This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/29c8eb-61e2-4aad-9aa4-3279137fde44/1/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.mft File: NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.mft (raw, json) Hash identifier: 5T9s9tGRpwhtrHoa5a5uuHz1jD+uojhVEPX6ugxl5io= Subject key identifier: 13:81:52:05:CC:F6:47:8A:73:A9:7F:EC:AF:77:D8:5B:4A:22:F2:1C Authority key identifier: 34:38:0C:FB:A3:4B:61:F5:DB:45:65:14:59:28:D9:E4:AD:D9:30:EB Certificate issuer: /CN=34380cfba34b61f5db4565145928d9e4add930eb Certificate serial: 019B70A326AF5565E6DBBA506815CBF2D3F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/29c8eb-61e2-4aad-9aa4-3279137fde44/1/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.mft Manifest number: 0258 Signing time: Tue 30 Dec 2025 19:01:38 +0000 Manifest this update: Tue 30 Dec 2025 19:01:38 +0000 Manifest next update: Wed 31 Dec 2025 19:01:38 +0000 Files and hashes: 1: NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.crl (hash: w74/YI0nNOwyPRIIaLn+Q8m6CvF1It/eD8cljj/G6Kk=) 2: eNjKHdv8IHiSMT5DlWURZ12GtE8.roa (hash: 0PyZvOHXEJvjs+fUIrJG3NCT3v2ngertxaHruNIycnQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/29c8eb-61e2-4aad-9aa4-3279137fde44/1/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/29c8eb-61e2-4aad-9aa4-3279137fde44/1/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.mft rsync://rpki.ripe.net/repository/DEFAULT/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 19:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:70:a3:26:af:55:65:e6:db:ba:50:68:15:cb:f2:d3:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34380cfba34b61f5db4565145928d9e4add930eb Validity Not Before: Dec 30 19:01:38 2025 GMT Not After : Dec 31 19:01:38 2025 GMT Subject: CN=13815205ccf6478a73a97fecaf77d85b4a22f21c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:52:55:ca:5e:81:a2:0c:9b:71:5d:a5:d1:96: 2e:7a:18:dd:5b:a1:50:60:54:1c:91:bc:79:8d:97: d3:e1:20:42:2a:ed:93:2d:c4:00:99:b4:40:78:6a: 2f:d7:2c:d7:e0:f8:bf:fb:53:55:30:24:08:ed:4d: ef:8e:b3:4f:0e:5e:41:a1:57:cf:00:21:7a:92:3a: 8d:3c:32:a1:9e:49:31:da:3d:67:16:29:50:83:66: 5a:17:e3:99:f2:01:f1:b2:68:e7:07:72:fe:62:39: 40:36:d4:3d:7b:0d:11:e0:b8:8c:40:22:0c:bb:90: 25:a4:f8:8b:70:ee:79:38:0e:08:d8:cf:62:e8:84: 17:c6:49:0f:83:8f:b2:b0:a0:09:47:ee:a9:71:b0: 93:b1:95:fc:a8:86:ec:a4:4d:1a:6e:e2:d5:1b:c7: 97:52:ba:5d:7e:ad:b9:b5:40:fa:af:20:b8:c8:46: 6a:0d:f9:48:2f:d4:ed:42:5c:13:05:58:ee:61:df: e5:1a:7b:21:c0:ec:21:5e:9d:b2:d6:6c:50:88:f4: d1:2b:f9:34:4e:83:70:03:53:08:91:23:88:25:e0: e4:a9:79:c3:3c:8f:5e:d8:d3:e9:db:23:21:f1:63: 72:ea:d2:93:64:d5:c4:b1:e6:ec:ea:15:8a:e6:7b: fb:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:81:52:05:CC:F6:47:8A:73:A9:7F:EC:AF:77:D8:5B:4A:22:F2:1C X509v3 Authority Key Identifier: keyid:34:38:0C:FB:A3:4B:61:F5:DB:45:65:14:59:28:D9:E4:AD:D9:30:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/29c8eb-61e2-4aad-9aa4-3279137fde44/1/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/29c8eb-61e2-4aad-9aa4-3279137fde44/1/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:04:0e:b4:48:8b:f1:39:ff:fb:4c:94:f1:f9:1c:75:1d:9e: d5:87:39:53:f0:75:ea:57:b7:dc:58:52:33:2e:74:c4:f1:89: c4:80:44:1f:98:e7:c1:6f:b4:91:4c:70:89:ca:6e:41:dc:b1: 7a:f7:03:be:bf:a1:d1:e2:47:3c:b6:f1:2c:01:33:e3:22:a0: f6:5d:75:8c:e1:dd:54:a2:ec:04:53:bd:a7:34:20:92:ed:2b: b3:06:36:c5:89:40:53:5d:24:68:25:2b:be:13:26:94:3c:26: b8:94:5c:9f:a4:fa:53:29:7c:8a:de:ec:ab:b4:57:9e:35:cb: 55:5a:c5:73:06:ee:5d:bf:ca:f9:74:b3:ff:39:9d:51:d2:3b: d6:04:59:f4:d5:f4:68:20:f9:8f:38:3c:1e:98:dd:d1:6c:26: ee:37:39:82:cf:dd:94:ef:63:97:98:2b:a7:2b:8b:e4:80:03: 8a:75:6a:60:e9:f3:a3:59:c1:e0:a3:50:c6:0f:f6:2d:8e:7c: 7d:ff:30:0c:93:e1:a9:97:ae:41:5a:b3:97:bf:37:fb:e4:a3: 6f:10:d7:93:f9:6b:01:e4:05:37:e5:a7:04:8f:74:91:ff:60: 0a:ac:07:25:ff:e5:7b:e5:90:25:5b:16:ad:32:e4:a9:c8:ac: 28:c1:f5:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtwoyavVWXm27pQaBXL8tP3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0MzgwY2ZiYTM0YjYxZjVkYjQ1NjUxNDU5MjhkOWU0YWRk OTMwZWIwHhcNMjUxMjMwMTkwMTM4WhcNMjUxMjMxMTkwMTM4WjAzMTEwLwYDVQQD EygxMzgxNTIwNWNjZjY0NzhhNzNhOTdmZWNhZjc3ZDg1YjRhMjJmMjFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0lJVyl6BogybcV2l0ZYuehjdW6FQ YFQckbx5jZfT4SBCKu2TLcQAmbRAeGov1yzX4Pi/+1NVMCQI7U3vjrNPDl5BoVfP ACF6kjqNPDKhnkkx2j1nFilQg2ZaF+OZ8gHxsmjnB3L+YjlANtQ9ew0R4LiMQCIM u5AlpPiLcO55OA4I2M9i6IQXxkkPg4+ysKAJR+6pcbCTsZX8qIbspE0abuLVG8eX Urpdfq25tUD6ryC4yEZqDflIL9TtQlwTBVjuYd/lGnshwOwhXp2y1mxQiPTRK/k0 ToNwA1MIkSOIJeDkqXnDPI9e2NPp2yMh8WNy6tKTZNXEsebs6hWK5nv7GwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBOBUgXM9keKc6l/7K932FtKIvIcMB8GA1UdIwQY MBaAFDQ4DPujS2H120VlFFko2eSt2TDrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkRnTS02TkxZZlhiUldVVVdTalo1SzNaTU9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8yOWM4ZWItNjFlMi00YWFkLTlhYTQt MzI3OTEzN2ZkZTQ0LzEvTkRnTS02TkxZZlhiUldVVVdTalo1SzNaTU9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS8yOWM4ZWItNjFlMi00YWFkLTlhYTQtMzI3OTEzN2ZkZTQ0 LzEvTkRnTS02TkxZZlhiUldVVVdTalo1SzNaTU9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANgQOtEiL 8Tn/+0yU8fkcdR2e1Yc5U/B16le33FhSMy50xPGJxIBEH5jnwW+0kUxwicpuQdyx evcDvr+h0eJHPLbxLAEz4yKg9l11jOHdVKLsBFO9pzQgku0rswY2xYlAU10kaCUr vhMmlDwmuJRcn6T6Uyl8it7sq7RXnjXLVVrFcwbuXb/K+XSz/zmdUdI71gRZ9NX0 aCD5jzg8Hpjd0Wwm7jc5gs/dlO9jl5grpyuL5IADinVqYOnzo1nB4KNQxg/2LY58 ff8wDJPhqZeuQVqzl783++SjbxDXk/lrAeQFN+WnBI90kf9gCqwHJf/le+WQJVsW rTLkqcisKMH1Ug== -----END CERTIFICATE-----Generated at Wed Dec 31 01:58:47 2025 by rpki-client