This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/c49ca0-952e-495a-8eb1-b280d4c62745/1/NdKSnxZS-ViBLQmaIz8zrTRFu_s.mft File: NdKSnxZS-ViBLQmaIz8zrTRFu_s.mft (raw, json) Hash identifier: opNXxRx4rKs31KZ6Bda/SJGekiKKxzfAhk9miDHZqT8= Subject key identifier: C0:CB:6B:76:8A:50:92:B3:B2:1A:CA:44:2B:3F:74:6C:90:C7:C9:8A Authority key identifier: 35:D2:92:9F:16:52:F9:58:81:2D:09:9A:23:3F:33:AD:34:45:BB:FB Certificate issuer: /CN=35d2929f1652f958812d099a233f33ad3445bbfb Certificate serial: 019AF19B9CAE5D5EE2C315FACFCCF464B989 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NdKSnxZS-ViBLQmaIz8zrTRFu_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/c49ca0-952e-495a-8eb1-b280d4c62745/1/NdKSnxZS-ViBLQmaIz8zrTRFu_s.mft Manifest number: 1720 Signing time: Sat 06 Dec 2025 03:01:38 +0000 Manifest this update: Sat 06 Dec 2025 03:01:38 +0000 Manifest next update: Sun 07 Dec 2025 03:01:38 +0000 Files and hashes: 1: NdKSnxZS-ViBLQmaIz8zrTRFu_s.crl (hash: NjippJ3+lu+zBg+nexnz5g5royWc0ADGTvO0O1teJ+s=) 2: RvuQkZ_J-wvlyDc9DwQMRfdbRuc.roa (hash: ZwW8RhsC1c6THaCJDOUF+Lquzo4U71ipuOUtISL9Y48=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/c49ca0-952e-495a-8eb1-b280d4c62745/1/NdKSnxZS-ViBLQmaIz8zrTRFu_s.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/c49ca0-952e-495a-8eb1-b280d4c62745/1/NdKSnxZS-ViBLQmaIz8zrTRFu_s.mft rsync://rpki.ripe.net/repository/DEFAULT/NdKSnxZS-ViBLQmaIz8zrTRFu_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:9c:ae:5d:5e:e2:c3:15:fa:cf:cc:f4:64:b9:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35d2929f1652f958812d099a233f33ad3445bbfb Validity Not Before: Dec 6 03:01:38 2025 GMT Not After : Dec 7 03:01:38 2025 GMT Subject: CN=c0cb6b768a5092b3b21aca442b3f746c90c7c98a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:f6:81:ff:01:9c:6d:b6:9f:76:be:0b:da:22: 65:8f:0a:cc:97:a6:73:5c:53:23:b8:4d:c2:85:2f: e7:cb:c1:ae:6f:0c:d4:62:2c:f0:6b:be:c2:6a:1a: 62:6f:62:46:fc:3b:66:4c:b6:04:5f:87:bb:87:47: 92:8e:fb:39:83:5e:a6:03:b9:3e:c5:31:b8:d0:43: d3:26:8d:3a:9b:80:e4:e5:6f:9b:11:77:8b:72:9c: 96:d9:50:93:d2:e7:02:a2:44:50:93:5d:4b:55:08: ef:bd:0a:17:23:c4:99:25:80:22:7b:a7:41:b5:34: 84:db:e8:4e:63:9c:d0:58:bf:8e:c9:c4:7f:65:97: b9:81:7b:f2:9e:a2:91:99:9b:ba:2b:48:52:e2:fa: 71:c6:4c:bd:70:67:77:be:1c:df:04:8a:63:7c:d3: bc:f4:0e:42:cd:0f:1f:8f:41:d8:16:e5:64:e8:69: 8b:1d:60:fe:67:19:68:70:c8:ac:52:14:cd:b2:7a: 29:92:1c:31:41:d0:d2:8e:27:9b:be:36:11:37:52: fc:da:ff:a7:ad:99:d8:ef:8b:9e:98:b3:7c:dc:25: 0d:0a:11:7d:0f:35:e6:e7:01:41:d0:0f:ae:9c:53: 40:10:45:29:04:86:0b:b9:01:43:2e:2f:28:e6:9f: fd:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:CB:6B:76:8A:50:92:B3:B2:1A:CA:44:2B:3F:74:6C:90:C7:C9:8A X509v3 Authority Key Identifier: keyid:35:D2:92:9F:16:52:F9:58:81:2D:09:9A:23:3F:33:AD:34:45:BB:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdKSnxZS-ViBLQmaIz8zrTRFu_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c49ca0-952e-495a-8eb1-b280d4c62745/1/NdKSnxZS-ViBLQmaIz8zrTRFu_s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c49ca0-952e-495a-8eb1-b280d4c62745/1/NdKSnxZS-ViBLQmaIz8zrTRFu_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:6f:bd:0d:f2:ac:95:3f:f8:11:67:d2:b1:48:2a:ed:19:8d: f3:41:4a:3c:42:f4:d2:1e:f2:01:d8:5e:9b:55:ec:47:f6:45: 02:32:c3:13:af:67:3d:10:bf:65:b2:e4:55:6f:f0:4f:7a:31: 66:92:b4:ac:1f:84:a8:92:6d:a2:84:7f:4d:85:c7:d5:7e:43: 36:e4:85:cd:7a:63:67:68:17:8c:b8:5f:98:25:88:ae:48:c2: 8b:e7:38:4f:a6:ee:74:08:7d:4f:6a:ff:a4:03:91:78:c5:fe: 2f:cd:ac:15:13:95:ac:ea:ed:17:10:d1:02:a4:9d:62:23:52: 90:e2:5a:fd:c8:75:b7:7d:91:33:c1:ec:94:f8:0d:26:b7:94: 36:2f:b3:b8:0b:fe:de:7a:00:0d:d3:a1:e1:89:2f:4e:b2:b8: 16:b8:0f:46:9b:cd:b4:6d:28:2a:e9:25:90:d5:5f:b0:00:83: 60:7b:b8:50:00:ff:95:9c:17:02:27:a6:70:13:76:fa:1d:ba: 63:a2:b1:86:5e:2d:87:2e:f9:83:b8:d0:8a:5f:c4:c8:10:7a: df:c1:b5:13:12:a2:a7:74:0f:dd:9f:3e:97:17:9b:d2:b8:39: f2:f1:80:f6:57:75:73:eb:84:a8:b2:0c:2d:1d:cc:8b:81:b1: b7:b0:c8:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm5yuXV7iwxX6z8z0ZLmJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1ZDI5MjlmMTY1MmY5NTg4MTJkMDk5YTIzM2YzM2FkMzQ0 NWJiZmIwHhcNMjUxMjA2MDMwMTM4WhcNMjUxMjA3MDMwMTM4WjAzMTEwLwYDVQQD EyhjMGNiNmI3NjhhNTA5MmIzYjIxYWNhNDQyYjNmNzQ2YzkwYzdjOThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5PaB/wGcbbafdr4L2iJljwrMl6Zz XFMjuE3ChS/ny8GubwzUYizwa77Cahpib2JG/DtmTLYEX4e7h0eSjvs5g16mA7k+ xTG40EPTJo06m4Dk5W+bEXeLcpyW2VCT0ucCokRQk11LVQjvvQoXI8SZJYAie6dB tTSE2+hOY5zQWL+OycR/ZZe5gXvynqKRmZu6K0hS4vpxxky9cGd3vhzfBIpjfNO8 9A5CzQ8fj0HYFuVk6GmLHWD+ZxlocMisUhTNsnopkhwxQdDSjiebvjYRN1L82v+n rZnY74uemLN83CUNChF9DzXm5wFB0A+unFNAEEUpBIYLuQFDLi8o5p/91QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMDLa3aKUJKzshrKRCs/dGyQx8mKMB8GA1UdIwQY MBaAFDXSkp8WUvlYgS0JmiM/M600Rbv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmRLU254WlMtVmlCTFFtYUl6OHpyVFJGdV9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9jNDljYTAtOTUyZS00OTVhLThlYjEt YjI4MGQ0YzYyNzQ1LzEvTmRLU254WlMtVmlCTFFtYUl6OHpyVFJGdV9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9jNDljYTAtOTUyZS00OTVhLThlYjEtYjI4MGQ0YzYyNzQ1 LzEvTmRLU254WlMtVmlCTFFtYUl6OHpyVFJGdV9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMW+9DfKs lT/4EWfSsUgq7RmN80FKPEL00h7yAdhem1XsR/ZFAjLDE69nPRC/ZbLkVW/wT3ox ZpK0rB+EqJJtooR/TYXH1X5DNuSFzXpjZ2gXjLhfmCWIrkjCi+c4T6budAh9T2r/ pAOReMX+L82sFROVrOrtFxDRAqSdYiNSkOJa/ch1t32RM8HslPgNJreUNi+zuAv+ 3noADdOh4YkvTrK4FrgPRpvNtG0oKuklkNVfsACDYHu4UAD/lZwXAiemcBN2+h26 Y6Kxhl4thy75g7jQil/EyBB638G1ExKip3QP3Z8+lxeb0rg58vGA9ld1c+uEqLIM LR3Mi4Gxt7DIQg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:59:03 2025 by rpki-client