This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.mft File: NDK6HG0LAr7-aMyUrp0t4xB6YEY.mft (raw, json) Hash identifier: Ng6/L9qTChRNnnVqY6ew8riBoN9xBvTsS5tCyC9hM8Q= Subject key identifier: D3:86:35:D1:F5:64:65:5E:2B:BE:0D:53:EA:96:4D:0B:97:22:A2:53 Authority key identifier: 34:32:BA:1C:6D:0B:02:BE:FE:68:CC:94:AE:9D:2D:E3:10:7A:60:46 Certificate issuer: /CN=3432ba1c6d0b02befe68cc94ae9d2de3107a6046 Certificate serial: 019B1B3B9F9988F2C8CDAF452B2F8833FE80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NDK6HG0LAr7-aMyUrp0t4xB6YEY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.mft Manifest number: 177A Signing time: Sun 14 Dec 2025 05:00:50 +0000 Manifest this update: Sun 14 Dec 2025 05:00:50 +0000 Manifest next update: Mon 15 Dec 2025 05:00:50 +0000 Files and hashes: 1: NDK6HG0LAr7-aMyUrp0t4xB6YEY.crl (hash: Wp0GhO/najGsS7IdF9VyOiUrzRTNWKRfgadB6lMMSGw=) 2: aDRwFZp3Ye9nOga6oqU2-HxOi5Q.roa (hash: 55fN/khKAT7BHMTfK9zjOz/iWjkXrLDgvWhFUwURpbU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.mft rsync://rpki.ripe.net/repository/DEFAULT/NDK6HG0LAr7-aMyUrp0t4xB6YEY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:3b:9f:99:88:f2:c8:cd:af:45:2b:2f:88:33:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3432ba1c6d0b02befe68cc94ae9d2de3107a6046 Validity Not Before: Dec 14 05:00:50 2025 GMT Not After : Dec 15 05:00:50 2025 GMT Subject: CN=d38635d1f564655e2bbe0d53ea964d0b9722a253 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b4:56:7d:6b:d4:67:7b:22:3e:49:9a:6e:fc: 81:7f:bb:06:1e:43:80:ff:dc:c3:1f:1e:68:f1:1b: 33:87:85:8f:fa:34:39:36:7b:01:8c:37:9e:52:48: 45:60:25:a5:7d:41:f4:e5:04:de:28:a0:3f:de:97: 48:64:2b:17:e3:6f:79:1f:50:fb:79:40:9e:45:81: 63:61:b0:cf:bf:37:00:0e:68:44:e1:28:c9:e7:78: f4:be:06:ef:25:2a:45:68:dd:b8:ec:71:24:ad:97: 0a:8f:e1:09:15:1b:77:54:81:c2:77:b5:bc:85:ef: 4e:2c:57:08:b2:fe:4f:72:35:2c:74:a9:78:25:48: 25:6f:72:df:f8:4b:49:9d:ca:bc:f6:90:e3:06:79: 57:cc:e2:a5:10:ec:10:85:5b:ad:29:67:23:68:8e: f5:cb:22:bb:f0:47:20:f5:b3:9c:f3:ca:33:2a:b1: 0a:c8:29:f8:d5:04:e3:05:ab:50:a0:b3:7c:e4:e2: ae:3c:2d:03:88:c5:27:e5:4b:58:40:b3:9f:81:95: e4:94:00:7e:83:a2:e1:9d:59:78:ff:d8:d6:0a:bb: 1b:c6:7f:e9:3d:36:0e:0f:01:2f:93:cc:c8:ed:4f: cf:55:a3:78:d5:c1:a3:fa:48:22:79:46:41:a6:1d: d0:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:86:35:D1:F5:64:65:5E:2B:BE:0D:53:EA:96:4D:0B:97:22:A2:53 X509v3 Authority Key Identifier: keyid:34:32:BA:1C:6D:0B:02:BE:FE:68:CC:94:AE:9D:2D:E3:10:7A:60:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NDK6HG0LAr7-aMyUrp0t4xB6YEY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:81:19:a9:c9:ce:5e:cf:47:d6:e6:ed:11:b5:a9:bc:5e:8c: fb:7d:03:39:fb:1b:44:8c:9f:b9:13:43:41:30:ab:c4:ab:e0: ec:f1:9a:67:08:c8:a2:c2:dd:e0:c7:0a:15:e9:fd:47:60:c4: 71:6b:5c:cd:7c:8d:b5:5b:83:9d:37:0c:7e:cd:58:91:49:3b: fc:a7:18:8f:3f:05:24:95:0c:2b:3c:a7:c5:04:56:f2:08:9e: b7:a9:c3:ce:c0:c4:e0:44:ac:c0:de:f1:5c:68:83:7e:81:18: 42:46:ff:d8:38:7b:31:42:17:48:41:67:a6:30:ca:e8:53:88: ae:36:93:17:e3:08:aa:7f:45:1e:b0:05:16:4c:a0:39:3f:39: 7d:7b:2f:a0:3a:f2:ba:73:b1:02:9a:c3:4b:a2:bb:2a:71:02: 3c:bb:67:7b:3e:b8:5b:71:21:fb:db:d1:17:45:4d:52:59:26: a6:f8:5e:d2:c6:a8:61:29:bc:8f:0f:fd:f1:39:e9:1d:92:6a: 00:d1:e1:1d:c4:9c:e4:ba:d9:d8:60:8c:66:57:46:5e:b7:8e: bc:9c:e1:63:b6:d3:c4:25:f3:92:66:c1:c2:c0:26:1c:bb:b7: 13:0e:67:bb:c9:5d:f8:af:92:66:d5:91:6c:95:be:cf:d4:f8: 5b:62:b0:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsbO5+ZiPLIza9FKy+IM/6AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0MzJiYTFjNmQwYjAyYmVmZTY4Y2M5NGFlOWQyZGUzMTA3 YTYwNDYwHhcNMjUxMjE0MDUwMDUwWhcNMjUxMjE1MDUwMDUwWjAzMTEwLwYDVQQD EyhkMzg2MzVkMWY1NjQ2NTVlMmJiZTBkNTNlYTk2NGQwYjk3MjJhMjUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrRWfWvUZ3siPkmabvyBf7sGHkOA /9zDHx5o8Rszh4WP+jQ5NnsBjDeeUkhFYCWlfUH05QTeKKA/3pdIZCsX4295H1D7 eUCeRYFjYbDPvzcADmhE4SjJ53j0vgbvJSpFaN247HEkrZcKj+EJFRt3VIHCd7W8 he9OLFcIsv5PcjUsdKl4JUglb3Lf+EtJncq89pDjBnlXzOKlEOwQhVutKWcjaI71 yyK78Ecg9bOc88ozKrEKyCn41QTjBatQoLN85OKuPC0DiMUn5UtYQLOfgZXklAB+ g6LhnVl4/9jWCrsbxn/pPTYODwEvk8zI7U/PVaN41cGj+kgieUZBph3QuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNOGNdH1ZGVeK74NU+qWTQuXIqJTMB8GA1UdIwQY MBaAFDQyuhxtCwK+/mjMlK6dLeMQemBGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkRLNkhHMExBcjctYU15VXJwMHQ0eEI2WUVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8yNWUxN2ItODI0ZS00ZTdkLWIzZTgt MjdiODdiZmJlZTdiLzEvTkRLNkhHMExBcjctYU15VXJwMHQ0eEI2WUVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC8yNWUxN2ItODI0ZS00ZTdkLWIzZTgtMjdiODdiZmJlZTdi LzEvTkRLNkhHMExBcjctYU15VXJwMHQ0eEI2WUVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgYEZqcnO Xs9H1ubtEbWpvF6M+30DOfsbRIyfuRNDQTCrxKvg7PGaZwjIosLd4McKFen9R2DE cWtczXyNtVuDnTcMfs1YkUk7/KcYjz8FJJUMKzynxQRW8giet6nDzsDE4ESswN7x XGiDfoEYQkb/2Dh7MUIXSEFnpjDK6FOIrjaTF+MIqn9FHrAFFkygOT85fXsvoDry unOxAprDS6K7KnECPLtnez64W3Eh+9vRF0VNUlkmpvhe0saoYSm8jw/98TnpHZJq ANHhHcSc5LrZ2GCMZldGXreOvJzhY7bTxCXzkmbBwsAmHLu3Ew5nu8ld+K+SZtWR bJW+z9T4W2KwNA== -----END CERTIFICATE-----Generated at Sun Dec 14 08:37:16 2025 by rpki-client