This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.mft File: aDLDLSJZATmRJg1TDZEgAxqu_NA.mft (raw, json) Hash identifier: ThouGCb8J8jzqOehsbiaw2AUqG8CxcNLF9UUJRWqR64= Subject key identifier: 3C:7E:4B:A0:BC:4E:37:34:C9:5E:3A:43:B1:44:0F:34:0B:11:3E:B0 Authority key identifier: 68:32:C3:2D:22:59:01:39:91:26:0D:53:0D:91:20:03:1A:AE:FC:D0 Certificate issuer: /CN=6832c32d2259013991260d530d9120031aaefcd0 Certificate serial: 019AF27661F98912BE1FF465186B44853F42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.mft Manifest number: 0D01 Signing time: Sat 06 Dec 2025 07:00:35 +0000 Manifest this update: Sat 06 Dec 2025 07:00:35 +0000 Manifest next update: Sun 07 Dec 2025 07:00:35 +0000 Files and hashes: 1: 1-oXSUr0wwWM6bUdeuL56OFYZDI0.roa (hash: ncbwn+oJ9xxudk0G2RRlfn6p7YnDM2Topv72cCblM78=) 2: JmE2DotJFzee6ZEkJABlOvGfUi0.roa (hash: kTxgn5V7rU8GaSWrPY2IpRexVO3i36geJ6EK2nXDe04=) 3: aDLDLSJZATmRJg1TDZEgAxqu_NA.crl (hash: WOD8r0yrK6gZ5WkVBPYyhwwDvZXbkVZPioRuL/8+Qsk=) 4: cEY4_oxa006P5RDwnA1ZzqFve_U.roa (hash: aljeYfMZh5A8r1hZ1ho6VGSZLpMMc/WsIq8gaCshO9A=) 5: nTupOLnysHIU3jc5GcaguEHrGzQ.roa (hash: 7rA+K1p/TVuAVfQm4S6Vm6UJX0egR9dZCIKwnWvWs6k=) 6: nnxeUU87S1Fex4eT1VyslsBsqEs.roa (hash: reRLOJZlJItgnmYvk5ziSo/wJ6dbsJIWZ7vz95Z6+9Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.mft rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:61:f9:89:12:be:1f:f4:65:18:6b:44:85:3f:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6832c32d2259013991260d530d9120031aaefcd0 Validity Not Before: Dec 6 07:00:35 2025 GMT Not After : Dec 7 07:00:35 2025 GMT Subject: CN=3c7e4ba0bc4e3734c95e3a43b1440f340b113eb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f5:de:19:3f:5b:f2:1c:7a:65:0f:5d:61:e9: 46:72:3a:11:77:7c:f8:50:e7:e4:3a:ae:bd:0d:6a: 64:72:c9:ff:a0:80:96:c0:d1:7b:2c:c4:cb:90:27: 6b:a1:5b:60:de:5c:76:21:51:7b:43:a1:35:7c:95: 28:ee:45:8f:7f:f4:2e:fa:3f:b2:ef:1d:69:4d:31: 56:c6:40:83:83:46:8a:9a:4c:8f:4f:3c:d8:52:e4: 38:b0:00:42:50:91:6f:9a:9e:59:f5:8a:53:8e:49: 17:3c:63:6b:db:5d:d3:ff:bc:86:77:57:e3:13:28: 85:d3:c3:ab:c0:a5:ec:63:1d:3c:93:60:0b:a6:3a: e7:f7:32:3a:98:4f:11:f9:1c:a3:25:15:92:f7:06: 65:b9:20:09:db:96:48:24:2a:81:57:6f:11:45:41: 1e:33:a9:7b:b1:c2:c9:d0:65:cc:ce:dc:b6:3b:21: 58:69:80:70:17:64:26:7c:fd:84:e3:0a:65:21:f2: 69:cf:8e:fa:64:ee:b5:47:62:a7:08:1e:6f:ad:2f: 70:a1:e4:bc:0e:16:b3:bc:c6:0c:69:c6:fb:50:8c: 12:e9:ee:33:ed:20:7d:9a:e8:6e:ea:b8:27:e8:1e: 9b:f2:ff:3b:e3:be:50:f1:bc:76:fe:49:cb:7b:29: ea:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:7E:4B:A0:BC:4E:37:34:C9:5E:3A:43:B1:44:0F:34:0B:11:3E:B0 X509v3 Authority Key Identifier: keyid:68:32:C3:2D:22:59:01:39:91:26:0D:53:0D:91:20:03:1A:AE:FC:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:43:9e:c3:1e:91:52:04:fa:07:cc:4b:a6:5c:4e:ec:c0:34: e5:8b:7b:5d:bd:19:1e:1c:8a:1d:05:43:6d:0d:27:44:fd:75: fe:09:40:cc:b2:61:89:86:ae:ea:36:96:e1:3f:de:b2:5d:dc: 7d:83:cc:64:95:f6:40:ca:cb:d8:6e:65:ba:2e:fb:9e:7d:77: 19:b4:83:69:3f:00:47:df:e7:32:5a:6e:c7:14:c6:0c:06:d5: ad:ae:f5:a8:07:dc:36:46:1d:e3:42:d1:81:b6:80:ae:71:31: 5b:d0:33:65:b5:6b:ff:dc:9f:4d:9d:b9:df:3c:10:43:a9:34: ba:45:5c:ea:8a:b4:58:27:75:9d:99:96:8d:55:27:bf:a0:f7: a2:11:65:a8:27:10:11:62:c2:00:10:85:f2:ec:24:8d:9c:a6: 5c:c6:3d:7c:89:86:35:61:bc:64:bb:8b:bb:99:49:0c:31:64: ab:85:5f:3c:f5:59:8d:81:ce:0f:ef:db:a9:7f:8b:f4:df:65: ea:62:9f:85:45:2d:59:d3:91:a0:7e:d7:a4:09:b7:57:74:02: 6f:af:b0:ed:65:74:58:55:b7:c1:f2:e2:10:36:ad:99:87:8c: 3b:f4:42:d5:9a:13:b2:ef:dd:c2:55:eb:58:35:66:42:a5:92: ae:42:fd:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydmH5iRK+H/RlGGtEhT9CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4MzJjMzJkMjI1OTAxMzk5MTI2MGQ1MzBkOTEyMDAzMWFh ZWZjZDAwHhcNMjUxMjA2MDcwMDM1WhcNMjUxMjA3MDcwMDM1WjAzMTEwLwYDVQQD EygzYzdlNGJhMGJjNGUzNzM0Yzk1ZTNhNDNiMTQ0MGYzNDBiMTEzZWIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvXeGT9b8hx6ZQ9dYelGcjoRd3z4 UOfkOq69DWpkcsn/oICWwNF7LMTLkCdroVtg3lx2IVF7Q6E1fJUo7kWPf/Qu+j+y 7x1pTTFWxkCDg0aKmkyPTzzYUuQ4sABCUJFvmp5Z9YpTjkkXPGNr213T/7yGd1fj EyiF08OrwKXsYx08k2ALpjrn9zI6mE8R+RyjJRWS9wZluSAJ25ZIJCqBV28RRUEe M6l7scLJ0GXMzty2OyFYaYBwF2QmfP2E4wplIfJpz476ZO61R2KnCB5vrS9woeS8 DhazvMYMacb7UIwS6e4z7SB9muhu6rgn6B6b8v87475Q8bx2/knLeynqiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDx+S6C8Tjc0yV46Q7FEDzQLET6wMB8GA1UdIwQY MBaAFGgywy0iWQE5kSYNUw2RIAMarvzQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYURMRExTSlpBVG1SSmcxVERaRWdBeHF1X05BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85NGI2NmUtM2UwZC00MzMyLWFiNGYt NzcwZjhlYWIyYWU3LzEvYURMRExTSlpBVG1SSmcxVERaRWdBeHF1X05BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC85NGI2NmUtM2UwZC00MzMyLWFiNGYtNzcwZjhlYWIyYWU3 LzEvYURMRExTSlpBVG1SSmcxVERaRWdBeHF1X05BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvEOewx6R UgT6B8xLplxO7MA05Yt7Xb0ZHhyKHQVDbQ0nRP11/glAzLJhiYau6jaW4T/esl3c fYPMZJX2QMrL2G5lui77nn13GbSDaT8AR9/nMlpuxxTGDAbVra71qAfcNkYd40LR gbaArnExW9AzZbVr/9yfTZ253zwQQ6k0ukVc6oq0WCd1nZmWjVUnv6D3ohFlqCcQ EWLCABCF8uwkjZymXMY9fImGNWG8ZLuLu5lJDDFkq4VfPPVZjYHOD+/bqX+L9N9l 6mKfhUUtWdORoH7XpAm3V3QCb6+w7WV0WFW3wfLiEDatmYeMO/RC1ZoTsu/dwlXr WDVmQqWSrkL9MA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:11:07 2025 by rpki-client