This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/825cce-0643-4b0b-94b8-b7273c8e3023/1/ndZC_U41WVtf1FikOjrKyLkTlc4.mft File: ndZC_U41WVtf1FikOjrKyLkTlc4.mft (raw, json) Hash identifier: 4VTi6608PtfNRK4+am8PFyyRDixIVjL/6rOBFQdxiiI= Subject key identifier: 59:00:0C:9A:F3:B9:7C:A4:4D:11:F4:24:E1:A1:F6:DF:A9:4F:4B:3D Authority key identifier: 9D:D6:42:FD:4E:35:59:5B:5F:D4:58:A4:3A:3A:CA:C8:B9:13:95:CE Certificate issuer: /CN=9dd642fd4e35595b5fd458a43a3acac8b91395ce Certificate serial: 019B2A77FC6266DA5190CE2AEC4020747482 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ndZC_U41WVtf1FikOjrKyLkTlc4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/825cce-0643-4b0b-94b8-b7273c8e3023/1/ndZC_U41WVtf1FikOjrKyLkTlc4.mft Manifest number: 0D29 Signing time: Wed 17 Dec 2025 04:01:04 +0000 Manifest this update: Wed 17 Dec 2025 04:01:04 +0000 Manifest next update: Thu 18 Dec 2025 04:01:04 +0000 Files and hashes: 1: ECvfm0gD15erbdYEbJ2O8AxuCuo.roa (hash: GjjofPn0BcYPE+NfKTzkDKX8EBfUwYH0FkVVr77Ou74=) 2: ndZC_U41WVtf1FikOjrKyLkTlc4.crl (hash: XPR8LofyRoQhLzcJa+3Gky27T5aIct0fsz/36zsRc84=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/825cce-0643-4b0b-94b8-b7273c8e3023/1/ndZC_U41WVtf1FikOjrKyLkTlc4.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/825cce-0643-4b0b-94b8-b7273c8e3023/1/ndZC_U41WVtf1FikOjrKyLkTlc4.mft rsync://rpki.ripe.net/repository/DEFAULT/ndZC_U41WVtf1FikOjrKyLkTlc4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 04:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2a:77:fc:62:66:da:51:90:ce:2a:ec:40:20:74:74:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9dd642fd4e35595b5fd458a43a3acac8b91395ce Validity Not Before: Dec 17 04:01:04 2025 GMT Not After : Dec 18 04:01:04 2025 GMT Subject: CN=59000c9af3b97ca44d11f424e1a1f6dfa94f4b3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:2d:e2:e4:d3:c6:e7:9d:5d:cc:51:06:50:38: 08:f2:9b:b0:4f:e0:a4:95:76:42:2a:76:51:9d:9c: a7:06:de:fb:d7:e1:9f:8e:d9:af:89:74:dc:6a:40: 82:5c:46:bf:14:6e:f0:f1:68:e4:6c:ec:82:bf:4b: aa:35:a8:58:3c:8e:5c:a6:46:70:cc:cb:b3:b3:05: d1:e4:fe:b3:8c:c8:88:09:80:d3:2f:c1:74:1b:56: 6e:2c:53:b9:90:b5:78:07:28:89:cc:c4:aa:f9:9d: c5:24:63:6c:7a:d8:c0:72:8e:1c:c3:6e:80:2b:7b: 77:ad:01:ec:8a:0c:52:8b:67:2d:7a:74:67:57:20: b4:10:82:9c:c4:17:78:ec:72:7f:99:6f:22:41:bd: 8f:e8:ad:bb:98:f4:e7:aa:d0:9f:c4:b4:8c:fa:d7: ee:ab:18:a0:2b:d0:48:a9:a3:1d:26:be:b0:f4:d9: 10:56:c4:bb:dd:94:9f:6a:d0:52:ff:f8:2b:3c:13: 85:93:30:4b:0d:a7:11:9c:03:cc:a0:b1:1e:0f:7e: ea:57:63:64:0e:9e:3e:2c:b4:e9:24:8b:9d:6e:8c: a5:b2:bd:91:3a:22:ab:a0:0b:72:b9:b6:10:cf:bf: af:49:40:1b:9d:89:66:79:d5:01:6c:f6:3d:2e:86: b0:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:00:0C:9A:F3:B9:7C:A4:4D:11:F4:24:E1:A1:F6:DF:A9:4F:4B:3D X509v3 Authority Key Identifier: keyid:9D:D6:42:FD:4E:35:59:5B:5F:D4:58:A4:3A:3A:CA:C8:B9:13:95:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ndZC_U41WVtf1FikOjrKyLkTlc4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/825cce-0643-4b0b-94b8-b7273c8e3023/1/ndZC_U41WVtf1FikOjrKyLkTlc4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/825cce-0643-4b0b-94b8-b7273c8e3023/1/ndZC_U41WVtf1FikOjrKyLkTlc4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:4a:d8:ba:68:4d:20:55:0b:f3:19:c9:43:09:3b:29:5a:16: 31:df:82:e7:72:9d:e3:e7:e2:17:8b:82:2a:0b:dc:d7:05:f3: 36:69:54:0c:1d:43:be:0e:c7:3c:7d:24:92:a6:d4:8b:09:7d: 2e:35:f4:ef:0c:5e:29:5c:5c:0a:9d:8b:51:53:b6:1d:fc:68: 86:65:3a:a4:99:f3:8c:d9:d8:1b:30:ec:6d:d9:9e:15:79:cd: 33:df:a6:5f:f1:76:8e:26:b2:ae:20:05:e0:1c:88:b7:f1:8b: ec:7a:1a:dc:d2:2c:99:02:20:c2:61:f2:5d:9f:b3:70:d0:dd: 51:c5:9a:7c:8c:a6:12:8c:ef:f5:94:43:2b:e7:ef:4b:37:53: 33:cb:66:ec:65:89:b7:e8:ea:2b:2b:ab:00:47:b6:2b:bf:8a: ad:d4:cc:3e:b6:8c:a2:73:85:f4:99:43:dc:56:16:6a:9d:3d: 74:2a:e1:44:c5:be:db:5d:26:e0:40:6e:67:03:ca:7b:5b:95: 66:68:e5:e4:cc:4a:2f:b3:7e:33:85:f5:49:fb:a7:2b:9a:5b: ba:51:51:36:ca:18:4e:20:53:a9:26:80:82:51:be:f2:28:84: 48:0e:74:1d:20:7b:0b:b9:82:0b:cc:4c:20:2f:a2:d1:f8:19: 99:87:1f:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsqd/xiZtpRkM4q7EAgdHSCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkZDY0MmZkNGUzNTU5NWI1ZmQ0NThhNDNhM2FjYWM4Yjkx Mzk1Y2UwHhcNMjUxMjE3MDQwMTA0WhcNMjUxMjE4MDQwMTA0WjAzMTEwLwYDVQQD Eyg1OTAwMGM5YWYzYjk3Y2E0NGQxMWY0MjRlMWExZjZkZmE5NGY0YjNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4S3i5NPG551dzFEGUDgI8puwT+Ck lXZCKnZRnZynBt771+GfjtmviXTcakCCXEa/FG7w8WjkbOyCv0uqNahYPI5cpkZw zMuzswXR5P6zjMiICYDTL8F0G1ZuLFO5kLV4ByiJzMSq+Z3FJGNsetjAco4cw26A K3t3rQHsigxSi2ctenRnVyC0EIKcxBd47HJ/mW8iQb2P6K27mPTnqtCfxLSM+tfu qxigK9BIqaMdJr6w9NkQVsS73ZSfatBS//grPBOFkzBLDacRnAPMoLEeD37qV2Nk Dp4+LLTpJIudboylsr2ROiKroAtyubYQz7+vSUAbnYlmedUBbPY9LoawzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFkADJrzuXykTRH0JOGh9t+pT0s9MB8GA1UdIwQY MBaAFJ3WQv1ONVlbX9RYpDo6ysi5E5XOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmRaQ19VNDFXVnRmMUZpa09qckt5TGtUbGM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS84MjVjY2UtMDY0My00YjBiLTk0Yjgt YjcyNzNjOGUzMDIzLzEvbmRaQ19VNDFXVnRmMUZpa09qckt5TGtUbGM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS84MjVjY2UtMDY0My00YjBiLTk0YjgtYjcyNzNjOGUzMDIz LzEvbmRaQ19VNDFXVnRmMUZpa09qckt5TGtUbGM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOErYumhN IFUL8xnJQwk7KVoWMd+C53Kd4+fiF4uCKgvc1wXzNmlUDB1Dvg7HPH0kkqbUiwl9 LjX07wxeKVxcCp2LUVO2HfxohmU6pJnzjNnYGzDsbdmeFXnNM9+mX/F2jiayriAF 4ByIt/GL7Hoa3NIsmQIgwmHyXZ+zcNDdUcWafIymEozv9ZRDK+fvSzdTM8tm7GWJ t+jqKyurAEe2K7+KrdTMPraMonOF9JlD3FYWap09dCrhRMW+210m4EBuZwPKe1uV Zmjl5MxKL7N+M4X1SfunK5pbulFRNsoYTiBTqSaAglG+8iiESA50HSB7C7mCC8xM IC+i0fgZmYcfJw== -----END CERTIFICATE-----Generated at Wed Dec 17 13:48:44 2025 by rpki-client