This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft File: nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft (raw, json) Hash identifier: mL0H08ZwFlexWpanKz0Lih7DNPOap9RytcIaI3whszM= Subject key identifier: F8:01:AA:3C:7E:45:54:10:B9:E1:88:27:F6:5F:F4:23:E5:FC:41:A2 Authority key identifier: 9F:2B:CD:73:70:5B:93:74:75:A9:58:C6:34:ED:D6:4C:9C:64:AF:B6 Certificate issuer: /CN=9f2bcd73705b937475a958c634edd64c9c64afb6 Certificate serial: 019AF878CE9A31CFEDB5AC77BC4915340813 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft Manifest number: 01C9 Signing time: Sun 07 Dec 2025 11:00:58 +0000 Manifest this update: Sun 07 Dec 2025 11:00:58 +0000 Manifest next update: Mon 08 Dec 2025 11:00:58 +0000 Files and hashes: 1: B7c_NuomsMLePlv4BqYRjDtq6rA.roa (hash: 9F/KOglkwN1+3aYHtjpMXcocrWjjPZ/arLWSx9kmqyY=) 2: LfG4OjHPoLHsAJrtCsFzB1-WA1c.roa (hash: l1BlIjqmxWuuS5MgIueayr3dbyb+8P1GNcaS+TuAghU=) 3: nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.crl (hash: dlgt8s/9F22tLbSHUx8XSu7llA7JBxJ+rogPqULYWas=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.crl rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft rsync://rpki.ripe.net/repository/DEFAULT/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f8:78:ce:9a:31:cf:ed:b5:ac:77:bc:49:15:34:08:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f2bcd73705b937475a958c634edd64c9c64afb6 Validity Not Before: Dec 7 11:00:58 2025 GMT Not After : Dec 8 11:00:58 2025 GMT Subject: CN=f801aa3c7e455410b9e18827f65ff423e5fc41a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:00:08:f4:0f:c2:6f:21:dc:0c:72:c8:5c:7f: b6:2a:7f:3b:e3:57:a8:5d:81:99:40:e5:99:66:39: 6e:7b:11:cf:e5:2b:00:b6:95:94:38:09:d3:53:24: 73:22:b7:3a:50:ae:d5:06:ed:be:81:eb:e1:c2:73: 67:e2:7c:75:42:c5:aa:de:5d:fb:1c:7c:ae:47:03: 20:e3:e4:8d:90:b0:8c:8f:4e:b3:3f:12:39:d8:14: 74:56:ab:48:65:b2:98:17:4e:64:f0:d7:af:0a:ec: ae:6d:42:0d:3c:63:bb:c9:c3:17:ac:16:75:77:fc: ff:f2:c9:f9:2f:a9:fa:9e:65:bb:e1:54:c1:e6:0e: 14:0c:a6:70:83:ee:dd:9b:7e:6a:a5:9d:0b:ce:da: df:da:91:ca:69:f6:ea:83:c6:95:fb:5d:0a:9b:67: e2:bd:a7:c0:69:45:e1:8d:36:21:d4:b1:14:5d:b4: 03:ba:36:2c:29:ae:88:33:7b:2b:df:e0:fe:1b:97: 00:04:95:6d:08:9a:9f:00:f4:dc:d6:1d:2e:f6:0a: df:d7:28:7a:f1:52:bd:59:04:6c:2e:58:97:68:45: 35:c0:9c:71:3a:d6:82:96:ff:76:c6:80:3d:3c:af: 8c:bd:18:50:8d:3e:d6:f7:1d:25:d8:85:1c:05:ed: 28:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:01:AA:3C:7E:45:54:10:B9:E1:88:27:F6:5F:F4:23:E5:FC:41:A2 X509v3 Authority Key Identifier: keyid:9F:2B:CD:73:70:5B:93:74:75:A9:58:C6:34:ED:D6:4C:9C:64:AF:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d6:4a:9f:e6:60:bd:d0:f1:5c:44:82:5e:1c:56:d1:8a:f8:fe: d2:81:2a:7a:77:b0:65:9c:58:eb:4f:fe:f0:ec:60:88:f6:52: cc:ec:3e:b1:8a:d0:10:b9:64:09:22:cb:ed:42:0c:d4:d3:23: 01:26:b0:3e:3f:0e:9f:23:7f:23:9a:c6:d9:4c:e7:5d:2a:63: 10:00:36:3e:95:6a:9f:31:20:b7:eb:c3:be:f2:a6:ef:0c:1b: bb:d4:32:37:d9:d2:4f:ba:47:e2:f6:d0:64:98:fe:20:44:13: ed:ac:83:55:c9:aa:6e:19:ab:77:d6:4e:1b:98:9e:30:73:63: 77:cf:8f:89:10:55:27:4a:9d:29:1d:e6:69:18:e1:7b:31:ce: e7:34:76:12:5a:a6:4f:b7:0a:e8:81:c4:2b:4e:f5:cf:fa:4a: 3e:45:c9:da:6f:2f:4f:a5:b4:5e:c9:54:75:66:e5:1f:34:78: 22:2f:6a:1c:ae:a0:5f:4a:c1:79:01:29:e1:d8:e4:fa:41:ea: aa:01:8e:bd:e2:fe:dc:8f:19:f1:ef:4e:46:32:6a:2c:02:ca: 18:ec:c5:4d:91:a2:93:c7:10:df:a6:d0:88:74:00:c6:58:bc: 7e:6e:aa:7f:53:92:d6:c7:08:e6:c8:a2:84:e6:f6:2f:97:ac: 38:d6:c4:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr4eM6aMc/ttax3vEkVNAgTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmMmJjZDczNzA1YjkzNzQ3NWE5NThjNjM0ZWRkNjRjOWM2 NGFmYjYwHhcNMjUxMjA3MTEwMDU4WhcNMjUxMjA4MTEwMDU4WjAzMTEwLwYDVQQD EyhmODAxYWEzYzdlNDU1NDEwYjllMTg4MjdmNjVmZjQyM2U1ZmM0MWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwAI9A/CbyHcDHLIXH+2Kn8741eo XYGZQOWZZjluexHP5SsAtpWUOAnTUyRzIrc6UK7VBu2+gevhwnNn4nx1QsWq3l37 HHyuRwMg4+SNkLCMj06zPxI52BR0VqtIZbKYF05k8NevCuyubUINPGO7ycMXrBZ1 d/z/8sn5L6n6nmW74VTB5g4UDKZwg+7dm35qpZ0Lztrf2pHKafbqg8aV+10Km2fi vafAaUXhjTYh1LEUXbQDujYsKa6IM3sr3+D+G5cABJVtCJqfAPTc1h0u9grf1yh6 8VK9WQRsLliXaEU1wJxxOtaClv92xoA9PK+MvRhQjT7W9x0l2IUcBe0o4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPgBqjx+RVQQueGIJ/Zf9CPl/EGiMB8GA1UdIwQY MBaAFJ8rzXNwW5N0dalYxjTt1kycZK+2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnl2TmMzQmJrM1IxcVZqR05PM1dUSnhrcjdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lOGRiYmItNzBkYS00MmY3LWFlNDct OTA4NGZiMGJlOWMxLzEvbnl2TmMzQmJrM1IxcVZqR05PM1dUSnhrcjdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9lOGRiYmItNzBkYS00MmY3LWFlNDctOTA4NGZiMGJlOWMx LzEvbnl2TmMzQmJrM1IxcVZqR05PM1dUSnhrcjdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1kqf5mC9 0PFcRIJeHFbRivj+0oEqenewZZxY60/+8OxgiPZSzOw+sYrQELlkCSLL7UIM1NMj ASawPj8OnyN/I5rG2UznXSpjEAA2PpVqnzEgt+vDvvKm7wwbu9QyN9nST7pH4vbQ ZJj+IEQT7ayDVcmqbhmrd9ZOG5ieMHNjd8+PiRBVJ0qdKR3maRjhezHO5zR2Elqm T7cK6IHEK071z/pKPkXJ2m8vT6W0XslUdWblHzR4Ii9qHK6gX0rBeQEp4djk+kHq qgGOveL+3I8Z8e9ORjJqLALKGOzFTZGik8cQ36bQiHQAxli8fm6qf1OS1scI5sii hOb2L5esONbEGQ== -----END CERTIFICATE-----Generated at Sun Dec 7 12:41:20 2025 by rpki-client