This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.mft File: Nd-0pbxbdb2UqkR7oz9VVxlxzPY.mft (raw, json) Hash identifier: eDP4Gq2RUQGXi3TbjeFHHCUY4ejfdxnRqGpKrg24pfc= Subject key identifier: 3D:A8:60:B0:9F:64:49:9E:8C:82:8A:15:DC:0E:FD:C6:07:75:F5:38 Authority key identifier: 35:DF:B4:A5:BC:5B:75:BD:94:AA:44:7B:A3:3F:55:57:19:71:CC:F6 Certificate issuer: /CN=35dfb4a5bc5b75bd94aa447ba33f55571971ccf6 Certificate serial: 019B35D7300EE04A1FCEAA19F91B0F10358C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.mft Manifest number: 05D2 Signing time: Fri 19 Dec 2025 09:00:53 +0000 Manifest this update: Fri 19 Dec 2025 09:00:53 +0000 Manifest next update: Sat 20 Dec 2025 09:00:53 +0000 Files and hashes: 1: Nd-0pbxbdb2UqkR7oz9VVxlxzPY.crl (hash: oEuM7ndT9U3Nn+raILRDYfNZEiq2ocV70GshzsKeyfY=) 2: mlswz8Ncs32ae7C2It5n-o0yiHo.roa (hash: S5ligNAG6F0uIgpXYHQu/GqcrGyX5LZG4CQQfjCfuRI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.crl rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.mft rsync://rpki.ripe.net/repository/DEFAULT/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:d7:30:0e:e0:4a:1f:ce:aa:19:f9:1b:0f:10:35:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35dfb4a5bc5b75bd94aa447ba33f55571971ccf6 Validity Not Before: Dec 19 09:00:53 2025 GMT Not After : Dec 20 09:00:53 2025 GMT Subject: CN=3da860b09f64499e8c828a15dc0efdc60775f538 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:08:3e:9e:03:14:f5:c8:fc:2f:3f:25:4a:7a: 12:8f:65:be:8e:93:d1:32:98:76:ce:1e:ec:86:42: 46:f4:7f:28:9a:78:9e:b9:b8:45:e9:2b:03:ba:dd: 79:e2:7b:d1:5d:ca:74:95:9d:23:5d:ec:74:6f:2d: 05:04:85:6d:60:f0:b6:d2:ce:ab:49:f6:34:4b:60: 25:2e:a3:63:50:56:d7:e5:a8:27:29:49:1d:71:ce: 36:0f:ef:48:ee:de:df:75:cf:ed:72:44:0c:c2:d9: d6:85:e0:42:49:48:20:79:a8:72:59:34:54:3d:24: 9c:3e:36:95:c7:4f:0b:0d:13:9d:87:e3:b0:a4:ee: b7:31:13:a2:db:90:a9:32:9f:87:2f:65:c5:72:2b: 9f:87:16:8a:2a:53:86:7b:b6:09:42:9e:67:47:62: 7f:e1:91:e0:49:dd:ca:4f:eb:e2:24:8b:63:5c:d8: 33:65:21:53:50:fd:2b:7a:fa:0b:ba:c5:94:d9:cc: c5:8d:e7:34:9d:60:59:c2:76:7a:6c:58:39:d9:5d: 9f:bb:46:c1:87:a4:33:e7:4d:fc:86:46:67:82:74: 8a:08:b4:30:82:ee:e0:a4:24:bc:e0:72:e7:e6:9f: 9e:39:54:f9:b0:79:72:d0:9c:b3:d9:e8:db:d4:c9: 3d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:A8:60:B0:9F:64:49:9E:8C:82:8A:15:DC:0E:FD:C6:07:75:F5:38 X509v3 Authority Key Identifier: keyid:35:DF:B4:A5:BC:5B:75:BD:94:AA:44:7B:A3:3F:55:57:19:71:CC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:cb:31:35:a4:fe:14:c5:10:b8:cc:81:6a:5a:4b:2d:9f:b6: 4e:a6:61:05:ff:ea:f2:19:b1:92:de:97:77:22:4a:b8:b7:f7: ac:ea:34:29:b8:bc:e4:70:36:6c:5c:74:f3:41:cd:ba:8d:a2: 88:9a:1b:17:ca:39:c1:e8:dd:a4:b5:97:ea:76:ae:8b:75:5a: 8c:f1:da:15:29:33:73:c8:dd:68:4b:64:8a:5a:30:dc:8a:13: 7b:04:28:65:25:1c:6d:7e:35:12:21:73:c1:62:92:97:a6:e2: bb:ab:0f:70:c7:ab:78:0d:6b:af:78:7e:05:50:21:88:14:52: b5:62:94:d0:24:59:30:48:89:81:d0:37:0f:ec:03:3f:d1:df: c7:9e:41:fb:40:68:d8:4d:a0:1d:7f:23:6d:87:2c:b1:b2:d7: 0d:43:a4:ff:e6:bd:a7:f1:3e:59:15:42:d8:6b:c8:b7:09:4f: e6:f1:86:ab:4f:65:08:82:8d:a2:25:7d:11:a8:c2:89:3d:45: 9a:99:16:83:f8:41:3c:d8:7e:dd:d5:7d:0f:1e:84:29:78:34: dc:39:50:a8:11:83:62:fd:74:b2:d7:28:5d:08:7e:92:e2:31: 80:45:8a:cc:7f:61:9b:ae:34:b9:69:d5:62:a7:33:be:d0:ad: 44:ab:df:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs11zAO4EofzqoZ+RsPEDWMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1ZGZiNGE1YmM1Yjc1YmQ5NGFhNDQ3YmEzM2Y1NTU3MTk3 MWNjZjYwHhcNMjUxMjE5MDkwMDUzWhcNMjUxMjIwMDkwMDUzWjAzMTEwLwYDVQQD EygzZGE4NjBiMDlmNjQ0OTllOGM4MjhhMTVkYzBlZmRjNjA3NzVmNTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwg+ngMU9cj8Lz8lSnoSj2W+jpPR Mph2zh7shkJG9H8omnieubhF6SsDut154nvRXcp0lZ0jXex0by0FBIVtYPC20s6r SfY0S2AlLqNjUFbX5agnKUkdcc42D+9I7t7fdc/tckQMwtnWheBCSUggeahyWTRU PSScPjaVx08LDROdh+OwpO63MROi25CpMp+HL2XFciufhxaKKlOGe7YJQp5nR2J/ 4ZHgSd3KT+viJItjXNgzZSFTUP0revoLusWU2czFjec0nWBZwnZ6bFg52V2fu0bB h6Qz5038hkZngnSKCLQwgu7gpCS84HLn5p+eOVT5sHly0Jyz2ejb1Mk94QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD2oYLCfZEmejIKKFdwO/cYHdfU4MB8GA1UdIwQY MBaAFDXftKW8W3W9lKpEe6M/VVcZccz2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmQtMHBieGJkYjJVcWtSN296OVZWeGx4elBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8wMWMzMWYtZWUzYy00MzVhLWJmZWQt ZWY4OGIyY2ZlODcyLzEvTmQtMHBieGJkYjJVcWtSN296OVZWeGx4elBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8wMWMzMWYtZWUzYy00MzVhLWJmZWQtZWY4OGIyY2ZlODcy LzEvTmQtMHBieGJkYjJVcWtSN296OVZWeGx4elBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAacsxNaT+ FMUQuMyBalpLLZ+2TqZhBf/q8hmxkt6XdyJKuLf3rOo0Kbi85HA2bFx080HNuo2i iJobF8o5wejdpLWX6naui3VajPHaFSkzc8jdaEtkilow3IoTewQoZSUcbX41EiFz wWKSl6biu6sPcMereA1rr3h+BVAhiBRStWKU0CRZMEiJgdA3D+wDP9Hfx55B+0Bo 2E2gHX8jbYcssbLXDUOk/+a9p/E+WRVC2GvItwlP5vGGq09lCIKNoiV9EajCiT1F mpkWg/hBPNh+3dV9Dx6EKXg03DlQqBGDYv10stcoXQh+kuIxgEWKzH9hm640uWnV YqczvtCtRKvfow== -----END CERTIFICATE-----Generated at Fri Dec 19 11:17:44 2025 by rpki-client