This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a9bd93-92bd-4bf9-b655-adcefdaa1028/1/m-NDwvs9a40jeJq02m_NRlppBYM.mft File: m-NDwvs9a40jeJq02m_NRlppBYM.mft (raw, json) Hash identifier: cIE/8FCJWi61yTV+gI/CKPE3z3fIJD/aiOHvcejypzo= Subject key identifier: DD:CB:D9:2D:99:2D:05:30:2A:DD:12:11:39:2A:95:2B:F9:E7:93:19 Authority key identifier: 9B:E3:43:C2:FB:3D:6B:8D:23:78:9A:B4:DA:6F:CD:46:5A:69:05:83 Certificate issuer: /CN=9be343c2fb3d6b8d23789ab4da6fcd465a690583 Certificate serial: 019AF23FD294D20825073C03040F89FD538C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-NDwvs9a40jeJq02m_NRlppBYM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a9bd93-92bd-4bf9-b655-adcefdaa1028/1/m-NDwvs9a40jeJq02m_NRlppBYM.mft Manifest number: 0B4C Signing time: Sat 06 Dec 2025 06:01:00 +0000 Manifest this update: Sat 06 Dec 2025 06:01:00 +0000 Manifest next update: Sun 07 Dec 2025 06:01:00 +0000 Files and hashes: 1: V1rYVkHJ4iIIHNg29wauYpELwcg.roa (hash: 7R1pOTL7gS5y/fLoZFKL53bP7clTOjblHiZzRpiMJxQ=) 2: m-NDwvs9a40jeJq02m_NRlppBYM.crl (hash: iIYTCv/fJCA6U68JISiKNZxO1UBuPuI9s0nnyEBNb9Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a9bd93-92bd-4bf9-b655-adcefdaa1028/1/m-NDwvs9a40jeJq02m_NRlppBYM.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/a9bd93-92bd-4bf9-b655-adcefdaa1028/1/m-NDwvs9a40jeJq02m_NRlppBYM.mft rsync://rpki.ripe.net/repository/DEFAULT/m-NDwvs9a40jeJq02m_NRlppBYM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:d2:94:d2:08:25:07:3c:03:04:0f:89:fd:53:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9be343c2fb3d6b8d23789ab4da6fcd465a690583 Validity Not Before: Dec 6 06:01:00 2025 GMT Not After : Dec 7 06:01:00 2025 GMT Subject: CN=ddcbd92d992d05302add1211392a952bf9e79319 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:7d:31:ca:df:e3:61:55:34:06:41:e8:82:cb: a3:ac:c4:69:d1:4a:74:d1:ea:0b:a3:9c:17:df:10: 3d:f3:73:10:a1:8d:8a:15:d4:b0:58:d2:ca:5c:be: c9:c2:b1:43:e0:5f:4f:7f:16:76:c8:91:16:5c:9f: 9a:58:3b:27:f6:5a:fc:7d:af:33:4a:34:49:e6:a0: 40:83:95:c8:7d:5b:9c:75:d5:20:6e:00:eb:b7:ab: 85:c5:48:31:7e:04:8a:93:9a:01:b2:72:76:12:30: c6:f3:14:c1:d5:bd:1a:a1:0d:44:67:e4:20:48:c7: ae:1d:fc:82:77:3c:fa:56:1d:2c:46:33:9e:97:be: 0c:63:a3:12:cd:9f:cb:27:59:c0:42:af:10:2b:3e: b2:6f:96:92:54:bd:73:6b:c8:9f:1c:78:84:d7:71: 27:71:61:ce:cc:95:79:61:cd:92:ad:4d:63:bf:90: 62:77:17:34:b6:98:8a:f9:30:35:52:33:0c:60:be: bf:a8:35:8c:98:8d:77:3e:34:32:cd:59:a2:16:68: 33:70:6d:c5:64:d1:b4:5f:2a:76:2b:49:0d:94:45: cf:0e:74:7f:2e:7d:5c:67:d5:29:f3:0e:36:b7:91: d8:8b:f2:00:40:cf:8b:21:fb:d9:0e:45:00:3d:56: d9:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:CB:D9:2D:99:2D:05:30:2A:DD:12:11:39:2A:95:2B:F9:E7:93:19 X509v3 Authority Key Identifier: keyid:9B:E3:43:C2:FB:3D:6B:8D:23:78:9A:B4:DA:6F:CD:46:5A:69:05:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-NDwvs9a40jeJq02m_NRlppBYM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a9bd93-92bd-4bf9-b655-adcefdaa1028/1/m-NDwvs9a40jeJq02m_NRlppBYM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a9bd93-92bd-4bf9-b655-adcefdaa1028/1/m-NDwvs9a40jeJq02m_NRlppBYM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:7b:1f:68:bb:5e:53:8f:41:59:4c:0a:35:91:5b:2f:54:30: f9:cb:b1:c2:28:d1:28:82:c5:f9:84:4f:aa:ce:c1:09:f6:b9: fd:1a:65:0e:9f:55:4f:46:14:f2:f0:9b:7e:db:82:cf:cf:f9: ab:1b:a6:a2:19:7a:bc:f5:0d:ce:8b:66:1a:6f:51:d3:32:ea: e4:7c:88:e0:ac:d1:8b:30:43:47:fb:d2:6b:9e:c4:51:da:ac: 71:20:6f:f6:1c:ed:e4:26:6d:a7:6e:e3:0a:36:f7:99:a8:80: 40:ae:e4:45:b8:92:a7:48:a7:b1:d5:a9:4c:9a:7c:fc:4d:17: b4:4e:d2:fb:e0:5c:ac:0a:20:f1:51:cd:ba:46:0a:9d:06:27: 60:4e:24:3b:7a:cd:26:7d:61:27:8e:00:fb:24:2e:ef:c3:93: 47:3e:66:29:f0:eb:aa:02:02:e1:b8:b4:6b:9d:84:56:57:09: 94:8c:66:85:23:4b:cc:b5:85:91:90:86:cc:69:82:c8:4c:f0: 9a:c4:b0:58:0c:c1:ab:fa:36:b4:54:b7:23:72:ad:c9:14:8b: fc:0c:2b:64:09:f6:cc:c2:71:35:58:7d:91:0b:9a:01:1d:f5: d2:7e:36:c3:1b:d3:0a:b9:7b:89:5c:f9:e2:68:5d:57:ea:c4: ba:af:5d:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP9KU0gglBzwDBA+J/VOMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliZTM0M2MyZmIzZDZiOGQyMzc4OWFiNGRhNmZjZDQ2NWE2 OTA1ODMwHhcNMjUxMjA2MDYwMTAwWhcNMjUxMjA3MDYwMTAwWjAzMTEwLwYDVQQD EyhkZGNiZDkyZDk5MmQwNTMwMmFkZDEyMTEzOTJhOTUyYmY5ZTc5MzE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA030xyt/jYVU0BkHogsujrMRp0Up0 0eoLo5wX3xA983MQoY2KFdSwWNLKXL7JwrFD4F9PfxZ2yJEWXJ+aWDsn9lr8fa8z SjRJ5qBAg5XIfVucddUgbgDrt6uFxUgxfgSKk5oBsnJ2EjDG8xTB1b0aoQ1EZ+Qg SMeuHfyCdzz6Vh0sRjOel74MY6MSzZ/LJ1nAQq8QKz6yb5aSVL1za8ifHHiE13En cWHOzJV5Yc2SrU1jv5Bidxc0tpiK+TA1UjMMYL6/qDWMmI13PjQyzVmiFmgzcG3F ZNG0Xyp2K0kNlEXPDnR/Ln1cZ9Up8w42t5HYi/IAQM+LIfvZDkUAPVbZIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN3L2S2ZLQUwKt0SETkqlSv555MZMB8GA1UdIwQY MBaAFJvjQ8L7PWuNI3iatNpvzUZaaQWDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbS1ORHd2czlhNDBqZUpxMDJtX05SbHBwQllNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hOWJkOTMtOTJiZC00YmY5LWI2NTUt YWRjZWZkYWExMDI4LzEvbS1ORHd2czlhNDBqZUpxMDJtX05SbHBwQllNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9hOWJkOTMtOTJiZC00YmY5LWI2NTUtYWRjZWZkYWExMDI4 LzEvbS1ORHd2czlhNDBqZUpxMDJtX05SbHBwQllNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEnsfaLte U49BWUwKNZFbL1Qw+cuxwijRKILF+YRPqs7BCfa5/RplDp9VT0YU8vCbftuCz8/5 qxumohl6vPUNzotmGm9R0zLq5HyI4KzRizBDR/vSa57EUdqscSBv9hzt5CZtp27j Cjb3maiAQK7kRbiSp0insdWpTJp8/E0XtE7S++BcrAog8VHNukYKnQYnYE4kO3rN Jn1hJ44A+yQu78OTRz5mKfDrqgIC4bi0a52EVlcJlIxmhSNLzLWFkZCGzGmCyEzw msSwWAzBq/o2tFS3I3KtyRSL/AwrZAn2zMJxNVh9kQuaAR310n42wxvTCrl7iVz5 4mhdV+rEuq9d5A== -----END CERTIFICATE-----Generated at Sat Dec 6 11:07:10 2025 by rpki-client