This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NdhRwRSj93nqgCV7HuGCas2uSk4.mft File: NdhRwRSj93nqgCV7HuGCas2uSk4.mft (raw, json) Hash identifier: wBp1TdlgqrMUhT2tdp9A+d8gQFhSHoOa5GTmq4DIB90= Subject key identifier: 70:EB:9D:95:26:3D:6D:66:A8:D0:95:EC:56:4A:FE:07:51:ED:AD:E6 Authority key identifier: 35:D8:51:C1:14:A3:F7:79:EA:80:25:7B:1E:E1:82:6A:CD:AE:4A:4E Certificate issuer: /CN=35d851c114a3f779ea80257b1ee1826acdae4a4e Certificate serial: 019AF5408AE5F05D551EA45D159269EA39E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NdhRwRSj93nqgCV7HuGCas2uSk4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NdhRwRSj93nqgCV7HuGCas2uSk4.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 20:00:39 +0000 Manifest this update: Sat 06 Dec 2025 20:00:39 +0000 Manifest next update: Sun 07 Dec 2025 20:00:39 +0000 Files and hashes: 1: NdhRwRSj93nqgCV7HuGCas2uSk4.crl (hash: kvwOXtPkQh7iOYf+S9Pnh6GAFESkxbQ0LQIoIi96C/0=) 2: QIqKLnFZSvkIdztpTOrghmndfqs.roa (hash: wHBtvNsb06U7COg9JhFFEVNmIo0CSx+CQSOErCnUsO4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NdhRwRSj93nqgCV7HuGCas2uSk4.crl rsync://rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NdhRwRSj93nqgCV7HuGCas2uSk4.mft rsync://rpki.ripe.net/repository/DEFAULT/NdhRwRSj93nqgCV7HuGCas2uSk4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:8a:e5:f0:5d:55:1e:a4:5d:15:92:69:ea:39:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35d851c114a3f779ea80257b1ee1826acdae4a4e Validity Not Before: Dec 6 20:00:39 2025 GMT Not After : Dec 7 20:00:39 2025 GMT Subject: CN=70eb9d95263d6d66a8d095ec564afe0751edade6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:27:c5:62:a9:12:95:84:04:aa:ce:ac:6d:29: 66:25:7e:b2:ec:65:28:e7:5c:64:b2:51:4c:d6:dc: 2e:12:b6:5d:a2:96:82:57:11:20:bd:a0:4b:e8:b9: 7b:84:e1:2e:41:44:cf:a6:b7:8b:71:55:e7:e2:c7: 0c:e7:24:f7:92:cb:56:48:56:ec:76:51:3c:cc:9d: 3f:06:e3:99:e6:e7:67:0e:52:de:83:21:9d:67:97: 7d:20:cd:92:55:f6:70:da:64:92:b6:2d:d6:a6:19: c4:86:85:c9:0d:c3:3d:59:0d:7b:75:69:4e:d9:cd: bc:24:fb:20:0f:6f:dc:7e:22:2b:82:83:58:bc:e0: 77:79:b4:0f:ed:e1:5c:d1:a7:8a:5e:39:f8:be:e6: 9d:a5:62:7e:5c:91:b6:70:ed:bb:d9:d6:79:48:c3: 96:80:7c:57:1f:57:21:a2:d9:50:68:20:6d:52:37: 22:17:20:d8:1e:1f:b5:2d:ca:0e:78:b1:fc:1f:1f: 8b:e8:2d:da:90:ae:ad:23:c6:e9:23:25:28:ab:01: 91:1c:56:e6:45:a9:52:37:a2:4e:c4:bd:da:e9:4c: b0:c7:40:99:2b:05:8b:53:2c:99:1e:31:ac:5b:52: 25:0a:41:a8:ea:4b:de:71:fb:8d:01:df:62:68:0e: 19:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:EB:9D:95:26:3D:6D:66:A8:D0:95:EC:56:4A:FE:07:51:ED:AD:E6 X509v3 Authority Key Identifier: keyid:35:D8:51:C1:14:A3:F7:79:EA:80:25:7B:1E:E1:82:6A:CD:AE:4A:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdhRwRSj93nqgCV7HuGCas2uSk4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NdhRwRSj93nqgCV7HuGCas2uSk4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NdhRwRSj93nqgCV7HuGCas2uSk4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:be:19:18:85:c8:eb:9e:72:3d:33:ec:90:6f:ea:8c:5a:e6: 9d:9e:05:96:e6:de:dd:0f:d9:45:56:a6:32:c4:75:59:82:28: 18:25:8e:65:31:06:fb:0c:16:cb:13:3e:da:5f:e6:da:a4:b0: e9:45:72:01:69:55:8b:4a:20:53:f2:5d:fd:17:25:fa:c3:6a: a6:79:9a:b7:be:c4:51:a4:6b:23:18:cb:f4:36:5e:44:75:55: 4c:11:71:a1:b6:e4:df:79:fc:c5:e3:88:1f:eb:cd:ff:e0:e0: ab:ec:5d:f6:95:79:a1:d9:4f:be:9b:e9:ca:ec:e4:a7:fa:5e: f0:96:df:a9:91:97:d7:71:de:94:99:f3:91:47:0c:59:fb:72: 80:ef:2a:1b:71:94:14:a3:17:e6:63:df:1c:a0:b2:22:5c:18: 4f:a2:b3:e8:85:b6:09:60:67:ea:aa:bb:81:72:36:4e:ac:82: ce:a3:89:71:72:39:68:7b:ac:64:9f:91:cf:92:c9:b5:99:3d: 84:24:82:f8:e3:e6:34:79:e4:78:f2:5f:40:94:8a:15:8f:05: 5d:40:07:2a:bb:de:3b:37:4e:7d:dd:bc:77:83:ba:53:f0:b6: 87:a5:0d:2b:be:61:ab:a6:03:ab:e2:52:b3:4c:f8:d9:04:ce: 95:12:9a:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QIrl8F1VHqRdFZJp6jngMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1ZDg1MWMxMTRhM2Y3NzllYTgwMjU3YjFlZTE4MjZhY2Rh ZTRhNGUwHhcNMjUxMjA2MjAwMDM5WhcNMjUxMjA3MjAwMDM5WjAzMTEwLwYDVQQD Eyg3MGViOWQ5NTI2M2Q2ZDY2YThkMDk1ZWM1NjRhZmUwNzUxZWRhZGU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSfFYqkSlYQEqs6sbSlmJX6y7GUo 51xkslFM1twuErZdopaCVxEgvaBL6Ll7hOEuQUTPpreLcVXn4scM5yT3kstWSFbs dlE8zJ0/BuOZ5udnDlLegyGdZ5d9IM2SVfZw2mSSti3WphnEhoXJDcM9WQ17dWlO 2c28JPsgD2/cfiIrgoNYvOB3ebQP7eFc0aeKXjn4vuadpWJ+XJG2cO272dZ5SMOW gHxXH1chotlQaCBtUjciFyDYHh+1LcoOeLH8Hx+L6C3akK6tI8bpIyUoqwGRHFbm RalSN6JOxL3a6Uywx0CZKwWLUyyZHjGsW1IlCkGo6kvecfuNAd9iaA4ZGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHDrnZUmPW1mqNCV7FZK/gdR7a3mMB8GA1UdIwQY MBaAFDXYUcEUo/d56oAlex7hgmrNrkpOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmRoUndSU2o5M25xZ0NWN0h1R0NhczJ1U2s0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9mZmZlZTEtYmQ0Ni00NTIzLTllY2Et NzA1NTYzMTM3ZDdhLzEvTmRoUndSU2o5M25xZ0NWN0h1R0NhczJ1U2s0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9mZmZlZTEtYmQ0Ni00NTIzLTllY2EtNzA1NTYzMTM3ZDdh LzEvTmRoUndSU2o5M25xZ0NWN0h1R0NhczJ1U2s0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQL4ZGIXI 655yPTPskG/qjFrmnZ4Flube3Q/ZRVamMsR1WYIoGCWOZTEG+wwWyxM+2l/m2qSw 6UVyAWlVi0ogU/Jd/Rcl+sNqpnmat77EUaRrIxjL9DZeRHVVTBFxobbk33n8xeOI H+vN/+Dgq+xd9pV5odlPvpvpyuzkp/pe8JbfqZGX13HelJnzkUcMWftygO8qG3GU FKMX5mPfHKCyIlwYT6Kz6IW2CWBn6qq7gXI2TqyCzqOJcXI5aHusZJ+Rz5LJtZk9 hCSC+OPmNHnkePJfQJSKFY8FXUAHKrveOzdOfd28d4O6U/C2h6UNK75hq6YDq+JS s0z42QTOlRKagQ== -----END CERTIFICATE-----Generated at Sun Dec 7 06:18:58 2025 by rpki-client