This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.mft File: ndUEhgp8kk5yHL-upfSacsgpbDU.mft (raw, json) Hash identifier: 3OsyZVrCRcAhNXb6SLrcS6fkSroqXFXu6cKSJOmGrnA= Subject key identifier: 7A:1F:E8:56:7B:4D:15:01:23:C7:6A:1E:CA:63:5D:40:DB:7D:C3:34 Authority key identifier: 9D:D5:04:86:0A:7C:92:4E:72:1C:BF:AE:A5:F4:9A:72:C8:29:6C:35 Certificate issuer: /CN=9dd504860a7c924e721cbfaea5f49a72c8296c35 Certificate serial: 019AF31C5C1A2AF553D14515C3723B3AF864 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ndUEhgp8kk5yHL-upfSacsgpbDU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.mft Manifest number: 14A2 Signing time: Sat 06 Dec 2025 10:01:53 +0000 Manifest this update: Sat 06 Dec 2025 10:01:53 +0000 Manifest next update: Sun 07 Dec 2025 10:01:53 +0000 Files and hashes: 1: X5jYbn-h_3ZrymXeQcutqUSQLI0.roa (hash: m8dLiyB+f2bY0CN3q6gxqkEWD+kF5d7UEcU/fd6EB40=) 2: nO41lzHTLA0qnXGNSido0EKnbG8.roa (hash: p9hF7X8F0vCkUimBjAw1aM4Oym1MBxjaah21sqRzrUE=) 3: ndUEhgp8kk5yHL-upfSacsgpbDU.crl (hash: xaOojvC0vsTUEN356i0fTircWvN3EI24wcMDU7o4W84=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.mft rsync://rpki.ripe.net/repository/DEFAULT/ndUEhgp8kk5yHL-upfSacsgpbDU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:5c:1a:2a:f5:53:d1:45:15:c3:72:3b:3a:f8:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9dd504860a7c924e721cbfaea5f49a72c8296c35 Validity Not Before: Dec 6 10:01:53 2025 GMT Not After : Dec 7 10:01:53 2025 GMT Subject: CN=7a1fe8567b4d150123c76a1eca635d40db7dc334 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:92:71:68:35:21:a5:a0:7f:be:7c:8d:11:69: e2:16:cd:09:63:3c:24:59:20:2a:82:b4:8d:32:9e: ea:9f:31:cd:d0:34:75:4e:4f:c1:03:1c:7e:4d:e5: 28:01:a0:59:b3:92:d5:30:51:1d:c8:25:39:97:84: 03:36:24:c6:1b:69:17:22:61:1d:cb:b5:c6:dc:7e: 7e:63:ec:e6:b3:b9:65:7d:01:09:48:22:b7:cf:ee: 6c:0d:9a:97:d8:e7:74:3d:47:78:d5:d5:a6:1f:a6: c7:3b:9b:22:a6:29:09:ae:64:a2:56:d6:97:59:d7: c7:23:8f:e7:59:05:28:a5:1a:15:ad:7c:53:ed:f4: ce:6c:94:75:24:fe:a6:10:f3:5e:3c:88:9e:f8:77: 97:91:17:9f:e8:bd:06:66:5d:52:69:fa:d0:1d:e9: eb:50:a2:29:29:3d:63:32:e0:34:92:08:bb:c6:35: 06:75:90:f1:0e:ad:7e:63:cc:6c:ce:bf:7d:81:d6: b0:8f:71:64:8c:33:a3:30:f5:31:35:f5:d1:90:be: 05:11:0b:84:3a:7c:82:f6:40:ac:59:fc:8d:07:28: 2e:4f:57:e7:c3:fb:ec:d4:c8:9e:7f:8b:7b:af:67: a8:ed:46:14:0e:55:08:60:58:5d:4d:bb:64:aa:d7: 2e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:1F:E8:56:7B:4D:15:01:23:C7:6A:1E:CA:63:5D:40:DB:7D:C3:34 X509v3 Authority Key Identifier: keyid:9D:D5:04:86:0A:7C:92:4E:72:1C:BF:AE:A5:F4:9A:72:C8:29:6C:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ndUEhgp8kk5yHL-upfSacsgpbDU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:77:97:42:12:27:b0:ab:26:73:c4:b3:d0:fe:da:29:9e:ae: d5:87:44:fb:6f:c5:40:b8:6d:ac:d4:0c:65:a7:71:93:87:38: 65:7c:81:ce:0e:15:af:c4:c8:f7:ed:24:37:eb:82:a2:d7:e0: 58:64:12:4f:34:6b:1c:fd:5b:cf:2f:76:74:37:8e:7e:10:67: 00:98:02:80:85:44:5d:0e:b5:62:89:f1:b0:9a:5d:20:73:50: d0:9a:73:07:4c:ec:35:e4:90:94:43:a9:e6:5e:f3:9b:3b:de: 2b:ef:e7:63:21:cc:34:4d:52:3c:cc:2d:9e:91:9d:d4:ac:d3: 23:04:81:b8:90:79:d1:f8:07:b2:d8:f6:d0:53:34:6f:c8:27: 23:b4:6c:b5:ed:f4:08:39:ac:0a:e4:74:ae:65:a6:7f:4b:6a: 26:d3:e6:56:c8:45:94:e4:63:f3:08:5d:22:ea:7e:02:09:31: d3:3b:4b:9d:a2:38:78:14:98:f8:13:07:9a:80:67:5b:b4:46: 04:b6:00:a4:64:03:57:15:c3:c8:9d:0d:8d:44:ee:de:49:1c: 97:d6:fe:13:8c:fa:8a:b8:0e:ba:fb:0a:e5:49:ca:9c:a7:20: 9d:88:c8:0a:ff:8d:09:16:75:43:3f:36:5b:7c:d9:69:08:3a: 87:52:58:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHFwaKvVT0UUVw3I7OvhkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkZDUwNDg2MGE3YzkyNGU3MjFjYmZhZWE1ZjQ5YTcyYzgy OTZjMzUwHhcNMjUxMjA2MTAwMTUzWhcNMjUxMjA3MTAwMTUzWjAzMTEwLwYDVQQD Eyg3YTFmZTg1NjdiNGQxNTAxMjNjNzZhMWVjYTYzNWQ0MGRiN2RjMzM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2JJxaDUhpaB/vnyNEWniFs0JYzwk WSAqgrSNMp7qnzHN0DR1Tk/BAxx+TeUoAaBZs5LVMFEdyCU5l4QDNiTGG2kXImEd y7XG3H5+Y+zms7llfQEJSCK3z+5sDZqX2Od0PUd41dWmH6bHO5sipikJrmSiVtaX WdfHI4/nWQUopRoVrXxT7fTObJR1JP6mEPNePIie+HeXkRef6L0GZl1SafrQHenr UKIpKT1jMuA0kgi7xjUGdZDxDq1+Y8xszr99gdawj3FkjDOjMPUxNfXRkL4FEQuE OnyC9kCsWfyNByguT1fnw/vs1Mief4t7r2eo7UYUDlUIYFhdTbtkqtcuQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHof6FZ7TRUBI8dqHspjXUDbfcM0MB8GA1UdIwQY MBaAFJ3VBIYKfJJOchy/rqX0mnLIKWw1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmRVRWhncDhrazV5SEwtdXBmU2Fjc2dwYkRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi80OTYyMzItZDE4Yi00NTU0LTlhNDMt NDMyZjVjMWY0MWY3LzEvbmRVRWhncDhrazV5SEwtdXBmU2Fjc2dwYkRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi80OTYyMzItZDE4Yi00NTU0LTlhNDMtNDMyZjVjMWY0MWY3 LzEvbmRVRWhncDhrazV5SEwtdXBmU2Fjc2dwYkRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlneXQhIn sKsmc8Sz0P7aKZ6u1YdE+2/FQLhtrNQMZadxk4c4ZXyBzg4Vr8TI9+0kN+uCotfg WGQSTzRrHP1bzy92dDeOfhBnAJgCgIVEXQ61YonxsJpdIHNQ0JpzB0zsNeSQlEOp 5l7zmzveK+/nYyHMNE1SPMwtnpGd1KzTIwSBuJB50fgHstj20FM0b8gnI7Rste30 CDmsCuR0rmWmf0tqJtPmVshFlORj8whdIup+Agkx0ztLnaI4eBSY+BMHmoBnW7RG BLYApGQDVxXDyJ0NjUTu3kkcl9b+E4z6irgOuvsK5UnKnKcgnYjICv+NCRZ1Qz82 W3zZaQg6h1JYvA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:34:45 2025 by rpki-client