This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.mft File: nDz83hO2YLXIMdr74b-_aN-fvjk.mft (raw, json) Hash identifier: UB+GSOVUmmnWblU36Xa+kC5mBDzLI+9A0bzCchvLfsY= Subject key identifier: F4:D2:52:40:26:15:3F:CA:24:48:C1:3D:EB:43:C2:1D:15:0E:17:EE Authority key identifier: 9C:3C:FC:DE:13:B6:60:B5:C8:31:DA:FB:E1:BF:BF:68:DF:9F:BE:39 Certificate issuer: /CN=9c3cfcde13b660b5c831dafbe1bfbf68df9fbe39 Certificate serial: 019B3D2313231FFF1102AB9FBEA30B3BE11D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nDz83hO2YLXIMdr74b-_aN-fvjk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.mft Manifest number: 0745 Signing time: Sat 20 Dec 2025 19:01:07 +0000 Manifest this update: Sat 20 Dec 2025 19:01:07 +0000 Manifest next update: Sun 21 Dec 2025 19:01:07 +0000 Files and hashes: 1: 1-o7g3L28fO-PQjnRpt-UgWkTHQw.roa (hash: eDwV2kux0bA6vYCRB0ZxUOPv76wEVLU7G2rZyoTStqs=) 2: nDz83hO2YLXIMdr74b-_aN-fvjk.crl (hash: tbHg+/TVIg3nHMe8Zqg/EI7j6/UGZ/aonOsItcRn/80=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.mft rsync://rpki.ripe.net/repository/DEFAULT/nDz83hO2YLXIMdr74b-_aN-fvjk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:23:13:23:1f:ff:11:02:ab:9f:be:a3:0b:3b:e1:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c3cfcde13b660b5c831dafbe1bfbf68df9fbe39 Validity Not Before: Dec 20 19:01:07 2025 GMT Not After : Dec 21 19:01:07 2025 GMT Subject: CN=f4d2524026153fca2448c13deb43c21d150e17ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:65:df:2c:b8:20:d5:c5:a9:37:d0:a6:64:5f: da:8c:88:71:7d:d5:8a:19:18:3b:b1:da:94:80:aa: ae:b7:b6:d1:d9:cb:4b:10:b2:2a:ee:c8:e0:12:5a: 34:f2:f8:a6:fe:24:98:bb:a0:b2:9f:27:33:c4:6c: e0:7a:a1:48:8b:e7:97:4c:23:40:16:75:c8:c3:a4: 8c:db:5a:a4:fc:3f:e9:5e:77:53:08:20:48:2a:ae: c0:b0:07:83:9d:57:19:db:5e:0f:0c:b6:a7:27:ed: 1a:4c:e0:97:70:b7:ef:3d:15:65:66:47:2e:8b:eb: 6f:44:51:c2:91:c7:04:5a:ec:a7:d3:9e:99:13:34: 0e:7c:ab:dc:64:30:b9:db:27:d3:dd:80:f1:47:8d: e3:e6:0e:31:2f:95:b5:a8:23:64:e4:f7:41:ea:36: 5a:27:1f:53:29:8c:ff:d0:ba:94:db:3d:0d:06:0d: 28:4d:5f:18:14:ea:48:0b:6a:e9:23:fa:4d:9e:7c: 18:7e:58:73:cd:9b:ac:5e:4a:cb:e9:3b:ab:5d:89: 92:fd:96:df:23:c6:0a:9c:37:5c:64:0c:ae:4a:a4: 99:91:2c:ca:ea:af:76:a4:c5:34:80:90:70:f5:df: f5:90:b2:79:0d:c4:38:7a:20:18:65:6a:94:2e:3f: 62:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:D2:52:40:26:15:3F:CA:24:48:C1:3D:EB:43:C2:1D:15:0E:17:EE X509v3 Authority Key Identifier: keyid:9C:3C:FC:DE:13:B6:60:B5:C8:31:DA:FB:E1:BF:BF:68:DF:9F:BE:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nDz83hO2YLXIMdr74b-_aN-fvjk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:5f:4a:a1:ab:ba:d7:42:bf:fb:f2:74:5c:c9:23:9b:27:17: cf:f6:9f:49:c1:a8:4e:cd:88:52:cc:43:79:15:c0:99:aa:c5: b2:ab:94:98:be:aa:57:01:26:d3:b8:6f:4b:0b:92:a7:15:a4: 1f:d6:19:f5:6a:a3:55:84:74:d8:65:7b:4a:43:71:91:ce:23: 12:c8:08:2d:55:fd:bf:60:58:e8:d0:13:d5:34:b0:38:bb:61: 75:e3:17:bc:df:b8:6a:bf:95:df:e2:49:3e:b6:56:d7:5f:f4: 54:57:a2:52:d7:62:b8:e9:b1:8a:6f:2f:39:28:fc:b0:c0:ec: 6b:1f:e3:1a:18:5d:44:ee:2c:b1:cc:23:b0:eb:39:0d:41:cc: 46:0a:5d:bd:bf:2b:f1:c7:67:67:41:1f:fb:22:58:25:11:5e: 0e:9f:28:ba:3d:90:62:22:ff:65:77:b4:bf:b8:f4:d1:ba:db: f9:25:15:26:55:85:e5:0f:f7:5c:cd:b2:ef:21:5e:3a:55:b4: d5:17:02:ba:46:f1:6a:76:a3:e8:ef:41:ac:82:60:1d:f8:b9: 4f:08:84:63:de:38:45:73:84:26:38:93:3f:7b:fb:a9:62:9d: 43:d8:10:83:9e:e4:c7:8f:0a:b9:95:24:9d:82:20:a5:aa:9a: be:72:36:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9IxMjH/8RAqufvqMLO+EdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljM2NmY2RlMTNiNjYwYjVjODMxZGFmYmUxYmZiZjY4ZGY5 ZmJlMzkwHhcNMjUxMjIwMTkwMTA3WhcNMjUxMjIxMTkwMTA3WjAzMTEwLwYDVQQD EyhmNGQyNTI0MDI2MTUzZmNhMjQ0OGMxM2RlYjQzYzIxZDE1MGUxN2VlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGXfLLgg1cWpN9CmZF/ajIhxfdWK GRg7sdqUgKqut7bR2ctLELIq7sjgElo08vim/iSYu6CynyczxGzgeqFIi+eXTCNA FnXIw6SM21qk/D/pXndTCCBIKq7AsAeDnVcZ214PDLanJ+0aTOCXcLfvPRVlZkcu i+tvRFHCkccEWuyn056ZEzQOfKvcZDC52yfT3YDxR43j5g4xL5W1qCNk5PdB6jZa Jx9TKYz/0LqU2z0NBg0oTV8YFOpIC2rpI/pNnnwYflhzzZusXkrL6TurXYmS/Zbf I8YKnDdcZAyuSqSZkSzK6q92pMU0gJBw9d/1kLJ5DcQ4eiAYZWqULj9ihQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPTSUkAmFT/KJEjBPetDwh0VDhfuMB8GA1UdIwQY MBaAFJw8/N4TtmC1yDHa++G/v2jfn745MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkR6ODNoTzJZTFhJTWRyNzRiLV9hTi1mdmprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8zYzAzNGYtYzI0My00YTg4LTkwNzAt Njg3OWNjMjZkN2I2LzEvbkR6ODNoTzJZTFhJTWRyNzRiLV9hTi1mdmprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8zYzAzNGYtYzI0My00YTg4LTkwNzAtNjg3OWNjMjZkN2I2 LzEvbkR6ODNoTzJZTFhJTWRyNzRiLV9hTi1mdmprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbV9Koau6 10K/+/J0XMkjmycXz/afScGoTs2IUsxDeRXAmarFsquUmL6qVwEm07hvSwuSpxWk H9YZ9WqjVYR02GV7SkNxkc4jEsgILVX9v2BY6NAT1TSwOLthdeMXvN+4ar+V3+JJ PrZW11/0VFeiUtdiuOmxim8vOSj8sMDsax/jGhhdRO4sscwjsOs5DUHMRgpdvb8r 8cdnZ0Ef+yJYJRFeDp8ouj2QYiL/ZXe0v7j00brb+SUVJlWF5Q/3XM2y7yFeOlW0 1RcCukbxanaj6O9BrIJgHfi5TwiEY944RXOEJjiTP3v7qWKdQ9gQg57kx48KuZUk nYIgpaqavnI2mQ== -----END CERTIFICATE-----Generated at Sun Dec 21 04:24:38 2025 by rpki-client