This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft File: NDOuHGBnLHWRqPl9aPefsqXujac.mft (raw, json) Hash identifier: QPMEPEAHOzxc1mDPNbfersMslD8Ihyqp3QHyI0eSU70= Subject key identifier: 49:61:15:70:FA:3C:46:0B:46:F0:F8:E8:E0:24:DB:BE:55:78:C5:BA Authority key identifier: 34:33:AE:1C:60:67:2C:75:91:A8:F9:7D:68:F7:9F:B2:A5:EE:8D:A7 Certificate issuer: /CN=3433ae1c60672c7591a8f97d68f79fb2a5ee8da7 Certificate serial: 019B1C857C83E47CBE9841C560351D9CEC35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft Manifest number: 1789 Signing time: Sun 14 Dec 2025 11:01:08 +0000 Manifest this update: Sun 14 Dec 2025 11:01:08 +0000 Manifest next update: Mon 15 Dec 2025 11:01:08 +0000 Files and hashes: 1: 50YGB-iroCpOpfGPSSu1Hpntzf4.roa (hash: 5lvnT6co7VzA/8N8iu7cBVjZRHM9ciTul33FqxkRdLg=) 2: 6JSS-KrBs6Yqw6gX0_excaV8mik.roa (hash: DX4Jt/llE5ZgoLSzlo+jbWwMMSWiYxeZw76o/uT/uPY=) 3: JcWTldbQOIZGPvSNpxUs4o4GK0w.roa (hash: Dx0/U8f+E3+2gBwNiiT/bEtL46Po4YuFRMtF5c7r41s=) 4: NDOuHGBnLHWRqPl9aPefsqXujac.crl (hash: Ip0XTRTj0v3cyK8XMecHobb+RQ53KJN/H8xQzsUPMy0=) 5: lueOGsmRqtrrI8WrcoKHoZ1cytA.roa (hash: qxTTmNr1wg9Q8H+R7DTVE3uMIjhi2C5reWu9yD0lXnA=) 6: rDXQIV_fU3zuPiVY7wVNU5XfnEY.roa (hash: 28GznyJvIwudik/8fUuc6bNx01Y6R3bFn9/NBv6jU90=) 7: yIXDpYWYaCwEFGgii0w8mAe6aKE.roa (hash: kpPsmD1/gHbiuZR5vWf8YWncSE2HiZ9uJEAXpqQD68g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.crl rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:85:7c:83:e4:7c:be:98:41:c5:60:35:1d:9c:ec:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3433ae1c60672c7591a8f97d68f79fb2a5ee8da7 Validity Not Before: Dec 14 11:01:08 2025 GMT Not After : Dec 15 11:01:08 2025 GMT Subject: CN=49611570fa3c460b46f0f8e8e024dbbe5578c5ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:34:da:8f:48:48:15:c5:c2:8e:72:4c:56:eb: 98:24:5d:6e:5a:e1:1c:7c:b7:b8:e7:30:57:f1:72: d4:50:f3:0c:4d:e3:55:5c:fe:9c:7a:af:72:a0:67: 5c:f9:ff:b0:73:f4:4a:dc:d8:f7:76:3c:a7:46:09: 0a:8b:d9:66:a8:f7:28:36:43:76:f3:e2:19:62:fa: e5:27:5c:54:3e:fd:14:e8:70:d4:9f:fe:76:30:28: 7f:25:87:b7:43:9d:16:1c:e0:63:ea:d8:6a:a5:c0: f0:85:3c:84:8b:39:8a:c1:ce:72:26:b3:60:19:a9: 99:d0:cc:3f:c7:23:f8:9d:69:81:06:28:bc:bf:ac: d7:dc:e3:67:e1:e2:5f:fb:1a:8d:85:09:95:c6:42: 1a:a7:88:ca:c2:73:7f:ec:1e:4a:66:63:78:1e:f5: 97:e6:53:f8:39:63:77:f5:3a:0e:4e:a5:f8:d6:bb: f2:45:31:91:58:61:39:5c:fc:a2:35:33:4d:bc:32: ac:e3:f0:94:30:c4:e2:96:31:f4:06:29:67:9d:2e: 50:3d:b5:fd:fb:f1:34:19:a7:31:76:36:75:c4:28: 29:2d:2d:d4:a3:fc:1c:5a:20:52:3e:55:78:e1:69: 83:9e:06:ae:47:0d:80:0b:24:22:7b:bc:c4:e8:10: 93:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:61:15:70:FA:3C:46:0B:46:F0:F8:E8:E0:24:DB:BE:55:78:C5:BA X509v3 Authority Key Identifier: keyid:34:33:AE:1C:60:67:2C:75:91:A8:F9:7D:68:F7:9F:B2:A5:EE:8D:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:ae:77:32:98:d7:e7:65:d7:cb:05:2e:e7:86:05:81:08:03: b6:e4:7e:eb:30:19:e4:13:84:52:50:49:f4:cb:0f:86:71:d9: 47:22:b2:b4:84:c3:e6:51:03:04:f7:c1:8e:74:d2:5c:2b:32: f0:f6:fc:9a:d4:17:91:81:36:17:9a:f8:26:f1:c3:f7:92:bb: 27:76:2c:62:86:31:a9:1a:87:3f:f9:92:65:33:d3:b1:d2:aa: 66:6b:55:8b:37:fc:ff:8e:b0:fe:d5:0d:4b:89:59:57:d9:3f: ef:f1:6d:66:08:02:93:25:9b:24:b6:38:73:48:5c:6a:d9:68: 34:a8:cf:6e:cd:c4:f5:5c:0b:06:b3:91:0a:49:3f:d5:86:d7: 2d:41:3b:d1:67:2b:69:56:26:ff:5c:7b:8b:9b:16:fb:f7:b0: d8:47:a2:ac:60:e4:84:39:9c:8a:ea:0d:79:4e:17:5f:bb:a2: fb:46:cf:4f:b6:95:31:8c:7a:ad:aa:3a:77:83:75:68:d7:3f: e1:e2:59:ae:31:48:42:d5:45:6e:88:e7:f0:dc:da:fe:a5:bc: ab:cf:37:91:50:b3:a0:46:5c:d2:0d:8e:22:0c:4f:24:5b:5f: 85:89:ed:e0:0a:21:ab:d4:9d:4f:e2:44:08:8b:52:d8:03:ad: 76:bc:fc:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZschXyD5Hy+mEHFYDUdnOw1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0MzNhZTFjNjA2NzJjNzU5MWE4Zjk3ZDY4Zjc5ZmIyYTVl ZThkYTcwHhcNMjUxMjE0MTEwMTA4WhcNMjUxMjE1MTEwMTA4WjAzMTEwLwYDVQQD Eyg0OTYxMTU3MGZhM2M0NjBiNDZmMGY4ZThlMDI0ZGJiZTU1NzhjNWJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTTaj0hIFcXCjnJMVuuYJF1uWuEc fLe45zBX8XLUUPMMTeNVXP6ceq9yoGdc+f+wc/RK3Nj3djynRgkKi9lmqPcoNkN2 8+IZYvrlJ1xUPv0U6HDUn/52MCh/JYe3Q50WHOBj6thqpcDwhTyEizmKwc5yJrNg GamZ0Mw/xyP4nWmBBii8v6zX3ONn4eJf+xqNhQmVxkIap4jKwnN/7B5KZmN4HvWX 5lP4OWN39ToOTqX41rvyRTGRWGE5XPyiNTNNvDKs4/CUMMTiljH0BilnnS5QPbX9 +/E0GacxdjZ1xCgpLS3Uo/wcWiBSPlV44WmDngauRw2ACyQie7zE6BCTwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFElhFXD6PEYLRvD46OAk275VeMW6MB8GA1UdIwQY MBaAFDQzrhxgZyx1kaj5fWj3n7Kl7o2nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkRPdUhHQm5MSFdScVBsOWFQZWZzcVh1amFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My85Y2E0NDYtZmM1Yy00NzQ2LWIyNmYt MzBjZTgzNzAxYjM5LzEvTkRPdUhHQm5MSFdScVBsOWFQZWZzcVh1amFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My85Y2E0NDYtZmM1Yy00NzQ2LWIyNmYtMzBjZTgzNzAxYjM5 LzEvTkRPdUhHQm5MSFdScVBsOWFQZWZzcVh1amFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVq53MpjX 52XXywUu54YFgQgDtuR+6zAZ5BOEUlBJ9MsPhnHZRyKytITD5lEDBPfBjnTSXCsy 8Pb8mtQXkYE2F5r4JvHD95K7J3YsYoYxqRqHP/mSZTPTsdKqZmtVizf8/46w/tUN S4lZV9k/7/FtZggCkyWbJLY4c0hcatloNKjPbs3E9VwLBrORCkk/1YbXLUE70Wcr aVYm/1x7i5sW+/ew2EeirGDkhDmciuoNeU4XX7ui+0bPT7aVMYx6rao6d4N1aNc/ 4eJZrjFIQtVFbojn8Nza/qW8q883kVCzoEZc0g2OIgxPJFtfhYnt4Aohq9SdT+JE CItS2AOtdrz8ew== -----END CERTIFICATE-----Generated at Sun Dec 14 19:18:40 2025 by rpki-client