This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/72cb1f-bd2b-4c22-aaec-a62388ef5b48/1/NDez9zdtPvHNqLyWbxOXCFnPeW4.mft File: NDez9zdtPvHNqLyWbxOXCFnPeW4.mft (raw, json) Hash identifier: IRLXzbPqy0LMYsHsqw3E0SzdhBGF3mL0vMf2q6Xn52M= Subject key identifier: F3:DE:2A:38:CA:6D:AC:8C:81:92:24:81:B3:53:2D:93:8F:9C:0D:8D Authority key identifier: 34:37:B3:F7:37:6D:3E:F1:CD:A8:BC:96:6F:13:97:08:59:CF:79:6E Certificate issuer: /CN=3437b3f7376d3ef1cda8bc966f13970859cf796e Certificate serial: 019AF31C265382808D352575A09C3AF91CA9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NDez9zdtPvHNqLyWbxOXCFnPeW4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/72cb1f-bd2b-4c22-aaec-a62388ef5b48/1/NDez9zdtPvHNqLyWbxOXCFnPeW4.mft Manifest number: 085E Signing time: Sat 06 Dec 2025 10:01:39 +0000 Manifest this update: Sat 06 Dec 2025 10:01:39 +0000 Manifest next update: Sun 07 Dec 2025 10:01:39 +0000 Files and hashes: 1: NDez9zdtPvHNqLyWbxOXCFnPeW4.crl (hash: 6JEp0IaeC1KpdS5GqynYXb0rDKMq+VxwHSf4WgSDPKs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/72cb1f-bd2b-4c22-aaec-a62388ef5b48/1/NDez9zdtPvHNqLyWbxOXCFnPeW4.crl rsync://rpki.ripe.net/repository/DEFAULT/85/72cb1f-bd2b-4c22-aaec-a62388ef5b48/1/NDez9zdtPvHNqLyWbxOXCFnPeW4.mft rsync://rpki.ripe.net/repository/DEFAULT/NDez9zdtPvHNqLyWbxOXCFnPeW4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:26:53:82:80:8d:35:25:75:a0:9c:3a:f9:1c:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3437b3f7376d3ef1cda8bc966f13970859cf796e Validity Not Before: Dec 6 10:01:39 2025 GMT Not After : Dec 7 10:01:39 2025 GMT Subject: CN=f3de2a38ca6dac8c81922481b3532d938f9c0d8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d2:59:26:94:eb:f8:6b:04:ba:e6:fd:0e:16: 9a:73:21:0a:3b:3a:b7:1f:66:46:44:f2:6e:33:08: ef:9a:33:f5:b8:55:33:3a:23:64:47:85:dc:35:c5: 53:d3:04:8c:9e:f8:c5:84:6d:78:14:2a:b9:4b:70: 66:d6:d9:91:10:ca:e3:1d:a4:79:8a:bf:c6:c3:e3: 0b:70:32:f1:b2:84:8b:f0:07:7f:dc:fa:4e:b4:95: f8:5d:d8:89:db:15:6e:3f:d8:ad:ec:31:ef:c1:f1: bd:92:43:34:02:a9:81:05:0d:a0:3c:19:3e:f5:d4: fe:db:40:69:57:85:9e:69:35:33:c2:db:b9:df:70: a4:13:c5:ae:0f:a9:36:ad:a6:1c:70:67:56:52:b0: 47:28:15:fd:a2:90:24:0a:9d:12:bc:25:76:ce:0e: 68:72:26:d4:6a:a6:77:50:ea:03:01:67:74:e0:81: 77:18:7c:e4:23:c0:ac:17:ee:f6:0e:61:3e:20:48: 16:d8:11:42:71:d4:71:84:fe:d6:65:fe:33:4c:37: c6:96:f8:72:b1:93:4a:13:67:ea:2c:b7:16:71:3b: 6d:5d:1c:3b:07:01:99:5d:05:b1:cd:f6:03:92:0d: d8:7d:1e:4d:d2:43:60:22:5a:b6:69:f1:7c:e5:8c: ef:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:DE:2A:38:CA:6D:AC:8C:81:92:24:81:B3:53:2D:93:8F:9C:0D:8D X509v3 Authority Key Identifier: keyid:34:37:B3:F7:37:6D:3E:F1:CD:A8:BC:96:6F:13:97:08:59:CF:79:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NDez9zdtPvHNqLyWbxOXCFnPeW4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/72cb1f-bd2b-4c22-aaec-a62388ef5b48/1/NDez9zdtPvHNqLyWbxOXCFnPeW4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/72cb1f-bd2b-4c22-aaec-a62388ef5b48/1/NDez9zdtPvHNqLyWbxOXCFnPeW4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:89:95:24:2a:5a:b8:53:91:73:6b:28:8f:67:72:8b:55:0f: 4a:fe:d7:90:c2:c4:cf:a1:dd:c4:5d:40:1e:ea:70:05:d5:95: 94:4b:f8:13:c6:ab:21:a2:3f:18:d9:6f:89:40:c4:d2:5d:d7: af:2a:a2:2e:5f:a1:ce:ac:28:b7:6c:a3:67:ac:4f:41:7c:8d: d0:21:66:27:0f:c1:b7:55:af:30:3d:bc:58:ad:86:7f:4e:61: 23:7d:72:8d:b1:b8:51:93:79:d4:c2:87:ca:bf:30:24:4d:d4: 86:2a:8d:3c:d9:c3:78:01:32:5c:80:7f:9d:5b:14:42:f4:46: 31:11:3f:ec:ac:4c:8c:44:a0:67:ce:5b:26:93:ec:00:08:99: f4:d9:7f:af:7f:1c:a2:6f:a0:92:61:a4:53:f0:04:44:39:ba: ea:fe:51:24:14:d0:b7:be:5b:34:e1:a9:d8:0e:7e:f2:ff:f6: b2:63:f3:de:99:ab:d8:36:5b:95:17:f3:50:02:d0:7f:eb:a4: 20:df:34:ec:66:e0:b8:44:9e:3c:e8:8f:3c:85:6e:21:02:c7: 1d:a3:8a:cc:b1:b5:70:3b:ca:b5:9b:72:81:bf:69:32:bb:f7: 22:50:31:a4:bc:2d:ca:ad:d1:e2:ad:bc:ce:c7:df:d7:cd:69: ce:8a:11:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHCZTgoCNNSV1oJw6+RypMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0MzdiM2Y3Mzc2ZDNlZjFjZGE4YmM5NjZmMTM5NzA4NTlj Zjc5NmUwHhcNMjUxMjA2MTAwMTM5WhcNMjUxMjA3MTAwMTM5WjAzMTEwLwYDVQQD EyhmM2RlMmEzOGNhNmRhYzhjODE5MjI0ODFiMzUzMmQ5MzhmOWMwZDhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9JZJpTr+GsEuub9DhaacyEKOzq3 H2ZGRPJuMwjvmjP1uFUzOiNkR4XcNcVT0wSMnvjFhG14FCq5S3Bm1tmREMrjHaR5 ir/Gw+MLcDLxsoSL8Ad/3PpOtJX4XdiJ2xVuP9it7DHvwfG9kkM0AqmBBQ2gPBk+ 9dT+20BpV4WeaTUzwtu533CkE8WuD6k2raYccGdWUrBHKBX9opAkCp0SvCV2zg5o cibUaqZ3UOoDAWd04IF3GHzkI8CsF+72DmE+IEgW2BFCcdRxhP7WZf4zTDfGlvhy sZNKE2fqLLcWcTttXRw7BwGZXQWxzfYDkg3YfR5N0kNgIlq2afF85YzvoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPPeKjjKbayMgZIkgbNTLZOPnA2NMB8GA1UdIwQY MBaAFDQ3s/c3bT7xzai8lm8TlwhZz3luMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkRlejl6ZHRQdkhOcUx5V2J4T1hDRm5QZVc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS83MmNiMWYtYmQyYi00YzIyLWFhZWMt YTYyMzg4ZWY1YjQ4LzEvTkRlejl6ZHRQdkhOcUx5V2J4T1hDRm5QZVc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS83MmNiMWYtYmQyYi00YzIyLWFhZWMtYTYyMzg4ZWY1YjQ4 LzEvTkRlejl6ZHRQdkhOcUx5V2J4T1hDRm5QZVc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeYmVJCpa uFORc2soj2dyi1UPSv7XkMLEz6HdxF1AHupwBdWVlEv4E8arIaI/GNlviUDE0l3X ryqiLl+hzqwot2yjZ6xPQXyN0CFmJw/Bt1WvMD28WK2Gf05hI31yjbG4UZN51MKH yr8wJE3UhiqNPNnDeAEyXIB/nVsUQvRGMRE/7KxMjESgZ85bJpPsAAiZ9Nl/r38c om+gkmGkU/AERDm66v5RJBTQt75bNOGp2A5+8v/2smPz3pmr2DZblRfzUALQf+uk IN807GbguESePOiPPIVuIQLHHaOKzLG1cDvKtZtygb9pMrv3IlAxpLwtyq3R4q28 zsff181pzooRKQ== -----END CERTIFICATE-----Generated at Sat Dec 6 20:01:31 2025 by rpki-client