This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/f6892f-51b6-4e4a-b1e0-fd3fd1803294/1/NdrPcDZ9CsMFpawau68jmLJtk1U.mft File: NdrPcDZ9CsMFpawau68jmLJtk1U.mft (raw, json) Hash identifier: ueMj1Vj7j3Qp/2f7VC3JmBqWvW2zN4zQPz5WgaJaMmA= Subject key identifier: 22:75:98:C2:DE:D6:E3:9D:AC:F3:07:FE:F1:C1:C1:12:EA:EC:F7:12 Authority key identifier: 35:DA:CF:70:36:7D:0A:C3:05:A5:AC:1A:BB:AF:23:98:B2:6D:93:55 Certificate issuer: /CN=35dacf70367d0ac305a5ac1abbaf2398b26d9355 Certificate serial: 019B5A887CA3D235CF1073E59DFE90166136 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NdrPcDZ9CsMFpawau68jmLJtk1U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/f6892f-51b6-4e4a-b1e0-fd3fd1803294/1/NdrPcDZ9CsMFpawau68jmLJtk1U.mft Manifest number: 0531 Signing time: Fri 26 Dec 2025 12:00:52 +0000 Manifest this update: Fri 26 Dec 2025 12:00:52 +0000 Manifest next update: Sat 27 Dec 2025 12:00:52 +0000 Files and hashes: 1: NV-I2foKzHLj-RMxKytozaQe67g.roa (hash: PhlDXyOiHHSXRcXTISte8ar8TbgSTtrPQqIchH8glHs=) 2: NdrPcDZ9CsMFpawau68jmLJtk1U.crl (hash: 43OYpE3rNpllMx/GPGwYYDc1u1T44CCmf9hppoMtUhY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/f6892f-51b6-4e4a-b1e0-fd3fd1803294/1/NdrPcDZ9CsMFpawau68jmLJtk1U.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/f6892f-51b6-4e4a-b1e0-fd3fd1803294/1/NdrPcDZ9CsMFpawau68jmLJtk1U.mft rsync://rpki.ripe.net/repository/DEFAULT/NdrPcDZ9CsMFpawau68jmLJtk1U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:7c:a3:d2:35:cf:10:73:e5:9d:fe:90:16:61:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35dacf70367d0ac305a5ac1abbaf2398b26d9355 Validity Not Before: Dec 26 12:00:52 2025 GMT Not After : Dec 27 12:00:52 2025 GMT Subject: CN=227598c2ded6e39dacf307fef1c1c112eaecf712 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:10:ce:16:10:21:93:2a:08:71:12:fb:5e:71: 54:50:58:40:e4:b4:68:df:3b:da:49:34:4d:fc:e7: cd:42:38:e0:6a:d6:21:01:f8:62:d1:07:29:37:f2: fd:84:a0:36:8d:ee:0c:5e:f8:98:9f:1c:41:a9:9f: 24:6b:14:c4:a1:2e:f0:96:b1:69:a4:a7:97:74:64: 8c:f0:b7:cd:2f:7a:d9:65:3a:46:44:48:92:d2:99: 55:bb:b9:fe:4b:f4:de:13:90:e8:8f:fc:94:39:58: 55:83:f4:33:bd:41:08:e1:34:51:47:6a:e6:ad:c8: ed:d1:e8:5f:d3:ea:30:76:dd:09:cb:f4:0d:db:91: 6d:51:b2:37:26:57:64:90:1b:56:87:9b:85:d6:4f: 4c:96:e3:17:4c:1e:99:6a:6a:73:b2:4c:ca:e5:6e: 7f:ad:49:3d:fb:d5:4d:f4:b9:f7:6f:5e:1f:d4:d3: ed:19:98:0f:e6:39:ea:50:d7:e1:6b:6e:e8:32:ef: 20:e2:cb:0f:8b:c0:6f:ec:d0:04:17:8f:07:e3:ea: a8:cb:d4:3d:cf:93:d2:b8:c8:41:b9:74:b8:b1:48: 66:29:86:fa:a0:48:dc:7d:3a:2d:e3:6f:85:fd:92: e4:02:d7:e2:90:54:aa:cf:e6:d1:5c:5a:40:d5:33: 10:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:75:98:C2:DE:D6:E3:9D:AC:F3:07:FE:F1:C1:C1:12:EA:EC:F7:12 X509v3 Authority Key Identifier: keyid:35:DA:CF:70:36:7D:0A:C3:05:A5:AC:1A:BB:AF:23:98:B2:6D:93:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdrPcDZ9CsMFpawau68jmLJtk1U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/f6892f-51b6-4e4a-b1e0-fd3fd1803294/1/NdrPcDZ9CsMFpawau68jmLJtk1U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/f6892f-51b6-4e4a-b1e0-fd3fd1803294/1/NdrPcDZ9CsMFpawau68jmLJtk1U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:02:8a:a4:35:c1:1d:ce:4d:0f:b3:4a:42:3e:21:7f:6d:94: 74:ba:a2:20:45:a6:37:40:b2:14:a8:99:66:b4:a1:86:27:8a: 48:bc:5b:6b:b7:b2:0e:af:fb:83:26:fa:0c:e7:1c:8b:47:3e: 28:ea:5f:84:39:57:81:f2:24:19:c2:0c:39:bd:e8:9c:27:42: 5a:f9:f7:44:9d:6e:96:90:ac:b2:51:31:96:6d:82:de:e1:de: 32:86:77:d2:2a:dc:e3:46:df:0e:26:58:b7:a6:af:bd:6e:e8: 5d:6e:8d:92:6d:3a:f3:ef:c5:56:fd:8d:ed:eb:2f:aa:07:00: d8:1f:10:aa:04:a9:e1:03:a3:b3:b0:46:98:8c:92:9d:d7:3b: 22:19:cc:f4:93:a1:18:f1:14:53:c3:ef:ba:05:4f:7f:5d:9a: 10:e8:45:6a:9f:dc:55:27:c4:f1:a5:84:88:ca:65:80:a8:5a: 85:a5:8b:d0:8d:14:12:ad:ec:73:38:67:3f:72:73:a1:c1:fc: 88:8a:8e:35:43:9f:9a:aa:2e:69:d2:ae:d0:0e:4c:6f:09:17: 32:16:76:7f:33:38:d3:ef:f2:66:cd:cd:cd:3f:a1:e9:c0:ae: 2b:61:fd:60:bb:0d:ef:e4:1e:d8:37:d1:7e:97:7f:58:b3:8b: 59:0d:5f:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiHyj0jXPEHPlnf6QFmE2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1ZGFjZjcwMzY3ZDBhYzMwNWE1YWMxYWJiYWYyMzk4YjI2 ZDkzNTUwHhcNMjUxMjI2MTIwMDUyWhcNMjUxMjI3MTIwMDUyWjAzMTEwLwYDVQQD EygyMjc1OThjMmRlZDZlMzlkYWNmMzA3ZmVmMWMxYzExMmVhZWNmNzEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhDOFhAhkyoIcRL7XnFUUFhA5LRo 3zvaSTRN/OfNQjjgatYhAfhi0QcpN/L9hKA2je4MXviYnxxBqZ8kaxTEoS7wlrFp pKeXdGSM8LfNL3rZZTpGREiS0plVu7n+S/TeE5Doj/yUOVhVg/QzvUEI4TRRR2rm rcjt0ehf0+owdt0Jy/QN25FtUbI3JldkkBtWh5uF1k9MluMXTB6ZampzskzK5W5/ rUk9+9VN9Ln3b14f1NPtGZgP5jnqUNfha27oMu8g4ssPi8Bv7NAEF48H4+qoy9Q9 z5PSuMhBuXS4sUhmKYb6oEjcfTot42+F/ZLkAtfikFSqz+bRXFpA1TMQkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCJ1mMLe1uOdrPMH/vHBwRLq7PcSMB8GA1UdIwQY MBaAFDXaz3A2fQrDBaWsGruvI5iybZNVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmRyUGNEWjlDc01GcGF3YXU2OGptTEp0azFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9mNjg5MmYtNTFiNi00ZTRhLWIxZTAt ZmQzZmQxODAzMjk0LzEvTmRyUGNEWjlDc01GcGF3YXU2OGptTEp0azFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS9mNjg5MmYtNTFiNi00ZTRhLWIxZTAtZmQzZmQxODAzMjk0 LzEvTmRyUGNEWjlDc01GcGF3YXU2OGptTEp0azFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGwKKpDXB Hc5ND7NKQj4hf22UdLqiIEWmN0CyFKiZZrShhieKSLxba7eyDq/7gyb6DOcci0c+ KOpfhDlXgfIkGcIMOb3onCdCWvn3RJ1ulpCsslExlm2C3uHeMoZ30irc40bfDiZY t6avvW7oXW6Nkm068+/FVv2N7esvqgcA2B8QqgSp4QOjs7BGmIySndc7IhnM9JOh GPEUU8PvugVPf12aEOhFap/cVSfE8aWEiMplgKhahaWL0I0UEq3sczhnP3JzocH8 iIqONUOfmqouadKu0A5MbwkXMhZ2fzM40+/yZs3NzT+h6cCuK2H9YLsN7+Qe2DfR fpd/WLOLWQ1fyg== -----END CERTIFICATE-----Generated at Fri Dec 26 15:45:06 2025 by rpki-client