This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NdhRwRSj93nqgCV7HuGCas2uSk4.mft File: NdhRwRSj93nqgCV7HuGCas2uSk4.mft (raw, json) Hash identifier: fKRhIfY85hWDkiF7Qht/mo9gj2IKj03OwB7mQJaKVaY= Subject key identifier: B0:2A:33:36:42:AD:8B:7B:FD:AE:04:16:95:93:B5:54:85:F0:81:AE Authority key identifier: 35:D8:51:C1:14:A3:F7:79:EA:80:25:7B:1E:E1:82:6A:CD:AE:4A:4E Certificate issuer: /CN=35d851c114a3f779ea80257b1ee1826acdae4a4e Certificate serial: 019B484B05339131A93D1A625ECC406C7AF7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NdhRwRSj93nqgCV7HuGCas2uSk4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NdhRwRSj93nqgCV7HuGCas2uSk4.mft Manifest number: 178D Signing time: Mon 22 Dec 2025 23:00:34 +0000 Manifest this update: Mon 22 Dec 2025 23:00:34 +0000 Manifest next update: Tue 23 Dec 2025 23:00:34 +0000 Files and hashes: 1: NdhRwRSj93nqgCV7HuGCas2uSk4.crl (hash: 83EvUCj+QmShl1btCyui2eQNzktO75jKPIz6q7Y3fXY=) 2: QIqKLnFZSvkIdztpTOrghmndfqs.roa (hash: wHBtvNsb06U7COg9JhFFEVNmIo0CSx+CQSOErCnUsO4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NdhRwRSj93nqgCV7HuGCas2uSk4.crl rsync://rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NdhRwRSj93nqgCV7HuGCas2uSk4.mft rsync://rpki.ripe.net/repository/DEFAULT/NdhRwRSj93nqgCV7HuGCas2uSk4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:4b:05:33:91:31:a9:3d:1a:62:5e:cc:40:6c:7a:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35d851c114a3f779ea80257b1ee1826acdae4a4e Validity Not Before: Dec 22 23:00:34 2025 GMT Not After : Dec 23 23:00:34 2025 GMT Subject: CN=b02a333642ad8b7bfdae04169593b55485f081ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0d:ec:d1:28:88:73:53:cf:20:1b:27:54:65: 8d:82:15:c5:69:cf:6d:b3:e0:3f:32:ea:bf:30:4c: 82:d9:a5:02:ec:c9:85:1d:46:7b:d4:cc:39:2b:38: 7a:9a:21:75:f9:2a:94:4d:d6:bb:91:9e:be:83:ae: 2e:41:d3:b1:a0:98:55:8b:83:c4:ad:08:b0:f3:29: 44:f5:27:2b:16:f7:1e:50:0b:9a:2a:4f:a4:57:ce: 4c:8c:0d:4d:cb:7e:65:60:64:da:eb:31:ed:32:0d: b2:b1:d5:a2:ce:2f:bd:2e:c5:0a:ea:a7:ec:19:bd: 04:e4:f5:65:60:45:be:3b:8b:b3:ed:22:5f:71:1b: de:2a:95:09:a8:e0:9e:9a:85:12:21:2a:cc:b9:69: 59:00:42:dd:4d:de:24:55:54:e6:ee:f4:e2:3c:28: 25:19:f8:e8:e4:91:f6:a9:5e:19:1c:64:81:77:7a: 75:e0:2a:da:35:1c:b5:18:4a:92:06:08:20:25:47: 9f:90:d0:93:dd:e5:33:49:48:4d:27:c3:82:51:7b: fa:49:61:4c:e7:87:86:cd:41:d8:ab:7b:d6:a5:77: 9f:c5:80:99:b9:f9:38:88:38:b6:d9:0e:21:de:77: d6:52:3b:14:c3:0b:74:77:97:4e:39:68:a9:57:70: f9:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:2A:33:36:42:AD:8B:7B:FD:AE:04:16:95:93:B5:54:85:F0:81:AE X509v3 Authority Key Identifier: keyid:35:D8:51:C1:14:A3:F7:79:EA:80:25:7B:1E:E1:82:6A:CD:AE:4A:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdhRwRSj93nqgCV7HuGCas2uSk4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NdhRwRSj93nqgCV7HuGCas2uSk4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NdhRwRSj93nqgCV7HuGCas2uSk4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:4a:58:e9:92:d0:06:bd:f9:67:89:4e:48:fd:d0:32:36:1c: bf:76:39:c5:c0:f4:d8:10:46:ae:8a:43:5c:91:5a:ee:34:24: 8f:f2:b2:16:3f:2c:70:86:fd:69:0b:a5:06:1d:4d:ea:ce:0b: c5:52:2c:5b:39:92:8b:aa:86:23:39:7f:9b:68:36:14:f9:e8: d9:15:88:00:29:fe:38:a7:cd:15:04:7a:f4:16:24:01:04:bb: 6d:2c:9f:a2:db:d3:8b:16:26:0e:3d:b0:ee:09:8c:af:5a:76: 26:82:32:18:0f:25:a3:b1:01:02:8b:32:93:c7:0a:f2:13:b2: 4c:0b:f8:6a:2b:89:e2:b5:5b:ac:28:48:ea:f5:29:ea:f5:66: b5:36:92:f0:57:12:fd:e4:64:14:a4:d2:df:c0:2b:cd:9b:9f: 39:a2:46:d1:78:95:db:9a:5b:9f:89:f6:01:c0:da:d4:d4:c4: 7f:6f:64:a9:5f:a5:de:84:7f:61:62:18:c8:f4:5a:d6:5b:2c: 5b:48:60:fe:1d:fe:31:f4:6c:c9:e2:5b:c7:25:e2:a3:af:9d: 09:92:5e:71:50:53:7f:f7:79:5f:f0:7a:4a:e7:5b:80:8c:75: 23:52:11:35:a0:8f:27:48:1a:64:6a:54:84:a7:08:c8:53:d6: ac:36:8e:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtISwUzkTGpPRpiXsxAbHr3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1ZDg1MWMxMTRhM2Y3NzllYTgwMjU3YjFlZTE4MjZhY2Rh ZTRhNGUwHhcNMjUxMjIyMjMwMDM0WhcNMjUxMjIzMjMwMDM0WjAzMTEwLwYDVQQD EyhiMDJhMzMzNjQyYWQ4YjdiZmRhZTA0MTY5NTkzYjU1NDg1ZjA4MWFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArw3s0SiIc1PPIBsnVGWNghXFac9t s+A/Muq/MEyC2aUC7MmFHUZ71Mw5Kzh6miF1+SqUTda7kZ6+g64uQdOxoJhVi4PE rQiw8ylE9ScrFvceUAuaKk+kV85MjA1Ny35lYGTa6zHtMg2ysdWizi+9LsUK6qfs Gb0E5PVlYEW+O4uz7SJfcRveKpUJqOCemoUSISrMuWlZAELdTd4kVVTm7vTiPCgl Gfjo5JH2qV4ZHGSBd3p14CraNRy1GEqSBgggJUefkNCT3eUzSUhNJ8OCUXv6SWFM 54eGzUHYq3vWpXefxYCZufk4iDi22Q4h3nfWUjsUwwt0d5dOOWipV3D5ewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLAqMzZCrYt7/a4EFpWTtVSF8IGuMB8GA1UdIwQY MBaAFDXYUcEUo/d56oAlex7hgmrNrkpOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmRoUndSU2o5M25xZ0NWN0h1R0NhczJ1U2s0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9mZmZlZTEtYmQ0Ni00NTIzLTllY2Et NzA1NTYzMTM3ZDdhLzEvTmRoUndSU2o5M25xZ0NWN0h1R0NhczJ1U2s0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9mZmZlZTEtYmQ0Ni00NTIzLTllY2EtNzA1NTYzMTM3ZDdh LzEvTmRoUndSU2o5M25xZ0NWN0h1R0NhczJ1U2s0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeUpY6ZLQ Br35Z4lOSP3QMjYcv3Y5xcD02BBGropDXJFa7jQkj/KyFj8scIb9aQulBh1N6s4L xVIsWzmSi6qGIzl/m2g2FPno2RWIACn+OKfNFQR69BYkAQS7bSyfotvTixYmDj2w 7gmMr1p2JoIyGA8lo7EBAosyk8cK8hOyTAv4aiuJ4rVbrChI6vUp6vVmtTaS8FcS /eRkFKTS38ArzZufOaJG0XiV25pbn4n2AcDa1NTEf29kqV+l3oR/YWIYyPRa1lss W0hg/h3+MfRsyeJbxyXio6+dCZJecVBTf/d5X/B6SudbgIx1I1IRNaCPJ0gaZGpU hKcIyFPWrDaOqw== -----END CERTIFICATE-----Generated at Tue Dec 23 07:58:06 2025 by rpki-client