This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/6c4724-35e0-46db-aded-cb6d8b620dc8/1/nDdSJvzmJ-MigGyTpUPiPyb1SRY.mft File: nDdSJvzmJ-MigGyTpUPiPyb1SRY.mft (raw, json) Hash identifier: DYWX7vE5+QxND6dPy1lajaUhAeCm3JNUISW2nsi2owE= Subject key identifier: 25:58:D8:EA:07:9D:D8:22:9C:E5:07:61:F7:AF:AD:58:C2:60:8E:39 Authority key identifier: 9C:37:52:26:FC:E6:27:E3:22:80:6C:93:A5:43:E2:3F:26:F5:49:16 Certificate issuer: /CN=9c375226fce627e322806c93a543e23f26f54916 Certificate serial: 019B32D68918983128F58E9E1F2B72D89D68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nDdSJvzmJ-MigGyTpUPiPyb1SRY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/6c4724-35e0-46db-aded-cb6d8b620dc8/1/nDdSJvzmJ-MigGyTpUPiPyb1SRY.mft Manifest number: 0CCB Signing time: Thu 18 Dec 2025 19:01:19 +0000 Manifest this update: Thu 18 Dec 2025 19:01:19 +0000 Manifest next update: Fri 19 Dec 2025 19:01:19 +0000 Files and hashes: 1: nDdSJvzmJ-MigGyTpUPiPyb1SRY.crl (hash: GdHl7OCyqVFcRIoezEmN3NKLFeLffgAbvShhesr/wHs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/6c4724-35e0-46db-aded-cb6d8b620dc8/1/nDdSJvzmJ-MigGyTpUPiPyb1SRY.crl rsync://rpki.ripe.net/repository/DEFAULT/94/6c4724-35e0-46db-aded-cb6d8b620dc8/1/nDdSJvzmJ-MigGyTpUPiPyb1SRY.mft rsync://rpki.ripe.net/repository/DEFAULT/nDdSJvzmJ-MigGyTpUPiPyb1SRY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d6:89:18:98:31:28:f5:8e:9e:1f:2b:72:d8:9d:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c375226fce627e322806c93a543e23f26f54916 Validity Not Before: Dec 18 19:01:19 2025 GMT Not After : Dec 19 19:01:19 2025 GMT Subject: CN=2558d8ea079dd8229ce50761f7afad58c2608e39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:e2:6c:21:11:ff:b2:10:d4:e9:df:cf:e3:d1: cd:55:08:9e:6b:44:e4:3a:a6:ff:02:c3:f2:be:d0: 69:95:47:d4:3a:7c:e6:b3:c2:a3:ec:2a:d6:4d:2c: 94:65:be:31:39:f1:f7:c9:b4:38:66:4e:b9:93:cb: 30:b8:f6:f4:3f:ae:9a:60:48:b4:34:8a:8f:54:d5: 4a:6d:cc:1f:95:aa:9d:34:ee:f0:bb:8f:2d:b8:ce: 4a:5f:f0:d3:95:73:15:34:72:be:ec:c0:2a:35:08: ce:08:3a:06:ba:cf:a7:f9:9d:ee:f1:43:09:e2:22: 6d:c7:16:91:91:4a:86:75:0c:40:ae:5f:ff:77:74: ec:e9:e7:34:3e:6a:57:0b:08:b4:b5:0a:0d:5f:55: 13:03:4a:9b:de:d5:9d:70:fe:11:d7:6c:73:c7:93: c7:1a:08:42:e4:ce:5f:4e:a0:23:57:b4:28:9c:c1: 85:58:11:e8:55:fa:7d:47:da:14:6a:6d:8c:cf:ea: dd:7e:75:5a:16:92:ad:e1:04:37:5f:fe:f2:16:ec: 00:1b:5a:df:8f:d6:63:65:e3:a4:67:b6:61:5c:f4: b5:27:90:ba:86:c7:aa:6c:91:e5:11:a0:2c:bd:1f: 36:72:66:13:f7:db:37:f9:84:64:f8:8b:9b:09:ca: 7c:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:58:D8:EA:07:9D:D8:22:9C:E5:07:61:F7:AF:AD:58:C2:60:8E:39 X509v3 Authority Key Identifier: keyid:9C:37:52:26:FC:E6:27:E3:22:80:6C:93:A5:43:E2:3F:26:F5:49:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nDdSJvzmJ-MigGyTpUPiPyb1SRY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/6c4724-35e0-46db-aded-cb6d8b620dc8/1/nDdSJvzmJ-MigGyTpUPiPyb1SRY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/6c4724-35e0-46db-aded-cb6d8b620dc8/1/nDdSJvzmJ-MigGyTpUPiPyb1SRY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:ff:de:ff:b5:45:d1:31:a6:a3:a6:7b:c8:6b:fc:50:1f:bd: 75:93:6b:e1:b4:13:70:71:17:72:c4:1d:72:8a:2c:b5:1e:c8: 57:a5:eb:91:10:02:a4:68:56:75:6d:19:69:e3:ea:d3:6f:67: 2c:8f:e0:f9:a8:48:5d:41:a0:e8:66:31:8b:e1:14:e5:fe:0c: 2e:94:21:af:35:50:b0:fd:8d:9a:ed:d7:8a:e0:75:6a:58:4f: 11:86:4b:95:6e:c5:45:be:91:9d:9c:a1:1e:9b:22:a7:38:57: 2a:d5:a7:70:cf:2f:59:0c:c3:c9:e1:44:66:71:8e:ae:2c:7a: 9e:2c:89:4a:5d:bb:ad:29:d7:00:a1:5f:5e:d1:9c:d8:2f:b8: 1a:7c:96:50:23:93:68:ef:3b:97:74:19:33:20:64:e5:30:7e: ea:5e:13:5b:c7:8e:8a:10:56:c4:d1:2b:33:0f:d8:02:66:5c: 0a:4b:7f:b0:2c:90:48:3a:ff:ce:fa:ee:19:a8:7e:11:03:e7: b1:7f:d8:16:32:83:fe:9e:b6:4d:20:8e:20:49:f5:09:1f:a8: e5:e1:5d:99:70:4d:e0:22:1f:ce:19:e9:8b:85:32:74:10:58: 99:d4:e9:1b:36:f5:e9:73:f9:9a:29:df:44:70:8e:a6:f9:03: 82:f5:83:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1okYmDEo9Y6eHyty2J1oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljMzc1MjI2ZmNlNjI3ZTMyMjgwNmM5M2E1NDNlMjNmMjZm NTQ5MTYwHhcNMjUxMjE4MTkwMTE5WhcNMjUxMjE5MTkwMTE5WjAzMTEwLwYDVQQD EygyNTU4ZDhlYTA3OWRkODIyOWNlNTA3NjFmN2FmYWQ1OGMyNjA4ZTM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2+JsIRH/shDU6d/P49HNVQiea0Tk Oqb/AsPyvtBplUfUOnzms8Kj7CrWTSyUZb4xOfH3ybQ4Zk65k8swuPb0P66aYEi0 NIqPVNVKbcwflaqdNO7wu48tuM5KX/DTlXMVNHK+7MAqNQjOCDoGus+n+Z3u8UMJ 4iJtxxaRkUqGdQxArl//d3Ts6ec0PmpXCwi0tQoNX1UTA0qb3tWdcP4R12xzx5PH GghC5M5fTqAjV7QonMGFWBHoVfp9R9oUam2Mz+rdfnVaFpKt4QQ3X/7yFuwAG1rf j9ZjZeOkZ7ZhXPS1J5C6hseqbJHlEaAsvR82cmYT99s3+YRk+IubCcp8swIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCVY2OoHndginOUHYfevrVjCYI45MB8GA1UdIwQY MBaAFJw3Uib85ifjIoBsk6VD4j8m9UkWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkRkU0p2em1KLU1pZ0d5VHBVUGlQeWIxU1JZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC82YzQ3MjQtMzVlMC00NmRiLWFkZWQt Y2I2ZDhiNjIwZGM4LzEvbkRkU0p2em1KLU1pZ0d5VHBVUGlQeWIxU1JZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC82YzQ3MjQtMzVlMC00NmRiLWFkZWQtY2I2ZDhiNjIwZGM4 LzEvbkRkU0p2em1KLU1pZ0d5VHBVUGlQeWIxU1JZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhP/e/7VF 0TGmo6Z7yGv8UB+9dZNr4bQTcHEXcsQdcoostR7IV6XrkRACpGhWdW0ZaePq029n LI/g+ahIXUGg6GYxi+EU5f4MLpQhrzVQsP2Nmu3XiuB1alhPEYZLlW7FRb6RnZyh HpsipzhXKtWncM8vWQzDyeFEZnGOrix6niyJSl27rSnXAKFfXtGc2C+4GnyWUCOT aO87l3QZMyBk5TB+6l4TW8eOihBWxNErMw/YAmZcCkt/sCyQSDr/zvruGah+EQPn sX/YFjKD/p62TSCOIEn1CR+o5eFdmXBN4CIfzhnpi4UydBBYmdTpGzb16XP5minf RHCOpvkDgvWDPg== -----END CERTIFICATE-----Generated at Thu Dec 18 23:04:19 2025 by rpki-client