This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft File: NDOuHGBnLHWRqPl9aPefsqXujac.mft (raw, json) Hash identifier: LwD5yxWgO4urZihs6n92sa7qqr2SxXmoWst3C9+kYT8= Subject key identifier: 4B:11:E2:55:04:85:08:33:E3:0C:D7:5D:18:79:45:D1:34:92:16:2A Authority key identifier: 34:33:AE:1C:60:67:2C:75:91:A8:F9:7D:68:F7:9F:B2:A5:EE:8D:A7 Certificate issuer: /CN=3433ae1c60672c7591a8f97d68f79fb2a5ee8da7 Certificate serial: 019B432502282A44F261BEE432620BD628DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft Manifest number: 179D Signing time: Sun 21 Dec 2025 23:00:57 +0000 Manifest this update: Sun 21 Dec 2025 23:00:57 +0000 Manifest next update: Mon 22 Dec 2025 23:00:57 +0000 Files and hashes: 1: 50YGB-iroCpOpfGPSSu1Hpntzf4.roa (hash: 5lvnT6co7VzA/8N8iu7cBVjZRHM9ciTul33FqxkRdLg=) 2: 6JSS-KrBs6Yqw6gX0_excaV8mik.roa (hash: DX4Jt/llE5ZgoLSzlo+jbWwMMSWiYxeZw76o/uT/uPY=) 3: JcWTldbQOIZGPvSNpxUs4o4GK0w.roa (hash: Dx0/U8f+E3+2gBwNiiT/bEtL46Po4YuFRMtF5c7r41s=) 4: NDOuHGBnLHWRqPl9aPefsqXujac.crl (hash: UtJ0OMuedKvewt3YnMDSKKHjXKc1rQX8AkN8mdfjysQ=) 5: lueOGsmRqtrrI8WrcoKHoZ1cytA.roa (hash: qxTTmNr1wg9Q8H+R7DTVE3uMIjhi2C5reWu9yD0lXnA=) 6: rDXQIV_fU3zuPiVY7wVNU5XfnEY.roa (hash: 28GznyJvIwudik/8fUuc6bNx01Y6R3bFn9/NBv6jU90=) 7: yIXDpYWYaCwEFGgii0w8mAe6aKE.roa (hash: kpPsmD1/gHbiuZR5vWf8YWncSE2HiZ9uJEAXpqQD68g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.crl rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:25:02:28:2a:44:f2:61:be:e4:32:62:0b:d6:28:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3433ae1c60672c7591a8f97d68f79fb2a5ee8da7 Validity Not Before: Dec 21 23:00:57 2025 GMT Not After : Dec 22 23:00:57 2025 GMT Subject: CN=4b11e25504850833e30cd75d187945d13492162a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:1e:a0:55:5a:88:80:c4:ee:fb:0a:eb:fc:cf: 1c:89:d1:7e:02:66:78:d7:2b:7d:ec:79:b0:0e:8f: 2a:c7:21:6c:6b:26:75:b0:d9:2a:61:7c:3b:ad:7e: 62:51:f1:c5:eb:5d:50:13:5e:57:86:b9:d3:e4:a3: 6c:3b:77:b1:2c:ff:c2:ee:4c:d8:0b:75:31:99:fb: 62:ce:c3:55:3b:22:fe:96:a1:e4:fd:eb:ff:78:44: f1:c2:af:ed:45:68:ec:83:0a:12:db:ae:6e:b6:9c: d3:dd:51:48:88:fc:3a:10:a4:5b:2f:c2:0d:26:c9: 45:5a:e9:24:e8:bd:4a:7c:ba:34:d3:57:6e:10:24: 04:bf:94:f0:35:e1:b6:a2:64:9c:1e:86:33:20:9b: 43:6f:26:77:30:3e:62:e1:da:9f:de:a0:52:f4:5d: 92:88:dd:02:6c:3a:0a:c3:ad:12:dc:84:41:16:e8: 8b:07:c1:67:09:69:78:2c:a3:6d:c7:9c:6d:a6:bf: 37:c1:1d:16:1f:7e:9a:e9:79:bb:f6:3f:5e:b7:9a: 42:c8:83:43:bc:fe:ef:9e:7e:fd:a2:1b:7f:09:05: 70:b6:0a:e6:5e:24:6e:5d:c3:36:43:9b:73:c2:af: da:e7:f9:86:d8:ef:f5:39:9c:d7:9d:d3:2b:9e:03: 0b:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:11:E2:55:04:85:08:33:E3:0C:D7:5D:18:79:45:D1:34:92:16:2A X509v3 Authority Key Identifier: keyid:34:33:AE:1C:60:67:2C:75:91:A8:F9:7D:68:F7:9F:B2:A5:EE:8D:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:7b:31:14:75:d1:00:fa:88:5b:55:d6:9c:43:0e:6f:83:4e: 3b:2f:21:ed:c7:04:5c:26:f0:6d:ba:90:f0:96:08:e9:02:50: 89:28:5a:f2:b6:a8:9e:f5:b2:7c:bf:6f:8e:df:39:4b:d6:ae: 55:27:66:a2:33:1e:c0:cf:4a:4c:5f:1d:48:82:ba:1e:5b:16: 5f:88:a1:d5:45:e6:8c:bb:9a:7e:d8:7a:f1:22:e0:01:ee:8d: 18:0a:88:35:bd:00:c5:1f:68:43:4e:34:2a:bd:fb:60:ed:f5: 4b:3b:c5:ba:05:99:32:45:02:0a:54:21:ef:1f:4f:aa:48:91: 72:43:0e:27:63:e4:fe:24:05:99:01:67:dd:65:f0:f2:33:44: 0b:50:50:80:6d:42:7f:ae:78:ef:6c:f9:ba:ce:48:ad:43:d2: 4f:dc:8e:20:7f:2e:c9:42:3b:c6:5a:ef:71:20:8c:5b:bb:34: 83:65:9f:2a:c7:94:37:4f:d3:c9:3c:d0:86:fe:d3:a5:bf:f7: 9f:f2:ea:89:55:b1:17:ae:f2:55:7a:24:fa:d6:6a:28:7a:42: 7d:9a:87:3c:15:9b:e0:47:05:fe:de:90:dd:d1:a2:4c:1b:ed: 3b:69:f6:07:83:93:d4:05:5b:49:84:4b:0b:35:1a:81:5e:46: c1:0e:04:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDJQIoKkTyYb7kMmIL1ijaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0MzNhZTFjNjA2NzJjNzU5MWE4Zjk3ZDY4Zjc5ZmIyYTVl ZThkYTcwHhcNMjUxMjIxMjMwMDU3WhcNMjUxMjIyMjMwMDU3WjAzMTEwLwYDVQQD Eyg0YjExZTI1NTA0ODUwODMzZTMwY2Q3NWQxODc5NDVkMTM0OTIxNjJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsB6gVVqIgMTu+wrr/M8cidF+AmZ4 1yt97HmwDo8qxyFsayZ1sNkqYXw7rX5iUfHF611QE15XhrnT5KNsO3exLP/C7kzY C3UxmftizsNVOyL+lqHk/ev/eETxwq/tRWjsgwoS265utpzT3VFIiPw6EKRbL8IN JslFWukk6L1KfLo001duECQEv5TwNeG2omScHoYzIJtDbyZ3MD5i4dqf3qBS9F2S iN0CbDoKw60S3IRBFuiLB8FnCWl4LKNtx5xtpr83wR0WH36a6Xm79j9et5pCyIND vP7vnn79oht/CQVwtgrmXiRuXcM2Q5tzwq/a5/mG2O/1OZzXndMrngML1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEsR4lUEhQgz4wzXXRh5RdE0khYqMB8GA1UdIwQY MBaAFDQzrhxgZyx1kaj5fWj3n7Kl7o2nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkRPdUhHQm5MSFdScVBsOWFQZWZzcVh1amFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My85Y2E0NDYtZmM1Yy00NzQ2LWIyNmYt MzBjZTgzNzAxYjM5LzEvTkRPdUhHQm5MSFdScVBsOWFQZWZzcVh1amFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My85Y2E0NDYtZmM1Yy00NzQ2LWIyNmYtMzBjZTgzNzAxYjM5 LzEvTkRPdUhHQm5MSFdScVBsOWFQZWZzcVh1amFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN3sxFHXR APqIW1XWnEMOb4NOOy8h7ccEXCbwbbqQ8JYI6QJQiSha8raonvWyfL9vjt85S9au VSdmojMewM9KTF8dSIK6HlsWX4ih1UXmjLuafth68SLgAe6NGAqINb0AxR9oQ040 Kr37YO31SzvFugWZMkUCClQh7x9PqkiRckMOJ2Pk/iQFmQFn3WXw8jNEC1BQgG1C f65472z5us5IrUPST9yOIH8uyUI7xlrvcSCMW7s0g2WfKseUN0/TyTzQhv7Tpb/3 n/LqiVWxF67yVXok+tZqKHpCfZqHPBWb4EcF/t6Q3dGiTBvtO2n2B4OT1AVbSYRL CzUagV5GwQ4EdQ== -----END CERTIFICATE-----Generated at Mon Dec 22 02:19:32 2025 by rpki-client