This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.mft File: nxvZcy5s3W50lNeRh_yoVbUZmQk.mft (raw, json) Hash identifier: TjsW8aMTEuFi7XohjVjRLZStyK9qzU4g6L4Ot8hTDRY= Subject key identifier: 6F:D3:E6:4D:27:8A:AD:08:42:9B:77:2A:4F:51:47:49:A7:7C:03:AB Authority key identifier: 9F:1B:D9:73:2E:6C:DD:6E:74:94:D7:91:87:FC:A8:55:B5:19:99:09 Certificate issuer: /CN=9f1bd9732e6cdd6e7494d79187fca855b5199909 Certificate serial: 019AF209077D399A15D0CCE836FEC0F4A416 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nxvZcy5s3W50lNeRh_yoVbUZmQk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.mft Manifest number: 14E2 Signing time: Sat 06 Dec 2025 05:01:09 +0000 Manifest this update: Sat 06 Dec 2025 05:01:09 +0000 Manifest next update: Sun 07 Dec 2025 05:01:09 +0000 Files and hashes: 1: L2MFVzLu5kpVjnsb4Kb2Ip5hD4I.roa (hash: wDHsr026DvaBiTyi7BBF/QmvI/bBUdaI/D33HJF38Y8=) 2: _JE8lnLT-86sHVAHJKlkVaAyjr4.roa (hash: UompnxxivZ8Fg0ySIbxl1tWe4K+WK1YpWsyZpIJAPwU=) 3: nxvZcy5s3W50lNeRh_yoVbUZmQk.crl (hash: ew4bMPPoN7QMe4jjuYIIv+V7L/x/LGhkIu9/5SLfGLA=) 4: qdHDAHiWQsmCFoNetHDwXmdq01A.roa (hash: go8toSa0Pfxl9RGM5eMA7V4+YqEI5lyucr5i8lNbh0M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.crl rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.mft rsync://rpki.ripe.net/repository/DEFAULT/nxvZcy5s3W50lNeRh_yoVbUZmQk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:07:7d:39:9a:15:d0:cc:e8:36:fe:c0:f4:a4:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f1bd9732e6cdd6e7494d79187fca855b5199909 Validity Not Before: Dec 6 05:01:09 2025 GMT Not After : Dec 7 05:01:09 2025 GMT Subject: CN=6fd3e64d278aad08429b772a4f514749a77c03ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ee:5b:d1:e7:01:ce:a1:f0:32:f1:1d:f0:14: dd:a3:05:2f:c1:e8:85:9a:33:be:e2:5c:4e:51:f3: 6a:f2:91:7c:9b:26:59:51:27:d9:ad:f2:82:f3:3c: 6b:5b:fc:62:58:0d:5d:fb:a7:a3:45:a1:1c:b0:e0: b7:93:ca:5f:b4:b4:46:08:b5:87:5e:d8:55:02:bc: d9:e2:0d:e6:1b:49:32:06:0d:bc:86:46:50:d3:10: a1:60:fe:6b:9f:e6:a6:3d:8a:49:06:ee:08:c4:0b: e1:9f:85:08:e0:04:c2:89:55:77:5a:aa:61:5e:65: e7:30:77:e1:ce:f0:48:e3:9a:e9:8c:b8:95:08:9e: 0c:a4:90:e1:f3:ec:fe:f7:5c:3d:8b:42:aa:bd:ea: fb:0b:c6:28:f1:43:55:64:7e:5e:86:5b:65:5d:18: 23:5e:c5:9e:bb:93:9c:e5:e9:2b:d1:63:c8:37:14: 6e:d9:c4:2a:bb:90:25:a6:01:9c:c8:f0:44:c7:fe: 42:e7:ec:8c:06:de:0b:40:86:e9:41:71:ef:88:27: 05:6e:9a:bb:24:5d:11:19:f6:d8:4c:4a:86:93:4e: 5f:de:e1:87:cd:ad:35:69:b7:2b:8b:a4:be:5b:e7: 76:50:f5:cc:c2:3a:c6:61:b7:0a:a9:9c:56:65:24: 5b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:D3:E6:4D:27:8A:AD:08:42:9B:77:2A:4F:51:47:49:A7:7C:03:AB X509v3 Authority Key Identifier: keyid:9F:1B:D9:73:2E:6C:DD:6E:74:94:D7:91:87:FC:A8:55:B5:19:99:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nxvZcy5s3W50lNeRh_yoVbUZmQk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d2:6a:1c:d0:c8:12:cf:9f:af:8a:59:40:40:24:d9:e9:ff:2b: 65:80:2f:5c:32:c9:88:bd:7a:c3:c3:79:42:dd:f6:ab:b2:44: 04:1d:c4:aa:75:95:0e:bd:27:d8:9d:0f:10:3a:f3:be:44:43: 6c:e8:e2:db:fd:f3:d7:30:01:6e:a5:8d:32:31:45:e2:75:cd: 37:71:4a:13:00:db:9d:30:f0:3a:22:2b:36:39:66:99:87:6c: 0d:2a:fb:d8:28:31:75:f8:86:34:15:4d:1e:80:6f:42:f3:4c: 3b:9d:f8:e0:11:1b:b1:f7:00:f8:9b:b8:28:2e:5c:e7:34:55: 84:a5:9a:25:43:7f:e8:ee:da:a4:f8:ec:99:e6:9f:42:21:95: de:d3:ae:e7:dc:f7:bb:eb:0d:f9:be:5f:16:c7:c7:74:c7:ce: fb:19:6a:8d:43:6b:47:c5:f7:c0:88:99:17:8d:b1:52:05:5f: 39:0c:22:fe:96:3c:5c:b6:e3:dd:4f:0b:72:d6:41:52:b6:54: 39:ee:6b:e9:f4:72:54:6e:03:2f:74:d7:6d:ed:05:26:1a:b8: d7:32:38:b7:8c:8a:26:97:6a:98:8f:93:f6:6c:27:37:75:ce: a8:b9:df:d9:40:80:89:1f:23:fd:ec:59:cf:08:5e:d9:bb:c5: 11:cb:9a:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCQd9OZoV0MzoNv7A9KQWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmMWJkOTczMmU2Y2RkNmU3NDk0ZDc5MTg3ZmNhODU1YjUx OTk5MDkwHhcNMjUxMjA2MDUwMTA5WhcNMjUxMjA3MDUwMTA5WjAzMTEwLwYDVQQD Eyg2ZmQzZTY0ZDI3OGFhZDA4NDI5Yjc3MmE0ZjUxNDc0OWE3N2MwM2FiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+5b0ecBzqHwMvEd8BTdowUvweiF mjO+4lxOUfNq8pF8myZZUSfZrfKC8zxrW/xiWA1d+6ejRaEcsOC3k8pftLRGCLWH XthVArzZ4g3mG0kyBg28hkZQ0xChYP5rn+amPYpJBu4IxAvhn4UI4ATCiVV3Wqph XmXnMHfhzvBI45rpjLiVCJ4MpJDh8+z+91w9i0Kqver7C8Yo8UNVZH5ehltlXRgj XsWeu5Oc5ekr0WPINxRu2cQqu5AlpgGcyPBEx/5C5+yMBt4LQIbpQXHviCcFbpq7 JF0RGfbYTEqGk05f3uGHza01abcri6S+W+d2UPXMwjrGYbcKqZxWZSRbxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG/T5k0niq0IQpt3Kk9RR0mnfAOrMB8GA1UdIwQY MBaAFJ8b2XMubN1udJTXkYf8qFW1GZkJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnh2WmN5NXMzVzUwbE5lUmhfeW9WYlVabVFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi8xNGVhZDktY2JiMS00NjM5LTgxYTct ZDhiODIwMmQ3Nzg2LzEvbnh2WmN5NXMzVzUwbE5lUmhfeW9WYlVabVFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi8xNGVhZDktY2JiMS00NjM5LTgxYTctZDhiODIwMmQ3Nzg2 LzEvbnh2WmN5NXMzVzUwbE5lUmhfeW9WYlVabVFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0moc0MgS z5+villAQCTZ6f8rZYAvXDLJiL16w8N5Qt32q7JEBB3EqnWVDr0n2J0PEDrzvkRD bOji2/3z1zABbqWNMjFF4nXNN3FKEwDbnTDwOiIrNjlmmYdsDSr72CgxdfiGNBVN HoBvQvNMO5344BEbsfcA+Ju4KC5c5zRVhKWaJUN/6O7apPjsmeafQiGV3tOu59z3 u+sN+b5fFsfHdMfO+xlqjUNrR8X3wIiZF42xUgVfOQwi/pY8XLbj3U8LctZBUrZU Oe5r6fRyVG4DL3TXbe0FJhq41zI4t4yKJpdqmI+T9mwnN3XOqLnf2UCAiR8j/exZ zwhe2bvFEcuahQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:01:41 2025 by rpki-client