This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f1edc0-63c1-42b4-a040-3ff926085527/1/NdHNq6MVWd4SqxnXnxri0hjDefc.mft File: NdHNq6MVWd4SqxnXnxri0hjDefc.mft (raw, json) Hash identifier: mVIKus9tvjTabpQrSByKJAqAMn+LJuDnC3/DeU8hJRY= Subject key identifier: 82:90:30:78:4F:D2:DD:3A:6B:B4:17:06:B4:07:5F:4C:54:33:74:8D Authority key identifier: 35:D1:CD:AB:A3:15:59:DE:12:AB:19:D7:9F:1A:E2:D2:18:C3:79:F7 Certificate issuer: /CN=35d1cdaba31559de12ab19d79f1ae2d218c379f7 Certificate serial: 019B21E34504BEC0998FD4373FBD74CEC1B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NdHNq6MVWd4SqxnXnxri0hjDefc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f1edc0-63c1-42b4-a040-3ff926085527/1/NdHNq6MVWd4SqxnXnxri0hjDefc.mft Manifest number: 177C Signing time: Mon 15 Dec 2025 12:01:40 +0000 Manifest this update: Mon 15 Dec 2025 12:01:40 +0000 Manifest next update: Tue 16 Dec 2025 12:01:40 +0000 Files and hashes: 1: HI5bhroHTAd2JOvu5YSZV3u06FM.roa (hash: Sccuti/fJ5690EYg+UXdl+hwT8LmoHMXCPxrbV1XvfA=) 2: NdHNq6MVWd4SqxnXnxri0hjDefc.crl (hash: KieZLG7+/tPENgXPG6pHcHpOY2W0inubDMDffYjQJw0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f1edc0-63c1-42b4-a040-3ff926085527/1/NdHNq6MVWd4SqxnXnxri0hjDefc.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/f1edc0-63c1-42b4-a040-3ff926085527/1/NdHNq6MVWd4SqxnXnxri0hjDefc.mft rsync://rpki.ripe.net/repository/DEFAULT/NdHNq6MVWd4SqxnXnxri0hjDefc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 12:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:e3:45:04:be:c0:99:8f:d4:37:3f:bd:74:ce:c1:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35d1cdaba31559de12ab19d79f1ae2d218c379f7 Validity Not Before: Dec 15 12:01:40 2025 GMT Not After : Dec 16 12:01:40 2025 GMT Subject: CN=829030784fd2dd3a6bb41706b4075f4c5433748d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:98:33:3c:ca:eb:82:36:04:70:cb:a4:7c:5c: ef:78:54:3f:a3:8f:5b:f6:88:7e:1e:bd:1c:3e:13: 39:53:98:d8:94:aa:86:1e:67:c5:65:c4:8d:14:bc: 25:2a:6d:ec:a3:2b:18:c3:c6:ea:de:5a:ec:f0:57: 9a:63:ce:99:5f:13:5c:87:0f:0e:eb:7f:2f:85:00: 61:ae:60:f8:bc:c8:d7:32:bf:ee:d3:ee:40:8f:6f: 2a:0d:ce:ad:b8:80:0b:8f:f7:08:ae:f0:6e:de:ca: 99:51:4b:bb:62:fd:de:60:9e:fa:e8:2f:e0:63:4c: 0e:4b:76:6b:66:68:32:b1:cf:85:b0:6a:00:2a:35: ff:d2:0c:6c:61:bf:23:54:82:a5:15:94:44:12:91: aa:df:3f:21:f7:47:9b:87:59:7d:d6:08:f3:d5:46: be:cd:df:94:1f:8b:74:02:86:b1:50:00:bf:6a:37: fa:c5:79:73:3d:96:ef:fb:cb:21:9e:95:55:14:06: 67:5f:75:90:a5:27:b0:bd:ae:19:9b:97:89:a7:12: ee:3b:67:4b:da:01:38:04:07:5b:9d:2a:3c:42:3f: af:c9:32:89:f1:46:eb:ed:20:a0:80:0b:c6:a6:cc: 61:83:ac:02:a8:97:13:aa:c0:5b:73:d9:4a:48:75: b5:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:90:30:78:4F:D2:DD:3A:6B:B4:17:06:B4:07:5F:4C:54:33:74:8D X509v3 Authority Key Identifier: keyid:35:D1:CD:AB:A3:15:59:DE:12:AB:19:D7:9F:1A:E2:D2:18:C3:79:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdHNq6MVWd4SqxnXnxri0hjDefc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f1edc0-63c1-42b4-a040-3ff926085527/1/NdHNq6MVWd4SqxnXnxri0hjDefc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f1edc0-63c1-42b4-a040-3ff926085527/1/NdHNq6MVWd4SqxnXnxri0hjDefc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:47:bd:0e:88:6f:65:af:98:31:c5:4f:e3:5a:6a:5b:5c:d3: fe:81:1d:14:7e:91:52:51:cc:88:b8:e8:b5:3c:45:54:d3:20: e5:75:7b:b4:3c:52:10:50:c2:8e:cd:e5:0a:5a:d7:3d:19:b1: d3:71:30:cb:ca:30:14:e9:03:af:17:33:5f:4c:00:f0:9d:78: a2:26:0d:bd:06:ce:c1:d6:d5:9c:9e:0f:f2:0c:ef:19:79:e3: 5b:e5:77:e9:3a:fa:eb:f1:95:5b:53:59:7b:e5:90:be:cf:f6: e9:b2:77:88:62:36:b5:73:05:0e:12:a5:4d:4c:fc:c8:83:1c: ef:64:66:fa:96:20:f4:d5:44:9f:38:86:2f:f9:48:0c:f0:20: de:b9:7e:17:fd:a8:d3:32:9e:03:f3:7a:27:6d:b7:23:3b:03: 5a:13:ff:bc:eb:1d:e7:d0:37:6c:1a:99:96:c6:4d:97:9d:f1: 94:c6:27:c2:c8:68:70:a0:aa:a3:c5:ea:17:d6:f9:3f:e0:cd: 10:88:3d:5e:29:b9:a5:ae:d0:70:36:a6:42:20:8b:17:9c:04: 12:d2:d6:b1:54:1c:bd:04:27:9a:93:4e:e8:54:ec:f6:21:47: a4:be:ca:fb:8c:3d:0a:5a:d5:88:57:ad:b0:4d:3f:7c:59:16: 33:24:4f:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsh40UEvsCZj9Q3P710zsGzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1ZDFjZGFiYTMxNTU5ZGUxMmFiMTlkNzlmMWFlMmQyMThj Mzc5ZjcwHhcNMjUxMjE1MTIwMTQwWhcNMjUxMjE2MTIwMTQwWjAzMTEwLwYDVQQD Eyg4MjkwMzA3ODRmZDJkZDNhNmJiNDE3MDZiNDA3NWY0YzU0MzM3NDhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ZgzPMrrgjYEcMukfFzveFQ/o49b 9oh+Hr0cPhM5U5jYlKqGHmfFZcSNFLwlKm3soysYw8bq3lrs8FeaY86ZXxNchw8O 638vhQBhrmD4vMjXMr/u0+5Aj28qDc6tuIALj/cIrvBu3sqZUUu7Yv3eYJ766C/g Y0wOS3ZrZmgysc+FsGoAKjX/0gxsYb8jVIKlFZREEpGq3z8h90ebh1l91gjz1Ua+ zd+UH4t0AoaxUAC/ajf6xXlzPZbv+8shnpVVFAZnX3WQpSewva4Zm5eJpxLuO2dL 2gE4BAdbnSo8Qj+vyTKJ8Ubr7SCggAvGpsxhg6wCqJcTqsBbc9lKSHW1lwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIKQMHhP0t06a7QXBrQHX0xUM3SNMB8GA1UdIwQY MBaAFDXRzaujFVneEqsZ158a4tIYw3n3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmRITnE2TVZXZDRTcXhuWG54cmkwaGpEZWZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9mMWVkYzAtNjNjMS00MmI0LWEwNDAt M2ZmOTI2MDg1NTI3LzEvTmRITnE2TVZXZDRTcXhuWG54cmkwaGpEZWZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS9mMWVkYzAtNjNjMS00MmI0LWEwNDAtM2ZmOTI2MDg1NTI3 LzEvTmRITnE2TVZXZDRTcXhuWG54cmkwaGpEZWZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACke9Dohv Za+YMcVP41pqW1zT/oEdFH6RUlHMiLjotTxFVNMg5XV7tDxSEFDCjs3lClrXPRmx 03Ewy8owFOkDrxczX0wA8J14oiYNvQbOwdbVnJ4P8gzvGXnjW+V36Tr66/GVW1NZ e+WQvs/26bJ3iGI2tXMFDhKlTUz8yIMc72Rm+pYg9NVEnziGL/lIDPAg3rl+F/2o 0zKeA/N6J223IzsDWhP/vOsd59A3bBqZlsZNl53xlMYnwshocKCqo8XqF9b5P+DN EIg9Xim5pa7QcDamQiCLF5wEEtLWsVQcvQQnmpNO6FTs9iFHpL7K+4w9ClrViFet sE0/fFkWMyRPyA== -----END CERTIFICATE-----Generated at Mon Dec 15 16:47:49 2025 by rpki-client