSN296OVZWeGx4elBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8wMWMzMWYtZWUzYy00MzVhLWJmZWQt ZWY4OGIyY2ZlODcyLzEvTmQtMHBieGJkYjJVcWtSN296OVZWeGx4elBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8wMWMzMWYtZWUzYy00MzVhLWJmZWQtZWY4OGIyY2ZlODcy LzEvTmQtMHBieGJkYjJVcWtSN296OVZWeGx4elBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm1hWDLgd e1FWGuFPQ94D1ljWO0nG8zn0ekQqRQ67c5vYfkcEsQt1JklUvfShUuAMJJ6tyYH/ qE8FRqelSSwWzuEktz7R+uoOaAAcef8bKojn0AmPCCLJhxuyq6USoEQmktYax0A4 f/TfY/DCituFpuuWHcDYEtvCr66OC/siCQgCinuu1FBFjLtr72E8SStW29ZPRQho QduKN866bBNWMF62TviqoKH3NYJrTfkCxjvyyIzt31azEU5cpBEZz29DiLylRuZp 1TM3ZeSrpQmm5zfvb+Y93QNKFeuIiXJ161DK6UDRBFQktXClXPQCgmtbwVtW5iPO n9ofrv0/XQX80w== -----END CERTIFICATE-----Generated at Sat Dec 20 23:36:15 2025 by rpki-client