This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft File: NdRfKsW84Vad9rKtgNFvG5L72Fw.mft (raw, json) Hash identifier: PIVsp2fe2D4+19dQKjVnL1AcegF5g0qAl3D4MZIzKJw= Subject key identifier: 67:AC:D9:0F:83:CD:8A:F1:2B:C4:34:BF:8A:62:34:A7:FB:50:D9:25 Authority key identifier: 35:D4:5F:2A:C5:BC:E1:56:9D:F6:B2:AD:80:D1:6F:1B:92:FB:D8:5C Certificate issuer: /CN=35d45f2ac5bce1569df6b2ad80d16f1b92fbd85c Certificate serial: 019B3C106C9301EA3A5268978C80C09CFD56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NdRfKsW84Vad9rKtgNFvG5L72Fw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft Manifest number: 1787 Signing time: Sat 20 Dec 2025 14:01:07 +0000 Manifest this update: Sat 20 Dec 2025 14:01:07 +0000 Manifest next update: Sun 21 Dec 2025 14:01:07 +0000 Files and hashes: 1: NdRfKsW84Vad9rKtgNFvG5L72Fw.crl (hash: a8KBFIvfQVxJwgg/IBHSPmOc1DZ84ku8BXXTt6tWZAA=) 2: Pxn4Z0bdWmWck5jdH1FaueBsOf0.roa (hash: vg1TLVE75nnwqoL/egav334PmpcLAh17CAvdGO24png=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft rsync://rpki.ripe.net/repository/DEFAULT/NdRfKsW84Vad9rKtgNFvG5L72Fw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:6c:93:01:ea:3a:52:68:97:8c:80:c0:9c:fd:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35d45f2ac5bce1569df6b2ad80d16f1b92fbd85c Validity Not Before: Dec 20 14:01:07 2025 GMT Not After : Dec 21 14:01:07 2025 GMT Subject: CN=67acd90f83cd8af12bc434bf8a6234a7fb50d925 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:00:90:f3:c2:f0:a1:ce:dc:a9:e8:36:fb:af: 4a:14:1a:4b:c3:fa:17:c0:5b:ab:be:54:bb:a7:bb: 0c:b2:78:1e:be:10:ab:72:b6:7e:72:c1:24:d9:b8: b0:2a:96:12:62:b9:14:07:a1:bf:f7:4e:67:40:45: 04:a6:ce:61:97:9b:8f:5d:a3:9d:33:ae:31:d1:bf: f8:67:23:ac:5e:af:17:bf:4a:19:1a:9b:b0:90:4e: b2:6a:01:fa:c2:6c:de:c3:59:6d:86:c2:bd:b8:79: 00:ea:09:4d:9d:9b:ee:a6:03:c1:6b:16:83:38:22: 28:0a:ea:61:38:06:d1:0e:3d:72:20:a1:9b:8d:a5: 72:48:a0:2f:89:45:90:58:7d:7f:ad:82:d0:ca:f1: c2:da:19:76:af:a6:c7:5f:29:e8:2f:a7:4d:a4:a9: a3:1b:87:15:57:9f:cb:eb:75:81:25:b3:ba:15:7a: 7d:24:43:f9:3d:e5:e8:7b:b5:36:4c:fe:56:b4:40: 86:d0:5b:82:7e:c3:2b:dc:de:a5:e2:0a:0f:ca:65: 8d:77:32:93:58:1c:90:b6:9e:c3:53:b1:c2:0a:7d: 19:73:08:95:e2:b5:90:43:c4:09:e4:66:7c:ad:61: 58:8d:7a:26:c1:e7:44:6f:9d:2a:c2:8c:a9:2c:0f: 60:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:AC:D9:0F:83:CD:8A:F1:2B:C4:34:BF:8A:62:34:A7:FB:50:D9:25 X509v3 Authority Key Identifier: keyid:35:D4:5F:2A:C5:BC:E1:56:9D:F6:B2:AD:80:D1:6F:1B:92:FB:D8:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdRfKsW84Vad9rKtgNFvG5L72Fw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:dc:89:1a:d7:38:14:07:9f:1b:82:a2:a3:21:17:ac:24:6b: f5:ca:5d:cd:5f:d4:7f:34:cf:81:00:8a:30:37:d8:91:bd:dd: 88:42:b3:9d:cc:c2:f2:ba:23:81:6b:89:e3:98:1b:cf:b6:0e: 89:d7:1d:d2:06:e4:a6:bb:00:11:12:97:c6:88:dc:06:ca:35: 77:4f:a9:35:45:1b:ea:61:1c:a9:60:22:bf:90:23:e1:39:eb: 29:17:f4:15:5c:90:fd:f5:08:c7:3a:2d:1d:69:a6:06:b9:30: e0:56:db:81:49:07:12:4b:0e:ee:3b:76:e4:ad:a9:12:23:6f: 46:c5:10:fd:ba:10:d8:48:b8:ee:e3:7f:2a:5e:55:c4:64:fd: 55:62:9b:ba:40:77:fe:77:d1:20:09:6e:52:b9:5e:fc:e8:7e: a5:ea:c0:01:b4:9c:f9:1a:4d:6d:78:72:37:bf:13:ad:33:f6: be:ea:bc:07:a2:33:78:e5:c6:48:4d:7b:41:f9:1f:a5:95:3d: 80:ed:f1:9d:2f:86:61:1d:48:c6:90:e1:21:4a:5c:83:99:1c: 47:de:0d:be:56:6e:66:dd:83:6e:92:ef:b0:bc:94:ac:5c:a1: 19:49:d3:09:f5:49:85:2b:f4:e9:79:b2:bc:98:9a:74:f1:bd: f1:1c:43:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8EGyTAeo6UmiXjIDAnP1WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1ZDQ1ZjJhYzViY2UxNTY5ZGY2YjJhZDgwZDE2ZjFiOTJm YmQ4NWMwHhcNMjUxMjIwMTQwMTA3WhcNMjUxMjIxMTQwMTA3WjAzMTEwLwYDVQQD Eyg2N2FjZDkwZjgzY2Q4YWYxMmJjNDM0YmY4YTYyMzRhN2ZiNTBkOTI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnACQ88Lwoc7cqeg2+69KFBpLw/oX wFurvlS7p7sMsngevhCrcrZ+csEk2biwKpYSYrkUB6G/905nQEUEps5hl5uPXaOd M64x0b/4ZyOsXq8Xv0oZGpuwkE6yagH6wmzew1lthsK9uHkA6glNnZvupgPBaxaD OCIoCuphOAbRDj1yIKGbjaVySKAviUWQWH1/rYLQyvHC2hl2r6bHXynoL6dNpKmj G4cVV5/L63WBJbO6FXp9JEP5PeXoe7U2TP5WtECG0FuCfsMr3N6l4goPymWNdzKT WByQtp7DU7HCCn0ZcwiV4rWQQ8QJ5GZ8rWFYjXomwedEb50qwoypLA9gQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGes2Q+DzYrxK8Q0v4piNKf7UNklMB8GA1UdIwQY MBaAFDXUXyrFvOFWnfayrYDRbxuS+9hcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmRSZktzVzg0VmFkOXJLdGdORnZHNUw3MkZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS80ODEyMzYtYTA2Yy00OTAzLTkzODUt NmI3ZDdlNGVkNzAxLzEvTmRSZktzVzg0VmFkOXJLdGdORnZHNUw3MkZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS80ODEyMzYtYTA2Yy00OTAzLTkzODUtNmI3ZDdlNGVkNzAx LzEvTmRSZktzVzg0VmFkOXJLdGdORnZHNUw3MkZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbNyJGtc4 FAefG4KioyEXrCRr9cpdzV/UfzTPgQCKMDfYkb3diEKznczC8rojgWuJ45gbz7YO idcd0gbkprsAERKXxojcBso1d0+pNUUb6mEcqWAiv5Aj4TnrKRf0FVyQ/fUIxzot HWmmBrkw4FbbgUkHEksO7jt25K2pEiNvRsUQ/boQ2Ei47uN/Kl5VxGT9VWKbukB3 /nfRIAluUrle/Oh+perAAbSc+RpNbXhyN78TrTP2vuq8B6IzeOXGSE17QfkfpZU9 gO3xnS+GYR1IxpDhIUpcg5kcR94NvlZuZt2DbpLvsLyUrFyhGUnTCfVJhSv06Xmy vJiadPG98RxDlw== -----END CERTIFICATE-----Generated at Sat Dec 20 18:26:01 2025 by rpki-client