This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.mft File: Nd-0pbxbdb2UqkR7oz9VVxlxzPY.mft (raw, json) Hash identifier: GSgxGr4Lp+fjrgR47dX1+mbPAZEbcI+ARjKFNiA6oQg= Subject key identifier: 59:87:A0:0C:F8:C9:15:81:B6:6C:25:24:02:40:0B:31:F5:02:56:CE Authority key identifier: 35:DF:B4:A5:BC:5B:75:BD:94:AA:44:7B:A3:3F:55:57:19:71:CC:F6 Certificate issuer: /CN=35dfb4a5bc5b75bd94aa447ba33f55571971ccf6 Certificate serial: 019AF24008B2AF57C8A570C277F515439175 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.mft Manifest number: 05AF Signing time: Sat 06 Dec 2025 06:01:14 +0000 Manifest this update: Sat 06 Dec 2025 06:01:14 +0000 Manifest next update: Sun 07 Dec 2025 06:01:14 +0000 Files and hashes: 1: Nd-0pbxbdb2UqkR7oz9VVxlxzPY.crl (hash: QV7xcUwJN+zM1LbZ1AH7Eq8dGN4751jgXJilYkb49gI=) 2: mlswz8Ncs32ae7C2It5n-o0yiHo.roa (hash: S5ligNAG6F0uIgpXYHQu/GqcrGyX5LZG4CQQfjCfuRI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.crl rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.mft rsync://rpki.ripe.net/repository/DEFAULT/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:08:b2:af:57:c8:a5:70:c2:77:f5:15:43:91:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35dfb4a5bc5b75bd94aa447ba33f55571971ccf6 Validity Not Before: Dec 6 06:01:14 2025 GMT Not After : Dec 7 06:01:14 2025 GMT Subject: CN=5987a00cf8c91581b66c252402400b31f50256ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:48:68:86:99:03:06:ff:8e:69:5f:3d:95:4e: cf:c9:a1:52:04:8e:ca:bb:c7:d8:db:6e:7f:99:cf: e8:57:7b:3f:89:e2:1f:17:f9:d3:13:08:35:11:84: 8a:96:1f:92:84:72:8d:d0:40:31:fc:b8:f8:34:67: 37:11:8c:0c:7a:20:52:b1:da:65:24:04:ce:36:a0: fb:cd:50:b6:b8:6b:9e:03:17:d6:31:3f:33:44:85: 92:53:1c:b7:45:46:53:0a:bb:38:98:87:8d:11:63: 6a:9b:20:6a:ed:b3:19:b9:1c:e9:c7:99:e1:ef:bf: 4c:a2:e0:29:2e:62:16:8d:f5:69:6c:9b:3f:1a:19: 50:28:22:7d:79:fc:5c:51:a4:87:08:a9:93:b0:fa: a8:5c:de:52:a1:59:40:b9:d8:1c:ab:a9:c9:42:22: 6f:30:01:8f:59:08:6d:8b:e8:df:d5:e2:f1:0c:2e: ab:48:cd:fc:cc:bf:f9:a2:bd:27:ba:b9:42:1c:7d: cd:d4:e2:da:c1:47:13:89:32:f4:9d:fd:9c:9f:73: 5c:6d:7b:19:0e:03:92:32:7d:14:7e:c0:3e:d4:72: d4:73:ef:39:c7:e5:b3:7e:9a:d0:cc:7f:6f:c4:5f: dc:67:27:5c:e4:cd:9b:0a:f9:0e:5c:39:5b:e4:ab: 55:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:87:A0:0C:F8:C9:15:81:B6:6C:25:24:02:40:0B:31:F5:02:56:CE X509v3 Authority Key Identifier: keyid:35:DF:B4:A5:BC:5B:75:BD:94:AA:44:7B:A3:3F:55:57:19:71:CC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:ac:1c:cc:0b:bc:ab:83:f7:04:ae:66:24:d0:2e:6a:36:39: 1d:e0:80:b8:d2:2f:83:6b:b5:3e:a0:c7:24:da:85:cd:61:7a: e6:31:74:a0:67:5c:aa:13:f6:7a:f7:2d:b8:e3:60:6c:4c:10: 3b:39:89:ac:1a:0f:96:13:6b:53:40:72:36:a9:d8:e1:66:8c: f3:a9:37:f3:2f:8d:ea:4a:4d:95:29:27:69:ee:96:c7:97:92: f9:01:6b:af:dd:cb:c9:bc:1a:03:5a:d1:13:e4:55:b1:6b:22: 6c:40:77:a6:b1:f3:60:a4:24:94:88:2c:6d:42:49:26:79:4a: 9d:7d:2e:8e:a5:90:52:e8:09:d4:a9:7c:d8:8d:be:91:a7:bc: 71:56:01:41:64:83:78:4b:36:d1:94:61:cd:3a:e3:2f:05:15: c5:a5:b8:14:3e:3d:92:35:5b:2d:fb:be:d6:26:b4:ac:db:69: d2:fa:39:ac:cc:37:72:66:56:30:92:38:6b:94:41:55:fb:e3: 82:3a:74:fa:9c:e8:c0:fa:9d:09:18:df:0f:ce:86:68:88:34: ce:73:65:92:2c:9a:0a:cb:51:5f:3d:80:0a:f5:aa:cd:b6:6c: f1:94:1c:82:82:55:d7:ef:eb:73:4f:f9:d6:ed:2c:49:16:b4: da:fb:5e:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQAiyr1fIpXDCd/UVQ5F1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1ZGZiNGE1YmM1Yjc1YmQ5NGFhNDQ3YmEzM2Y1NTU3MTk3 MWNjZjYwHhcNMjUxMjA2MDYwMTE0WhcNMjUxMjA3MDYwMTE0WjAzMTEwLwYDVQQD Eyg1OTg3YTAwY2Y4YzkxNTgxYjY2YzI1MjQwMjQwMGIzMWY1MDI1NmNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0EhohpkDBv+OaV89lU7PyaFSBI7K u8fY225/mc/oV3s/ieIfF/nTEwg1EYSKlh+ShHKN0EAx/Lj4NGc3EYwMeiBSsdpl JATONqD7zVC2uGueAxfWMT8zRIWSUxy3RUZTCrs4mIeNEWNqmyBq7bMZuRzpx5nh 779MouApLmIWjfVpbJs/GhlQKCJ9efxcUaSHCKmTsPqoXN5SoVlAudgcq6nJQiJv MAGPWQhti+jf1eLxDC6rSM38zL/5or0nurlCHH3N1OLawUcTiTL0nf2cn3NcbXsZ DgOSMn0UfsA+1HLUc+85x+WzfprQzH9vxF/cZydc5M2bCvkOXDlb5KtVXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFmHoAz4yRWBtmwlJAJACzH1AlbOMB8GA1UdIwQY MBaAFDXftKW8W3W9lKpEe6M/VVcZccz2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmQtMHBieGJkYjJVcWtSN296OVZWeGx4elBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8wMWMzMWYtZWUzYy00MzVhLWJmZWQt ZWY4OGIyY2ZlODcyLzEvTmQtMHBieGJkYjJVcWtSN296OVZWeGx4elBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8wMWMzMWYtZWUzYy00MzVhLWJmZWQtZWY4OGIyY2ZlODcy LzEvTmQtMHBieGJkYjJVcWtSN296OVZWeGx4elBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU6wczAu8 q4P3BK5mJNAuajY5HeCAuNIvg2u1PqDHJNqFzWF65jF0oGdcqhP2evctuONgbEwQ OzmJrBoPlhNrU0ByNqnY4WaM86k38y+N6kpNlSknae6Wx5eS+QFrr93LybwaA1rR E+RVsWsibEB3prHzYKQklIgsbUJJJnlKnX0ujqWQUugJ1Kl82I2+kae8cVYBQWSD eEs20ZRhzTrjLwUVxaW4FD49kjVbLfu+1ia0rNtp0vo5rMw3cmZWMJI4a5RBVfvj gjp0+pzowPqdCRjfD86GaIg0znNlkiyaCstRXz2ACvWqzbZs8ZQcgoJV1+/rc0/5 1u0sSRa02vteRQ== -----END CERTIFICATE-----Generated at Sat Dec 6 14:00:53 2025 by rpki-client