This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.mft File: aDLDLSJZATmRJg1TDZEgAxqu_NA.mft (raw, json) Hash identifier: Gc0WYrG4ZmA02OLY6/LRoAxTWQE8VFq6x/dQSFMB/9o= Subject key identifier: 0D:48:A7:17:CD:4A:32:B9:00:A1:64:44:EF:E4:01:2C:E7:AF:85:02 Authority key identifier: 68:32:C3:2D:22:59:01:39:91:26:0D:53:0D:91:20:03:1A:AE:FC:D0 Certificate issuer: /CN=6832c32d2259013991260d530d9120031aaefcd0 Certificate serial: 019B0F6E23D87EB9431F6684298C86A2F62D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.mft Manifest number: 0D10 Signing time: Thu 11 Dec 2025 22:00:34 +0000 Manifest this update: Thu 11 Dec 2025 22:00:34 +0000 Manifest next update: Fri 12 Dec 2025 22:00:34 +0000 Files and hashes: 1: 1-oXSUr0wwWM6bUdeuL56OFYZDI0.roa (hash: ncbwn+oJ9xxudk0G2RRlfn6p7YnDM2Topv72cCblM78=) 2: JmE2DotJFzee6ZEkJABlOvGfUi0.roa (hash: kTxgn5V7rU8GaSWrPY2IpRexVO3i36geJ6EK2nXDe04=) 3: aDLDLSJZATmRJg1TDZEgAxqu_NA.crl (hash: jzy996Crx0ykGgb7JTYE/Z/s+pJ23V6LahAr9GZXPDk=) 4: cEY4_oxa006P5RDwnA1ZzqFve_U.roa (hash: aljeYfMZh5A8r1hZ1ho6VGSZLpMMc/WsIq8gaCshO9A=) 5: nTupOLnysHIU3jc5GcaguEHrGzQ.roa (hash: 7rA+K1p/TVuAVfQm4S6Vm6UJX0egR9dZCIKwnWvWs6k=) 6: nnxeUU87S1Fex4eT1VyslsBsqEs.roa (hash: reRLOJZlJItgnmYvk5ziSo/wJ6dbsJIWZ7vz95Z6+9Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.mft rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:6e:23:d8:7e:b9:43:1f:66:84:29:8c:86:a2:f6:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6832c32d2259013991260d530d9120031aaefcd0 Validity Not Before: Dec 11 22:00:34 2025 GMT Not After : Dec 12 22:00:34 2025 GMT Subject: CN=0d48a717cd4a32b900a16444efe4012ce7af8502 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:87:3b:09:ed:be:c9:c6:57:2f:e6:6d:67:6a: f5:66:0e:72:fe:8f:cb:c8:c7:1c:e2:2c:22:2e:9b: 64:da:b7:03:86:5a:77:c0:54:69:30:ea:66:d9:22: b7:db:a5:d3:1f:61:5e:24:20:d6:a5:df:b0:9c:77: 48:91:a0:63:45:a4:9d:a1:ea:3c:e8:dd:e2:35:df: 12:f9:22:6f:01:b5:c3:84:4d:27:a4:19:89:49:7e: bf:56:8c:09:2e:9b:27:13:8f:f7:47:09:48:12:9b: 5d:72:6a:46:97:2a:3b:5d:40:34:4f:9f:49:0d:2a: 86:fd:82:e8:12:3b:ea:1e:6a:b8:a5:84:2f:41:d8: 03:98:0f:87:b6:19:ad:5b:fb:84:c5:fb:41:7d:2a: bd:85:a2:a8:4f:d8:c5:9e:ec:60:98:40:a0:8f:87: a7:42:c6:a0:eb:9d:7d:98:38:e1:80:6b:4f:e2:36: e2:77:55:a0:10:93:de:3d:21:22:8d:bd:29:04:39: 90:dc:b4:9b:0d:3a:c8:13:df:03:52:0d:a3:62:ac: ba:fc:59:80:a7:7b:30:fe:00:71:04:9e:b5:8c:38: aa:b6:7d:a6:16:9e:d1:11:b6:40:ed:26:0f:b8:91: c5:c8:57:e4:84:5f:41:dc:31:78:e1:a2:ea:6e:41: 69:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:48:A7:17:CD:4A:32:B9:00:A1:64:44:EF:E4:01:2C:E7:AF:85:02 X509v3 Authority Key Identifier: keyid:68:32:C3:2D:22:59:01:39:91:26:0D:53:0D:91:20:03:1A:AE:FC:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:56:39:37:1a:3e:64:9a:08:4c:65:07:51:93:27:bb:fe:24: 0f:fc:31:66:d0:30:e8:d0:8a:74:b8:b3:3e:b4:53:fc:ae:c3: b8:b6:1c:4c:28:ed:26:72:41:2f:ba:dc:2d:ac:dc:f0:32:dd: 5c:65:29:e5:83:a2:b7:b0:6e:44:8e:d6:db:8e:c4:f2:85:cb: c1:04:7a:68:a4:c6:81:e7:64:87:51:8c:af:08:0e:4b:5d:58: 5e:f1:44:aa:00:9f:7f:2b:96:8c:0e:c0:ce:5b:20:32:b9:0c: 58:34:01:00:5c:41:b0:a0:0d:8d:78:45:3a:c1:b5:b1:84:87: ef:9a:0c:ea:7b:8d:05:5f:e7:2b:57:24:13:76:a5:63:17:ea: 19:24:0c:56:1c:3d:5f:c3:8b:37:ca:be:99:ba:c5:4a:25:6f: 96:e1:b0:60:97:4d:3a:0f:eb:43:37:2c:c0:29:9b:c8:31:aa: 6b:68:ce:e5:48:5e:4f:45:cd:ba:9f:e9:8b:9e:32:1f:59:31: e3:4b:05:a5:d5:93:8d:37:a2:07:07:9d:91:db:35:6f:9d:59: bc:35:40:81:9d:4d:c9:eb:ae:c3:f7:80:bd:db:49:88:a4:4f: fc:c1:b4:8c:82:a0:9f:3b:72:84:64:72:30:a7:07:0e:71:06: ce:09:f2:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPbiPYfrlDH2aEKYyGovYtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4MzJjMzJkMjI1OTAxMzk5MTI2MGQ1MzBkOTEyMDAzMWFh ZWZjZDAwHhcNMjUxMjExMjIwMDM0WhcNMjUxMjEyMjIwMDM0WjAzMTEwLwYDVQQD EygwZDQ4YTcxN2NkNGEzMmI5MDBhMTY0NDRlZmU0MDEyY2U3YWY4NTAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoc7Ce2+ycZXL+ZtZ2r1Zg5y/o/L yMcc4iwiLptk2rcDhlp3wFRpMOpm2SK326XTH2FeJCDWpd+wnHdIkaBjRaSdoeo8 6N3iNd8S+SJvAbXDhE0npBmJSX6/VowJLpsnE4/3RwlIEptdcmpGlyo7XUA0T59J DSqG/YLoEjvqHmq4pYQvQdgDmA+HthmtW/uExftBfSq9haKoT9jFnuxgmECgj4en Qsag6519mDjhgGtP4jbid1WgEJPePSEijb0pBDmQ3LSbDTrIE98DUg2jYqy6/FmA p3sw/gBxBJ61jDiqtn2mFp7REbZA7SYPuJHFyFfkhF9B3DF44aLqbkFpgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA1IpxfNSjK5AKFkRO/kASznr4UCMB8GA1UdIwQY MBaAFGgywy0iWQE5kSYNUw2RIAMarvzQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYURMRExTSlpBVG1SSmcxVERaRWdBeHF1X05BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85NGI2NmUtM2UwZC00MzMyLWFiNGYt NzcwZjhlYWIyYWU3LzEvYURMRExTSlpBVG1SSmcxVERaRWdBeHF1X05BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC85NGI2NmUtM2UwZC00MzMyLWFiNGYtNzcwZjhlYWIyYWU3 LzEvYURMRExTSlpBVG1SSmcxVERaRWdBeHF1X05BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC1Y5Nxo+ ZJoITGUHUZMnu/4kD/wxZtAw6NCKdLizPrRT/K7DuLYcTCjtJnJBL7rcLazc8DLd XGUp5YOit7BuRI7W247E8oXLwQR6aKTGgedkh1GMrwgOS11YXvFEqgCffyuWjA7A zlsgMrkMWDQBAFxBsKANjXhFOsG1sYSH75oM6nuNBV/nK1ckE3alYxfqGSQMVhw9 X8OLN8q+mbrFSiVvluGwYJdNOg/rQzcswCmbyDGqa2jO5UheT0XNup/pi54yH1kx 40sFpdWTjTeiBwedkds1b51ZvDVAgZ1Nyeuuw/eAvdtJiKRP/MG0jIKgnztyhGRy MKcHDnEGzgny2A== -----END CERTIFICATE-----Generated at Fri Dec 12 04:00:52 2025 by rpki-client