This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.mft File: nDz83hO2YLXIMdr74b-_aN-fvjk.mft (raw, json) Hash identifier: GasV5mxvMwc51oi5ED8CYek2WV6f3/uuCWxsZmZgmM0= Subject key identifier: 3A:84:D0:E1:88:1F:73:BA:13:82:49:F6:7F:98:29:43:9F:A4:35:AF Authority key identifier: 9C:3C:FC:DE:13:B6:60:B5:C8:31:DA:FB:E1:BF:BF:68:DF:9F:BE:39 Certificate issuer: /CN=9c3cfcde13b660b5c831dafbe1bfbf68df9fbe39 Certificate serial: 019B394649C2EA133D920953DE55B15A9627 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nDz83hO2YLXIMdr74b-_aN-fvjk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.mft Manifest number: 0743 Signing time: Sat 20 Dec 2025 01:01:06 +0000 Manifest this update: Sat 20 Dec 2025 01:01:06 +0000 Manifest next update: Sun 21 Dec 2025 01:01:06 +0000 Files and hashes: 1: 1-o7g3L28fO-PQjnRpt-UgWkTHQw.roa (hash: eDwV2kux0bA6vYCRB0ZxUOPv76wEVLU7G2rZyoTStqs=) 2: nDz83hO2YLXIMdr74b-_aN-fvjk.crl (hash: UmH6eii67sESrT/OOhtv4jJ5IvwvafmRy6U2vivY1Ek=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.mft rsync://rpki.ripe.net/repository/DEFAULT/nDz83hO2YLXIMdr74b-_aN-fvjk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 17:13:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:46:49:c2:ea:13:3d:92:09:53:de:55:b1:5a:96:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c3cfcde13b660b5c831dafbe1bfbf68df9fbe39 Validity Not Before: Dec 20 01:01:06 2025 GMT Not After : Dec 21 01:01:06 2025 GMT Subject: CN=3a84d0e1881f73ba138249f67f9829439fa435af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f1:e4:1e:02:eb:ac:14:02:16:b2:2f:c1:07: 35:0e:1d:b4:28:0d:46:a6:23:84:71:b6:1c:07:0d: 3f:d2:38:ed:cc:0b:26:a2:cc:4a:b4:25:f9:57:9e: f4:22:44:04:bb:3e:bd:2c:77:69:02:af:2e:f7:f3: 8e:c1:39:ab:71:c4:e8:4c:e5:3c:a1:e0:d9:7a:29: 1f:08:6d:a9:b5:7b:bc:d5:7a:f3:3a:43:ea:de:9c: 2c:87:75:72:5f:be:27:59:64:52:db:38:b0:26:c1: aa:94:63:47:3a:da:4f:f0:d9:71:99:67:e4:32:89: d4:8b:a9:43:03:72:3c:06:07:37:1e:42:26:96:c0: 5a:b5:58:79:01:92:a2:86:82:ec:9b:31:c5:4a:53: 94:e2:96:bd:35:ff:a2:0f:68:ed:8d:7e:4a:24:15: 03:bb:ec:8b:2a:5b:a7:5f:51:d6:98:44:36:a5:3c: 82:e9:57:3d:0a:a4:09:98:d7:21:91:bf:48:cc:90: d7:47:da:cd:08:10:e2:d5:ab:cf:7c:72:45:d0:ac: e2:b8:c7:c1:9b:1b:de:81:89:45:91:53:7f:f3:78: 4e:fd:98:a5:8d:8b:5b:15:7c:fd:8f:00:39:81:45: 29:18:a0:ec:4b:94:38:9f:04:8f:f7:15:49:50:ee: 7e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:84:D0:E1:88:1F:73:BA:13:82:49:F6:7F:98:29:43:9F:A4:35:AF X509v3 Authority Key Identifier: keyid:9C:3C:FC:DE:13:B6:60:B5:C8:31:DA:FB:E1:BF:BF:68:DF:9F:BE:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nDz83hO2YLXIMdr74b-_aN-fvjk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:84:b9:94:94:bb:4b:e8:1f:51:ad:dd:09:e4:c1:26:26:ba: 19:65:2e:be:82:90:94:cd:a4:32:27:e6:80:db:7e:0a:67:95: f7:3c:af:7e:a8:8e:81:88:ba:cc:28:ed:14:b8:44:b5:64:43: e4:90:3a:e2:fd:70:83:f2:57:cc:30:04:24:c1:3e:9a:19:b4: 17:e4:62:cc:77:e7:dc:b5:44:02:8e:07:0d:03:d3:b7:9d:cb: 58:78:72:d8:17:98:53:30:74:8a:b8:ce:ea:6d:53:59:52:ee: 4a:ca:95:73:76:24:eb:74:70:ca:e1:2e:f3:e5:84:0b:64:25: 84:db:ae:c1:c8:80:8e:31:64:00:90:0b:12:a9:16:70:e1:7d: 6a:66:89:54:00:80:31:83:9f:26:30:df:66:1c:69:52:aa:f1: cc:e0:78:12:91:c8:7d:0a:e3:1b:2e:58:ce:4a:27:32:db:1d: 1c:b8:4f:ab:a2:b2:8c:c8:c3:b7:4a:43:42:ed:27:c9:ce:41: 32:ad:dd:15:cd:ed:43:b8:54:21:f0:15:c3:c4:58:33:b9:82: 01:88:c8:9d:ac:02:f4:b4:a9:64:05:e4:7c:6a:39:60:21:25: bc:43:14:2e:78:96:6c:68:ae:fa:8d:1f:10:8c:39:00:e8:1a: 32:44:f3:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5RknC6hM9kglT3lWxWpYnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljM2NmY2RlMTNiNjYwYjVjODMxZGFmYmUxYmZiZjY4ZGY5 ZmJlMzkwHhcNMjUxMjIwMDEwMTA2WhcNMjUxMjIxMDEwMTA2WjAzMTEwLwYDVQQD EygzYTg0ZDBlMTg4MWY3M2JhMTM4MjQ5ZjY3Zjk4Mjk0MzlmYTQzNWFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/HkHgLrrBQCFrIvwQc1Dh20KA1G piOEcbYcBw0/0jjtzAsmosxKtCX5V570IkQEuz69LHdpAq8u9/OOwTmrccToTOU8 oeDZeikfCG2ptXu81XrzOkPq3pwsh3VyX74nWWRS2ziwJsGqlGNHOtpP8NlxmWfk MonUi6lDA3I8Bgc3HkImlsBatVh5AZKihoLsmzHFSlOU4pa9Nf+iD2jtjX5KJBUD u+yLKlunX1HWmEQ2pTyC6Vc9CqQJmNchkb9IzJDXR9rNCBDi1avPfHJF0KziuMfB mxvegYlFkVN/83hO/ZiljYtbFXz9jwA5gUUpGKDsS5Q4nwSP9xVJUO5+qQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDqE0OGIH3O6E4JJ9n+YKUOfpDWvMB8GA1UdIwQY MBaAFJw8/N4TtmC1yDHa++G/v2jfn745MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkR6ODNoTzJZTFhJTWRyNzRiLV9hTi1mdmprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8zYzAzNGYtYzI0My00YTg4LTkwNzAt Njg3OWNjMjZkN2I2LzEvbkR6ODNoTzJZTFhJTWRyNzRiLV9hTi1mdmprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8zYzAzNGYtYzI0My00YTg4LTkwNzAtNjg3OWNjMjZkN2I2 LzEvbkR6ODNoTzJZTFhJTWRyNzRiLV9hTi1mdmprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT4S5lJS7 S+gfUa3dCeTBJia6GWUuvoKQlM2kMifmgNt+CmeV9zyvfqiOgYi6zCjtFLhEtWRD 5JA64v1wg/JXzDAEJME+mhm0F+RizHfn3LVEAo4HDQPTt53LWHhy2BeYUzB0irjO 6m1TWVLuSsqVc3Yk63RwyuEu8+WEC2QlhNuuwciAjjFkAJALEqkWcOF9amaJVACA MYOfJjDfZhxpUqrxzOB4EpHIfQrjGy5YzkonMtsdHLhPq6KyjMjDt0pDQu0nyc5B Mq3dFc3tQ7hUIfAVw8RYM7mCAYjInawC9LSpZAXkfGo5YCElvEMULniWbGiu+o0f EIw5AOgaMkTzOA== -----END CERTIFICATE-----Generated at Sat Dec 20 03:14:29 2025 by rpki-client