This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f1edc0-63c1-42b4-a040-3ff926085527/1/NdHNq6MVWd4SqxnXnxri0hjDefc.mft File: NdHNq6MVWd4SqxnXnxri0hjDefc.mft (raw, json) Hash identifier: NcSzlDYfw9jguP0h/s+K/IQ3isFxMu15I5LrB7n2OoA= Subject key identifier: 7F:41:B0:7B:11:75:5F:D1:55:E5:2C:F6:05:D2:80:5A:BA:08:93:89 Authority key identifier: 35:D1:CD:AB:A3:15:59:DE:12:AB:19:D7:9F:1A:E2:D2:18:C3:79:F7 Certificate issuer: /CN=35d1cdaba31559de12ab19d79f1ae2d218c379f7 Certificate serial: 019AF19B1CE0982A3B821A2C3888FDD2D1D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NdHNq6MVWd4SqxnXnxri0hjDefc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f1edc0-63c1-42b4-a040-3ff926085527/1/NdHNq6MVWd4SqxnXnxri0hjDefc.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 03:01:05 +0000 Manifest this update: Sat 06 Dec 2025 03:01:05 +0000 Manifest next update: Sun 07 Dec 2025 03:01:05 +0000 Files and hashes: 1: HI5bhroHTAd2JOvu5YSZV3u06FM.roa (hash: Sccuti/fJ5690EYg+UXdl+hwT8LmoHMXCPxrbV1XvfA=) 2: NdHNq6MVWd4SqxnXnxri0hjDefc.crl (hash: otXG5JEE3zGryEu9/566wI4wEGZKTd0yF+SZzi0BYd4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f1edc0-63c1-42b4-a040-3ff926085527/1/NdHNq6MVWd4SqxnXnxri0hjDefc.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/f1edc0-63c1-42b4-a040-3ff926085527/1/NdHNq6MVWd4SqxnXnxri0hjDefc.mft rsync://rpki.ripe.net/repository/DEFAULT/NdHNq6MVWd4SqxnXnxri0hjDefc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:1c:e0:98:2a:3b:82:1a:2c:38:88:fd:d2:d1:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35d1cdaba31559de12ab19d79f1ae2d218c379f7 Validity Not Before: Dec 6 03:01:05 2025 GMT Not After : Dec 7 03:01:05 2025 GMT Subject: CN=7f41b07b11755fd155e52cf605d2805aba089389 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:54:62:90:92:b4:b3:8a:98:b5:9a:4c:10:21: fb:fa:aa:ac:45:ce:e8:b9:f5:59:68:c2:2e:a1:11: 33:07:d2:b0:55:b1:54:df:83:a4:f9:73:2b:43:af: 36:2f:5e:46:ce:ce:2f:3e:cb:71:30:f0:ce:b9:ed: 1b:8c:53:ca:7a:70:e9:58:0b:9f:7f:90:3d:b8:e8: 6f:1f:03:c4:28:5d:04:34:ac:1a:30:dc:7d:f1:2e: b3:36:8f:71:84:f4:9f:e3:d9:b5:80:7a:cc:07:a7: b1:3e:b0:cc:ce:3b:43:17:52:25:ce:51:67:cb:66: df:ee:29:0c:e6:04:62:c2:b0:c4:12:3d:27:71:06: 43:5e:ea:dd:2d:71:89:b6:dc:90:a6:56:0f:0c:79: b0:69:87:80:22:3a:40:ad:94:2e:5a:87:c4:d2:a3: 1c:ca:8a:6e:46:bb:66:6b:44:90:4e:a0:e8:4b:14: 10:0a:15:4c:a6:7b:38:c2:7a:48:5b:f2:f5:97:6c: 95:14:42:0d:35:2f:8d:37:b0:bf:eb:fb:f1:04:cd: 9f:2c:f5:ff:ee:8f:9a:3a:a6:03:d4:8a:db:6b:f9: 74:39:68:ac:75:af:78:3d:bd:70:ca:71:21:01:92: fe:14:eb:f2:02:7f:b7:63:4d:70:ea:fc:f9:c8:3a: 35:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:41:B0:7B:11:75:5F:D1:55:E5:2C:F6:05:D2:80:5A:BA:08:93:89 X509v3 Authority Key Identifier: keyid:35:D1:CD:AB:A3:15:59:DE:12:AB:19:D7:9F:1A:E2:D2:18:C3:79:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdHNq6MVWd4SqxnXnxri0hjDefc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f1edc0-63c1-42b4-a040-3ff926085527/1/NdHNq6MVWd4SqxnXnxri0hjDefc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f1edc0-63c1-42b4-a040-3ff926085527/1/NdHNq6MVWd4SqxnXnxri0hjDefc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:99:0d:76:d1:83:1c:b7:74:f5:2f:f9:71:a8:f8:10:40:b9: fb:ce:ca:ca:65:3f:15:65:1d:3a:47:c1:cd:55:74:a2:1b:ce: 58:fa:b1:15:d5:fc:9e:d8:bf:df:f6:46:29:3f:e2:c8:55:cd: 63:96:6f:0d:51:86:57:10:97:5f:93:6d:d7:37:81:aa:20:2e: 82:8f:3c:34:5f:b7:94:64:34:ef:45:51:b6:7a:ae:2d:f8:23: 92:f9:64:d8:db:67:4f:db:fb:5e:61:13:76:a4:55:13:7e:df: a3:91:2a:ea:6b:71:2c:4a:c4:c0:47:ee:c2:bc:09:6c:58:1e: 3f:82:08:ce:d2:90:00:63:74:fe:99:ea:50:02:58:66:dc:26: 40:ba:b1:28:11:cf:ac:ce:88:a5:97:c3:40:0e:b1:3c:13:85: a9:56:3c:5f:76:14:af:44:3b:dd:ce:10:3f:3a:67:3f:2c:7a: 1b:d8:c8:b6:72:fd:c7:c9:18:1e:45:e6:17:73:84:52:85:cd: eb:95:3d:13:30:61:f7:12:ab:8c:47:57:8b:fb:12:62:d7:01: f0:87:ae:fe:59:9c:29:13:86:85:00:05:e6:a8:d4:e6:2d:a7: 6b:83:28:6c:81:e9:e0:36:44:89:26:ec:25:d7:0e:1b:db:c7: ba:87:94:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmxzgmCo7ghosOIj90tHRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1ZDFjZGFiYTMxNTU5ZGUxMmFiMTlkNzlmMWFlMmQyMThj Mzc5ZjcwHhcNMjUxMjA2MDMwMTA1WhcNMjUxMjA3MDMwMTA1WjAzMTEwLwYDVQQD Eyg3ZjQxYjA3YjExNzU1ZmQxNTVlNTJjZjYwNWQyODA1YWJhMDg5Mzg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVRikJK0s4qYtZpMECH7+qqsRc7o ufVZaMIuoREzB9KwVbFU34Ok+XMrQ682L15Gzs4vPstxMPDOue0bjFPKenDpWAuf f5A9uOhvHwPEKF0ENKwaMNx98S6zNo9xhPSf49m1gHrMB6exPrDMzjtDF1IlzlFn y2bf7ikM5gRiwrDEEj0ncQZDXurdLXGJttyQplYPDHmwaYeAIjpArZQuWofE0qMc yopuRrtma0SQTqDoSxQQChVMpns4wnpIW/L1l2yVFEINNS+NN7C/6/vxBM2fLPX/ 7o+aOqYD1Irba/l0OWisda94Pb1wynEhAZL+FOvyAn+3Y01w6vz5yDo1HwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH9BsHsRdV/RVeUs9gXSgFq6CJOJMB8GA1UdIwQY MBaAFDXRzaujFVneEqsZ158a4tIYw3n3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmRITnE2TVZXZDRTcXhuWG54cmkwaGpEZWZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9mMWVkYzAtNjNjMS00MmI0LWEwNDAt M2ZmOTI2MDg1NTI3LzEvTmRITnE2TVZXZDRTcXhuWG54cmkwaGpEZWZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS9mMWVkYzAtNjNjMS00MmI0LWEwNDAtM2ZmOTI2MDg1NTI3 LzEvTmRITnE2TVZXZDRTcXhuWG54cmkwaGpEZWZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI5kNdtGD HLd09S/5caj4EEC5+87KymU/FWUdOkfBzVV0ohvOWPqxFdX8nti/3/ZGKT/iyFXN Y5ZvDVGGVxCXX5Nt1zeBqiAugo88NF+3lGQ070VRtnquLfgjkvlk2NtnT9v7XmET dqRVE37fo5Eq6mtxLErEwEfuwrwJbFgeP4IIztKQAGN0/pnqUAJYZtwmQLqxKBHP rM6IpZfDQA6xPBOFqVY8X3YUr0Q73c4QPzpnPyx6G9jItnL9x8kYHkXmF3OEUoXN 65U9EzBh9xKrjEdXi/sSYtcB8Ieu/lmcKROGhQAF5qjU5i2na4MobIHp4DZEiSbs JdcOG9vHuoeUdA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:07:59 2025 by rpki-client