This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/f6892f-51b6-4e4a-b1e0-fd3fd1803294/1/NdrPcDZ9CsMFpawau68jmLJtk1U.mft File: NdrPcDZ9CsMFpawau68jmLJtk1U.mft (raw, json) Hash identifier: 7agx9BQsOjRmFtsU1ya25H0MHWgHABWWxCvbPhNAJvo= Subject key identifier: 96:09:69:E0:E8:A5:54:08:E3:4C:DF:6B:01:6E:64:D0:52:7F:55:4F Authority key identifier: 35:DA:CF:70:36:7D:0A:C3:05:A5:AC:1A:BB:AF:23:98:B2:6D:93:55 Certificate issuer: /CN=35dacf70367d0ac305a5ac1abbaf2398b26d9355 Certificate serial: 019AF23FC2D319D2183F7C8CBD44537105CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NdrPcDZ9CsMFpawau68jmLJtk1U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/f6892f-51b6-4e4a-b1e0-fd3fd1803294/1/NdrPcDZ9CsMFpawau68jmLJtk1U.mft Manifest number: 04FB Signing time: Sat 06 Dec 2025 06:00:56 +0000 Manifest this update: Sat 06 Dec 2025 06:00:56 +0000 Manifest next update: Sun 07 Dec 2025 06:00:56 +0000 Files and hashes: 1: NV-I2foKzHLj-RMxKytozaQe67g.roa (hash: PhlDXyOiHHSXRcXTISte8ar8TbgSTtrPQqIchH8glHs=) 2: NdrPcDZ9CsMFpawau68jmLJtk1U.crl (hash: q34hfeh3+z2FQqu5IqGcNTWL00pONW1DKjSeKc864eM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/f6892f-51b6-4e4a-b1e0-fd3fd1803294/1/NdrPcDZ9CsMFpawau68jmLJtk1U.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/f6892f-51b6-4e4a-b1e0-fd3fd1803294/1/NdrPcDZ9CsMFpawau68jmLJtk1U.mft rsync://rpki.ripe.net/repository/DEFAULT/NdrPcDZ9CsMFpawau68jmLJtk1U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:c2:d3:19:d2:18:3f:7c:8c:bd:44:53:71:05:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35dacf70367d0ac305a5ac1abbaf2398b26d9355 Validity Not Before: Dec 6 06:00:56 2025 GMT Not After : Dec 7 06:00:56 2025 GMT Subject: CN=960969e0e8a55408e34cdf6b016e64d0527f554f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:64:9c:b5:3c:16:41:f8:f6:38:29:89:d5:f7: 84:f8:b1:2d:13:7c:4f:41:37:1e:86:a0:91:c1:94: 2e:a2:67:09:61:25:b5:96:c9:a8:92:b5:8d:e2:22: 60:6b:39:89:40:be:dd:39:8f:f4:d5:3f:8f:a4:23: fb:a0:c0:c9:55:be:0e:54:a7:58:9b:5a:95:5b:30: 8b:ec:32:83:e1:e9:e9:19:b7:88:ed:4e:38:e6:38: 8d:93:c0:bb:03:53:80:21:41:f9:43:80:b8:fe:e3: bd:14:53:98:39:83:2e:71:df:c8:5f:a7:e5:9a:e7: 77:ca:17:44:5b:42:64:18:b9:08:d4:41:04:ef:24: e9:a7:bd:70:ae:47:c6:5c:31:e0:5a:75:d6:fc:54: 6e:a4:60:9e:68:70:03:2a:ea:0c:d2:1e:74:e1:2a: 17:03:38:4d:c1:64:2a:4e:ac:cb:64:ff:89:b4:2c: a2:4d:cd:ac:80:58:83:a6:0b:b5:d0:01:22:be:f5: 0d:87:39:7b:f3:1e:0d:ba:4a:74:31:c3:33:9d:4f: 2b:82:69:1c:ee:8c:8c:ce:00:54:68:58:8f:a5:33: 76:e9:f0:f2:aa:0d:82:35:bf:93:77:38:24:f5:a5: 05:50:89:bd:eb:79:19:56:a9:4b:1c:7f:4b:58:68: bf:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:09:69:E0:E8:A5:54:08:E3:4C:DF:6B:01:6E:64:D0:52:7F:55:4F X509v3 Authority Key Identifier: keyid:35:DA:CF:70:36:7D:0A:C3:05:A5:AC:1A:BB:AF:23:98:B2:6D:93:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdrPcDZ9CsMFpawau68jmLJtk1U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/f6892f-51b6-4e4a-b1e0-fd3fd1803294/1/NdrPcDZ9CsMFpawau68jmLJtk1U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/f6892f-51b6-4e4a-b1e0-fd3fd1803294/1/NdrPcDZ9CsMFpawau68jmLJtk1U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:33:6f:fa:50:c4:c4:56:d5:94:ce:19:09:c2:da:02:18:6d: e9:8a:fa:e0:b9:d5:c4:b9:10:ce:b2:81:d2:5e:a3:7e:a1:52: 66:6f:5e:e1:9a:a1:44:76:36:49:2a:94:29:35:75:cd:cf:a3: a5:8e:54:83:57:cc:6a:26:17:27:06:80:a9:d3:23:b2:f3:7b: 53:20:53:24:c4:24:f5:a0:a2:b1:7b:54:f2:08:82:de:d0:13: 3f:9c:0b:43:f8:87:8d:93:ce:0b:4b:2e:e8:1f:7c:46:95:76: 5b:61:5e:9d:00:86:71:10:b7:a0:d6:c1:78:18:b5:25:1a:cd: 5c:3d:fd:0b:03:10:2c:7f:15:6f:e1:3a:41:67:75:d9:e0:c4: 43:a8:62:ef:52:cc:6e:3c:a9:82:f2:2f:c3:28:0f:47:84:7a: b8:f3:b9:6a:bb:e8:29:7a:e7:55:f2:da:75:e6:e7:1f:b6:e8: 88:26:91:ac:27:46:c1:7c:cc:2c:95:9a:0d:34:bb:13:46:c4: ad:0e:40:a9:82:2f:81:d2:1f:d8:f8:ab:d1:bd:d8:c1:72:85: c8:89:55:c2:84:4a:26:7a:3c:fc:a5:17:6d:65:75:c3:1e:a4: cc:c7:66:1f:f2:ca:e5:24:e1:dd:c2:98:9c:78:d5:ad:62:0c: f4:40:7d:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP8LTGdIYP3yMvURTcQXMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1ZGFjZjcwMzY3ZDBhYzMwNWE1YWMxYWJiYWYyMzk4YjI2 ZDkzNTUwHhcNMjUxMjA2MDYwMDU2WhcNMjUxMjA3MDYwMDU2WjAzMTEwLwYDVQQD Eyg5NjA5NjllMGU4YTU1NDA4ZTM0Y2RmNmIwMTZlNjRkMDUyN2Y1NTRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGSctTwWQfj2OCmJ1feE+LEtE3xP QTcehqCRwZQuomcJYSW1lsmokrWN4iJgazmJQL7dOY/01T+PpCP7oMDJVb4OVKdY m1qVWzCL7DKD4enpGbeI7U445jiNk8C7A1OAIUH5Q4C4/uO9FFOYOYMucd/IX6fl mud3yhdEW0JkGLkI1EEE7yTpp71wrkfGXDHgWnXW/FRupGCeaHADKuoM0h504SoX AzhNwWQqTqzLZP+JtCyiTc2sgFiDpgu10AEivvUNhzl78x4Nukp0McMznU8rgmkc 7oyMzgBUaFiPpTN26fDyqg2CNb+Tdzgk9aUFUIm963kZVqlLHH9LWGi/FQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJYJaeDopVQI40zfawFuZNBSf1VPMB8GA1UdIwQY MBaAFDXaz3A2fQrDBaWsGruvI5iybZNVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmRyUGNEWjlDc01GcGF3YXU2OGptTEp0azFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9mNjg5MmYtNTFiNi00ZTRhLWIxZTAt ZmQzZmQxODAzMjk0LzEvTmRyUGNEWjlDc01GcGF3YXU2OGptTEp0azFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS9mNjg5MmYtNTFiNi00ZTRhLWIxZTAtZmQzZmQxODAzMjk0 LzEvTmRyUGNEWjlDc01GcGF3YXU2OGptTEp0azFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZjNv+lDE xFbVlM4ZCcLaAhht6Yr64LnVxLkQzrKB0l6jfqFSZm9e4ZqhRHY2SSqUKTV1zc+j pY5Ug1fMaiYXJwaAqdMjsvN7UyBTJMQk9aCisXtU8giC3tATP5wLQ/iHjZPOC0su 6B98RpV2W2FenQCGcRC3oNbBeBi1JRrNXD39CwMQLH8Vb+E6QWd12eDEQ6hi71LM bjypgvIvwygPR4R6uPO5arvoKXrnVfLadebnH7boiCaRrCdGwXzMLJWaDTS7E0bE rQ5AqYIvgdIf2Pir0b3YwXKFyIlVwoRKJno8/KUXbWV1wx6kzMdmH/LK5STh3cKY nHjVrWIM9EB9tQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:58:23 2025 by rpki-client