This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.mft File: _Nd-aHeCmDMEMzNTi0fxJoLOvcM.mft (raw, json) Hash identifier: lUauG8kfUQS/cxeLs4Gwq8UCrWTtgKr5Vy/LyMiQVDQ= Subject key identifier: 68:26:89:49:0D:3E:CA:54:EF:D8:A1:3E:8F:D0:7A:90:F7:B3:C2:EB Authority key identifier: FC:D7:7E:68:77:82:98:33:04:33:33:53:8B:47:F1:26:82:CE:BD:C3 Certificate issuer: /CN=fcd77e6877829833043333538b47f12682cebdc3 Certificate serial: 019AF164463B800930F2150F5115153C426A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.mft Manifest number: 05E1 Signing time: Sat 06 Dec 2025 02:01:11 +0000 Manifest this update: Sat 06 Dec 2025 02:01:11 +0000 Manifest next update: Sun 07 Dec 2025 02:01:11 +0000 Files and hashes: 1: _Nd-aHeCmDMEMzNTi0fxJoLOvcM.crl (hash: Cpak5OxNAo9RBiWi3JdUQLvpDaQhrTDXxIRPHPfSk5Q=) 2: nVML7LcRQkLl4LsQylRXZkNhkNs.roa (hash: aP+8mW119fycA5Li+oipfw+Kb6S3KHGW180HDqCC2II=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.crl rsync://rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.mft rsync://rpki.ripe.net/repository/DEFAULT/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:46:3b:80:09:30:f2:15:0f:51:15:15:3c:42:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fcd77e6877829833043333538b47f12682cebdc3 Validity Not Before: Dec 6 02:01:11 2025 GMT Not After : Dec 7 02:01:11 2025 GMT Subject: CN=682689490d3eca54efd8a13e8fd07a90f7b3c2eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:62:aa:a5:51:1e:ac:12:71:ac:67:d8:0f:84: 7b:5f:1c:96:01:eb:03:db:bc:98:66:84:44:d4:de: 9f:02:fc:d9:f6:ff:b7:76:10:13:7e:a2:6a:44:95: 2a:01:8c:9c:f6:6f:ad:e5:09:ea:4c:26:04:cb:1e: 76:16:3c:54:ad:48:9b:8d:74:49:49:a7:12:6f:12: 57:00:ee:d3:bd:33:1c:85:f7:17:22:6a:82:10:18: d5:df:6a:03:4b:8e:db:01:c8:c5:67:8b:89:58:d6: 5e:a1:57:77:5d:68:7b:3d:39:60:b2:d8:3a:6f:da: 12:0a:58:4b:8e:cc:84:84:3a:18:96:4a:96:56:bd: 9b:34:d7:4b:04:9e:84:90:42:8c:ee:07:b3:f4:6a: 2c:17:85:b2:a7:a0:ed:b4:c4:12:67:98:1e:0e:4f: 99:8f:50:d6:3b:17:64:22:16:63:2a:cb:12:14:af: 00:bf:44:52:b7:d6:7f:98:ee:2a:e3:16:aa:43:00: cf:ec:0a:5a:6a:a8:4c:e6:1c:9b:9f:3e:6d:48:ab: a3:a0:77:07:ea:c9:17:da:8f:92:57:61:24:2c:71: cc:f3:ce:85:57:ad:01:40:32:c1:5e:ea:8e:a3:ed: 2e:7e:68:78:51:e1:f9:18:8e:9a:41:49:15:5e:24: 3f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:26:89:49:0D:3E:CA:54:EF:D8:A1:3E:8F:D0:7A:90:F7:B3:C2:EB X509v3 Authority Key Identifier: keyid:FC:D7:7E:68:77:82:98:33:04:33:33:53:8B:47:F1:26:82:CE:BD:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:59:59:1e:4b:ab:5c:3e:98:77:1c:0d:99:a9:e9:50:67:98: 3e:07:ff:40:e5:6e:03:06:48:d4:8e:2c:95:03:ff:1d:6e:ec: 13:fd:28:b3:ef:e4:8a:fa:b4:90:e6:a4:99:61:41:c3:2c:ed: 49:5c:ab:cc:64:55:46:c1:be:9e:34:5b:c2:e6:de:4a:76:cc: db:cf:f1:68:05:2c:0a:f7:aa:7c:65:76:72:74:30:6e:8e:a3: 1f:84:3f:dd:97:53:eb:3b:66:54:40:f6:9b:10:f0:88:e8:be: 6d:ad:6e:4a:14:9a:28:c2:a6:56:6a:12:01:ab:c7:8c:70:57: d6:1f:ea:96:08:03:45:c3:21:2c:2c:5a:ed:cb:98:8d:30:e6: aa:c8:d2:ad:04:5c:c1:4a:e9:07:fe:46:25:10:81:71:63:8b: 70:3b:d7:2d:69:d5:f5:c1:0e:21:48:1e:99:df:f5:1e:81:f3: 77:ee:9f:14:09:a3:e0:96:b6:d6:b8:d1:3f:93:4e:d4:ff:92: df:7f:f9:f9:48:b8:7e:9a:66:0a:b4:34:7b:4b:6e:9f:49:85: 34:f8:4c:47:a5:2e:60:b9:b5:64:ba:37:20:a1:2c:1c:29:2a: 4c:ad:7d:03:54:f9:19:a0:e9:e8:cb:f0:fd:1c:81:86:67:a0: 87:95:97:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZEY7gAkw8hUPURUVPEJqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjZDc3ZTY4Nzc4Mjk4MzMwNDMzMzM1MzhiNDdmMTI2ODJj ZWJkYzMwHhcNMjUxMjA2MDIwMTExWhcNMjUxMjA3MDIwMTExWjAzMTEwLwYDVQQD Eyg2ODI2ODk0OTBkM2VjYTU0ZWZkOGExM2U4ZmQwN2E5MGY3YjNjMmViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWKqpVEerBJxrGfYD4R7XxyWAesD 27yYZoRE1N6fAvzZ9v+3dhATfqJqRJUqAYyc9m+t5QnqTCYEyx52FjxUrUibjXRJ SacSbxJXAO7TvTMchfcXImqCEBjV32oDS47bAcjFZ4uJWNZeoVd3XWh7PTlgstg6 b9oSClhLjsyEhDoYlkqWVr2bNNdLBJ6EkEKM7gez9GosF4Wyp6DttMQSZ5geDk+Z j1DWOxdkIhZjKssSFK8Av0RSt9Z/mO4q4xaqQwDP7ApaaqhM5hybnz5tSKujoHcH 6skX2o+SV2EkLHHM886FV60BQDLBXuqOo+0ufmh4UeH5GI6aQUkVXiQ/FwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGgmiUkNPspU79ihPo/QepD3s8LrMB8GA1UdIwQY MBaAFPzXfmh3gpgzBDMzU4tH8SaCzr3DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX05kLWFIZUNtRE1FTXpOVGkwZnhKb0xPdmNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8xZWQxZjYtMDlkNy00Mjk0LTkyYjQt ZTU1MTc0NWQyNzZlLzEvX05kLWFIZUNtRE1FTXpOVGkwZnhKb0xPdmNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8xZWQxZjYtMDlkNy00Mjk0LTkyYjQtZTU1MTc0NWQyNzZl LzEvX05kLWFIZUNtRE1FTXpOVGkwZnhKb0xPdmNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbVlZHkur XD6YdxwNmanpUGeYPgf/QOVuAwZI1I4slQP/HW7sE/0os+/kivq0kOakmWFBwyzt SVyrzGRVRsG+njRbwubeSnbM28/xaAUsCveqfGV2cnQwbo6jH4Q/3ZdT6ztmVED2 mxDwiOi+ba1uShSaKMKmVmoSAavHjHBX1h/qlggDRcMhLCxa7cuYjTDmqsjSrQRc wUrpB/5GJRCBcWOLcDvXLWnV9cEOIUgemd/1HoHzd+6fFAmj4Ja21rjRP5NO1P+S 33/5+Ui4fppmCrQ0e0tun0mFNPhMR6UuYLm1ZLo3IKEsHCkqTK19A1T5GaDp6Mvw /RyBhmegh5WXOg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:07:40 2025 by rpki-client