This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.mft File: nDz83hO2YLXIMdr74b-_aN-fvjk.mft (raw, json) Hash identifier: dTNxEbJ6zSRMtQaVk355bAtS4BH7ACPXaak7Bws0mCA= Subject key identifier: 0A:D2:72:59:F3:EB:07:F2:7E:4F:5E:90:24:20:0F:3A:B1:C0:AB:46 Authority key identifier: 9C:3C:FC:DE:13:B6:60:B5:C8:31:DA:FB:E1:BF:BF:68:DF:9F:BE:39 Certificate issuer: /CN=9c3cfcde13b660b5c831dafbe1bfbf68df9fbe39 Certificate serial: 019AF1D1CA15C71AB107FEA936C370F8E472 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nDz83hO2YLXIMdr74b-_aN-fvjk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.mft Manifest number: 071E Signing time: Sat 06 Dec 2025 04:00:49 +0000 Manifest this update: Sat 06 Dec 2025 04:00:49 +0000 Manifest next update: Sun 07 Dec 2025 04:00:49 +0000 Files and hashes: 1: 1-o7g3L28fO-PQjnRpt-UgWkTHQw.roa (hash: eDwV2kux0bA6vYCRB0ZxUOPv76wEVLU7G2rZyoTStqs=) 2: nDz83hO2YLXIMdr74b-_aN-fvjk.crl (hash: sKrM17vbFwSn8y8aeSl00vnl05c76LXZvyUArirqsrg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.mft rsync://rpki.ripe.net/repository/DEFAULT/nDz83hO2YLXIMdr74b-_aN-fvjk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:ca:15:c7:1a:b1:07:fe:a9:36:c3:70:f8:e4:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c3cfcde13b660b5c831dafbe1bfbf68df9fbe39 Validity Not Before: Dec 6 04:00:49 2025 GMT Not After : Dec 7 04:00:49 2025 GMT Subject: CN=0ad27259f3eb07f27e4f5e9024200f3ab1c0ab46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:30:7f:0e:fd:3b:94:a0:3c:d2:35:0d:60:50: 23:35:7a:af:1c:33:a2:47:7e:e4:9d:fe:50:98:55: 12:c5:8f:19:9a:16:cc:56:86:5e:ad:a1:09:1a:d1: f2:9f:a9:79:47:6f:e9:81:bb:c9:f1:27:ef:a9:4b: 7a:a8:3e:a7:a9:c4:4a:2e:2b:7b:7a:11:ba:6b:38: 4a:e0:a5:ba:33:49:d9:51:d8:5e:67:a4:18:c5:a8: 23:a5:ea:33:b1:fa:98:ca:84:bd:96:fc:5f:3a:e8: e0:da:0d:2a:f2:c0:b8:f9:13:ec:88:e1:dd:ba:6d: 3a:8b:94:88:8a:d7:a0:64:f4:a5:0f:51:5c:e3:53: 95:c7:af:8a:35:fc:a9:1e:48:78:f9:5a:e8:31:e8: f2:07:e5:7d:f4:bf:16:06:9d:19:6f:f0:ce:f8:d4: 71:fd:4c:06:bb:97:a2:61:72:61:92:9e:a6:97:9b: a9:4d:21:81:be:ec:35:ec:48:fb:00:79:50:a8:08: 26:07:f7:6e:2a:3c:40:a2:90:c1:81:60:b2:6a:83: a0:01:0d:ff:83:ef:0b:af:ae:f8:f7:d3:e0:f4:a0: 93:d4:88:3b:c8:21:f2:fc:38:0b:e2:22:64:ef:c1: 5f:55:fd:99:6c:18:1f:ee:a8:32:4c:7b:0e:46:88: 9c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:D2:72:59:F3:EB:07:F2:7E:4F:5E:90:24:20:0F:3A:B1:C0:AB:46 X509v3 Authority Key Identifier: keyid:9C:3C:FC:DE:13:B6:60:B5:C8:31:DA:FB:E1:BF:BF:68:DF:9F:BE:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nDz83hO2YLXIMdr74b-_aN-fvjk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:56:6f:93:f1:85:fa:4a:64:e5:79:ad:b3:16:99:a9:d6:08: 7a:2f:95:ff:8e:07:61:6d:b2:ab:d1:46:a8:93:39:06:85:55: ae:d5:51:0e:76:49:22:ea:83:b1:49:2c:8d:e4:e1:36:34:e7: 56:be:ee:6c:3a:fd:f3:b0:54:d9:ae:98:c5:75:36:19:2f:59: 58:35:a0:2f:a9:95:df:d7:53:83:25:fa:b1:29:cd:71:8e:12: 5f:f0:7f:e9:41:b9:1d:ec:ce:09:25:e4:f3:14:fc:e9:e7:ca: 84:40:f1:16:8d:fb:45:a6:c6:a9:ec:cb:34:3d:24:8e:85:6f: ca:0e:e0:0b:eb:5b:a4:ad:0e:30:52:59:66:b7:69:ba:16:ce: 92:90:fc:a1:57:3e:00:e0:16:9d:30:69:23:e9:35:1f:99:9d: 4c:86:19:e2:33:02:9e:12:f3:f9:aa:5a:a8:56:8a:64:c3:2b: db:27:3d:3f:54:3c:c4:77:3f:8f:c2:33:33:20:77:44:d3:6d: a7:a4:a3:05:20:7c:ed:fd:c0:33:27:b6:ba:8c:d5:be:f1:b0: 7f:d9:94:f4:10:a4:b7:71:d1:fd:5d:cf:ff:66:df:59:57:da: cc:e6:9e:10:78:86:46:90:4c:99:e8:d4:4b:a9:7e:83:f8:70: 54:6f:6a:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0coVxxqxB/6pNsNw+ORyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljM2NmY2RlMTNiNjYwYjVjODMxZGFmYmUxYmZiZjY4ZGY5 ZmJlMzkwHhcNMjUxMjA2MDQwMDQ5WhcNMjUxMjA3MDQwMDQ5WjAzMTEwLwYDVQQD EygwYWQyNzI1OWYzZWIwN2YyN2U0ZjVlOTAyNDIwMGYzYWIxYzBhYjQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDB/Dv07lKA80jUNYFAjNXqvHDOi R37knf5QmFUSxY8ZmhbMVoZeraEJGtHyn6l5R2/pgbvJ8SfvqUt6qD6nqcRKLit7 ehG6azhK4KW6M0nZUdheZ6QYxagjpeozsfqYyoS9lvxfOujg2g0q8sC4+RPsiOHd um06i5SIitegZPSlD1Fc41OVx6+KNfypHkh4+VroMejyB+V99L8WBp0Zb/DO+NRx /UwGu5eiYXJhkp6ml5upTSGBvuw17Ej7AHlQqAgmB/duKjxAopDBgWCyaoOgAQ3/ g+8Lr67499Pg9KCT1Ig7yCHy/DgL4iJk78FfVf2ZbBgf7qgyTHsORoicHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFArSclnz6wfyfk9ekCQgDzqxwKtGMB8GA1UdIwQY MBaAFJw8/N4TtmC1yDHa++G/v2jfn745MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkR6ODNoTzJZTFhJTWRyNzRiLV9hTi1mdmprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8zYzAzNGYtYzI0My00YTg4LTkwNzAt Njg3OWNjMjZkN2I2LzEvbkR6ODNoTzJZTFhJTWRyNzRiLV9hTi1mdmprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8zYzAzNGYtYzI0My00YTg4LTkwNzAtNjg3OWNjMjZkN2I2 LzEvbkR6ODNoTzJZTFhJTWRyNzRiLV9hTi1mdmprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbVZvk/GF +kpk5XmtsxaZqdYIei+V/44HYW2yq9FGqJM5BoVVrtVRDnZJIuqDsUksjeThNjTn Vr7ubDr987BU2a6YxXU2GS9ZWDWgL6mV39dTgyX6sSnNcY4SX/B/6UG5HezOCSXk 8xT86efKhEDxFo37RabGqezLND0kjoVvyg7gC+tbpK0OMFJZZrdpuhbOkpD8oVc+ AOAWnTBpI+k1H5mdTIYZ4jMCnhLz+apaqFaKZMMr2yc9P1Q8xHc/j8IzMyB3RNNt p6SjBSB87f3AMye2uozVvvGwf9mU9BCkt3HR/V3P/2bfWVfazOaeEHiGRpBMmejU S6l+g/hwVG9qig== -----END CERTIFICATE-----Generated at Sat Dec 6 07:23:32 2025 by rpki-client