This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/72cb1f-bd2b-4c22-aaec-a62388ef5b48/1/NDez9zdtPvHNqLyWbxOXCFnPeW4.mft File: NDez9zdtPvHNqLyWbxOXCFnPeW4.mft (raw, json) Hash identifier: YaF5fYkY5ETweHsS1ECQgFS0oaI6L5H8ZfNf0PACkn0= Subject key identifier: B5:2B:67:18:A8:35:27:A9:C8:C8:4D:62:2D:5A:6B:39:E4:73:AB:32 Authority key identifier: 34:37:B3:F7:37:6D:3E:F1:CD:A8:BC:96:6F:13:97:08:59:CF:79:6E Certificate issuer: /CN=3437b3f7376d3ef1cda8bc966f13970859cf796e Certificate serial: 019B32D6C8DC4C4F2C009005DEB7E6A9AFD6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NDez9zdtPvHNqLyWbxOXCFnPeW4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/72cb1f-bd2b-4c22-aaec-a62388ef5b48/1/NDez9zdtPvHNqLyWbxOXCFnPeW4.mft Manifest number: 087F Signing time: Thu 18 Dec 2025 19:01:35 +0000 Manifest this update: Thu 18 Dec 2025 19:01:35 +0000 Manifest next update: Fri 19 Dec 2025 19:01:35 +0000 Files and hashes: 1: NDez9zdtPvHNqLyWbxOXCFnPeW4.crl (hash: Jw8kFljcMkB51UBNjbHX6QnXjiSRcBLNpmiBxlMi8nA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/72cb1f-bd2b-4c22-aaec-a62388ef5b48/1/NDez9zdtPvHNqLyWbxOXCFnPeW4.crl rsync://rpki.ripe.net/repository/DEFAULT/85/72cb1f-bd2b-4c22-aaec-a62388ef5b48/1/NDez9zdtPvHNqLyWbxOXCFnPeW4.mft rsync://rpki.ripe.net/repository/DEFAULT/NDez9zdtPvHNqLyWbxOXCFnPeW4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d6:c8:dc:4c:4f:2c:00:90:05:de:b7:e6:a9:af:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3437b3f7376d3ef1cda8bc966f13970859cf796e Validity Not Before: Dec 18 19:01:35 2025 GMT Not After : Dec 19 19:01:35 2025 GMT Subject: CN=b52b6718a83527a9c8c84d622d5a6b39e473ab32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:78:ad:d4:f0:ec:42:0d:59:3e:b3:8f:f4:57: f8:10:44:4b:33:2f:9b:c7:bd:ae:9a:a5:ab:c2:ca: 37:8b:cf:33:38:fc:23:6f:dd:33:d7:ec:4d:2d:f4: 2e:7c:86:d8:15:0c:0a:b5:19:57:c9:84:f2:21:2c: 26:ea:0d:c5:3d:25:a9:21:06:e6:4b:32:b8:5d:ff: 23:d3:c7:91:fa:f9:20:50:d4:b7:13:cf:6d:fd:a7: b4:c5:17:fa:11:3c:48:c9:f9:c5:da:0f:b7:da:f9: 4b:d2:10:36:4c:e9:f4:53:ad:1d:9b:ad:03:7f:5c: 86:4a:ea:ca:a3:d2:27:1f:06:a1:3f:2d:d2:6a:01: 0e:bf:9c:ed:fb:82:b4:35:77:10:d3:61:f4:61:77: 66:81:e4:b4:d8:75:01:30:c3:53:79:c0:e2:eb:02: 36:e8:3e:d4:71:fd:44:c9:c8:49:cb:b5:e7:42:00: 75:85:87:e8:c8:78:be:fe:ef:f3:b7:56:25:fb:d1: 89:c4:4e:6c:ad:f7:ce:14:1e:c5:4f:d9:02:46:30: b3:ef:ff:8e:36:2e:96:af:be:c9:dc:74:b7:45:08: b9:0d:11:e9:1c:e4:bc:a7:c3:ff:d3:50:01:b0:3b: 31:e8:a9:55:45:9a:08:f8:14:e8:89:16:6a:f4:57: d9:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:2B:67:18:A8:35:27:A9:C8:C8:4D:62:2D:5A:6B:39:E4:73:AB:32 X509v3 Authority Key Identifier: keyid:34:37:B3:F7:37:6D:3E:F1:CD:A8:BC:96:6F:13:97:08:59:CF:79:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NDez9zdtPvHNqLyWbxOXCFnPeW4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/72cb1f-bd2b-4c22-aaec-a62388ef5b48/1/NDez9zdtPvHNqLyWbxOXCFnPeW4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/72cb1f-bd2b-4c22-aaec-a62388ef5b48/1/NDez9zdtPvHNqLyWbxOXCFnPeW4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:9d:eb:eb:42:37:d9:bb:77:5e:c5:c8:52:e2:26:16:d7:c4: 8e:76:dd:5f:3b:bf:28:68:18:f0:28:e0:84:eb:3f:71:37:a5: 83:40:94:69:d7:d9:9a:4d:5b:28:d3:c2:12:11:3e:8a:f4:b3: c4:75:af:76:d1:74:2b:82:c0:0b:35:f1:7e:bb:5e:4b:e9:f7: d7:1a:43:8a:10:c4:a3:7c:3f:f2:49:54:83:39:ba:bb:e8:df: 35:3f:a0:b2:f6:01:b9:4a:a6:21:eb:a7:75:e3:db:90:32:69: 10:41:1a:85:3c:70:00:18:68:23:02:ba:90:24:31:e3:c3:8b: 7d:6d:4e:2f:ad:4d:e7:7a:c4:1f:3d:c6:ee:3e:f8:b2:82:d7: 24:ef:34:2e:2b:c1:f2:46:78:d5:20:00:b3:53:b2:32:5d:5c: 0c:0f:e5:35:36:98:3e:ef:89:26:9b:6a:e3:5e:be:d3:96:9a: ea:59:55:1f:80:ff:c5:d5:ae:98:43:10:fc:5a:12:49:72:fe: 00:7b:a0:8f:09:81:6d:d4:5c:d4:7f:f4:70:95:a8:5a:0d:94: a9:0e:e7:8d:cf:be:52:0b:f8:a0:ee:30:e0:ea:8e:cf:57:e2: 73:d0:2e:9f:ec:74:0f:7d:71:9a:63:99:91:6f:8e:6e:e9:98: 7c:21:69:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1sjcTE8sAJAF3rfmqa/WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0MzdiM2Y3Mzc2ZDNlZjFjZGE4YmM5NjZmMTM5NzA4NTlj Zjc5NmUwHhcNMjUxMjE4MTkwMTM1WhcNMjUxMjE5MTkwMTM1WjAzMTEwLwYDVQQD EyhiNTJiNjcxOGE4MzUyN2E5YzhjODRkNjIyZDVhNmIzOWU0NzNhYjMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXit1PDsQg1ZPrOP9Ff4EERLMy+b x72umqWrwso3i88zOPwjb90z1+xNLfQufIbYFQwKtRlXyYTyISwm6g3FPSWpIQbm SzK4Xf8j08eR+vkgUNS3E89t/ae0xRf6ETxIyfnF2g+32vlL0hA2TOn0U60dm60D f1yGSurKo9InHwahPy3SagEOv5zt+4K0NXcQ02H0YXdmgeS02HUBMMNTecDi6wI2 6D7Ucf1EychJy7XnQgB1hYfoyHi+/u/zt1Yl+9GJxE5srffOFB7FT9kCRjCz7/+O Ni6Wr77J3HS3RQi5DRHpHOS8p8P/01ABsDsx6KlVRZoI+BToiRZq9FfZiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLUrZxioNSepyMhNYi1aaznkc6syMB8GA1UdIwQY MBaAFDQ3s/c3bT7xzai8lm8TlwhZz3luMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkRlejl6ZHRQdkhOcUx5V2J4T1hDRm5QZVc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS83MmNiMWYtYmQyYi00YzIyLWFhZWMt YTYyMzg4ZWY1YjQ4LzEvTkRlejl6ZHRQdkhOcUx5V2J4T1hDRm5QZVc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS83MmNiMWYtYmQyYi00YzIyLWFhZWMtYTYyMzg4ZWY1YjQ4 LzEvTkRlejl6ZHRQdkhOcUx5V2J4T1hDRm5QZVc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACp3r60I3 2bt3XsXIUuImFtfEjnbdXzu/KGgY8CjghOs/cTelg0CUadfZmk1bKNPCEhE+ivSz xHWvdtF0K4LACzXxfrteS+n31xpDihDEo3w/8klUgzm6u+jfNT+gsvYBuUqmIeun dePbkDJpEEEahTxwABhoIwK6kCQx48OLfW1OL61N53rEHz3G7j74soLXJO80LivB 8kZ41SAAs1OyMl1cDA/lNTaYPu+JJptq416+05aa6llVH4D/xdWumEMQ/FoSSXL+ AHugjwmBbdRc1H/0cJWoWg2UqQ7njc++Ugv4oO4w4OqOz1fic9Aun+x0D31xmmOZ kW+ObumYfCFpNw== -----END CERTIFICATE-----Generated at Fri Dec 19 04:54:14 2025 by rpki-client