This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft File: NDOuHGBnLHWRqPl9aPefsqXujac.mft (raw, json) Hash identifier: ittUaBDA40EGBq+iiQA1C2T5g6d8DDvEKuTf5WT7j9I= Subject key identifier: C3:EB:DB:6E:01:43:BB:34:E0:75:61:A7:D1:81:E2:CE:10:24:C4:66 Authority key identifier: 34:33:AE:1C:60:67:2C:75:91:A8:F9:7D:68:F7:9F:B2:A5:EE:8D:A7 Certificate issuer: /CN=3433ae1c60672c7591a8f97d68f79fb2a5ee8da7 Certificate serial: 019B3B6B7D61C9306170B46C0ED0D24CD227 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft Manifest number: 1799 Signing time: Sat 20 Dec 2025 11:00:58 +0000 Manifest this update: Sat 20 Dec 2025 11:00:58 +0000 Manifest next update: Sun 21 Dec 2025 11:00:58 +0000 Files and hashes: 1: 50YGB-iroCpOpfGPSSu1Hpntzf4.roa (hash: 5lvnT6co7VzA/8N8iu7cBVjZRHM9ciTul33FqxkRdLg=) 2: 6JSS-KrBs6Yqw6gX0_excaV8mik.roa (hash: DX4Jt/llE5ZgoLSzlo+jbWwMMSWiYxeZw76o/uT/uPY=) 3: JcWTldbQOIZGPvSNpxUs4o4GK0w.roa (hash: Dx0/U8f+E3+2gBwNiiT/bEtL46Po4YuFRMtF5c7r41s=) 4: NDOuHGBnLHWRqPl9aPefsqXujac.crl (hash: GBXjPa15M0MG9O4FRiM2r8x8Ll4CjHmVUCBsWhkA/U0=) 5: lueOGsmRqtrrI8WrcoKHoZ1cytA.roa (hash: qxTTmNr1wg9Q8H+R7DTVE3uMIjhi2C5reWu9yD0lXnA=) 6: rDXQIV_fU3zuPiVY7wVNU5XfnEY.roa (hash: 28GznyJvIwudik/8fUuc6bNx01Y6R3bFn9/NBv6jU90=) 7: yIXDpYWYaCwEFGgii0w8mAe6aKE.roa (hash: kpPsmD1/gHbiuZR5vWf8YWncSE2HiZ9uJEAXpqQD68g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.crl rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 11:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:7d:61:c9:30:61:70:b4:6c:0e:d0:d2:4c:d2:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3433ae1c60672c7591a8f97d68f79fb2a5ee8da7 Validity Not Before: Dec 20 11:00:58 2025 GMT Not After : Dec 21 11:00:58 2025 GMT Subject: CN=c3ebdb6e0143bb34e07561a7d181e2ce1024c466 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:8a:a1:3d:77:31:46:b0:87:78:d2:4d:88:a3: 23:0e:6e:1e:1a:da:61:95:4b:8a:dd:10:66:f7:84: d4:19:73:4b:9c:e9:21:ef:2b:fc:8f:d8:61:f2:5a: 89:4c:3b:01:58:62:a1:8a:61:8b:7d:c7:9f:dc:bf: 58:c3:dc:a8:f8:67:dc:bd:33:e9:cf:c2:fa:5b:d7: 96:a1:b0:7b:dc:fd:91:fc:cf:99:5c:1d:9a:59:db: 09:8a:2a:71:ec:83:85:d9:44:b1:9d:49:87:67:8c: 27:5e:28:56:a7:78:f4:02:7c:33:29:d2:f1:be:f2: 1b:1d:0b:39:62:42:bc:57:d1:09:cd:05:11:c9:48: 6c:15:3a:64:30:20:bc:08:50:79:3f:81:b4:69:52: 29:d9:87:cd:fd:61:f5:9e:c2:ce:38:6f:2f:ff:62: 5a:16:74:ff:b4:eb:08:3a:96:fb:f6:7f:b8:3c:8f: 07:12:1d:54:99:e0:21:5a:26:20:df:97:20:aa:85: a9:37:15:37:8c:00:3d:98:90:bb:8c:d1:8c:15:5f: a4:2b:f6:c5:ce:86:89:75:d5:58:13:cd:d9:0f:73: d1:db:8b:70:e5:41:6a:9f:31:fd:fa:41:80:2e:f2: 86:62:97:68:68:71:cd:e3:5b:09:04:94:7d:4a:aa: 1d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:EB:DB:6E:01:43:BB:34:E0:75:61:A7:D1:81:E2:CE:10:24:C4:66 X509v3 Authority Key Identifier: keyid:34:33:AE:1C:60:67:2C:75:91:A8:F9:7D:68:F7:9F:B2:A5:EE:8D:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:da:dc:38:f7:41:bb:a1:15:57:73:6a:2b:a3:02:ec:03:f0: de:ec:c8:cb:c9:4a:06:41:4d:f5:be:da:af:9a:c7:ca:7f:28: b1:4e:d7:2a:0c:4e:76:b8:b3:89:4d:aa:dd:f2:7c:c6:7b:07: 3b:68:2b:f2:a7:c3:d6:1c:d2:4f:2a:13:12:96:0c:f1:78:b2: 23:10:d9:67:07:38:52:37:71:01:31:04:26:19:60:f0:6f:67: 8e:c2:9f:3b:f5:b6:b2:36:b6:c5:83:8f:1c:b1:c9:53:18:a4: 36:13:c3:9e:41:71:1a:86:04:6f:eb:68:06:a7:55:d2:30:09: 01:8d:95:68:bc:84:f3:5f:80:ea:7b:a6:56:a7:8d:21:9c:77: 61:b4:87:26:fc:e5:7e:19:dd:40:34:5f:d9:55:3e:dd:a4:37: 44:32:02:8d:b6:8a:b8:a4:f7:d9:ac:b7:74:05:cd:8d:79:7e: 8c:fa:43:23:dc:2d:a3:df:15:58:87:6c:27:d7:f3:8d:24:01: 6b:e5:cd:5f:93:dc:18:5d:a4:05:33:57:6c:d3:ef:1d:8e:52: b6:e1:a9:eb:b9:69:79:7f:76:0f:1e:59:b3:dd:bf:be:91:e6: db:26:7f:3e:46:ad:24:aa:54:5c:34:aa:70:03:82:4a:81:96: 8f:9e:a9:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7a31hyTBhcLRsDtDSTNInMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0MzNhZTFjNjA2NzJjNzU5MWE4Zjk3ZDY4Zjc5ZmIyYTVl ZThkYTcwHhcNMjUxMjIwMTEwMDU4WhcNMjUxMjIxMTEwMDU4WjAzMTEwLwYDVQQD EyhjM2ViZGI2ZTAxNDNiYjM0ZTA3NTYxYTdkMTgxZTJjZTEwMjRjNDY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1YqhPXcxRrCHeNJNiKMjDm4eGtph lUuK3RBm94TUGXNLnOkh7yv8j9hh8lqJTDsBWGKhimGLfcef3L9Yw9yo+GfcvTPp z8L6W9eWobB73P2R/M+ZXB2aWdsJiipx7IOF2USxnUmHZ4wnXihWp3j0AnwzKdLx vvIbHQs5YkK8V9EJzQURyUhsFTpkMCC8CFB5P4G0aVIp2YfN/WH1nsLOOG8v/2Ja FnT/tOsIOpb79n+4PI8HEh1UmeAhWiYg35cgqoWpNxU3jAA9mJC7jNGMFV+kK/bF zoaJddVYE83ZD3PR24tw5UFqnzH9+kGALvKGYpdoaHHN41sJBJR9SqodkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMPr224BQ7s04HVhp9GB4s4QJMRmMB8GA1UdIwQY MBaAFDQzrhxgZyx1kaj5fWj3n7Kl7o2nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkRPdUhHQm5MSFdScVBsOWFQZWZzcVh1amFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My85Y2E0NDYtZmM1Yy00NzQ2LWIyNmYt MzBjZTgzNzAxYjM5LzEvTkRPdUhHQm5MSFdScVBsOWFQZWZzcVh1amFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My85Y2E0NDYtZmM1Yy00NzQ2LWIyNmYtMzBjZTgzNzAxYjM5 LzEvTkRPdUhHQm5MSFdScVBsOWFQZWZzcVh1amFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJNrcOPdB u6EVV3NqK6MC7APw3uzIy8lKBkFN9b7ar5rHyn8osU7XKgxOdriziU2q3fJ8xnsH O2gr8qfD1hzSTyoTEpYM8XiyIxDZZwc4UjdxATEEJhlg8G9njsKfO/W2sja2xYOP HLHJUxikNhPDnkFxGoYEb+toBqdV0jAJAY2VaLyE81+A6numVqeNIZx3YbSHJvzl fhndQDRf2VU+3aQ3RDICjbaKuKT32ay3dAXNjXl+jPpDI9wto98VWIdsJ9fzjSQB a+XNX5PcGF2kBTNXbNPvHY5StuGp67lpeX92Dx5Zs92/vpHm2yZ/PkatJKpUXDSq cAOCSoGWj56p7Q== -----END CERTIFICATE-----Generated at Sat Dec 20 20:55:10 2025 by rpki-client