This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/d787d7-425f-4eb4-b182-03e5cd35e2b0/1/nd5F6TZ4AdGO8PsKn-UTvrDkpUo.mft File: nd5F6TZ4AdGO8PsKn-UTvrDkpUo.mft (raw, json) Hash identifier: KGBQnYSEKAquMtwfrhxWOzJV/vIdDtlJWqpX+jRjiXo= Subject key identifier: C8:D2:D3:7E:A6:E0:E8:CF:21:D8:80:74:14:5A:3B:C8:90:50:04:A4 Authority key identifier: 9D:DE:45:E9:36:78:01:D1:8E:F0:FB:0A:9F:E5:13:BE:B0:E4:A5:4A Certificate issuer: /CN=9dde45e9367801d18ef0fb0a9fe513beb0e4a54a Certificate serial: 019AF276DD99AC1F32FB58E30138DC235306 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nd5F6TZ4AdGO8PsKn-UTvrDkpUo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/d787d7-425f-4eb4-b182-03e5cd35e2b0/1/nd5F6TZ4AdGO8PsKn-UTvrDkpUo.mft Manifest number: 1556 Signing time: Sat 06 Dec 2025 07:01:07 +0000 Manifest this update: Sat 06 Dec 2025 07:01:07 +0000 Manifest next update: Sun 07 Dec 2025 07:01:07 +0000 Files and hashes: 1: mB80WkYR6rBTCDx0gQ2chGJdLnE.roa (hash: qRYzeQ2/WDuNAMTY5dvhhEeLgdI0eFd+WpvXt01kHZI=) 2: nd5F6TZ4AdGO8PsKn-UTvrDkpUo.crl (hash: 60rSOqTi71RB2ZsvJKZayF2eCPm5kzHTQHfVGOi7Jcw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/d787d7-425f-4eb4-b182-03e5cd35e2b0/1/nd5F6TZ4AdGO8PsKn-UTvrDkpUo.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/d787d7-425f-4eb4-b182-03e5cd35e2b0/1/nd5F6TZ4AdGO8PsKn-UTvrDkpUo.mft rsync://rpki.ripe.net/repository/DEFAULT/nd5F6TZ4AdGO8PsKn-UTvrDkpUo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:dd:99:ac:1f:32:fb:58:e3:01:38:dc:23:53:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9dde45e9367801d18ef0fb0a9fe513beb0e4a54a Validity Not Before: Dec 6 07:01:07 2025 GMT Not After : Dec 7 07:01:07 2025 GMT Subject: CN=c8d2d37ea6e0e8cf21d88074145a3bc8905004a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:0e:41:63:85:f8:53:f4:a1:45:7c:6c:65:37: 07:21:c1:d2:27:a5:6c:fc:e0:c7:f4:ad:35:c4:43: af:14:59:e4:47:5a:d3:b6:d1:71:94:a0:7f:4a:10: 5a:5c:2c:46:b2:80:63:db:e5:5d:b8:82:a4:45:1b: 2b:7e:79:db:66:84:92:15:a7:d4:79:bf:7d:b4:e9: 09:8f:b8:b5:28:f6:25:9b:e8:35:e1:25:37:54:ca: cc:71:6e:41:f2:f8:74:57:c2:ce:23:e3:80:79:ab: f9:a6:c0:b7:05:41:17:e5:58:0f:2e:0a:fc:06:0e: 63:c8:26:00:da:1b:38:2c:7b:d4:5a:f9:aa:17:37: dc:1a:84:0e:ff:37:27:d9:23:fe:80:3e:41:40:72: 6e:01:a6:49:82:d3:6e:29:fb:33:32:6c:38:fb:2c: 69:66:39:f8:85:bc:a9:f4:d6:c7:c3:1f:cc:db:3d: 5b:28:df:de:92:3d:fb:8d:16:bb:20:c8:2f:07:4f: 31:ac:e1:3b:3c:65:8d:c5:86:a5:fb:4d:13:bb:29: 6c:cb:88:16:e3:8e:cd:48:7c:8d:5b:e2:34:6c:9a: e8:64:0f:6c:04:20:b7:97:84:13:e3:65:98:8a:1e: 3d:5c:74:56:46:6b:0f:49:db:3a:50:84:b5:c4:30: 10:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:D2:D3:7E:A6:E0:E8:CF:21:D8:80:74:14:5A:3B:C8:90:50:04:A4 X509v3 Authority Key Identifier: keyid:9D:DE:45:E9:36:78:01:D1:8E:F0:FB:0A:9F:E5:13:BE:B0:E4:A5:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nd5F6TZ4AdGO8PsKn-UTvrDkpUo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d787d7-425f-4eb4-b182-03e5cd35e2b0/1/nd5F6TZ4AdGO8PsKn-UTvrDkpUo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d787d7-425f-4eb4-b182-03e5cd35e2b0/1/nd5F6TZ4AdGO8PsKn-UTvrDkpUo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:fa:94:57:c4:00:fd:65:ce:80:17:0f:f9:d3:2e:e4:bd:41: a7:24:10:66:06:32:0e:3d:83:e9:aa:21:b6:65:96:94:0e:3b: f1:1f:61:e5:7f:1b:b4:d1:11:a8:30:a4:38:0a:1a:af:31:58: d8:29:7b:6f:43:2d:af:6d:c4:d7:90:c4:e4:2b:71:8c:fa:13: ac:85:93:a7:3f:6d:b2:e2:58:90:4b:12:3b:d1:94:81:da:cd: 10:05:61:cc:c8:88:14:c6:69:e7:3f:f1:cd:d8:e3:1d:5c:61: ff:1a:61:50:f6:07:86:89:9a:70:a2:af:18:0f:b4:2f:d5:d8: 34:ee:30:5a:2d:d5:53:a7:9c:eb:31:dd:d0:59:3b:1a:9a:b9: f4:3b:6f:6b:02:e8:52:8e:c5:47:8c:d3:30:c3:fe:0f:0b:67: 34:d9:34:35:e6:66:c7:fb:95:45:42:1e:6c:ec:6f:2f:3d:20: 27:b4:5a:7b:87:92:c2:b6:20:9c:4a:db:27:7c:6c:1d:da:79: 40:41:da:ca:de:77:e9:5f:a0:6f:0e:1c:93:2c:01:9a:9f:27: 36:94:f3:96:66:ea:91:68:b7:61:67:10:46:19:7b:6c:ef:c2: 19:3e:09:8b:b6:30:9c:70:a4:57:79:68:3b:33:e7:4e:45:9f: 57:93:5b:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydt2ZrB8y+1jjATjcI1MGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkZGU0NWU5MzY3ODAxZDE4ZWYwZmIwYTlmZTUxM2JlYjBl NGE1NGEwHhcNMjUxMjA2MDcwMTA3WhcNMjUxMjA3MDcwMTA3WjAzMTEwLwYDVQQD EyhjOGQyZDM3ZWE2ZTBlOGNmMjFkODgwNzQxNDVhM2JjODkwNTAwNGE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmA5BY4X4U/ShRXxsZTcHIcHSJ6Vs /ODH9K01xEOvFFnkR1rTttFxlKB/ShBaXCxGsoBj2+VduIKkRRsrfnnbZoSSFafU eb99tOkJj7i1KPYlm+g14SU3VMrMcW5B8vh0V8LOI+OAeav5psC3BUEX5VgPLgr8 Bg5jyCYA2hs4LHvUWvmqFzfcGoQO/zcn2SP+gD5BQHJuAaZJgtNuKfszMmw4+yxp Zjn4hbyp9NbHwx/M2z1bKN/ekj37jRa7IMgvB08xrOE7PGWNxYal+00Tuylsy4gW 447NSHyNW+I0bJroZA9sBCC3l4QT42WYih49XHRWRmsPSds6UIS1xDAQvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMjS036m4OjPIdiAdBRaO8iQUASkMB8GA1UdIwQY MBaAFJ3eRek2eAHRjvD7Cp/lE76w5KVKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmQ1RjZUWjRBZEdPOFBzS24tVVR2ckRrcFVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC9kNzg3ZDctNDI1Zi00ZWI0LWIxODIt MDNlNWNkMzVlMmIwLzEvbmQ1RjZUWjRBZEdPOFBzS24tVVR2ckRrcFVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC9kNzg3ZDctNDI1Zi00ZWI0LWIxODItMDNlNWNkMzVlMmIw LzEvbmQ1RjZUWjRBZEdPOFBzS24tVVR2ckRrcFVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAevqUV8QA /WXOgBcP+dMu5L1BpyQQZgYyDj2D6aohtmWWlA478R9h5X8btNERqDCkOAoarzFY 2Cl7b0Mtr23E15DE5CtxjPoTrIWTpz9tsuJYkEsSO9GUgdrNEAVhzMiIFMZp5z/x zdjjHVxh/xphUPYHhomacKKvGA+0L9XYNO4wWi3VU6ec6zHd0Fk7Gpq59DtvawLo Uo7FR4zTMMP+DwtnNNk0NeZmx/uVRUIebOxvLz0gJ7Rae4eSwrYgnErbJ3xsHdp5 QEHayt536V+gbw4ckywBmp8nNpTzlmbqkWi3YWcQRhl7bO/CGT4Ji7YwnHCkV3lo OzPnTkWfV5Nbpw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:17:07 2025 by rpki-client