This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.mft File: _Nd-aHeCmDMEMzNTi0fxJoLOvcM.mft (raw, json) Hash identifier: vnquNdqutop/ZavwrQqhBMQ5fEbyOQWY5zVeDFt+LL0= Subject key identifier: 99:F8:4F:34:1E:27:10:B6:C4:46:A1:0D:77:11:9A:8C:AC:41:09:A7 Authority key identifier: FC:D7:7E:68:77:82:98:33:04:33:33:53:8B:47:F1:26:82:CE:BD:C3 Certificate issuer: /CN=fcd77e6877829833043333538b47f12682cebdc3 Certificate serial: 019B2F306159ED764C8DF0BEFF871C7DA532 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.mft Manifest number: 0601 Signing time: Thu 18 Dec 2025 02:00:58 +0000 Manifest this update: Thu 18 Dec 2025 02:00:58 +0000 Manifest next update: Fri 19 Dec 2025 02:00:58 +0000 Files and hashes: 1: _Nd-aHeCmDMEMzNTi0fxJoLOvcM.crl (hash: NIy1YVwfPkdqNseRcrENa0YcZzsuUp7sID3MaSS4Bfc=) 2: nVML7LcRQkLl4LsQylRXZkNhkNs.roa (hash: aP+8mW119fycA5Li+oipfw+Kb6S3KHGW180HDqCC2II=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.crl rsync://rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.mft rsync://rpki.ripe.net/repository/DEFAULT/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:30:61:59:ed:76:4c:8d:f0:be:ff:87:1c:7d:a5:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fcd77e6877829833043333538b47f12682cebdc3 Validity Not Before: Dec 18 02:00:58 2025 GMT Not After : Dec 19 02:00:58 2025 GMT Subject: CN=99f84f341e2710b6c446a10d77119a8cac4109a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:2c:35:f9:83:47:d6:55:69:31:f3:7e:38:a4: 0d:ed:0f:38:fe:26:c8:39:cd:9e:9a:44:fd:de:19: 01:ac:e8:11:3b:81:2d:d0:a5:f3:b5:a0:7c:2e:19: 5d:81:f6:8d:a6:c8:89:b8:94:4b:9f:35:dd:ce:ef: 9e:a0:b6:8f:2f:37:64:b2:67:39:14:6c:12:9d:80: 20:f4:8d:b7:d2:5f:0d:cf:d5:f9:b5:7c:1b:12:4d: f9:19:e5:da:0d:db:96:3d:50:88:d7:c1:bb:21:c9: da:27:84:41:74:e0:5c:ab:33:fa:a9:fa:70:af:72: ff:42:d8:4a:47:35:d1:19:74:d1:91:dc:cb:3a:f3: b9:1c:e2:7f:b9:74:a9:48:74:8a:df:40:85:ba:c4: 45:12:a6:f9:d9:ed:d6:41:43:2f:e4:0e:9d:f8:49: 01:2e:d1:e0:c9:85:bf:ba:ba:1f:6a:d4:97:c2:29: 23:20:5d:62:f5:3d:30:69:95:f0:9f:c8:d2:8e:a6: b1:1e:3f:67:3b:20:8e:7d:33:05:63:16:59:e8:69: 76:38:c4:60:b1:69:77:01:79:33:ec:63:81:35:ee: d5:b8:3a:21:b4:1d:3e:32:7c:b0:bd:70:eb:0a:06: 51:8a:af:71:11:02:4d:47:68:e5:fb:11:08:fe:0f: e9:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:F8:4F:34:1E:27:10:B6:C4:46:A1:0D:77:11:9A:8C:AC:41:09:A7 X509v3 Authority Key Identifier: keyid:FC:D7:7E:68:77:82:98:33:04:33:33:53:8B:47:F1:26:82:CE:BD:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:8e:48:34:9e:41:08:c0:a3:85:69:d1:de:a7:7f:a2:46:82: 73:f0:17:46:f4:c2:4e:a5:51:96:78:e0:f7:1d:c7:bc:47:ff: 67:92:74:bd:22:7a:8b:15:e3:9a:4e:6e:82:71:5a:20:39:b3: 24:5a:2e:d7:03:3c:9b:0c:5b:87:56:b1:88:04:03:1a:2e:d1: 83:8a:0e:13:d3:fb:8a:0f:7b:3f:84:e7:1c:06:14:5f:3f:61: 00:4f:47:28:56:76:27:02:f3:7f:2d:cb:3f:23:a4:3b:3a:44: eb:ff:2f:bc:84:8d:52:ee:58:83:31:0e:39:3b:35:d7:27:88: a9:96:cf:2e:dd:07:bd:d8:82:d2:d9:27:4e:6b:dc:f3:9a:ce: 97:72:d8:d6:dc:4f:ad:6e:7b:88:bb:2e:d2:8a:4c:f2:f2:7e: fb:ac:13:2f:79:a6:57:0f:64:c0:b0:3d:c7:55:e3:d6:16:7b: 9c:72:1b:ca:f9:3f:0f:d5:57:70:1d:e9:65:2a:14:86:1a:67: 82:da:2e:96:57:80:fd:c6:66:03:b6:df:96:46:4d:ce:c3:86: 87:0c:02:18:a8:bf:2f:b0:12:0b:b5:56:b9:48:0c:1f:11:ae: 41:e5:37:6a:53:1b:ab:d4:fe:c6:e3:fa:45:89:bb:c2:d7:25: 10:3a:cc:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvMGFZ7XZMjfC+/4ccfaUyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjZDc3ZTY4Nzc4Mjk4MzMwNDMzMzM1MzhiNDdmMTI2ODJj ZWJkYzMwHhcNMjUxMjE4MDIwMDU4WhcNMjUxMjE5MDIwMDU4WjAzMTEwLwYDVQQD Eyg5OWY4NGYzNDFlMjcxMGI2YzQ0NmExMGQ3NzExOWE4Y2FjNDEwOWE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCw1+YNH1lVpMfN+OKQN7Q84/ibI Oc2emkT93hkBrOgRO4Et0KXztaB8LhldgfaNpsiJuJRLnzXdzu+eoLaPLzdksmc5 FGwSnYAg9I230l8Nz9X5tXwbEk35GeXaDduWPVCI18G7IcnaJ4RBdOBcqzP6qfpw r3L/QthKRzXRGXTRkdzLOvO5HOJ/uXSpSHSK30CFusRFEqb52e3WQUMv5A6d+EkB LtHgyYW/urofatSXwikjIF1i9T0waZXwn8jSjqaxHj9nOyCOfTMFYxZZ6Gl2OMRg sWl3AXkz7GOBNe7VuDohtB0+MnywvXDrCgZRiq9xEQJNR2jl+xEI/g/pLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJn4TzQeJxC2xEahDXcRmoysQQmnMB8GA1UdIwQY MBaAFPzXfmh3gpgzBDMzU4tH8SaCzr3DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX05kLWFIZUNtRE1FTXpOVGkwZnhKb0xPdmNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8xZWQxZjYtMDlkNy00Mjk0LTkyYjQt ZTU1MTc0NWQyNzZlLzEvX05kLWFIZUNtRE1FTXpOVGkwZnhKb0xPdmNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8xZWQxZjYtMDlkNy00Mjk0LTkyYjQtZTU1MTc0NWQyNzZl LzEvX05kLWFIZUNtRE1FTXpOVGkwZnhKb0xPdmNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANo5INJ5B CMCjhWnR3qd/okaCc/AXRvTCTqVRlnjg9x3HvEf/Z5J0vSJ6ixXjmk5ugnFaIDmz JFou1wM8mwxbh1axiAQDGi7Rg4oOE9P7ig97P4TnHAYUXz9hAE9HKFZ2JwLzfy3L PyOkOzpE6/8vvISNUu5YgzEOOTs11yeIqZbPLt0HvdiC0tknTmvc85rOl3LY1txP rW57iLsu0opM8vJ++6wTL3mmVw9kwLA9x1Xj1hZ7nHIbyvk/D9VXcB3pZSoUhhpn gtoulleA/cZmA7bflkZNzsOGhwwCGKi/L7ASC7VWuUgMHxGuQeU3alMbq9T+xuP6 RYm7wtclEDrM/Q== -----END CERTIFICATE-----Generated at Thu Dec 18 07:02:40 2025 by rpki-client