This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.mft File: ndUEhgp8kk5yHL-upfSacsgpbDU.mft (raw, json) Hash identifier: 4RPs9UQsRhnGTOH4t6s6F+L3knLss9qDRJXLq2EcbYo= Subject key identifier: 9B:01:A5:BB:1C:C2:2A:E4:58:41:C6:50:65:D1:DF:AE:3C:DD:90:FE Authority key identifier: 9D:D5:04:86:0A:7C:92:4E:72:1C:BF:AE:A5:F4:9A:72:C8:29:6C:35 Certificate issuer: /CN=9dd504860a7c924e721cbfaea5f49a72c8296c35 Certificate serial: 019B3E6DBC28DA20AFCDDD03B810073E89BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ndUEhgp8kk5yHL-upfSacsgpbDU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.mft Manifest number: 14C9 Signing time: Sun 21 Dec 2025 01:02:17 +0000 Manifest this update: Sun 21 Dec 2025 01:02:17 +0000 Manifest next update: Mon 22 Dec 2025 01:02:17 +0000 Files and hashes: 1: X5jYbn-h_3ZrymXeQcutqUSQLI0.roa (hash: m8dLiyB+f2bY0CN3q6gxqkEWD+kF5d7UEcU/fd6EB40=) 2: nO41lzHTLA0qnXGNSido0EKnbG8.roa (hash: p9hF7X8F0vCkUimBjAw1aM4Oym1MBxjaah21sqRzrUE=) 3: ndUEhgp8kk5yHL-upfSacsgpbDU.crl (hash: EG684BX1IrSjNCdr4RvZLCFb9KFYR6Fr59R8byDuB7w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.mft rsync://rpki.ripe.net/repository/DEFAULT/ndUEhgp8kk5yHL-upfSacsgpbDU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:bc:28:da:20:af:cd:dd:03:b8:10:07:3e:89:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9dd504860a7c924e721cbfaea5f49a72c8296c35 Validity Not Before: Dec 21 01:02:17 2025 GMT Not After : Dec 22 01:02:17 2025 GMT Subject: CN=9b01a5bb1cc22ae45841c65065d1dfae3cdd90fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a9:1f:c8:18:c8:4e:16:35:3e:d6:7d:f5:c6: 2d:7a:3e:7f:db:80:94:74:df:5d:fb:35:ae:46:d4: 4c:57:b7:df:e8:46:ad:88:0f:42:4e:82:bc:ee:f3: f1:65:c9:7c:de:d0:68:e1:6e:f2:6c:74:61:88:d4: 0b:3c:93:1f:30:b9:1f:55:9a:f1:26:0f:7e:76:6d: 03:b6:6e:a7:3c:d2:66:17:07:b4:f5:00:00:a1:e9: 69:37:e4:82:1f:d2:20:d3:0b:ec:6d:61:19:4c:c7: f3:8d:9e:22:36:35:ab:9d:5f:d1:5c:a5:9b:7c:89: 4f:7b:62:cd:91:44:4f:c7:a2:c0:cc:2f:2a:6c:f1: 78:df:0e:42:b0:89:67:4b:8a:ad:4d:0b:8d:56:3d: 04:56:f2:1c:d8:fa:8b:28:80:6c:f7:96:95:5a:2f: 41:24:45:26:05:69:86:5e:ac:bf:06:f0:b9:ab:bc: b8:95:90:42:ff:ee:c3:df:cb:11:63:01:ed:43:df: 76:2b:c7:e9:05:95:93:07:7f:de:11:2a:29:85:04: d8:19:33:ba:dc:25:38:d0:0c:1a:39:1c:16:e6:36: e5:ee:9b:56:ad:51:e3:90:ea:f7:95:24:2e:7d:f4: 6d:5f:91:cc:38:d2:93:e2:cd:6d:b4:c5:19:5b:6a: 1e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:01:A5:BB:1C:C2:2A:E4:58:41:C6:50:65:D1:DF:AE:3C:DD:90:FE X509v3 Authority Key Identifier: keyid:9D:D5:04:86:0A:7C:92:4E:72:1C:BF:AE:A5:F4:9A:72:C8:29:6C:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ndUEhgp8kk5yHL-upfSacsgpbDU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:23:a6:dc:4e:4e:c1:1b:0b:c6:89:f8:50:dc:57:de:f2:40: 52:1c:6e:22:95:f5:fd:1c:37:1e:e8:26:90:c7:c4:7a:2d:67: e1:fd:cf:2c:d7:44:b2:c4:9a:07:eb:1d:ec:f7:f2:aa:5a:48: 97:04:a1:e2:ff:da:ab:26:60:dc:00:2c:44:68:59:30:ce:05: 79:51:10:a1:e7:4f:cf:7d:f9:3c:bf:73:2b:d8:70:b4:62:ad: 73:77:7d:b7:c4:31:bc:d0:1d:25:17:62:d2:e9:dd:fa:f3:70: 72:dc:34:ce:3a:3d:2a:9a:45:f0:60:80:31:58:0e:be:62:01: 60:73:e1:b3:11:19:fd:d3:99:86:d0:7f:65:35:30:19:3c:ea: 54:8c:44:de:ad:14:a8:60:db:77:b1:4b:1c:f8:16:fc:6a:6d: 11:6d:92:c5:53:de:73:31:70:c3:a9:60:1c:57:5f:0a:ed:05: 02:f9:29:94:1b:5d:88:c5:dc:32:05:87:eb:f0:9a:84:a1:4b: 08:1a:92:1b:4a:33:c6:d5:23:1e:af:9f:a7:4a:a4:73:f4:75: d1:a9:06:57:01:25:28:48:c0:c0:2d:3b:8f:12:5f:ff:f4:d6: cc:e9:48:d0:ca:c4:64:20:1b:11:7c:78:b0:31:f8:5e:8e:53: fd:ea:e4:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bbwo2iCvzd0DuBAHPom/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkZDUwNDg2MGE3YzkyNGU3MjFjYmZhZWE1ZjQ5YTcyYzgy OTZjMzUwHhcNMjUxMjIxMDEwMjE3WhcNMjUxMjIyMDEwMjE3WjAzMTEwLwYDVQQD Eyg5YjAxYTViYjFjYzIyYWU0NTg0MWM2NTA2NWQxZGZhZTNjZGQ5MGZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmakfyBjIThY1PtZ99cYtej5/24CU dN9d+zWuRtRMV7ff6EatiA9CToK87vPxZcl83tBo4W7ybHRhiNQLPJMfMLkfVZrx Jg9+dm0Dtm6nPNJmFwe09QAAoelpN+SCH9Ig0wvsbWEZTMfzjZ4iNjWrnV/RXKWb fIlPe2LNkURPx6LAzC8qbPF43w5CsIlnS4qtTQuNVj0EVvIc2PqLKIBs95aVWi9B JEUmBWmGXqy/BvC5q7y4lZBC/+7D38sRYwHtQ992K8fpBZWTB3/eESophQTYGTO6 3CU40AwaORwW5jbl7ptWrVHjkOr3lSQuffRtX5HMONKT4s1ttMUZW2oe5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJsBpbscwirkWEHGUGXR36483ZD+MB8GA1UdIwQY MBaAFJ3VBIYKfJJOchy/rqX0mnLIKWw1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmRVRWhncDhrazV5SEwtdXBmU2Fjc2dwYkRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi80OTYyMzItZDE4Yi00NTU0LTlhNDMt NDMyZjVjMWY0MWY3LzEvbmRVRWhncDhrazV5SEwtdXBmU2Fjc2dwYkRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi80OTYyMzItZDE4Yi00NTU0LTlhNDMtNDMyZjVjMWY0MWY3 LzEvbmRVRWhncDhrazV5SEwtdXBmU2Fjc2dwYkRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADCOm3E5O wRsLxon4UNxX3vJAUhxuIpX1/Rw3HugmkMfEei1n4f3PLNdEssSaB+sd7PfyqlpI lwSh4v/aqyZg3AAsRGhZMM4FeVEQoedPz335PL9zK9hwtGKtc3d9t8QxvNAdJRdi 0und+vNwctw0zjo9KppF8GCAMVgOvmIBYHPhsxEZ/dOZhtB/ZTUwGTzqVIxE3q0U qGDbd7FLHPgW/GptEW2SxVPeczFww6lgHFdfCu0FAvkplBtdiMXcMgWH6/CahKFL CBqSG0ozxtUjHq+fp0qkc/R10akGVwElKEjAwC07jxJf//TWzOlI0MrEZCAbEXx4 sDH4Xo5T/erk8g== -----END CERTIFICATE-----Generated at Sun Dec 21 09:04:22 2025 by rpki-client