This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft File: NdRfKsW84Vad9rKtgNFvG5L72Fw.mft (raw, json) Hash identifier: cmFrytwvklPsiYNMPHMf6iwN8WE3Gah6PBfd89wei+Y= Subject key identifier: 6A:7E:6E:82:48:A3:52:2F:2F:14:85:CE:E0:79:D3:1E:16:44:61:00 Authority key identifier: 35:D4:5F:2A:C5:BC:E1:56:9D:F6:B2:AD:80:D1:6F:1B:92:FB:D8:5C Certificate issuer: /CN=35d45f2ac5bce1569df6b2ad80d16f1b92fbd85c Certificate serial: 019AF0BF046BA58CE2C8EACDE67375D1D1AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NdRfKsW84Vad9rKtgNFvG5L72Fw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft Manifest number: 1760 Signing time: Fri 05 Dec 2025 23:00:41 +0000 Manifest this update: Fri 05 Dec 2025 23:00:41 +0000 Manifest next update: Sat 06 Dec 2025 23:00:41 +0000 Files and hashes: 1: NdRfKsW84Vad9rKtgNFvG5L72Fw.crl (hash: m5Z1j8RX2b9jDlvs26Y37gHp5t9M/vVkCnE/G6HZMKQ=) 2: Pxn4Z0bdWmWck5jdH1FaueBsOf0.roa (hash: vg1TLVE75nnwqoL/egav334PmpcLAh17CAvdGO24png=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft rsync://rpki.ripe.net/repository/DEFAULT/NdRfKsW84Vad9rKtgNFvG5L72Fw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:04:6b:a5:8c:e2:c8:ea:cd:e6:73:75:d1:d1:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35d45f2ac5bce1569df6b2ad80d16f1b92fbd85c Validity Not Before: Dec 5 23:00:41 2025 GMT Not After : Dec 6 23:00:41 2025 GMT Subject: CN=6a7e6e8248a3522f2f1485cee079d31e16446100 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e7:22:3a:2a:a0:a4:7c:09:ff:5d:fb:7e:6d: ce:49:c9:0c:c9:f6:cf:a7:30:5b:23:80:3f:7c:6b: 33:96:c1:bb:73:d4:82:6d:b5:50:8b:cd:34:34:42: bf:c0:f6:89:a8:93:74:ad:2f:58:a6:5c:88:40:9a: 07:e6:1c:35:c0:d7:ce:e6:ba:c8:78:16:e7:a2:1a: 02:41:ca:79:ee:54:cc:ed:37:db:39:84:84:e9:9c: 92:19:ea:48:77:9a:cf:fb:32:9b:d0:c8:bf:d8:d0: 80:21:ea:cf:64:2a:80:6f:a0:a4:af:48:97:7a:23: 90:43:a7:63:52:eb:09:aa:7b:8b:aa:59:ce:ce:43: 52:dc:7c:99:41:15:75:9b:27:c0:71:e1:b3:88:aa: 54:2a:0e:16:df:d0:85:4e:fe:45:bd:24:28:17:85: 00:70:d4:8c:e7:77:ca:3b:4e:32:fe:3c:3f:c9:8c: b4:0b:a5:0b:95:87:83:93:fa:83:df:67:9b:c3:e6: 78:47:de:bd:b9:7a:76:ed:4e:d3:74:5d:47:6d:07: 49:12:f2:a6:ac:e5:a1:53:92:63:a1:d3:57:63:99: 82:1d:af:33:d7:38:19:f8:c7:91:d3:bd:47:b8:74: 5a:d7:94:8f:e2:9c:0e:47:df:a5:ac:af:57:98:ea: ea:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:7E:6E:82:48:A3:52:2F:2F:14:85:CE:E0:79:D3:1E:16:44:61:00 X509v3 Authority Key Identifier: keyid:35:D4:5F:2A:C5:BC:E1:56:9D:F6:B2:AD:80:D1:6F:1B:92:FB:D8:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdRfKsW84Vad9rKtgNFvG5L72Fw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:07:9c:b6:3b:4d:67:3d:d9:a3:b6:6c:55:23:87:a7:92:13: 25:64:91:c3:fd:ff:63:b6:77:01:ce:ab:73:5d:33:1a:f2:0d: 5d:5b:47:7b:86:b0:75:97:8b:77:17:97:57:9d:10:7f:70:a0: 91:fd:87:d7:93:d7:af:2e:e7:d1:31:e4:00:9d:6d:ec:77:bf: 9a:bf:26:f1:61:81:37:e3:e6:c2:02:e0:10:58:72:1e:9a:e7: 14:03:9e:18:fa:02:02:d1:48:5d:40:38:7b:e2:5f:79:ed:12: 8f:ba:b2:ed:32:21:87:93:6f:ee:d1:3c:99:90:b0:2f:9f:ec: 89:a5:44:b5:8b:bd:d0:2d:c7:93:f0:f1:17:66:26:2d:11:bc: 08:5c:77:cf:c8:d5:be:6e:2f:41:9b:45:63:87:85:3d:97:8b: 8a:f2:31:50:c6:12:b0:72:f2:7b:22:f4:28:bb:10:c4:28:b1: ac:9e:3e:af:c1:1c:02:5d:2a:ac:4b:29:b3:cb:1d:32:60:5f: 59:7f:c0:2c:cd:f3:c4:52:c2:bc:1b:ae:1f:04:2e:42:37:ad: bb:e3:35:34:fb:2f:f2:42:a3:d7:63:61:a1:32:1a:24:b9:af: 34:24:4c:1a:2e:9f:09:9e:41:b5:30:e5:2f:a0:68:0f:2d:00: e0:10:12:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvwRrpYziyOrN5nN10dGsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1ZDQ1ZjJhYzViY2UxNTY5ZGY2YjJhZDgwZDE2ZjFiOTJm YmQ4NWMwHhcNMjUxMjA1MjMwMDQxWhcNMjUxMjA2MjMwMDQxWjAzMTEwLwYDVQQD Eyg2YTdlNmU4MjQ4YTM1MjJmMmYxNDg1Y2VlMDc5ZDMxZTE2NDQ2MTAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOciOiqgpHwJ/137fm3OSckMyfbP pzBbI4A/fGszlsG7c9SCbbVQi800NEK/wPaJqJN0rS9YplyIQJoH5hw1wNfO5rrI eBbnohoCQcp57lTM7TfbOYSE6ZySGepId5rP+zKb0Mi/2NCAIerPZCqAb6Ckr0iX eiOQQ6djUusJqnuLqlnOzkNS3HyZQRV1myfAceGziKpUKg4W39CFTv5FvSQoF4UA cNSM53fKO04y/jw/yYy0C6ULlYeDk/qD32ebw+Z4R969uXp27U7TdF1HbQdJEvKm rOWhU5JjodNXY5mCHa8z1zgZ+MeR071HuHRa15SP4pwOR9+lrK9XmOrqSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGp+boJIo1IvLxSFzuB50x4WRGEAMB8GA1UdIwQY MBaAFDXUXyrFvOFWnfayrYDRbxuS+9hcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmRSZktzVzg0VmFkOXJLdGdORnZHNUw3MkZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS80ODEyMzYtYTA2Yy00OTAzLTkzODUt NmI3ZDdlNGVkNzAxLzEvTmRSZktzVzg0VmFkOXJLdGdORnZHNUw3MkZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS80ODEyMzYtYTA2Yy00OTAzLTkzODUtNmI3ZDdlNGVkNzAx LzEvTmRSZktzVzg0VmFkOXJLdGdORnZHNUw3MkZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOwectjtN Zz3Zo7ZsVSOHp5ITJWSRw/3/Y7Z3Ac6rc10zGvINXVtHe4awdZeLdxeXV50Qf3Cg kf2H15PXry7n0THkAJ1t7He/mr8m8WGBN+PmwgLgEFhyHprnFAOeGPoCAtFIXUA4 e+Jfee0Sj7qy7TIhh5Nv7tE8mZCwL5/siaVEtYu90C3Hk/DxF2YmLRG8CFx3z8jV vm4vQZtFY4eFPZeLivIxUMYSsHLyeyL0KLsQxCixrJ4+r8EcAl0qrEsps8sdMmBf WX/ALM3zxFLCvBuuHwQuQjetu+M1NPsv8kKj12NhoTIaJLmvNCRMGi6fCZ5BtTDl L6BoDy0A4BASGA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:14:22 2025 by rpki-client