This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.mft File: ndUEhgp8kk5yHL-upfSacsgpbDU.mft (raw, json) Hash identifier: V4Go4smwR6SqmoFENjKMxANDy/pfiPqjI+adJ0He93M= Subject key identifier: 9C:9B:AB:A9:02:E9:72:75:B1:77:BF:18:71:0A:69:5D:D7:9B:E6:31 Authority key identifier: 9D:D5:04:86:0A:7C:92:4E:72:1C:BF:AE:A5:F4:9A:72:C8:29:6C:35 Certificate issuer: /CN=9dd504860a7c924e721cbfaea5f49a72c8296c35 Certificate serial: 019B0E266FDC99EC79FC9CEA1EF81B61FEAC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ndUEhgp8kk5yHL-upfSacsgpbDU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.mft Manifest number: 14B0 Signing time: Thu 11 Dec 2025 16:02:38 +0000 Manifest this update: Thu 11 Dec 2025 16:02:38 +0000 Manifest next update: Fri 12 Dec 2025 16:02:38 +0000 Files and hashes: 1: X5jYbn-h_3ZrymXeQcutqUSQLI0.roa (hash: m8dLiyB+f2bY0CN3q6gxqkEWD+kF5d7UEcU/fd6EB40=) 2: nO41lzHTLA0qnXGNSido0EKnbG8.roa (hash: p9hF7X8F0vCkUimBjAw1aM4Oym1MBxjaah21sqRzrUE=) 3: ndUEhgp8kk5yHL-upfSacsgpbDU.crl (hash: MXJgZ4SE9+xIBM6TF07zHun9hlSR8aNl0O4ZAuDmd/k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.mft rsync://rpki.ripe.net/repository/DEFAULT/ndUEhgp8kk5yHL-upfSacsgpbDU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:26:6f:dc:99:ec:79:fc:9c:ea:1e:f8:1b:61:fe:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9dd504860a7c924e721cbfaea5f49a72c8296c35 Validity Not Before: Dec 11 16:02:38 2025 GMT Not After : Dec 12 16:02:38 2025 GMT Subject: CN=9c9baba902e97275b177bf18710a695dd79be631 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4d:56:2e:7a:8f:65:c3:62:00:09:0e:83:9e: f3:35:0f:5d:ef:3b:7b:24:f3:97:f3:79:c7:ec:7b: 18:4b:a4:d7:39:5f:0d:34:54:70:4c:42:12:31:6e: 98:26:46:a2:15:5a:33:cc:6b:64:22:7f:9d:e4:4b: cc:91:5b:6d:32:95:2a:af:c0:e2:70:3e:4f:9c:80: 69:3a:1f:62:43:41:91:5f:b0:00:53:46:6b:73:39: 8d:11:bb:5f:12:cb:c2:cf:0b:59:96:e9:dd:79:1f: 2d:7b:06:8f:c8:db:94:f7:6c:44:dd:89:10:2c:b4: 10:5f:b5:08:71:04:33:48:06:75:62:95:0b:94:48: 05:03:02:52:1c:ed:8f:9b:88:2f:c2:f4:93:54:9d: ac:25:ec:b3:f6:a9:aa:08:af:c3:e2:1c:a3:78:75: 2f:c6:27:28:1e:71:50:70:c2:9c:f6:6d:85:ef:f5: ea:da:48:ed:b0:0a:75:6a:53:fd:e7:d5:25:bf:83: 22:1d:52:f2:9a:c2:1f:24:7d:68:17:38:91:a3:4d: 82:93:95:56:b9:b9:b1:2b:35:67:01:70:32:18:88: a0:95:75:20:30:42:14:15:c8:f7:51:c6:6e:cc:45: 52:79:3f:0a:b2:72:70:cd:65:a0:74:46:e6:f1:01: 08:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:9B:AB:A9:02:E9:72:75:B1:77:BF:18:71:0A:69:5D:D7:9B:E6:31 X509v3 Authority Key Identifier: keyid:9D:D5:04:86:0A:7C:92:4E:72:1C:BF:AE:A5:F4:9A:72:C8:29:6C:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ndUEhgp8kk5yHL-upfSacsgpbDU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:fe:42:82:00:70:5f:7b:57:e1:93:99:e5:c5:fd:1a:4f:5d: 09:a0:73:c1:6d:f6:c5:ec:b9:9c:20:40:fa:7a:a5:58:69:f0: 69:b0:df:ca:38:c6:34:8d:54:e5:d2:62:49:e0:36:22:2a:5c: 15:9a:ba:d0:8a:92:45:a9:ca:dd:7e:a8:a0:b5:45:2b:dd:d6: eb:11:9d:97:dd:b9:0d:d6:da:71:ab:a9:1a:55:91:33:f1:5e: 88:f1:1d:8b:13:d2:5d:5b:79:54:22:af:f7:a1:46:d3:cb:31: dc:1c:c4:fd:3d:26:e1:5c:bd:f9:b2:cb:c9:bc:5d:cc:d9:57: 01:41:d6:7d:08:17:6d:02:c3:61:60:ca:84:5f:c1:d7:95:71: ea:64:f4:02:7e:2b:38:eb:13:d2:53:e1:08:50:72:6f:4c:c0: 8c:34:f8:08:e1:cf:76:3a:14:d1:39:0d:b9:f6:5b:f4:da:e5: aa:5d:8c:3d:34:06:95:ab:c8:73:5a:dc:e0:72:61:84:65:81: ea:88:72:d1:0b:e8:65:4e:9b:5f:cc:44:a9:e4:e0:17:77:3d: 47:30:5e:45:11:e8:8f:aa:b6:8c:a3:47:9a:65:3e:dc:69:4d: 61:94:b6:42:fa:c5:ea:37:e1:27:14:0d:8f:40:fa:a7:02:c0: 3d:cb:73:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJm/cmex5/JzqHvgbYf6sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkZDUwNDg2MGE3YzkyNGU3MjFjYmZhZWE1ZjQ5YTcyYzgy OTZjMzUwHhcNMjUxMjExMTYwMjM4WhcNMjUxMjEyMTYwMjM4WjAzMTEwLwYDVQQD Eyg5YzliYWJhOTAyZTk3Mjc1YjE3N2JmMTg3MTBhNjk1ZGQ3OWJlNjMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsk1WLnqPZcNiAAkOg57zNQ9d7zt7 JPOX83nH7HsYS6TXOV8NNFRwTEISMW6YJkaiFVozzGtkIn+d5EvMkVttMpUqr8Di cD5PnIBpOh9iQ0GRX7AAU0ZrczmNEbtfEsvCzwtZlundeR8tewaPyNuU92xE3YkQ LLQQX7UIcQQzSAZ1YpULlEgFAwJSHO2Pm4gvwvSTVJ2sJeyz9qmqCK/D4hyjeHUv xicoHnFQcMKc9m2F7/Xq2kjtsAp1alP959Ulv4MiHVLymsIfJH1oFziRo02Ck5VW ubmxKzVnAXAyGIiglXUgMEIUFcj3UcZuzEVSeT8KsnJwzWWgdEbm8QEIEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJybq6kC6XJ1sXe/GHEKaV3Xm+YxMB8GA1UdIwQY MBaAFJ3VBIYKfJJOchy/rqX0mnLIKWw1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmRVRWhncDhrazV5SEwtdXBmU2Fjc2dwYkRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi80OTYyMzItZDE4Yi00NTU0LTlhNDMt NDMyZjVjMWY0MWY3LzEvbmRVRWhncDhrazV5SEwtdXBmU2Fjc2dwYkRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi80OTYyMzItZDE4Yi00NTU0LTlhNDMtNDMyZjVjMWY0MWY3 LzEvbmRVRWhncDhrazV5SEwtdXBmU2Fjc2dwYkRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY/5CggBw X3tX4ZOZ5cX9Gk9dCaBzwW32xey5nCBA+nqlWGnwabDfyjjGNI1U5dJiSeA2Iipc FZq60IqSRanK3X6ooLVFK93W6xGdl925DdbacaupGlWRM/FeiPEdixPSXVt5VCKv 96FG08sx3BzE/T0m4Vy9+bLLybxdzNlXAUHWfQgXbQLDYWDKhF/B15Vx6mT0An4r OOsT0lPhCFByb0zAjDT4COHPdjoU0TkNufZb9Nrlql2MPTQGlavIc1rc4HJhhGWB 6ohy0QvoZU6bX8xEqeTgF3c9RzBeRRHoj6q2jKNHmmU+3GlNYZS2QvrF6jfhJxQN j0D6pwLAPctzDA== -----END CERTIFICATE-----Generated at Thu Dec 11 18:41:21 2025 by rpki-client