This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a9bd93-92bd-4bf9-b655-adcefdaa1028/1/m-NDwvs9a40jeJq02m_NRlppBYM.mft File: m-NDwvs9a40jeJq02m_NRlppBYM.mft (raw, json) Hash identifier: BTFXc0KJ/ZwqFwq/Ir7VOz65Ra0FEeNHIuP+Gc5G3BA= Subject key identifier: 45:04:8F:0C:40:2C:05:C1:61:7B:F1:FB:51:14:F1:B7:4D:AB:14:C0 Authority key identifier: 9B:E3:43:C2:FB:3D:6B:8D:23:78:9A:B4:DA:6F:CD:46:5A:69:05:83 Certificate issuer: /CN=9be343c2fb3d6b8d23789ab4da6fcd465a690583 Certificate serial: 019B435BF10B3F27B01B19CA8335F7F2ADAA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-NDwvs9a40jeJq02m_NRlppBYM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a9bd93-92bd-4bf9-b655-adcefdaa1028/1/m-NDwvs9a40jeJq02m_NRlppBYM.mft Manifest number: 0B76 Signing time: Mon 22 Dec 2025 00:00:57 +0000 Manifest this update: Mon 22 Dec 2025 00:00:57 +0000 Manifest next update: Tue 23 Dec 2025 00:00:57 +0000 Files and hashes: 1: V1rYVkHJ4iIIHNg29wauYpELwcg.roa (hash: 7R1pOTL7gS5y/fLoZFKL53bP7clTOjblHiZzRpiMJxQ=) 2: m-NDwvs9a40jeJq02m_NRlppBYM.crl (hash: ejXq9DhsCAPyEzX/2JNsUiBprdnkI3RPbBKIir1gfIM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a9bd93-92bd-4bf9-b655-adcefdaa1028/1/m-NDwvs9a40jeJq02m_NRlppBYM.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/a9bd93-92bd-4bf9-b655-adcefdaa1028/1/m-NDwvs9a40jeJq02m_NRlppBYM.mft rsync://rpki.ripe.net/repository/DEFAULT/m-NDwvs9a40jeJq02m_NRlppBYM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:5b:f1:0b:3f:27:b0:1b:19:ca:83:35:f7:f2:ad:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9be343c2fb3d6b8d23789ab4da6fcd465a690583 Validity Not Before: Dec 22 00:00:57 2025 GMT Not After : Dec 23 00:00:57 2025 GMT Subject: CN=45048f0c402c05c1617bf1fb5114f1b74dab14c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:2e:d1:0e:d2:a6:12:ba:3c:ba:ae:78:c2:55: 3b:06:89:cb:28:86:07:44:0d:ad:0b:66:df:a2:f3: 6e:a0:b0:d6:07:bd:c4:ae:cd:68:ad:bd:1e:69:78: 4c:9e:02:e9:d2:8b:3d:51:d5:14:94:c4:c2:51:ea: 35:d2:1a:bf:eb:87:78:55:f5:2a:13:42:97:1b:3d: a2:ab:a0:7b:12:7d:5e:28:ff:59:9f:cf:94:be:96: ef:81:51:3a:e4:9f:73:5b:ce:24:a8:b4:ee:11:21: 1e:aa:7a:a9:1b:b6:ae:b1:28:91:1c:51:15:e5:5a: 34:50:8c:78:26:08:d3:b2:f3:aa:b2:bc:e2:ab:af: ac:69:22:10:55:be:b9:c7:99:5a:4c:6e:83:12:e7: b4:9d:0f:bd:2c:ca:5f:7f:44:99:6e:f7:c5:91:c8: b7:61:9e:a9:0f:10:54:c3:ac:a3:13:31:65:f1:3a: 82:6a:7d:fd:ee:34:45:30:c3:9c:e5:92:7d:82:bd: 38:4a:7e:56:6c:b0:58:d6:3c:17:14:d4:33:fc:d3: 36:3c:b0:5a:cc:11:89:6a:a7:5f:83:00:1a:30:89: 13:22:63:61:35:86:dc:b9:84:69:a3:02:73:e7:13: 8b:2f:19:9d:6b:23:d0:9a:f6:6f:0d:14:33:bd:d1: 7f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:04:8F:0C:40:2C:05:C1:61:7B:F1:FB:51:14:F1:B7:4D:AB:14:C0 X509v3 Authority Key Identifier: keyid:9B:E3:43:C2:FB:3D:6B:8D:23:78:9A:B4:DA:6F:CD:46:5A:69:05:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-NDwvs9a40jeJq02m_NRlppBYM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a9bd93-92bd-4bf9-b655-adcefdaa1028/1/m-NDwvs9a40jeJq02m_NRlppBYM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a9bd93-92bd-4bf9-b655-adcefdaa1028/1/m-NDwvs9a40jeJq02m_NRlppBYM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:30:86:8b:17:d0:4a:0f:3d:37:d5:b3:bc:b0:c8:86:16:71: e0:d4:fd:3e:fd:f0:1f:c1:97:46:d8:94:c0:d7:a2:d5:18:3a: 22:75:c1:7f:c9:35:64:2c:c2:e2:51:6d:23:ba:54:7f:05:e0: 21:4c:3a:ee:50:b6:da:c3:c0:0a:96:aa:5b:26:12:74:a7:6e: 19:0f:48:dd:7c:c3:cd:7f:99:36:53:a3:1d:ec:16:84:7f:01: 87:dc:db:f4:07:f5:41:e6:cf:c4:9f:8b:de:ce:72:c2:94:5e: 76:2e:d6:b8:49:3d:0b:e6:a8:d8:03:72:52:df:b9:4e:56:20: 6b:e0:e4:99:50:09:c3:e3:c7:7c:a6:6c:81:8d:7d:59:29:18: 51:45:af:dd:de:c2:ff:03:2b:9c:d8:25:cc:17:09:86:24:9a: b1:ac:aa:0d:ba:7f:36:cf:32:b8:70:05:7e:ff:a1:12:13:6a: af:ea:05:67:32:27:86:80:00:fe:a3:6b:22:56:65:1d:0a:6f: 04:1d:3e:4d:46:fa:c6:fc:fb:5a:57:ed:67:74:1b:10:c1:7f: 7b:1f:3c:32:2a:d1:a3:41:5d:c8:a4:a6:bc:ed:fb:a1:42:2a: 0e:b6:f5:06:44:a2:a7:90:7e:52:b7:ad:c5:30:71:45:52:8d: fb:4d:bb:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDW/ELPyewGxnKgzX38q2qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliZTM0M2MyZmIzZDZiOGQyMzc4OWFiNGRhNmZjZDQ2NWE2 OTA1ODMwHhcNMjUxMjIyMDAwMDU3WhcNMjUxMjIzMDAwMDU3WjAzMTEwLwYDVQQD Eyg0NTA0OGYwYzQwMmMwNWMxNjE3YmYxZmI1MTE0ZjFiNzRkYWIxNGMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoS7RDtKmEro8uq54wlU7BonLKIYH RA2tC2bfovNuoLDWB73Ers1orb0eaXhMngLp0os9UdUUlMTCUeo10hq/64d4VfUq E0KXGz2iq6B7En1eKP9Zn8+UvpbvgVE65J9zW84kqLTuESEeqnqpG7ausSiRHFEV 5Vo0UIx4JgjTsvOqsrziq6+saSIQVb65x5laTG6DEue0nQ+9LMpff0SZbvfFkci3 YZ6pDxBUw6yjEzFl8TqCan397jRFMMOc5ZJ9gr04Sn5WbLBY1jwXFNQz/NM2PLBa zBGJaqdfgwAaMIkTImNhNYbcuYRpowJz5xOLLxmdayPQmvZvDRQzvdF/lwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEUEjwxALAXBYXvx+1EU8bdNqxTAMB8GA1UdIwQY MBaAFJvjQ8L7PWuNI3iatNpvzUZaaQWDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbS1ORHd2czlhNDBqZUpxMDJtX05SbHBwQllNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hOWJkOTMtOTJiZC00YmY5LWI2NTUt YWRjZWZkYWExMDI4LzEvbS1ORHd2czlhNDBqZUpxMDJtX05SbHBwQllNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9hOWJkOTMtOTJiZC00YmY5LWI2NTUtYWRjZWZkYWExMDI4 LzEvbS1ORHd2czlhNDBqZUpxMDJtX05SbHBwQllNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAazCGixfQ Sg89N9WzvLDIhhZx4NT9Pv3wH8GXRtiUwNei1Rg6InXBf8k1ZCzC4lFtI7pUfwXg IUw67lC22sPACpaqWyYSdKduGQ9I3XzDzX+ZNlOjHewWhH8Bh9zb9Af1QebPxJ+L 3s5ywpRedi7WuEk9C+ao2ANyUt+5TlYga+DkmVAJw+PHfKZsgY19WSkYUUWv3d7C /wMrnNglzBcJhiSasayqDbp/Ns8yuHAFfv+hEhNqr+oFZzInhoAA/qNrIlZlHQpv BB0+TUb6xvz7WlftZ3QbEMF/ex88MirRo0FdyKSmvO37oUIqDrb1BkSip5B+Uret xTBxRVKN+027VA== -----END CERTIFICATE-----Generated at Mon Dec 22 03:44:28 2025 by rpki-client