This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.mft File: NDK6HG0LAr7-aMyUrp0t4xB6YEY.mft (raw, json) Hash identifier: soDpOTbxt5huZmwQUU7OXOo7mi/hFwD9MlGuFuPJXV4= Subject key identifier: C5:BD:86:EF:DB:19:6D:18:3C:B5:AF:07:48:6B:FE:79:AB:64:16:46 Authority key identifier: 34:32:BA:1C:6D:0B:02:BE:FE:68:CC:94:AE:9D:2D:E3:10:7A:60:46 Certificate issuer: /CN=3432ba1c6d0b02befe68cc94ae9d2de3107a6046 Certificate serial: 019AF2AD59F001405EB2B82D7C5519AF5F00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NDK6HG0LAr7-aMyUrp0t4xB6YEY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 08:00:38 +0000 Manifest this update: Sat 06 Dec 2025 08:00:38 +0000 Manifest next update: Sun 07 Dec 2025 08:00:38 +0000 Files and hashes: 1: NDK6HG0LAr7-aMyUrp0t4xB6YEY.crl (hash: qfupgtD1TFRVuQ5tDg9sxWfpnhjf8l9FG6fXhl4muN0=) 2: aDRwFZp3Ye9nOga6oqU2-HxOi5Q.roa (hash: 55fN/khKAT7BHMTfK9zjOz/iWjkXrLDgvWhFUwURpbU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.mft rsync://rpki.ripe.net/repository/DEFAULT/NDK6HG0LAr7-aMyUrp0t4xB6YEY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:59:f0:01:40:5e:b2:b8:2d:7c:55:19:af:5f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3432ba1c6d0b02befe68cc94ae9d2de3107a6046 Validity Not Before: Dec 6 08:00:38 2025 GMT Not After : Dec 7 08:00:38 2025 GMT Subject: CN=c5bd86efdb196d183cb5af07486bfe79ab641646 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:b0:e3:c8:b5:37:09:51:82:f1:bc:74:e5:d9: 1a:b5:06:e2:07:f4:dc:e4:13:36:22:a4:72:b0:96: 80:74:a2:77:2c:53:3d:37:cd:17:1f:f8:60:05:82: f1:be:49:4d:a9:02:05:38:bd:ec:ea:28:3d:7b:9a: a2:d1:34:6f:20:7b:f5:ad:a2:75:ec:88:ed:ae:5f: 03:03:bf:cc:37:3c:aa:60:43:2a:2c:bf:31:1e:87: 64:f5:f7:8b:f3:92:a3:46:a5:21:9f:39:18:0c:77: de:1d:db:a7:a7:ce:8d:58:f1:ee:2b:b1:ee:62:fd: 7b:bd:ad:55:1a:ab:9a:fb:13:05:e6:ab:29:53:05: 3a:53:63:7f:a8:79:d2:87:b3:38:48:d8:ce:41:c7: 56:ab:8a:25:4d:be:ae:fb:52:0b:cf:95:41:93:bb: b0:96:da:f2:73:d8:ad:90:14:72:5b:c7:3a:77:8c: ba:59:3f:ed:41:1d:0a:1d:2e:93:f4:5b:cc:b9:f7: 44:ea:e9:aa:77:3c:db:d7:12:8a:21:28:02:f8:5e: 48:e5:ae:e5:69:6c:54:73:9a:ca:3e:63:f5:71:e4: 56:30:0e:c1:47:41:cf:95:94:1b:ab:d1:d3:9e:71: 3b:20:97:e1:c9:b7:ee:48:7a:8a:9d:49:23:e0:ad: 96:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:BD:86:EF:DB:19:6D:18:3C:B5:AF:07:48:6B:FE:79:AB:64:16:46 X509v3 Authority Key Identifier: keyid:34:32:BA:1C:6D:0B:02:BE:FE:68:CC:94:AE:9D:2D:E3:10:7A:60:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NDK6HG0LAr7-aMyUrp0t4xB6YEY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:56:ab:c0:98:70:f8:d9:ae:7f:34:35:22:07:45:13:08:cf: 8e:ba:6a:24:ee:b0:66:d7:b0:11:9c:9b:c7:83:d0:03:06:3a: 9d:28:22:79:56:1b:6a:01:cc:df:1b:b3:30:ab:aa:8f:4c:f6: 86:08:b3:79:c7:cb:de:e8:6c:ed:3e:82:6a:10:a7:f9:a6:b0: 86:de:64:7f:ca:6d:79:48:41:17:84:5a:c4:70:4d:b4:c5:9a: bf:46:d0:5e:bc:5a:7d:29:73:06:c4:31:28:2a:55:69:3c:3b: 56:89:48:54:ee:4b:b2:72:36:9d:be:7e:70:02:6c:1e:26:74: 65:36:d2:51:29:46:be:02:12:53:e8:09:33:61:14:5e:a2:c4: 52:07:72:f6:97:f2:3e:d0:4e:fd:08:21:23:b7:45:6c:7c:2d: 7c:e1:45:e0:d8:24:ef:8e:eb:96:12:94:c3:38:aa:0d:7b:5f: b2:c3:24:a2:47:7c:9e:0a:03:bc:e5:bc:08:2d:76:dd:5d:0e: 44:21:bb:11:f8:a2:6b:72:c1:48:15:51:9a:24:ca:3e:24:93: 18:4d:2a:18:27:1f:f6:5f:38:52:d8:69:7d:a0:79:27:0c:60: ec:6d:e1:41:f1:aa:7d:39:44:e4:b7:1f:21:ff:9a:2d:31:30: 3a:3e:54:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrVnwAUBesrgtfFUZr18AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0MzJiYTFjNmQwYjAyYmVmZTY4Y2M5NGFlOWQyZGUzMTA3 YTYwNDYwHhcNMjUxMjA2MDgwMDM4WhcNMjUxMjA3MDgwMDM4WjAzMTEwLwYDVQQD EyhjNWJkODZlZmRiMTk2ZDE4M2NiNWFmMDc0ODZiZmU3OWFiNjQxNjQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbDjyLU3CVGC8bx05dkatQbiB/Tc 5BM2IqRysJaAdKJ3LFM9N80XH/hgBYLxvklNqQIFOL3s6ig9e5qi0TRvIHv1raJ1 7Ijtrl8DA7/MNzyqYEMqLL8xHodk9feL85KjRqUhnzkYDHfeHdunp86NWPHuK7Hu Yv17va1VGqua+xMF5qspUwU6U2N/qHnSh7M4SNjOQcdWq4olTb6u+1ILz5VBk7uw ltryc9itkBRyW8c6d4y6WT/tQR0KHS6T9FvMufdE6umqdzzb1xKKISgC+F5I5a7l aWxUc5rKPmP1ceRWMA7BR0HPlZQbq9HTnnE7IJfhybfuSHqKnUkj4K2WkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMW9hu/bGW0YPLWvB0hr/nmrZBZGMB8GA1UdIwQY MBaAFDQyuhxtCwK+/mjMlK6dLeMQemBGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkRLNkhHMExBcjctYU15VXJwMHQ0eEI2WUVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8yNWUxN2ItODI0ZS00ZTdkLWIzZTgt MjdiODdiZmJlZTdiLzEvTkRLNkhHMExBcjctYU15VXJwMHQ0eEI2WUVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC8yNWUxN2ItODI0ZS00ZTdkLWIzZTgtMjdiODdiZmJlZTdi LzEvTkRLNkhHMExBcjctYU15VXJwMHQ0eEI2WUVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ1arwJhw +NmufzQ1IgdFEwjPjrpqJO6wZtewEZybx4PQAwY6nSgieVYbagHM3xuzMKuqj0z2 hgizecfL3uhs7T6CahCn+aawht5kf8pteUhBF4RaxHBNtMWav0bQXrxafSlzBsQx KCpVaTw7VolIVO5LsnI2nb5+cAJsHiZ0ZTbSUSlGvgISU+gJM2EUXqLEUgdy9pfy PtBO/QghI7dFbHwtfOFF4Ngk747rlhKUwziqDXtfssMkokd8ngoDvOW8CC123V0O RCG7Efiia3LBSBVRmiTKPiSTGE0qGCcf9l84UthpfaB5Jwxg7G3hQfGqfTlE5Lcf If+aLTEwOj5UVw== -----END CERTIFICATE-----Generated at Sat Dec 6 14:58:51 2025 by rpki-client