This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NdhRwRSj93nqgCV7HuGCas2uSk4.mft File: NdhRwRSj93nqgCV7HuGCas2uSk4.mft (raw, json) Hash identifier: kwmOYZoLCm/Uc87FXIscpSX2aGTLeu3qQ+0hOmmLXE8= Subject key identifier: 8A:FA:55:22:3B:8E:B6:FE:FA:D4:4E:DB:E2:ED:A2:C4:4C:DF:14:0C Authority key identifier: 35:D8:51:C1:14:A3:F7:79:EA:80:25:7B:1E:E1:82:6A:CD:AE:4A:4E Certificate issuer: /CN=35d851c114a3f779ea80257b1ee1826acdae4a4e Certificate serial: 019B6731336C38518933B4D124AD14297CC0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NdhRwRSj93nqgCV7HuGCas2uSk4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NdhRwRSj93nqgCV7HuGCas2uSk4.mft Manifest number: 179D Signing time: Sun 28 Dec 2025 23:00:36 +0000 Manifest this update: Sun 28 Dec 2025 23:00:36 +0000 Manifest next update: Mon 29 Dec 2025 23:00:36 +0000 Files and hashes: 1: NdhRwRSj93nqgCV7HuGCas2uSk4.crl (hash: j1Q3kc14PNRrUHSeUm3qOcUO4eaqchoB3//C0T5wY0w=) 2: QIqKLnFZSvkIdztpTOrghmndfqs.roa (hash: wHBtvNsb06U7COg9JhFFEVNmIo0CSx+CQSOErCnUsO4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NdhRwRSj93nqgCV7HuGCas2uSk4.crl rsync://rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NdhRwRSj93nqgCV7HuGCas2uSk4.mft rsync://rpki.ripe.net/repository/DEFAULT/NdhRwRSj93nqgCV7HuGCas2uSk4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 21:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:67:31:33:6c:38:51:89:33:b4:d1:24:ad:14:29:7c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35d851c114a3f779ea80257b1ee1826acdae4a4e Validity Not Before: Dec 28 23:00:36 2025 GMT Not After : Dec 29 23:00:36 2025 GMT Subject: CN=8afa55223b8eb6fefad44edbe2eda2c44cdf140c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:59:53:4c:99:d4:6d:ce:73:11:66:a2:7a:4e: d2:04:e5:47:f8:5a:09:8d:42:57:ad:ca:5b:12:f4: 96:58:75:80:28:48:45:98:4f:a2:f2:3e:0d:4a:5c: b1:72:88:e6:65:be:ea:72:53:ca:31:67:13:87:ee: db:5d:a0:8b:5e:16:fa:93:1f:a0:04:4a:0f:49:72: 8e:5b:55:79:24:3f:39:5c:78:1d:05:d7:47:49:12: fd:45:dd:20:1d:8d:80:c0:15:eb:76:bb:b8:c3:93: 85:4e:f8:fd:fb:5e:82:53:ac:72:dc:e3:8a:0c:93: b5:b3:4d:26:7f:5b:39:07:53:5d:12:3d:2c:db:d2: f1:c8:a3:af:69:61:91:6a:80:8d:14:e3:59:dd:83: a4:e1:99:c8:fa:51:99:81:10:ac:e7:68:a3:69:ba: 0d:8c:86:89:ea:33:10:46:9b:d2:a9:5d:d2:d6:aa: 87:fd:06:97:3c:ca:ce:3a:3a:0f:d7:1c:bc:78:ef: 6a:0e:84:76:16:33:de:f3:c9:bb:3a:f2:09:09:8c: 20:97:e8:da:87:90:99:99:73:86:8b:eb:0b:92:cc: 32:ef:9b:ec:17:68:ec:f2:41:af:53:11:48:e6:e5: b4:3d:7c:bc:a7:57:bb:5b:1d:cf:0d:5c:b5:dc:83: a6:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:FA:55:22:3B:8E:B6:FE:FA:D4:4E:DB:E2:ED:A2:C4:4C:DF:14:0C X509v3 Authority Key Identifier: keyid:35:D8:51:C1:14:A3:F7:79:EA:80:25:7B:1E:E1:82:6A:CD:AE:4A:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdhRwRSj93nqgCV7HuGCas2uSk4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NdhRwRSj93nqgCV7HuGCas2uSk4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NdhRwRSj93nqgCV7HuGCas2uSk4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:b3:92:5a:8b:68:fb:61:58:79:54:46:b5:be:8c:14:23:82: fb:3f:e4:6d:e7:d5:8e:5a:64:c5:12:97:2d:85:e5:79:72:7c: 43:ca:58:37:0a:03:76:ca:fb:22:4e:6f:91:b4:0b:a1:7b:57: 6a:17:88:23:e9:fe:d1:cd:f3:d1:ba:47:d2:15:92:65:b9:6b: 3f:15:94:36:89:05:bc:92:f8:2a:c5:f1:4c:8e:9e:a0:00:09: 70:60:a3:96:4c:4a:5f:b1:0c:2e:5e:ea:24:a5:5b:a5:13:b1: 6d:ec:c1:2c:dc:28:a5:17:df:e8:96:b2:be:f8:85:b3:79:26: 2f:79:62:bb:f9:17:c5:22:09:6c:79:43:40:ef:a2:a9:3d:29: 1f:c5:a7:20:49:92:5e:1f:1d:13:9c:b5:e6:cb:e8:eb:a0:e2: 2f:de:c1:d4:d1:2f:da:67:47:27:00:be:12:d0:20:2a:91:df: 0a:06:d0:ec:c2:81:6e:9d:1f:80:ba:6e:2a:9d:7f:11:28:b4: a3:94:f1:94:e0:da:40:1b:4e:90:0b:29:22:b7:9f:fe:3a:39: a8:a6:80:76:ad:87:ba:38:d2:2d:00:54:61:cc:b5:33:33:e0: e4:60:6f:79:b5:60:c3:59:37:99:a0:8f:7d:c6:a1:28:64:3b: 0f:2f:b3:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtnMTNsOFGJM7TRJK0UKXzAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1ZDg1MWMxMTRhM2Y3NzllYTgwMjU3YjFlZTE4MjZhY2Rh ZTRhNGUwHhcNMjUxMjI4MjMwMDM2WhcNMjUxMjI5MjMwMDM2WjAzMTEwLwYDVQQD Eyg4YWZhNTUyMjNiOGViNmZlZmFkNDRlZGJlMmVkYTJjNDRjZGYxNDBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFlTTJnUbc5zEWaiek7SBOVH+FoJ jUJXrcpbEvSWWHWAKEhFmE+i8j4NSlyxcojmZb7qclPKMWcTh+7bXaCLXhb6kx+g BEoPSXKOW1V5JD85XHgdBddHSRL9Rd0gHY2AwBXrdru4w5OFTvj9+16CU6xy3OOK DJO1s00mf1s5B1NdEj0s29LxyKOvaWGRaoCNFONZ3YOk4ZnI+lGZgRCs52ijaboN jIaJ6jMQRpvSqV3S1qqH/QaXPMrOOjoP1xy8eO9qDoR2FjPe88m7OvIJCYwgl+ja h5CZmXOGi+sLkswy75vsF2js8kGvUxFI5uW0PXy8p1e7Wx3PDVy13IOmlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIr6VSI7jrb++tRO2+LtosRM3xQMMB8GA1UdIwQY MBaAFDXYUcEUo/d56oAlex7hgmrNrkpOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmRoUndSU2o5M25xZ0NWN0h1R0NhczJ1U2s0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9mZmZlZTEtYmQ0Ni00NTIzLTllY2Et NzA1NTYzMTM3ZDdhLzEvTmRoUndSU2o5M25xZ0NWN0h1R0NhczJ1U2s0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9mZmZlZTEtYmQ0Ni00NTIzLTllY2EtNzA1NTYzMTM3ZDdh LzEvTmRoUndSU2o5M25xZ0NWN0h1R0NhczJ1U2s0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj7OSWoto +2FYeVRGtb6MFCOC+z/kbefVjlpkxRKXLYXleXJ8Q8pYNwoDdsr7Ik5vkbQLoXtX aheII+n+0c3z0bpH0hWSZblrPxWUNokFvJL4KsXxTI6eoAAJcGCjlkxKX7EMLl7q JKVbpROxbezBLNwopRff6JayvviFs3kmL3liu/kXxSIJbHlDQO+iqT0pH8WnIEmS Xh8dE5y15svo66DiL97B1NEv2mdHJwC+EtAgKpHfCgbQ7MKBbp0fgLpuKp1/ESi0 o5TxlODaQBtOkAspIref/jo5qKaAdq2HujjSLQBUYcy1MzPg5GBvebVgw1k3maCP fcahKGQ7Dy+z5A== -----END CERTIFICATE-----Generated at Mon Dec 29 07:07:51 2025 by rpki-client