This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.mft File: nDz83hO2YLXIMdr74b-_aN-fvjk.mft (raw, json) Hash identifier: Bp1Pxgj16CaWxdylV0aYMvJ0pgnm+8qW/yXOiCakqF4= Subject key identifier: B7:60:7D:6D:FE:23:37:92:2C:23:DE:90:08:94:2B:27:76:DE:75:C4 Authority key identifier: 9C:3C:FC:DE:13:B6:60:B5:C8:31:DA:FB:E1:BF:BF:68:DF:9F:BE:39 Certificate issuer: /CN=9c3cfcde13b660b5c831dafbe1bfbf68df9fbe39 Certificate serial: 019B62B045BA3D7B444B95243A3797761104 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nDz83hO2YLXIMdr74b-_aN-fvjk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.mft Manifest number: 0759 Signing time: Sun 28 Dec 2025 02:01:17 +0000 Manifest this update: Sun 28 Dec 2025 02:01:17 +0000 Manifest next update: Mon 29 Dec 2025 02:01:17 +0000 Files and hashes: 1: 1-o7g3L28fO-PQjnRpt-UgWkTHQw.roa (hash: eDwV2kux0bA6vYCRB0ZxUOPv76wEVLU7G2rZyoTStqs=) 2: 7Dxs-kwqOJgrw3u5KznluVP8t8A.roa (hash: IFHvZOh4yzbeydpAnecCX/WfLOcEI7MF/vuyjzk8yCo=) 3: nDz83hO2YLXIMdr74b-_aN-fvjk.crl (hash: msP81+6yLLEhIPQs0LLGtyIjv8hlYrNXYiIWbDwsTvI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.mft rsync://rpki.ripe.net/repository/DEFAULT/nDz83hO2YLXIMdr74b-_aN-fvjk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:62:b0:45:ba:3d:7b:44:4b:95:24:3a:37:97:76:11:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c3cfcde13b660b5c831dafbe1bfbf68df9fbe39 Validity Not Before: Dec 28 02:01:17 2025 GMT Not After : Dec 29 02:01:17 2025 GMT Subject: CN=b7607d6dfe2337922c23de9008942b2776de75c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d8:80:48:b8:8f:79:ca:47:75:18:76:2e:f3: 48:90:1c:81:ae:fc:33:16:79:40:4d:1a:16:ba:4b: a1:8e:21:14:d4:10:6e:38:de:9f:ba:ad:65:9e:10: 97:1f:d2:7b:42:a2:19:f1:68:ca:72:ae:ba:10:1c: c0:3a:0a:e5:60:1a:d3:d9:a1:ca:3b:71:ba:15:c5: 4f:9f:0e:e0:e1:88:61:5e:ec:2f:18:ea:1d:66:39: cb:6e:93:23:54:6f:0b:3a:f4:87:3e:c7:3b:e3:7b: d2:5b:9e:39:ba:e5:c3:f4:b3:04:78:64:1a:a3:29: 71:c8:5d:ce:21:3a:0e:ab:15:7b:0b:ba:16:25:1b: 4f:9f:00:2e:8d:97:1c:cf:7e:db:21:91:49:82:5a: 5a:cb:9e:14:7c:4f:85:39:b4:cd:4d:14:79:29:8b: 6e:bb:d5:7c:59:45:72:b7:f7:73:b8:08:80:71:2d: 3b:22:45:77:48:69:0c:60:8a:d2:ec:81:a2:3d:2d: 3c:54:80:52:ac:96:b0:45:6a:ae:9d:c0:d4:12:13: 06:ee:da:6b:ee:19:27:4c:88:5c:64:19:db:73:85: 26:79:75:b6:39:9d:4e:e6:66:74:25:1c:ed:d7:27: b7:5b:38:e8:84:9d:12:cb:cb:e7:92:41:73:c0:41: 95:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:60:7D:6D:FE:23:37:92:2C:23:DE:90:08:94:2B:27:76:DE:75:C4 X509v3 Authority Key Identifier: keyid:9C:3C:FC:DE:13:B6:60:B5:C8:31:DA:FB:E1:BF:BF:68:DF:9F:BE:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nDz83hO2YLXIMdr74b-_aN-fvjk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:48:2e:2c:3b:55:29:56:b8:a1:cc:04:f5:fc:32:d6:fc:12: 0e:b8:60:16:6d:f2:72:de:d7:ab:7d:a2:dd:77:a4:eb:b1:6a: e7:e7:7b:a5:cc:0f:2a:06:75:ac:ab:82:8c:ec:fd:a6:26:85: 21:66:d7:f7:61:4b:5c:f0:38:a0:70:28:cd:ea:6d:6e:da:9b: 30:88:30:ae:3f:12:03:b3:a8:ac:ee:76:dd:d6:63:b0:70:46: cb:07:c7:7a:c2:ce:47:d7:53:5b:6f:95:24:df:52:0f:0a:7e: 16:12:98:77:7b:3e:93:57:63:58:47:06:ef:d4:5a:25:00:6f: b8:e5:c5:e4:54:7c:df:97:02:60:43:af:66:16:3f:4f:ce:33: dd:6c:88:45:d9:eb:a2:b2:6b:9c:26:f2:70:b4:80:01:1d:1d: bd:b5:9d:b1:6e:11:09:1e:56:f8:ff:80:5a:00:64:89:b2:cb: 99:a4:d1:41:23:9f:97:aa:52:81:a6:24:b2:f1:75:cf:04:0f: c6:97:23:60:03:6e:c2:5f:a9:08:11:40:87:fa:11:49:8f:c7: 16:1b:a2:75:a6:c7:5a:67:88:b1:34:ba:66:53:68:a7:4e:e4: cf:49:8e:be:7a:5b:70:96:50:87:50:f4:93:04:03:65:ba:55: 62:5c:88:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtisEW6PXtES5UkOjeXdhEEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljM2NmY2RlMTNiNjYwYjVjODMxZGFmYmUxYmZiZjY4ZGY5 ZmJlMzkwHhcNMjUxMjI4MDIwMTE3WhcNMjUxMjI5MDIwMTE3WjAzMTEwLwYDVQQD EyhiNzYwN2Q2ZGZlMjMzNzkyMmMyM2RlOTAwODk0MmIyNzc2ZGU3NWM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0tiASLiPecpHdRh2LvNIkByBrvwz FnlATRoWukuhjiEU1BBuON6fuq1lnhCXH9J7QqIZ8WjKcq66EBzAOgrlYBrT2aHK O3G6FcVPnw7g4YhhXuwvGOodZjnLbpMjVG8LOvSHPsc743vSW545uuXD9LMEeGQa oylxyF3OIToOqxV7C7oWJRtPnwAujZccz37bIZFJglpay54UfE+FObTNTRR5KYtu u9V8WUVyt/dzuAiAcS07IkV3SGkMYIrS7IGiPS08VIBSrJawRWquncDUEhMG7tpr 7hknTIhcZBnbc4UmeXW2OZ1O5mZ0JRzt1ye3WzjohJ0Sy8vnkkFzwEGVTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLdgfW3+IzeSLCPekAiUKyd23nXEMB8GA1UdIwQY MBaAFJw8/N4TtmC1yDHa++G/v2jfn745MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkR6ODNoTzJZTFhJTWRyNzRiLV9hTi1mdmprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8zYzAzNGYtYzI0My00YTg4LTkwNzAt Njg3OWNjMjZkN2I2LzEvbkR6ODNoTzJZTFhJTWRyNzRiLV9hTi1mdmprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8zYzAzNGYtYzI0My00YTg4LTkwNzAtNjg3OWNjMjZkN2I2 LzEvbkR6ODNoTzJZTFhJTWRyNzRiLV9hTi1mdmprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR0guLDtV KVa4ocwE9fwy1vwSDrhgFm3yct7Xq32i3Xek67Fq5+d7pcwPKgZ1rKuCjOz9piaF IWbX92FLXPA4oHAozeptbtqbMIgwrj8SA7OorO523dZjsHBGywfHesLOR9dTW2+V JN9SDwp+FhKYd3s+k1djWEcG79RaJQBvuOXF5FR835cCYEOvZhY/T84z3WyIRdnr orJrnCbycLSAAR0dvbWdsW4RCR5W+P+AWgBkibLLmaTRQSOfl6pSgaYksvF1zwQP xpcjYANuwl+pCBFAh/oRSY/HFhuidabHWmeIsTS6ZlNop07kz0mOvnpbcJZQh1D0 kwQDZbpVYlyIRA== -----END CERTIFICATE-----Generated at Sun Dec 28 05:48:54 2025 by rpki-client