This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/16d5ce-184a-4366-8d75-aaab25894d5e/1/NLDFpAPi2tPEe3kf2iBCz3FQCc8.mft File: NLDFpAPi2tPEe3kf2iBCz3FQCc8.mft (raw, json) Hash identifier: GBL3BjZpU2qliLwLD433n2N28qpg4qEh788M6WzSJWI= Subject key identifier: 30:36:1F:97:A1:4A:6C:F9:F3:97:9A:B2:49:91:D7:B3:7C:9F:9E:E5 Authority key identifier: 34:B0:C5:A4:03:E2:DA:D3:C4:7B:79:1F:DA:20:42:CF:71:50:09:CF Certificate issuer: /CN=34b0c5a403e2dad3c47b791fda2042cf715009cf Certificate serial: 019AF1D2058194690DBD64D396C949493E11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLDFpAPi2tPEe3kf2iBCz3FQCc8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/16d5ce-184a-4366-8d75-aaab25894d5e/1/NLDFpAPi2tPEe3kf2iBCz3FQCc8.mft Manifest number: 0824 Signing time: Sat 06 Dec 2025 04:01:04 +0000 Manifest this update: Sat 06 Dec 2025 04:01:04 +0000 Manifest next update: Sun 07 Dec 2025 04:01:04 +0000 Files and hashes: 1: NLDFpAPi2tPEe3kf2iBCz3FQCc8.crl (hash: xqAkq3+aGv+qGpfTmFrXbZSoLvtQvkbnV1/2kMHJUWg=) 2: rNTIvqbNKxxJtGWChfe4Dqw9tgw.roa (hash: CJ6pfwFz9zw3PaH1WC3tO5GAbQu9B8MKzIYwz13JpcI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/16d5ce-184a-4366-8d75-aaab25894d5e/1/NLDFpAPi2tPEe3kf2iBCz3FQCc8.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/16d5ce-184a-4366-8d75-aaab25894d5e/1/NLDFpAPi2tPEe3kf2iBCz3FQCc8.mft rsync://rpki.ripe.net/repository/DEFAULT/NLDFpAPi2tPEe3kf2iBCz3FQCc8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:05:81:94:69:0d:bd:64:d3:96:c9:49:49:3e:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34b0c5a403e2dad3c47b791fda2042cf715009cf Validity Not Before: Dec 6 04:01:04 2025 GMT Not After : Dec 7 04:01:04 2025 GMT Subject: CN=30361f97a14a6cf9f3979ab24991d7b37c9f9ee5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:4b:bb:10:06:3c:58:ea:69:8e:1d:bd:d0:dd: 62:5e:6e:9f:e9:35:ff:1a:d4:be:c7:e3:b1:16:94: a0:19:af:8d:17:68:94:01:19:06:f3:a5:b2:38:18: 3d:41:7a:74:d6:2f:b6:60:f7:41:8b:4d:9e:79:90: b5:b9:ce:a9:33:8a:74:1f:08:54:f2:c5:bb:bd:11: 9b:d9:33:da:e8:65:1b:14:ef:91:b2:87:fe:0c:93: f5:15:5b:1d:7f:1a:94:51:55:f6:a0:83:8e:05:6f: 6c:38:20:97:eb:6a:cf:f4:1b:bd:e2:ce:49:6f:56: bf:5c:c1:00:4d:a3:27:6a:6c:5c:c4:61:ba:8a:78: 0d:88:56:fb:10:28:f6:69:6d:4a:49:bd:21:aa:4f: 88:93:d9:34:72:ff:92:cf:67:e2:d4:24:9a:99:82: a2:ea:c6:9d:97:ea:2a:a4:cf:14:6a:c5:44:36:7f: 93:8d:45:64:b8:05:76:98:c1:53:04:34:92:85:5c: c6:c4:10:b2:64:3e:10:6c:a2:10:23:6a:eb:d2:0d: 56:bd:27:e9:12:80:83:c8:58:ac:c5:c3:9e:2a:96: 77:35:6d:2b:17:64:3e:fa:80:72:e4:95:ee:ca:9d: a9:43:c6:ed:c3:07:48:5c:d7:ac:13:fb:e5:43:df: da:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:36:1F:97:A1:4A:6C:F9:F3:97:9A:B2:49:91:D7:B3:7C:9F:9E:E5 X509v3 Authority Key Identifier: keyid:34:B0:C5:A4:03:E2:DA:D3:C4:7B:79:1F:DA:20:42:CF:71:50:09:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLDFpAPi2tPEe3kf2iBCz3FQCc8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/16d5ce-184a-4366-8d75-aaab25894d5e/1/NLDFpAPi2tPEe3kf2iBCz3FQCc8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/16d5ce-184a-4366-8d75-aaab25894d5e/1/NLDFpAPi2tPEe3kf2iBCz3FQCc8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:32:89:7f:7b:5b:8b:c3:31:bd:df:12:4b:54:80:03:44:35: b1:e8:4e:65:4f:50:9c:34:b6:69:b0:18:c2:5c:1c:f4:1b:ff: 29:f6:53:80:2d:54:b9:de:b5:c2:b5:6a:38:0f:37:cf:eb:6a: 36:a6:fd:38:a6:a0:87:4b:24:52:40:51:ad:a6:73:8c:f5:a3: 18:b5:a7:c4:84:3e:29:db:d1:b2:7e:ee:e7:ba:bb:07:45:22: ad:ca:18:68:fc:30:bc:00:ce:65:1c:58:99:1f:d1:bc:06:2d: 38:3e:ad:5e:7a:15:47:8a:a4:73:93:18:fb:94:f6:5c:3f:77: 3a:25:e1:94:14:f0:59:cb:f6:4e:eb:0a:de:ca:ee:c2:85:e6: 8f:01:7b:fa:01:1b:da:5a:26:39:e2:c5:1d:66:ea:ef:dc:35: 9c:b9:72:e6:df:ca:52:63:9a:c5:f1:d6:83:74:62:72:b8:22: 5e:0f:7f:67:09:3e:5e:ed:e5:b2:f0:f7:34:08:db:b6:af:f1: 72:ba:78:5f:4d:96:4c:bb:6f:0c:e7:a5:ba:a2:ce:15:b5:e4: 10:55:d6:27:ad:a0:c1:e6:93:7d:de:71:00:52:09:e3:d2:b1: ed:05:2a:98:cb:74:49:58:58:7a:02:3c:6d:f0:49:26:d1:13: 5e:37:a6:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0gWBlGkNvWTTlslJST4RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0YjBjNWE0MDNlMmRhZDNjNDdiNzkxZmRhMjA0MmNmNzE1 MDA5Y2YwHhcNMjUxMjA2MDQwMTA0WhcNMjUxMjA3MDQwMTA0WjAzMTEwLwYDVQQD EygzMDM2MWY5N2ExNGE2Y2Y5ZjM5NzlhYjI0OTkxZDdiMzdjOWY5ZWU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzku7EAY8WOppjh290N1iXm6f6TX/ GtS+x+OxFpSgGa+NF2iUARkG86WyOBg9QXp01i+2YPdBi02eeZC1uc6pM4p0HwhU 8sW7vRGb2TPa6GUbFO+Rsof+DJP1FVsdfxqUUVX2oIOOBW9sOCCX62rP9Bu94s5J b1a/XMEATaMnamxcxGG6ingNiFb7ECj2aW1KSb0hqk+Ik9k0cv+Sz2fi1CSamYKi 6sadl+oqpM8UasVENn+TjUVkuAV2mMFTBDSShVzGxBCyZD4QbKIQI2rr0g1WvSfp EoCDyFisxcOeKpZ3NW0rF2Q++oBy5JXuyp2pQ8btwwdIXNesE/vlQ9/aRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDA2H5ehSmz585easkmR17N8n57lMB8GA1UdIwQY MBaAFDSwxaQD4trTxHt5H9ogQs9xUAnPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkxERnBBUGkydFBFZTNrZjJpQkN6M0ZRQ2M4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8xNmQ1Y2UtMTg0YS00MzY2LThkNzUt YWFhYjI1ODk0ZDVlLzEvTkxERnBBUGkydFBFZTNrZjJpQkN6M0ZRQ2M4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi8xNmQ1Y2UtMTg0YS00MzY2LThkNzUtYWFhYjI1ODk0ZDVl LzEvTkxERnBBUGkydFBFZTNrZjJpQkN6M0ZRQ2M4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApTKJf3tb i8Mxvd8SS1SAA0Q1sehOZU9QnDS2abAYwlwc9Bv/KfZTgC1Uud61wrVqOA83z+tq Nqb9OKagh0skUkBRraZzjPWjGLWnxIQ+KdvRsn7u57q7B0UircoYaPwwvADOZRxY mR/RvAYtOD6tXnoVR4qkc5MY+5T2XD93OiXhlBTwWcv2TusK3sruwoXmjwF7+gEb 2lomOeLFHWbq79w1nLly5t/KUmOaxfHWg3RicrgiXg9/Zwk+Xu3lsvD3NAjbtq/x crp4X02WTLtvDOeluqLOFbXkEFXWJ62gweaTfd5xAFIJ49Kx7QUqmMt0SVhYegI8 bfBJJtETXjemcw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:26:50 2025 by rpki-client