This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/29c8eb-61e2-4aad-9aa4-3279137fde44/1/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.mft File: NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.mft (raw, json) Hash identifier: 5orebHxWZD+y9S0Hs3aeqlC+ubf4BEdDeE6Kh9tWR9A= Subject key identifier: 43:44:12:07:69:68:83:A4:E9:C5:2E:09:CE:81:65:6C:A5:B2:1A:41 Authority key identifier: 34:38:0C:FB:A3:4B:61:F5:DB:45:65:14:59:28:D9:E4:AD:D9:30:EB Certificate issuer: /CN=34380cfba34b61f5db4565145928d9e4add930eb Certificate serial: 019AF31D2356B4D19A14A2767B341F8C5206 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/29c8eb-61e2-4aad-9aa4-3279137fde44/1/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.mft Manifest number: 0217 Signing time: Sat 06 Dec 2025 10:02:44 +0000 Manifest this update: Sat 06 Dec 2025 10:02:44 +0000 Manifest next update: Sun 07 Dec 2025 10:02:44 +0000 Files and hashes: 1: NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.crl (hash: 9l1paQ1o+yrLLv0xnTpR3aXPeXkh1fijXfmojNobSV0=) 2: eNjKHdv8IHiSMT5DlWURZ12GtE8.roa (hash: 0PyZvOHXEJvjs+fUIrJG3NCT3v2ngertxaHruNIycnQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/29c8eb-61e2-4aad-9aa4-3279137fde44/1/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/29c8eb-61e2-4aad-9aa4-3279137fde44/1/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.mft rsync://rpki.ripe.net/repository/DEFAULT/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:23:56:b4:d1:9a:14:a2:76:7b:34:1f:8c:52:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34380cfba34b61f5db4565145928d9e4add930eb Validity Not Before: Dec 6 10:02:44 2025 GMT Not After : Dec 7 10:02:44 2025 GMT Subject: CN=43441207696883a4e9c52e09ce81656ca5b21a41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:be:e6:96:c2:bc:d3:9e:5b:80:c2:8b:67:c7: 84:14:49:fd:5b:ea:08:71:b2:d1:17:a7:22:57:82: 25:9b:5e:9f:80:87:b7:69:fb:62:3b:14:48:38:f7: b2:9f:5d:89:00:31:31:af:a1:ab:fd:36:d9:c7:49: c6:43:d9:bb:f6:fb:04:39:39:64:c7:61:72:b7:47: b5:6f:6a:47:64:3e:41:6f:28:d6:1e:87:c8:b8:53: 9f:9a:b0:7a:aa:24:f1:1f:f0:1c:6e:f5:ea:20:6b: 3e:2d:b9:c9:77:04:0b:5a:b3:bf:d7:8d:b4:ee:17: 82:66:42:b5:b2:a2:99:8b:92:ca:e7:14:75:33:24: 61:dd:a9:c1:39:f2:f6:2f:27:7d:70:a7:e4:57:a3: b0:c7:85:8f:2b:cf:67:ac:ce:ae:43:8f:4a:95:88: fa:de:d5:41:c5:13:2a:1b:97:31:12:68:7f:75:5d: e1:ba:8c:16:a3:f4:61:29:e3:fb:f9:35:d2:11:cb: 76:fd:3f:1f:44:65:50:83:bf:33:a0:d5:68:05:a4: 50:fd:0e:61:ca:d3:46:41:8f:58:28:14:69:cc:40: bc:f0:75:6d:86:86:71:f4:8c:02:01:9c:79:12:1f: 41:1c:7d:60:32:f2:2a:1a:fc:b8:4b:05:4d:8d:6e: 42:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:44:12:07:69:68:83:A4:E9:C5:2E:09:CE:81:65:6C:A5:B2:1A:41 X509v3 Authority Key Identifier: keyid:34:38:0C:FB:A3:4B:61:F5:DB:45:65:14:59:28:D9:E4:AD:D9:30:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/29c8eb-61e2-4aad-9aa4-3279137fde44/1/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/29c8eb-61e2-4aad-9aa4-3279137fde44/1/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:ca:66:11:20:ab:b0:3e:9e:55:e6:aa:1e:a5:76:c8:01:38: 17:2d:b4:35:71:ba:e8:2c:d4:c4:c8:ea:01:ce:bd:9a:79:4d: e4:51:d9:82:01:35:7f:e6:74:db:51:15:96:20:81:64:86:f7: 6b:fc:58:b3:61:b3:5e:22:d7:da:87:ba:10:6e:ad:cf:08:ec: b3:41:e2:11:ee:f4:66:62:78:9d:af:e1:55:ac:cc:2e:c8:9c: 2f:a6:5e:18:c4:54:67:06:61:c4:24:e4:37:c2:f7:c2:18:08: 9a:ab:9c:7d:39:13:0c:ab:88:ac:26:5e:a5:17:94:07:84:12: 64:42:83:6a:06:7a:f3:15:28:d0:27:62:a3:cf:20:fe:16:50: 41:d2:3a:80:07:e1:67:e5:6a:16:77:93:4f:f3:e5:2d:f8:8a: 06:0a:5a:0c:f5:00:22:44:95:58:54:9b:c0:fd:7d:e3:15:c8: 40:a4:d1:4a:09:d6:e0:6e:af:33:96:6d:9a:57:08:71:51:80: c3:32:ec:ab:e1:b2:27:34:54:8b:a4:48:88:71:c7:d3:1f:8f: 58:a6:09:bf:73:fa:00:21:1e:17:7b:7a:07:a4:0f:ca:48:6c: 20:e0:a9:89:9f:67:35:a9:ff:58:9c:ca:cc:a5:70:54:7f:e7: 24:b6:c2:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHSNWtNGaFKJ2ezQfjFIGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0MzgwY2ZiYTM0YjYxZjVkYjQ1NjUxNDU5MjhkOWU0YWRk OTMwZWIwHhcNMjUxMjA2MTAwMjQ0WhcNMjUxMjA3MTAwMjQ0WjAzMTEwLwYDVQQD Eyg0MzQ0MTIwNzY5Njg4M2E0ZTljNTJlMDljZTgxNjU2Y2E1YjIxYTQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqr7mlsK8055bgMKLZ8eEFEn9W+oI cbLRF6ciV4Ilm16fgIe3aftiOxRIOPeyn12JADExr6Gr/TbZx0nGQ9m79vsEOTlk x2Fyt0e1b2pHZD5BbyjWHofIuFOfmrB6qiTxH/AcbvXqIGs+LbnJdwQLWrO/1420 7heCZkK1sqKZi5LK5xR1MyRh3anBOfL2Lyd9cKfkV6Owx4WPK89nrM6uQ49KlYj6 3tVBxRMqG5cxEmh/dV3huowWo/RhKeP7+TXSEct2/T8fRGVQg78zoNVoBaRQ/Q5h ytNGQY9YKBRpzEC88HVthoZx9IwCAZx5Eh9BHH1gMvIqGvy4SwVNjW5ClQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFENEEgdpaIOk6cUuCc6BZWylshpBMB8GA1UdIwQY MBaAFDQ4DPujS2H120VlFFko2eSt2TDrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkRnTS02TkxZZlhiUldVVVdTalo1SzNaTU9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8yOWM4ZWItNjFlMi00YWFkLTlhYTQt MzI3OTEzN2ZkZTQ0LzEvTkRnTS02TkxZZlhiUldVVVdTalo1SzNaTU9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS8yOWM4ZWItNjFlMi00YWFkLTlhYTQtMzI3OTEzN2ZkZTQ0 LzEvTkRnTS02TkxZZlhiUldVVVdTalo1SzNaTU9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVcpmESCr sD6eVeaqHqV2yAE4Fy20NXG66CzUxMjqAc69mnlN5FHZggE1f+Z021EVliCBZIb3 a/xYs2GzXiLX2oe6EG6tzwjss0HiEe70ZmJ4na/hVazMLsicL6ZeGMRUZwZhxCTk N8L3whgImqucfTkTDKuIrCZepReUB4QSZEKDagZ68xUo0Cdio88g/hZQQdI6gAfh Z+VqFneTT/PlLfiKBgpaDPUAIkSVWFSbwP194xXIQKTRSgnW4G6vM5ZtmlcIcVGA wzLsq+GyJzRUi6RIiHHH0x+PWKYJv3P6ACEeF3t6B6QPykhsIOCpiZ9nNan/WJzK zKVwVH/nJLbCJA== -----END CERTIFICATE-----Generated at Sat Dec 6 15:09:12 2025 by rpki-client