This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/f6892f-51b6-4e4a-b1e0-fd3fd1803294/1/NdrPcDZ9CsMFpawau68jmLJtk1U.mft File: NdrPcDZ9CsMFpawau68jmLJtk1U.mft (raw, json) Hash identifier: 0uUX9fjuIdcvqmnoTu/pjbXR+YOLE4JXWp6VHliUrL0= Subject key identifier: 70:42:44:51:C3:07:15:34:B4:92:D3:53:24:FB:33:C0:E7:69:C0:69 Authority key identifier: 35:DA:CF:70:36:7D:0A:C3:05:A5:AC:1A:BB:AF:23:98:B2:6D:93:55 Certificate issuer: /CN=35dacf70367d0ac305a5ac1abbaf2398b26d9355 Certificate serial: 019B35D7336D432EB39ADFE543ACD510194C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NdrPcDZ9CsMFpawau68jmLJtk1U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/f6892f-51b6-4e4a-b1e0-fd3fd1803294/1/NdrPcDZ9CsMFpawau68jmLJtk1U.mft Manifest number: 051E Signing time: Fri 19 Dec 2025 09:00:54 +0000 Manifest this update: Fri 19 Dec 2025 09:00:54 +0000 Manifest next update: Sat 20 Dec 2025 09:00:54 +0000 Files and hashes: 1: NV-I2foKzHLj-RMxKytozaQe67g.roa (hash: PhlDXyOiHHSXRcXTISte8ar8TbgSTtrPQqIchH8glHs=) 2: NdrPcDZ9CsMFpawau68jmLJtk1U.crl (hash: ZLABtFNuUGX8Uu8RebhLdj9gN7gLZhe8Buhu9VMLyRA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/f6892f-51b6-4e4a-b1e0-fd3fd1803294/1/NdrPcDZ9CsMFpawau68jmLJtk1U.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/f6892f-51b6-4e4a-b1e0-fd3fd1803294/1/NdrPcDZ9CsMFpawau68jmLJtk1U.mft rsync://rpki.ripe.net/repository/DEFAULT/NdrPcDZ9CsMFpawau68jmLJtk1U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:d7:33:6d:43:2e:b3:9a:df:e5:43:ac:d5:10:19:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35dacf70367d0ac305a5ac1abbaf2398b26d9355 Validity Not Before: Dec 19 09:00:54 2025 GMT Not After : Dec 20 09:00:54 2025 GMT Subject: CN=70424451c3071534b492d35324fb33c0e769c069 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:e6:b5:96:87:de:60:f6:e3:5c:d7:77:b0:a0: 7e:d7:09:c1:28:42:51:cd:41:02:4c:b5:f9:05:65: fc:5d:23:4f:81:00:5a:ea:b4:58:3e:f0:ea:63:62: 25:82:f4:71:c6:e9:f4:10:a6:55:b8:43:e4:ac:10: a2:c7:de:e7:02:d8:32:f1:82:18:92:01:e4:51:31: 1f:a3:36:b8:62:fd:31:4e:35:f9:fd:e1:c8:93:5c: 72:7c:5b:10:9b:dd:90:c9:2f:a3:9d:9c:49:fd:41: 5f:7e:f3:f1:f7:ef:8e:21:f1:26:b2:68:ac:d7:0c: ff:5a:89:6d:b3:cd:1c:aa:6b:9e:e2:0c:4e:44:d2: 86:9c:b5:3c:11:ce:c7:49:3c:4a:09:3b:7c:6f:7f: 49:45:96:83:bb:32:b3:ac:a7:41:32:f2:60:32:74: dd:c2:38:c2:79:64:1c:3e:0c:cb:99:1c:35:27:69: 6c:37:05:a3:23:67:5b:ae:3f:b6:2c:4f:e7:b2:c8: 69:9c:78:b2:44:6f:dc:ad:8b:09:9d:92:57:61:f2: 0c:af:00:2b:28:69:11:50:98:a1:07:c2:7e:b9:18: f0:9e:5a:f6:cf:d1:04:77:e6:3f:0d:ea:96:d4:f5: 95:f7:7b:c3:f7:d1:81:75:6f:cf:a8:89:2f:eb:3b: 01:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:42:44:51:C3:07:15:34:B4:92:D3:53:24:FB:33:C0:E7:69:C0:69 X509v3 Authority Key Identifier: keyid:35:DA:CF:70:36:7D:0A:C3:05:A5:AC:1A:BB:AF:23:98:B2:6D:93:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdrPcDZ9CsMFpawau68jmLJtk1U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/f6892f-51b6-4e4a-b1e0-fd3fd1803294/1/NdrPcDZ9CsMFpawau68jmLJtk1U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/f6892f-51b6-4e4a-b1e0-fd3fd1803294/1/NdrPcDZ9CsMFpawau68jmLJtk1U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:ae:2e:4d:2f:9c:7d:c9:66:86:30:42:01:cb:a1:5c:c1:20: 2c:dd:fe:5f:47:71:71:8b:cf:d7:de:cc:fe:df:6c:e6:8e:be: a7:b4:4a:75:92:81:ff:f4:b5:ce:ee:02:bd:80:f6:26:09:98: 3a:d5:08:21:a9:9f:95:f5:c9:e3:90:e6:4a:a6:db:0c:e4:1e: f5:da:1d:c8:76:92:eb:bf:8a:6c:cd:5e:dd:eb:5f:22:37:30: 8f:28:bc:d1:26:4b:ce:5f:7d:22:7f:90:42:ef:2f:f9:a4:8b: 00:71:08:3d:f4:f4:d4:cc:d3:16:7b:e1:0a:66:ae:97:25:36: 1f:5b:7a:75:38:24:0e:9e:58:4e:c2:15:78:25:a8:4a:b1:2c: ac:57:61:6e:ae:e1:a8:55:4e:6a:e4:8f:16:19:ab:9c:8b:68: 10:16:4a:fd:76:e5:ef:20:7c:b8:f6:5f:7d:c1:8b:8b:75:ac: f6:f2:f0:4c:5f:c0:22:8d:b5:2e:16:fc:b8:0d:a5:e4:fb:e3: 65:95:44:f5:3b:67:b3:2c:ed:cb:17:a2:a7:c9:83:a3:2e:77: b5:2c:57:82:ad:1e:6d:55:4d:4c:5f:b2:d9:e2:38:d8:17:fe: c4:7d:e2:2e:dd:02:42:67:34:34:8f:08:39:d5:cd:7f:ab:f0: 0b:bd:9d:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs11zNtQy6zmt/lQ6zVEBlMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1ZGFjZjcwMzY3ZDBhYzMwNWE1YWMxYWJiYWYyMzk4YjI2 ZDkzNTUwHhcNMjUxMjE5MDkwMDU0WhcNMjUxMjIwMDkwMDU0WjAzMTEwLwYDVQQD Eyg3MDQyNDQ1MWMzMDcxNTM0YjQ5MmQzNTMyNGZiMzNjMGU3NjljMDY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ua1lofeYPbjXNd3sKB+1wnBKEJR zUECTLX5BWX8XSNPgQBa6rRYPvDqY2IlgvRxxun0EKZVuEPkrBCix97nAtgy8YIY kgHkUTEfoza4Yv0xTjX5/eHIk1xyfFsQm92QyS+jnZxJ/UFffvPx9++OIfEmsmis 1wz/Wolts80cqmue4gxORNKGnLU8Ec7HSTxKCTt8b39JRZaDuzKzrKdBMvJgMnTd wjjCeWQcPgzLmRw1J2lsNwWjI2dbrj+2LE/nsshpnHiyRG/crYsJnZJXYfIMrwAr KGkRUJihB8J+uRjwnlr2z9EEd+Y/DeqW1PWV93vD99GBdW/PqIkv6zsBRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHBCRFHDBxU0tJLTUyT7M8DnacBpMB8GA1UdIwQY MBaAFDXaz3A2fQrDBaWsGruvI5iybZNVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmRyUGNEWjlDc01GcGF3YXU2OGptTEp0azFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9mNjg5MmYtNTFiNi00ZTRhLWIxZTAt ZmQzZmQxODAzMjk0LzEvTmRyUGNEWjlDc01GcGF3YXU2OGptTEp0azFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS9mNjg5MmYtNTFiNi00ZTRhLWIxZTAtZmQzZmQxODAzMjk0 LzEvTmRyUGNEWjlDc01GcGF3YXU2OGptTEp0azFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh64uTS+c fclmhjBCAcuhXMEgLN3+X0dxcYvP197M/t9s5o6+p7RKdZKB//S1zu4CvYD2JgmY OtUIIamflfXJ45DmSqbbDOQe9dodyHaS67+KbM1e3etfIjcwjyi80SZLzl99In+Q Qu8v+aSLAHEIPfT01MzTFnvhCmaulyU2H1t6dTgkDp5YTsIVeCWoSrEsrFdhbq7h qFVOauSPFhmrnItoEBZK/Xbl7yB8uPZffcGLi3Ws9vLwTF/AIo21Lhb8uA2l5Pvj ZZVE9Ttnsyztyxeip8mDoy53tSxXgq0ebVVNTF+y2eI42Bf+xH3iLt0CQmc0NI8I OdXNf6vwC72dOQ== -----END CERTIFICATE-----Generated at Fri Dec 19 17:20:56 2025 by rpki-client