This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/825cce-0643-4b0b-94b8-b7273c8e3023/1/ndZC_U41WVtf1FikOjrKyLkTlc4.mft File: ndZC_U41WVtf1FikOjrKyLkTlc4.mft (raw, json) Hash identifier: EGAg2x7LazsiuCpEhgC0G+NpdskwkOIH7z9wrdyiXJI= Subject key identifier: D1:E9:F2:E7:E0:0B:C6:B2:4B:5A:04:C2:0E:EB:58:FE:4C:54:AB:C6 Authority key identifier: 9D:D6:42:FD:4E:35:59:5B:5F:D4:58:A4:3A:3A:CA:C8:B9:13:95:CE Certificate issuer: /CN=9dd642fd4e35595b5fd458a43a3acac8b91395ce Certificate serial: 019B3DC7ACB174841FA15417B30334AF336C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ndZC_U41WVtf1FikOjrKyLkTlc4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/825cce-0643-4b0b-94b8-b7273c8e3023/1/ndZC_U41WVtf1FikOjrKyLkTlc4.mft Manifest number: 0D33 Signing time: Sat 20 Dec 2025 22:00:54 +0000 Manifest this update: Sat 20 Dec 2025 22:00:54 +0000 Manifest next update: Sun 21 Dec 2025 22:00:54 +0000 Files and hashes: 1: ECvfm0gD15erbdYEbJ2O8AxuCuo.roa (hash: GjjofPn0BcYPE+NfKTzkDKX8EBfUwYH0FkVVr77Ou74=) 2: ndZC_U41WVtf1FikOjrKyLkTlc4.crl (hash: 1bZu4N9LgNxTkdq7zGeT2RdNbISdcoPsxYgd/Mn5eZY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/825cce-0643-4b0b-94b8-b7273c8e3023/1/ndZC_U41WVtf1FikOjrKyLkTlc4.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/825cce-0643-4b0b-94b8-b7273c8e3023/1/ndZC_U41WVtf1FikOjrKyLkTlc4.mft rsync://rpki.ripe.net/repository/DEFAULT/ndZC_U41WVtf1FikOjrKyLkTlc4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:ac:b1:74:84:1f:a1:54:17:b3:03:34:af:33:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9dd642fd4e35595b5fd458a43a3acac8b91395ce Validity Not Before: Dec 20 22:00:54 2025 GMT Not After : Dec 21 22:00:54 2025 GMT Subject: CN=d1e9f2e7e00bc6b24b5a04c20eeb58fe4c54abc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:cf:3b:1c:cf:38:44:0a:c1:33:c7:62:ac:c5: 6b:74:e5:ff:67:a9:b8:06:5f:f6:b2:33:a8:20:9f: 00:cf:60:3a:fe:ae:cc:b4:eb:25:56:b9:78:cb:23: 20:ff:dc:9f:6f:0d:c6:3f:22:21:5e:f1:b2:9d:03: a0:52:32:16:80:26:55:89:6e:d5:8f:e7:e0:8c:50: 34:97:7b:5b:7c:ce:8e:3b:ed:f6:95:3c:29:69:00: 31:d6:df:cc:b1:d3:fd:f8:08:4c:0a:06:51:ff:06: 00:4a:be:3b:c6:66:fe:b0:ed:8e:6e:64:3e:45:38: 2f:da:21:d5:75:fc:17:d0:63:8c:82:6c:30:79:ac: 2c:ce:b6:a6:47:bc:bb:4a:7a:2d:ef:3c:38:9c:19: 30:ee:24:e4:81:ae:20:87:54:27:75:4a:40:42:3d: 4c:ef:dc:5b:0e:6b:13:f5:54:4f:ca:45:cb:18:99: 84:68:8c:a6:52:2e:8a:91:c4:6c:8b:85:00:5c:ae: 93:ae:79:21:35:27:74:04:d8:96:6a:d9:a8:29:b8: db:34:a0:e7:b0:53:7b:a9:90:af:0c:3b:e1:bb:3f: 1b:45:21:7c:9c:7e:9f:4c:73:c5:47:8f:60:8f:6b: 18:29:65:ed:c3:f1:2c:de:b7:30:ac:38:fd:a0:bb: cb:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:E9:F2:E7:E0:0B:C6:B2:4B:5A:04:C2:0E:EB:58:FE:4C:54:AB:C6 X509v3 Authority Key Identifier: keyid:9D:D6:42:FD:4E:35:59:5B:5F:D4:58:A4:3A:3A:CA:C8:B9:13:95:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ndZC_U41WVtf1FikOjrKyLkTlc4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/825cce-0643-4b0b-94b8-b7273c8e3023/1/ndZC_U41WVtf1FikOjrKyLkTlc4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/825cce-0643-4b0b-94b8-b7273c8e3023/1/ndZC_U41WVtf1FikOjrKyLkTlc4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:2d:48:43:7d:1e:49:77:12:c2:de:c6:15:1c:0e:60:d0:b4: 3b:99:73:5a:e2:6b:db:c7:82:2f:a1:7c:56:de:90:bf:6e:20: b7:17:a2:ab:fe:85:14:7d:62:14:50:7d:10:4d:ce:db:1a:cc: 7c:9e:60:05:b3:68:b6:03:28:7a:ca:08:26:28:e2:a2:54:e0: 53:3b:cb:25:0a:c7:6b:30:ca:97:e1:97:ad:4e:1f:48:ad:3a: ce:b6:7c:92:86:f0:73:96:8d:bd:cb:52:92:f4:d4:0e:12:42: f4:25:ee:a0:19:9a:81:fe:b0:35:10:5b:4e:aa:53:5c:63:ba: 1f:11:3b:74:1e:df:b4:13:19:4a:a7:79:5f:b0:58:8e:05:04: 2d:4b:b5:53:bb:74:b6:cd:89:73:0e:b7:2c:5d:b4:d9:19:94: 95:23:93:81:da:37:45:f2:55:b4:fc:14:da:6b:b0:5b:d3:a0: 46:94:0a:3c:64:d6:18:2e:c8:4f:17:00:25:aa:a4:6f:c2:46: f1:80:c8:1c:a8:1b:56:2f:28:6f:36:73:39:1b:42:ab:f8:7f: 83:21:22:11:a3:36:41:bb:b9:20:d8:26:dd:c3:54:d6:be:82: 29:1f:7b:84:76:e9:ba:59:df:12:cd:a1:0a:7b:12:f0:b2:0b: f1:db:70:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x6yxdIQfoVQXswM0rzNsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkZDY0MmZkNGUzNTU5NWI1ZmQ0NThhNDNhM2FjYWM4Yjkx Mzk1Y2UwHhcNMjUxMjIwMjIwMDU0WhcNMjUxMjIxMjIwMDU0WjAzMTEwLwYDVQQD EyhkMWU5ZjJlN2UwMGJjNmIyNGI1YTA0YzIwZWViNThmZTRjNTRhYmM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1M87HM84RArBM8dirMVrdOX/Z6m4 Bl/2sjOoIJ8Az2A6/q7MtOslVrl4yyMg/9yfbw3GPyIhXvGynQOgUjIWgCZViW7V j+fgjFA0l3tbfM6OO+32lTwpaQAx1t/MsdP9+AhMCgZR/wYASr47xmb+sO2ObmQ+ RTgv2iHVdfwX0GOMgmwweawszramR7y7Snot7zw4nBkw7iTkga4gh1QndUpAQj1M 79xbDmsT9VRPykXLGJmEaIymUi6KkcRsi4UAXK6TrnkhNSd0BNiWatmoKbjbNKDn sFN7qZCvDDvhuz8bRSF8nH6fTHPFR49gj2sYKWXtw/Es3rcwrDj9oLvLKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNHp8ufgC8ayS1oEwg7rWP5MVKvGMB8GA1UdIwQY MBaAFJ3WQv1ONVlbX9RYpDo6ysi5E5XOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmRaQ19VNDFXVnRmMUZpa09qckt5TGtUbGM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS84MjVjY2UtMDY0My00YjBiLTk0Yjgt YjcyNzNjOGUzMDIzLzEvbmRaQ19VNDFXVnRmMUZpa09qckt5TGtUbGM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS84MjVjY2UtMDY0My00YjBiLTk0YjgtYjcyNzNjOGUzMDIz LzEvbmRaQ19VNDFXVnRmMUZpa09qckt5TGtUbGM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHC1IQ30e SXcSwt7GFRwOYNC0O5lzWuJr28eCL6F8Vt6Qv24gtxeiq/6FFH1iFFB9EE3O2xrM fJ5gBbNotgMoesoIJijiolTgUzvLJQrHazDKl+GXrU4fSK06zrZ8kobwc5aNvctS kvTUDhJC9CXuoBmagf6wNRBbTqpTXGO6HxE7dB7ftBMZSqd5X7BYjgUELUu1U7t0 ts2Jcw63LF202RmUlSOTgdo3RfJVtPwU2muwW9OgRpQKPGTWGC7ITxcAJaqkb8JG 8YDIHKgbVi8obzZzORtCq/h/gyEiEaM2Qbu5INgm3cNU1r6CKR97hHbpulnfEs2h CnsS8LIL8dtw5w== -----END CERTIFICATE-----Generated at Sun Dec 21 01:29:49 2025 by rpki-client