This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/5ced25-9096-4750-8219-0b31c332d50d/1/nD_Ua11gbBzKtVixc24mIaS8BAM.mft File: nD_Ua11gbBzKtVixc24mIaS8BAM.mft (raw, json) Hash identifier: c6yg44Fc7yfENPQyub9SqE+8Ptm2Gl6UinVuIVexeBM= Subject key identifier: 33:08:31:90:7A:49:21:56:1F:95:37:53:11:9C:92:98:1F:78:96:73 Authority key identifier: 9C:3F:D4:6B:5D:60:6C:1C:CA:B5:58:B1:73:6E:26:21:A4:BC:04:03 Certificate issuer: /CN=9c3fd46b5d606c1ccab558b1736e2621a4bc0403 Certificate serial: 019B6B0DDB8F2AA63478892AC50A6CA1004E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nD_Ua11gbBzKtVixc24mIaS8BAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/5ced25-9096-4750-8219-0b31c332d50d/1/nD_Ua11gbBzKtVixc24mIaS8BAM.mft Manifest number: 0A2D Signing time: Mon 29 Dec 2025 17:00:28 +0000 Manifest this update: Mon 29 Dec 2025 17:00:28 +0000 Manifest next update: Tue 30 Dec 2025 17:00:28 +0000 Files and hashes: 1: nD_Ua11gbBzKtVixc24mIaS8BAM.crl (hash: KBgDUPJUjN8YVahv+7VdhkLJ6w7Nh8mXElJsSZOKtC8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/5ced25-9096-4750-8219-0b31c332d50d/1/nD_Ua11gbBzKtVixc24mIaS8BAM.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/5ced25-9096-4750-8219-0b31c332d50d/1/nD_Ua11gbBzKtVixc24mIaS8BAM.mft rsync://rpki.ripe.net/repository/DEFAULT/nD_Ua11gbBzKtVixc24mIaS8BAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 17:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6b:0d:db:8f:2a:a6:34:78:89:2a:c5:0a:6c:a1:00:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c3fd46b5d606c1ccab558b1736e2621a4bc0403 Validity Not Before: Dec 29 17:00:28 2025 GMT Not After : Dec 30 17:00:28 2025 GMT Subject: CN=330831907a4921561f953753119c92981f789673 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:3f:01:4d:7c:8a:82:6c:95:8a:80:31:de:cf: be:1d:45:ce:ae:75:b5:07:da:0a:e4:3a:5d:01:dc: 47:6c:0e:de:fe:f3:8d:0c:aa:44:0e:f8:c1:36:4d: 7c:4b:a8:b7:28:ea:e0:8a:93:fb:a1:6a:be:46:f8: 94:0e:73:c4:d5:df:db:c8:87:42:78:02:f8:ee:7d: 70:0f:2e:b7:b7:e1:11:89:36:e9:46:4e:95:d8:60: c2:6f:1c:58:c0:1c:64:a4:27:9e:b3:4a:99:22:26: b7:bc:9f:2a:dc:69:69:2c:36:79:2a:c4:af:f6:b6: c4:90:83:70:93:1a:ff:95:35:ed:d6:79:a4:62:51: cf:9a:eb:5b:06:af:e0:ac:70:d0:d0:a2:cc:38:d3: d8:e9:62:97:19:f5:48:d3:f5:6b:1f:6c:c9:25:fe: 1d:7b:f5:c6:ea:6a:f5:c9:fe:60:6b:05:80:ca:98: f1:0f:00:2e:7e:c8:98:7d:70:b9:bd:0d:d1:ed:92: 3e:6b:03:98:de:79:bc:11:c8:99:df:8e:0f:e3:42: 0e:2d:8e:63:bc:a1:9b:a6:b8:e9:43:79:fd:c5:7a: 07:59:e6:d9:2d:94:61:33:01:f6:ba:2a:d1:9f:7d: d1:57:77:20:43:31:3f:b5:4b:3b:25:a2:f6:29:0c: bf:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:08:31:90:7A:49:21:56:1F:95:37:53:11:9C:92:98:1F:78:96:73 X509v3 Authority Key Identifier: keyid:9C:3F:D4:6B:5D:60:6C:1C:CA:B5:58:B1:73:6E:26:21:A4:BC:04:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nD_Ua11gbBzKtVixc24mIaS8BAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/5ced25-9096-4750-8219-0b31c332d50d/1/nD_Ua11gbBzKtVixc24mIaS8BAM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/5ced25-9096-4750-8219-0b31c332d50d/1/nD_Ua11gbBzKtVixc24mIaS8BAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:83:51:d5:b3:ca:1a:f1:3c:74:89:aa:d8:46:a7:3d:8e:da: 9b:e9:02:e9:83:9c:56:dc:c1:d0:a3:0a:f6:74:f6:e7:cd:d1: fa:5c:1c:09:ff:68:65:c8:d1:ef:da:b1:e4:2a:eb:f6:34:f0: 09:6d:b2:14:b2:ee:e8:2b:5a:52:f6:a2:2c:5b:14:5b:78:72: 2a:c9:a3:6b:be:53:79:c3:6b:22:04:60:6d:71:91:00:d6:f6: 93:f4:ef:2e:9b:29:33:e0:de:9f:0d:61:45:a5:e7:00:37:3f: a0:88:dc:e9:3b:1c:b0:5a:57:e4:26:66:44:9b:5e:75:0c:55: 68:1d:5d:2a:b0:32:3d:9d:73:8f:71:21:c0:57:df:48:7a:e8: b1:9a:09:28:8a:6d:f0:55:7d:ed:f8:e7:95:80:dc:10:ef:a9: 09:ff:28:f1:b0:4b:26:eb:f2:49:18:f4:65:e7:5f:c7:e4:4d: 3e:8d:63:6c:97:07:d7:ec:63:10:bb:c9:e8:fe:54:a4:d6:18: 76:1f:18:bf:5b:2e:ba:d5:12:69:73:8d:8b:a9:83:ac:1c:d3: 2f:8d:ae:36:b5:4a:75:91:a4:40:c8:2f:58:5e:3e:39:8c:1f: f8:bc:c2:8e:fa:ef:aa:d8:13:54:67:fc:f6:ba:d1:6a:a5:e8: f5:74:be:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtrDduPKqY0eIkqxQpsoQBOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljM2ZkNDZiNWQ2MDZjMWNjYWI1NThiMTczNmUyNjIxYTRi YzA0MDMwHhcNMjUxMjI5MTcwMDI4WhcNMjUxMjMwMTcwMDI4WjAzMTEwLwYDVQQD EygzMzA4MzE5MDdhNDkyMTU2MWY5NTM3NTMxMTljOTI5ODFmNzg5NjczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmD8BTXyKgmyVioAx3s++HUXOrnW1 B9oK5DpdAdxHbA7e/vONDKpEDvjBNk18S6i3KOrgipP7oWq+RviUDnPE1d/byIdC eAL47n1wDy63t+ERiTbpRk6V2GDCbxxYwBxkpCees0qZIia3vJ8q3GlpLDZ5KsSv 9rbEkINwkxr/lTXt1nmkYlHPmutbBq/grHDQ0KLMONPY6WKXGfVI0/VrH2zJJf4d e/XG6mr1yf5gawWAypjxDwAufsiYfXC5vQ3R7ZI+awOY3nm8EciZ344P40IOLY5j vKGbprjpQ3n9xXoHWebZLZRhMwH2uirRn33RV3cgQzE/tUs7JaL2KQy/6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDMIMZB6SSFWH5U3UxGckpgfeJZzMB8GA1UdIwQY MBaAFJw/1GtdYGwcyrVYsXNuJiGkvAQDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkRfVWExMWdiQnpLdFZpeGMyNG1JYVM4QkFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi81Y2VkMjUtOTA5Ni00NzUwLTgyMTkt MGIzMWMzMzJkNTBkLzEvbkRfVWExMWdiQnpLdFZpeGMyNG1JYVM4QkFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi81Y2VkMjUtOTA5Ni00NzUwLTgyMTktMGIzMWMzMzJkNTBk LzEvbkRfVWExMWdiQnpLdFZpeGMyNG1JYVM4QkFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr4NR1bPK GvE8dImq2EanPY7am+kC6YOcVtzB0KMK9nT2583R+lwcCf9oZcjR79qx5Crr9jTw CW2yFLLu6CtaUvaiLFsUW3hyKsmja75TecNrIgRgbXGRANb2k/TvLpspM+Denw1h RaXnADc/oIjc6TscsFpX5CZmRJtedQxVaB1dKrAyPZ1zj3EhwFffSHrosZoJKIpt 8FV97fjnlYDcEO+pCf8o8bBLJuvySRj0Zedfx+RNPo1jbJcH1+xjELvJ6P5UpNYY dh8Yv1suutUSaXONi6mDrBzTL42uNrVKdZGkQMgvWF4+OYwf+LzCjvrvqtgTVGf8 9rrRaqXo9XS+6g== -----END CERTIFICATE-----Generated at Tue Dec 30 01:32:28 2025 by rpki-client