This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/c49ca0-952e-495a-8eb1-b280d4c62745/1/NdKSnxZS-ViBLQmaIz8zrTRFu_s.mft File: NdKSnxZS-ViBLQmaIz8zrTRFu_s.mft (raw, json) Hash identifier: jI6Oh6M8ib4edZ7HpLnDVKFTU1HCNq6ILFnRs3niZ3k= Subject key identifier: AE:1F:1C:FF:49:C6:87:39:61:34:6E:6F:33:30:53:F0:32:B4:5A:C3 Authority key identifier: 35:D2:92:9F:16:52:F9:58:81:2D:09:9A:23:3F:33:AD:34:45:BB:FB Certificate issuer: /CN=35d2929f1652f958812d099a233f33ad3445bbfb Certificate serial: 019B2B8B27474EA0804F1CDE426B6A57A1D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NdKSnxZS-ViBLQmaIz8zrTRFu_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/c49ca0-952e-495a-8eb1-b280d4c62745/1/NdKSnxZS-ViBLQmaIz8zrTRFu_s.mft Manifest number: 173E Signing time: Wed 17 Dec 2025 09:01:38 +0000 Manifest this update: Wed 17 Dec 2025 09:01:38 +0000 Manifest next update: Thu 18 Dec 2025 09:01:38 +0000 Files and hashes: 1: NdKSnxZS-ViBLQmaIz8zrTRFu_s.crl (hash: Zsiml2x9g/yjiY7bNXD0EJC9dboCVeO+SXGf1Uymzr4=) 2: RvuQkZ_J-wvlyDc9DwQMRfdbRuc.roa (hash: ZwW8RhsC1c6THaCJDOUF+Lquzo4U71ipuOUtISL9Y48=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/c49ca0-952e-495a-8eb1-b280d4c62745/1/NdKSnxZS-ViBLQmaIz8zrTRFu_s.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/c49ca0-952e-495a-8eb1-b280d4c62745/1/NdKSnxZS-ViBLQmaIz8zrTRFu_s.mft rsync://rpki.ripe.net/repository/DEFAULT/NdKSnxZS-ViBLQmaIz8zrTRFu_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 09:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:8b:27:47:4e:a0:80:4f:1c:de:42:6b:6a:57:a1:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35d2929f1652f958812d099a233f33ad3445bbfb Validity Not Before: Dec 17 09:01:38 2025 GMT Not After : Dec 18 09:01:38 2025 GMT Subject: CN=ae1f1cff49c6873961346e6f333053f032b45ac3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:8a:76:46:c6:49:50:55:97:61:16:72:98:ca: a2:ba:d4:34:be:1a:d4:5f:79:ce:71:60:30:b6:1f: 49:45:2c:b7:f5:21:9b:02:82:5e:fd:99:5a:8f:13: 32:37:16:45:32:c7:f9:09:93:76:26:72:bf:ca:5c: b3:67:67:47:84:c8:c7:04:d8:8a:a4:dc:79:49:04: 6f:04:04:ef:db:3c:c6:0b:e4:e3:45:4c:9a:90:80: f4:9f:c1:3e:a1:ae:f5:e8:d0:47:6b:e2:55:f5:64: ca:52:e4:87:87:1f:06:07:31:04:7c:9e:60:2c:9b: 52:2f:68:c2:fe:26:ae:ef:41:d4:1a:ca:c7:34:0e: ae:d6:43:ea:46:44:ba:2a:1e:90:42:5d:38:03:f7: fa:8a:e1:ec:0d:7b:3c:f3:db:da:36:ee:6b:d3:3b: 80:73:a3:20:a5:85:9f:13:68:98:92:aa:1d:14:18: 98:78:fc:3c:65:47:5c:d5:c1:4a:3d:21:cc:ee:e4: 45:bf:a8:69:45:85:09:54:e6:8a:7a:8a:fc:91:18: ed:23:ab:24:1f:23:f8:3c:23:65:ed:91:35:f1:e6: 76:27:cb:9b:e4:15:a1:1a:4a:7c:4f:1d:d7:35:ab: 12:96:71:a5:c3:d8:2c:60:c9:d4:b3:a8:b3:c0:7d: 03:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:1F:1C:FF:49:C6:87:39:61:34:6E:6F:33:30:53:F0:32:B4:5A:C3 X509v3 Authority Key Identifier: keyid:35:D2:92:9F:16:52:F9:58:81:2D:09:9A:23:3F:33:AD:34:45:BB:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdKSnxZS-ViBLQmaIz8zrTRFu_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c49ca0-952e-495a-8eb1-b280d4c62745/1/NdKSnxZS-ViBLQmaIz8zrTRFu_s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c49ca0-952e-495a-8eb1-b280d4c62745/1/NdKSnxZS-ViBLQmaIz8zrTRFu_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:58:2d:e8:4e:f0:d4:5a:75:f1:b5:dd:76:55:8c:1c:20:4f: 84:d6:47:5e:76:02:73:b9:e8:79:59:08:11:c5:8f:ec:25:7a: d4:17:dc:8b:2d:9a:8c:77:2b:f2:69:9f:c5:b9:a2:a6:67:0e: 71:6a:90:c2:2d:3b:36:b8:ae:41:52:f2:59:ea:3e:32:a8:79: 93:78:38:72:44:62:57:1b:ad:0b:2a:1c:22:8d:2a:f0:2e:70: a0:d4:18:f7:a8:44:da:68:75:74:0f:aa:1e:82:fe:da:0b:fa: a5:c9:71:fe:97:f1:44:ae:92:ef:17:bb:38:e1:c9:14:93:8d: 85:8f:64:59:ab:b8:cd:90:b6:69:27:22:41:bf:b5:82:c8:2e: 8b:1e:67:4f:af:89:d8:2d:a6:b6:95:6a:42:48:b4:73:9d:6a: 4a:22:4e:e1:a3:cc:14:6a:16:82:58:50:8d:50:f6:9a:ef:8b: 7d:82:6c:dc:7a:4f:84:de:0a:60:c5:19:74:3d:bb:e2:2d:8d: d1:73:a7:65:c9:a3:c6:5a:d0:1a:d4:a4:0f:7a:1e:f0:ae:09: 25:7f:5a:96:81:7f:a7:1f:29:b2:8b:05:71:46:10:89:39:25: 8a:10:af:37:3a:00:f6:f6:93:19:f1:b9:70:38:93:24:44:30: de:27:f0:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsriydHTqCATxzeQmtqV6HRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1ZDI5MjlmMTY1MmY5NTg4MTJkMDk5YTIzM2YzM2FkMzQ0 NWJiZmIwHhcNMjUxMjE3MDkwMTM4WhcNMjUxMjE4MDkwMTM4WjAzMTEwLwYDVQQD EyhhZTFmMWNmZjQ5YzY4NzM5NjEzNDZlNmYzMzMwNTNmMDMyYjQ1YWMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA44p2RsZJUFWXYRZymMqiutQ0vhrU X3nOcWAwth9JRSy39SGbAoJe/ZlajxMyNxZFMsf5CZN2JnK/ylyzZ2dHhMjHBNiK pNx5SQRvBATv2zzGC+TjRUyakID0n8E+oa716NBHa+JV9WTKUuSHhx8GBzEEfJ5g LJtSL2jC/iau70HUGsrHNA6u1kPqRkS6Kh6QQl04A/f6iuHsDXs889vaNu5r0zuA c6MgpYWfE2iYkqodFBiYePw8ZUdc1cFKPSHM7uRFv6hpRYUJVOaKeor8kRjtI6sk HyP4PCNl7ZE18eZ2J8ub5BWhGkp8Tx3XNasSlnGlw9gsYMnUs6izwH0DdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK4fHP9Jxoc5YTRubzMwU/AytFrDMB8GA1UdIwQY MBaAFDXSkp8WUvlYgS0JmiM/M600Rbv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmRLU254WlMtVmlCTFFtYUl6OHpyVFJGdV9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9jNDljYTAtOTUyZS00OTVhLThlYjEt YjI4MGQ0YzYyNzQ1LzEvTmRLU254WlMtVmlCTFFtYUl6OHpyVFJGdV9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9jNDljYTAtOTUyZS00OTVhLThlYjEtYjI4MGQ0YzYyNzQ1 LzEvTmRLU254WlMtVmlCTFFtYUl6OHpyVFJGdV9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANVgt6E7w 1Fp18bXddlWMHCBPhNZHXnYCc7noeVkIEcWP7CV61Bfciy2ajHcr8mmfxbmipmcO cWqQwi07NriuQVLyWeo+Mqh5k3g4ckRiVxutCyocIo0q8C5woNQY96hE2mh1dA+q HoL+2gv6pclx/pfxRK6S7xe7OOHJFJONhY9kWau4zZC2aSciQb+1gsguix5nT6+J 2C2mtpVqQki0c51qSiJO4aPMFGoWglhQjVD2mu+LfYJs3HpPhN4KYMUZdD274i2N 0XOnZcmjxlrQGtSkD3oe8K4JJX9aloF/px8psosFcUYQiTklihCvNzoA9vaTGfG5 cDiTJEQw3ifwSQ== -----END CERTIFICATE-----Generated at Wed Dec 17 17:04:12 2025 by rpki-client