This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.mft File: nVE44frPe2XbtXX6fUckDCeLNN8.mft (raw, json) Hash identifier: 4/D9SXf5K/9SGqA/++Zb9WauwSGNaZl196rEoXYa9yw= Subject key identifier: 5E:E5:43:85:6C:46:55:9B:1D:C6:53:6F:56:0B:53:52:E7:B5:B1:D9 Authority key identifier: 9D:51:38:E1:FA:CF:7B:65:DB:B5:75:FA:7D:47:24:0C:27:8B:34:DF Certificate issuer: /CN=9d5138e1facf7b65dbb575fa7d47240c278b34df Certificate serial: 019AF389275E1CA79FDEB6CC8FA6394F00D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nVE44frPe2XbtXX6fUckDCeLNN8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.mft Manifest number: 176F Signing time: Sat 06 Dec 2025 12:00:43 +0000 Manifest this update: Sat 06 Dec 2025 12:00:43 +0000 Manifest next update: Sun 07 Dec 2025 12:00:43 +0000 Files and hashes: 1: EOilBiIenaox7njpqs3_DfcHwlA.roa (hash: fzNbr06IBLk41vJ4PfPSo6OIziKfU6CFjSqPnCza+iE=) 2: SrPm1i3skuiVEboXgAOiwvJ0e24.roa (hash: yv8h4FDHS+rMOcdFcyHu/1yEMbW/iUuOt5Oggkr9ddY=) 3: mpLcK6oOkOzJN_8yv56Qh9Pb3jU.roa (hash: xqGJM6N0Wj7tHelbHPs6OohD0rdA/bMhZJppwS9pXD8=) 4: nVE44frPe2XbtXX6fUckDCeLNN8.crl (hash: LarK5qJfDO3io67pMa/KAInfdWgo8Wcp97P1BIg21vQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.crl rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.mft rsync://rpki.ripe.net/repository/DEFAULT/nVE44frPe2XbtXX6fUckDCeLNN8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:27:5e:1c:a7:9f:de:b6:cc:8f:a6:39:4f:00:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d5138e1facf7b65dbb575fa7d47240c278b34df Validity Not Before: Dec 6 12:00:43 2025 GMT Not After : Dec 7 12:00:43 2025 GMT Subject: CN=5ee543856c46559b1dc6536f560b5352e7b5b1d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d8:5a:3d:ba:d6:6f:fa:4e:68:ac:17:d9:a7: 29:61:80:3c:2b:15:19:4e:cf:2c:82:26:00:69:f8: 10:37:49:4f:e5:88:a2:36:30:c4:a3:33:e7:10:fe: 0b:1d:90:dc:73:ff:0b:60:9e:8f:04:53:b3:a4:62: 64:39:08:cf:96:cc:a1:63:fa:e6:ff:ac:fa:a9:a2: 4b:19:f7:0c:0c:9b:18:8d:63:ef:7e:a3:40:70:60: 10:9a:4e:d5:73:8b:09:33:e2:39:45:97:c8:be:bc: b9:a9:ea:ef:4b:17:02:21:a8:92:31:3f:77:fe:e1: 2f:96:60:64:2c:00:0c:58:41:55:54:5a:b8:48:2f: bf:87:46:74:75:31:01:e8:57:8b:6f:ba:38:b6:13: ff:78:82:84:03:bf:c5:26:77:c6:04:3c:4f:de:fc: f4:7c:be:d1:6a:a6:e7:c6:81:53:f2:d2:57:8e:de: 16:16:e4:fc:0c:83:24:fa:7a:35:d1:7b:2a:af:f1: 89:0b:ed:0c:0f:c3:e0:41:ee:04:3e:a6:3d:92:a6: 59:d0:41:7c:aa:f9:45:cf:04:7c:2b:0c:e9:85:47: e4:0b:08:dd:90:03:b7:fa:ba:0b:c3:a2:30:4d:d1: 03:93:f4:6d:83:2f:71:e0:5e:72:e5:14:fd:73:66: 96:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:E5:43:85:6C:46:55:9B:1D:C6:53:6F:56:0B:53:52:E7:B5:B1:D9 X509v3 Authority Key Identifier: keyid:9D:51:38:E1:FA:CF:7B:65:DB:B5:75:FA:7D:47:24:0C:27:8B:34:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nVE44frPe2XbtXX6fUckDCeLNN8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:4e:e1:fb:1a:e3:5e:3a:b1:84:6d:37:d2:72:9c:f8:3c:01: 27:66:e3:26:92:12:a3:0b:39:fa:23:3e:c1:15:fa:c0:66:2d: 06:11:04:db:54:35:d3:3b:f8:2e:b8:1b:55:71:ff:46:52:ee: 99:18:66:19:88:64:86:50:ec:9a:8b:52:1e:b3:46:ba:0b:ca: 36:9f:35:30:3e:fb:8a:30:92:05:c1:47:4a:8f:e7:22:c4:f2: 75:d2:21:33:2b:df:51:dc:ea:e1:54:28:df:6b:1e:f9:d6:03: ab:d1:b2:62:9d:dc:c5:0e:af:df:17:cc:50:22:79:11:3a:d8: 87:40:8c:b7:02:16:2a:08:ff:88:6c:66:3e:c5:a0:fc:64:2d: f3:5e:ac:47:e2:33:13:6f:6c:06:2d:d3:41:bc:6e:74:ae:23: ce:69:96:34:6b:3f:0c:e5:89:b4:a0:07:df:6e:92:3b:ac:5a: 81:fa:63:da:c0:c3:3d:fd:6d:98:b9:60:a0:91:78:5c:2e:4f: 9f:84:f8:de:af:42:49:8d:9d:08:54:3b:e1:90:25:ae:18:5a: a3:b6:de:fc:60:3a:12:de:f7:68:bd:09:91:db:be:9d:eb:9f: ae:4e:f5:01:92:33:d7:df:9b:ab:70:f0:fe:8b:01:68:90:01: 26:10:27:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziSdeHKef3rbMj6Y5TwDQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkNTEzOGUxZmFjZjdiNjVkYmI1NzVmYTdkNDcyNDBjMjc4 YjM0ZGYwHhcNMjUxMjA2MTIwMDQzWhcNMjUxMjA3MTIwMDQzWjAzMTEwLwYDVQQD Eyg1ZWU1NDM4NTZjNDY1NTliMWRjNjUzNmY1NjBiNTM1MmU3YjViMWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNhaPbrWb/pOaKwX2acpYYA8KxUZ Ts8sgiYAafgQN0lP5YiiNjDEozPnEP4LHZDcc/8LYJ6PBFOzpGJkOQjPlsyhY/rm /6z6qaJLGfcMDJsYjWPvfqNAcGAQmk7Vc4sJM+I5RZfIvry5qervSxcCIaiSMT93 /uEvlmBkLAAMWEFVVFq4SC+/h0Z0dTEB6FeLb7o4thP/eIKEA7/FJnfGBDxP3vz0 fL7RaqbnxoFT8tJXjt4WFuT8DIMk+no10Xsqr/GJC+0MD8PgQe4EPqY9kqZZ0EF8 qvlFzwR8KwzphUfkCwjdkAO3+roLw6IwTdEDk/Rtgy9x4F5y5RT9c2aWLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF7lQ4VsRlWbHcZTb1YLU1LntbHZMB8GA1UdIwQY MBaAFJ1ROOH6z3tl27V1+n1HJAwnizTfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblZFNDRmclBlMlhidFhYNmZVY2tEQ2VMTk44LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDAxZmYtODMyMy00Yjg5LWJlM2Qt YzJlZmViM2IzMmE1LzEvblZFNDRmclBlMlhidFhYNmZVY2tEQ2VMTk44Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kMDAxZmYtODMyMy00Yjg5LWJlM2QtYzJlZmViM2IzMmE1 LzEvblZFNDRmclBlMlhidFhYNmZVY2tEQ2VMTk44LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL07h+xrj XjqxhG030nKc+DwBJ2bjJpISows5+iM+wRX6wGYtBhEE21Q10zv4LrgbVXH/RlLu mRhmGYhkhlDsmotSHrNGugvKNp81MD77ijCSBcFHSo/nIsTyddIhMyvfUdzq4VQo 32se+dYDq9GyYp3cxQ6v3xfMUCJ5ETrYh0CMtwIWKgj/iGxmPsWg/GQt816sR+Iz E29sBi3TQbxudK4jzmmWNGs/DOWJtKAH326SO6xagfpj2sDDPf1tmLlgoJF4XC5P n4T43q9CSY2dCFQ74ZAlrhhao7be/GA6Et73aL0Jkdu+neufrk71AZIz19+bq3Dw /osBaJABJhAnbw== -----END CERTIFICATE-----Generated at Sat Dec 6 22:55:45 2025 by rpki-client