This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.mft File: Nd-0pbxbdb2UqkR7oz9VVxlxzPY.mft (raw, json) Hash identifier: Sgqyq+/wA3nE17HJi3LxRQ5Ysr/7bS4KyQvL4+qZFkY= Subject key identifier: 60:E2:85:74:F0:E4:21:E5:54:1C:6A:F1:B5:3B:38:BB:BA:DB:C0:3F Authority key identifier: 35:DF:B4:A5:BC:5B:75:BD:94:AA:44:7B:A3:3F:55:57:19:71:CC:F6 Certificate issuer: /CN=35dfb4a5bc5b75bd94aa447ba33f55571971ccf6 Certificate serial: 019B2C2FA957ED2B66FF65E556ABB200EA12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.mft Manifest number: 05CD Signing time: Wed 17 Dec 2025 12:01:19 +0000 Manifest this update: Wed 17 Dec 2025 12:01:19 +0000 Manifest next update: Thu 18 Dec 2025 12:01:19 +0000 Files and hashes: 1: Nd-0pbxbdb2UqkR7oz9VVxlxzPY.crl (hash: FKkCBztSKEYWLHcv6TPApeTl3YgPvU23FK3xK5jNANY=) 2: mlswz8Ncs32ae7C2It5n-o0yiHo.roa (hash: S5ligNAG6F0uIgpXYHQu/GqcrGyX5LZG4CQQfjCfuRI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.crl rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.mft rsync://rpki.ripe.net/repository/DEFAULT/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 12:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:2f:a9:57:ed:2b:66:ff:65:e5:56:ab:b2:00:ea:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35dfb4a5bc5b75bd94aa447ba33f55571971ccf6 Validity Not Before: Dec 17 12:01:19 2025 GMT Not After : Dec 18 12:01:19 2025 GMT Subject: CN=60e28574f0e421e5541c6af1b53b38bbbadbc03f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:2f:6a:d4:5f:19:66:36:25:5d:d0:01:6b:f5: d2:7f:b6:90:07:4d:a3:76:6f:34:9c:28:0e:ec:b4: a0:2a:cd:8f:19:71:fc:66:ad:9b:9f:77:9d:e4:8c: c6:ec:f2:d3:46:1d:08:88:be:00:77:1e:22:9d:e9: 52:ac:16:df:85:43:1e:d9:f9:96:4a:1b:f0:a3:08: c8:4e:6f:e4:e3:7f:67:5b:50:9e:95:c5:40:41:e1: 39:4d:87:ec:a8:42:1c:9b:ce:7b:f6:71:3d:cc:1e: 16:68:ee:62:ff:7c:3d:0a:0d:6b:32:b5:77:7a:ba: 85:d0:85:9c:61:a7:5c:eb:77:3f:8e:ee:c4:bb:cb: fc:c9:6d:b8:ad:5e:d6:df:b6:6c:9a:81:34:a9:3e: 54:2b:d9:74:1c:aa:bf:1c:24:bf:84:32:2d:06:1b: a3:e0:56:15:8e:f5:00:4e:36:3d:9d:41:64:d4:83: 2f:45:66:6a:60:fe:ae:bf:a7:50:37:1b:7f:b6:00: 5c:2e:59:8b:0a:3f:62:42:a4:6d:93:6e:9c:d4:c9: 3e:de:19:8d:0a:0d:a0:ef:dd:97:28:01:15:f0:09: 50:06:99:3d:d9:e8:3e:84:a2:f7:26:31:b3:f1:cd: 66:c4:58:70:38:c5:b6:4b:64:7a:c6:15:bb:18:29: 30:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:E2:85:74:F0:E4:21:E5:54:1C:6A:F1:B5:3B:38:BB:BA:DB:C0:3F X509v3 Authority Key Identifier: keyid:35:DF:B4:A5:BC:5B:75:BD:94:AA:44:7B:A3:3F:55:57:19:71:CC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:87:73:bb:16:21:68:cc:5a:37:83:6b:26:1d:16:f8:d5:af: 59:2d:1e:30:11:06:92:d5:9f:bb:18:46:10:5a:d2:dc:92:6a: e6:c3:b3:da:23:ef:e6:d6:18:48:30:c0:97:22:f0:84:b6:a7: 89:a1:67:7d:5f:26:b2:11:fd:f2:0b:b2:2d:b8:b4:b8:1b:54: 4e:d5:40:ba:f9:ee:9e:58:e8:e0:2d:2e:e5:84:c7:0d:94:d2: d3:95:1c:36:b1:63:a0:d1:6e:3a:b4:57:86:8f:22:a6:cc:26: 45:53:a8:44:47:95:33:49:58:d6:8b:9e:81:5a:56:6c:9c:65: 57:76:a3:45:85:f8:d9:48:36:88:1d:01:bc:3e:76:00:b0:3a: a9:3b:25:1d:73:fd:71:c5:0c:66:5f:6d:42:4f:bf:1a:ce:83: d8:99:9d:d7:7f:db:a3:a8:d4:99:e1:a4:0a:e5:3a:f6:b5:53: 22:58:70:09:4b:ef:c0:d9:dc:f5:76:0a:1d:ae:ca:67:3c:61: 14:26:91:93:e4:31:45:cb:7a:bf:3d:e2:5c:f2:7b:f1:04:98: 16:6c:82:12:3f:e7:bd:2a:bd:a1:93:14:35:0a:f4:dc:eb:39: 39:14:9b:d5:f5:bc:09:db:b0:b1:cb:b2:6e:34:2e:69:f8:e4: ce:17:c7:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssL6lX7Stm/2XlVquyAOoSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1ZGZiNGE1YmM1Yjc1YmQ5NGFhNDQ3YmEzM2Y1NTU3MTk3 MWNjZjYwHhcNMjUxMjE3MTIwMTE5WhcNMjUxMjE4MTIwMTE5WjAzMTEwLwYDVQQD Eyg2MGUyODU3NGYwZTQyMWU1NTQxYzZhZjFiNTNiMzhiYmJhZGJjMDNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2C9q1F8ZZjYlXdABa/XSf7aQB02j dm80nCgO7LSgKs2PGXH8Zq2bn3ed5IzG7PLTRh0IiL4Adx4inelSrBbfhUMe2fmW ShvwowjITm/k439nW1CelcVAQeE5TYfsqEIcm8579nE9zB4WaO5i/3w9Cg1rMrV3 erqF0IWcYadc63c/ju7Eu8v8yW24rV7W37ZsmoE0qT5UK9l0HKq/HCS/hDItBhuj 4FYVjvUATjY9nUFk1IMvRWZqYP6uv6dQNxt/tgBcLlmLCj9iQqRtk26c1Mk+3hmN Cg2g792XKAEV8AlQBpk92eg+hKL3JjGz8c1mxFhwOMW2S2R6xhW7GCkwhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGDihXTw5CHlVBxq8bU7OLu628A/MB8GA1UdIwQY MBaAFDXftKW8W3W9lKpEe6M/VVcZccz2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmQtMHBieGJkYjJVcWtSN296OVZWeGx4elBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8wMWMzMWYtZWUzYy00MzVhLWJmZWQt ZWY4OGIyY2ZlODcyLzEvTmQtMHBieGJkYjJVcWtSN296OVZWeGx4elBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8wMWMzMWYtZWUzYy00MzVhLWJmZWQtZWY4OGIyY2ZlODcy LzEvTmQtMHBieGJkYjJVcWtSN296OVZWeGx4elBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgodzuxYh aMxaN4NrJh0W+NWvWS0eMBEGktWfuxhGEFrS3JJq5sOz2iPv5tYYSDDAlyLwhLan iaFnfV8mshH98guyLbi0uBtUTtVAuvnunljo4C0u5YTHDZTS05UcNrFjoNFuOrRX ho8ipswmRVOoREeVM0lY1ouegVpWbJxlV3ajRYX42Ug2iB0BvD52ALA6qTslHXP9 ccUMZl9tQk+/Gs6D2Jmd13/bo6jUmeGkCuU69rVTIlhwCUvvwNnc9XYKHa7KZzxh FCaRk+QxRct6vz3iXPJ78QSYFmyCEj/nvSq9oZMUNQr03Os5ORSb1fW8Cduwscuy bjQuafjkzhfHRg== -----END CERTIFICATE-----Generated at Wed Dec 17 21:06:57 2025 by rpki-client