This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft File: NdRfKsW84Vad9rKtgNFvG5L72Fw.mft (raw, json) Hash identifier: Yp0qGS8b48X4QXGVLiAVaqeeNu7B/r32gtG2OwYeUx8= Subject key identifier: AC:4B:9B:B5:B1:FE:0A:14:E7:0B:57:B7:6C:39:C0:E3:9E:90:FB:2C Authority key identifier: 35:D4:5F:2A:C5:BC:E1:56:9D:F6:B2:AD:80:D1:6F:1B:92:FB:D8:5C Certificate issuer: /CN=35d45f2ac5bce1569df6b2ad80d16f1b92fbd85c Certificate serial: 019B24E3691B243C071217D8AF0650ABCA54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NdRfKsW84Vad9rKtgNFvG5L72Fw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft Manifest number: 177B Signing time: Tue 16 Dec 2025 02:00:41 +0000 Manifest this update: Tue 16 Dec 2025 02:00:41 +0000 Manifest next update: Wed 17 Dec 2025 02:00:41 +0000 Files and hashes: 1: NdRfKsW84Vad9rKtgNFvG5L72Fw.crl (hash: SVI+vH4ZYkoL5Y+Ob/v8yrl+r4hgMt2chv+32qEcRG4=) 2: Pxn4Z0bdWmWck5jdH1FaueBsOf0.roa (hash: vg1TLVE75nnwqoL/egav334PmpcLAh17CAvdGO24png=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft rsync://rpki.ripe.net/repository/DEFAULT/NdRfKsW84Vad9rKtgNFvG5L72Fw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 02:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:e3:69:1b:24:3c:07:12:17:d8:af:06:50:ab:ca:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35d45f2ac5bce1569df6b2ad80d16f1b92fbd85c Validity Not Before: Dec 16 02:00:41 2025 GMT Not After : Dec 17 02:00:41 2025 GMT Subject: CN=ac4b9bb5b1fe0a14e70b57b76c39c0e39e90fb2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:2c:75:52:2f:43:77:76:2b:29:ff:d0:27:7b: 46:15:cb:80:8d:74:0e:2c:aa:e5:a3:79:56:2b:5b: 31:3a:c9:32:9c:11:bb:e3:d2:51:49:b3:94:2e:c2: c1:b7:fa:02:bb:af:d3:9d:4c:9f:2b:60:9e:63:97: 8c:1e:ec:e6:85:0e:c0:27:ab:9d:87:7c:0e:3c:1f: d3:49:14:e1:1d:57:9b:60:bc:62:cc:c0:83:2a:81: df:13:4d:fc:c7:2f:4e:34:23:1c:f8:2c:48:ed:9a: 4f:71:e5:c3:ab:db:77:90:80:a6:00:2e:5a:cc:c8: f8:e1:ec:b4:5b:77:30:a2:67:13:24:32:ba:2e:6b: 5d:4d:89:1e:7b:8e:19:30:97:f3:39:35:d8:74:b2: e8:d9:d9:38:15:d5:bb:bb:e0:3a:fd:82:47:74:70: ce:f0:ad:df:fc:63:26:ce:f4:3b:68:d9:d9:2f:24: e6:7e:80:08:70:8f:c0:82:9c:94:4f:75:ef:d3:1a: 3c:ae:e3:56:2c:6a:59:12:31:52:69:b4:1f:69:fd: 5f:a3:63:d9:19:d7:b4:f3:c1:48:d1:ed:37:3b:22: a4:f0:a9:21:c1:e1:17:d9:8f:b2:f2:45:08:c3:a5: 13:a6:06:e2:bd:76:ae:18:b0:e0:a9:b8:d7:3f:69: 57:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:4B:9B:B5:B1:FE:0A:14:E7:0B:57:B7:6C:39:C0:E3:9E:90:FB:2C X509v3 Authority Key Identifier: keyid:35:D4:5F:2A:C5:BC:E1:56:9D:F6:B2:AD:80:D1:6F:1B:92:FB:D8:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdRfKsW84Vad9rKtgNFvG5L72Fw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:22:4d:5c:75:ba:30:67:36:08:2f:46:7a:78:a0:c0:f9:72: 63:fa:55:b2:a9:a2:e1:bd:88:4b:3f:2b:90:33:b4:ca:bb:de: 8a:84:b7:00:4c:8a:7a:71:ac:72:36:61:cf:74:c0:cd:33:c2: b9:17:70:a4:f3:00:7c:ce:dc:b9:ed:d1:be:82:06:f5:77:92: f0:01:c2:a2:e6:ad:96:00:db:40:43:74:e2:e2:8c:44:94:c4: 1c:00:87:c9:93:18:ec:d6:08:92:c5:36:b5:7c:b7:ed:ed:15: 74:4d:ce:f7:92:92:fd:46:80:72:e1:4b:ec:17:4a:e8:1a:04: 2f:64:46:08:09:fd:5c:5c:b8:ab:58:d9:87:c8:89:c3:99:9b: db:72:1e:f4:5b:0e:87:2f:1d:da:fe:35:b8:7c:55:98:7d:39: a4:d2:22:44:11:08:36:9b:1d:98:3e:6f:d7:63:d5:65:8d:4b: 2e:3c:9b:0d:b1:47:88:63:d0:5a:4a:47:59:17:d1:c1:79:f7: 92:6b:64:4e:b9:d3:00:c1:93:ab:15:0b:98:c9:f3:85:97:37: b6:91:d2:a9:70:b1:e5:6e:90:17:c3:39:7f:74:f8:78:4a:55: da:e6:bd:10:aa:61:14:56:3e:65:a3:c6:95:90:06:fe:e4:ed: 96:cf:3d:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsk42kbJDwHEhfYrwZQq8pUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1ZDQ1ZjJhYzViY2UxNTY5ZGY2YjJhZDgwZDE2ZjFiOTJm YmQ4NWMwHhcNMjUxMjE2MDIwMDQxWhcNMjUxMjE3MDIwMDQxWjAzMTEwLwYDVQQD EyhhYzRiOWJiNWIxZmUwYTE0ZTcwYjU3Yjc2YzM5YzBlMzllOTBmYjJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Cx1Ui9Dd3YrKf/QJ3tGFcuAjXQO LKrlo3lWK1sxOskynBG749JRSbOULsLBt/oCu6/TnUyfK2CeY5eMHuzmhQ7AJ6ud h3wOPB/TSRThHVebYLxizMCDKoHfE038xy9ONCMc+CxI7ZpPceXDq9t3kICmAC5a zMj44ey0W3cwomcTJDK6LmtdTYkee44ZMJfzOTXYdLLo2dk4FdW7u+A6/YJHdHDO 8K3f/GMmzvQ7aNnZLyTmfoAIcI/AgpyUT3Xv0xo8ruNWLGpZEjFSabQfaf1fo2PZ Gde088FI0e03OyKk8KkhweEX2Y+y8kUIw6UTpgbivXauGLDgqbjXP2lXdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKxLm7Wx/goU5wtXt2w5wOOekPssMB8GA1UdIwQY MBaAFDXUXyrFvOFWnfayrYDRbxuS+9hcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmRSZktzVzg0VmFkOXJLdGdORnZHNUw3MkZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS80ODEyMzYtYTA2Yy00OTAzLTkzODUt NmI3ZDdlNGVkNzAxLzEvTmRSZktzVzg0VmFkOXJLdGdORnZHNUw3MkZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS80ODEyMzYtYTA2Yy00OTAzLTkzODUtNmI3ZDdlNGVkNzAx LzEvTmRSZktzVzg0VmFkOXJLdGdORnZHNUw3MkZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcyJNXHW6 MGc2CC9GenigwPlyY/pVsqmi4b2ISz8rkDO0yrveioS3AEyKenGscjZhz3TAzTPC uRdwpPMAfM7cue3RvoIG9XeS8AHCouatlgDbQEN04uKMRJTEHACHyZMY7NYIksU2 tXy37e0VdE3O95KS/UaAcuFL7BdK6BoEL2RGCAn9XFy4q1jZh8iJw5mb23Ie9FsO hy8d2v41uHxVmH05pNIiRBEINpsdmD5v12PVZY1LLjybDbFHiGPQWkpHWRfRwXn3 kmtkTrnTAMGTqxULmMnzhZc3tpHSqXCx5W6QF8M5f3T4eEpV2ua9EKphFFY+ZaPG lZAG/uTtls89+w== -----END CERTIFICATE-----Generated at Tue Dec 16 12:14:37 2025 by rpki-client