This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.mft File: nvJ_rhUw6nFnBwzxLEhoEdjgusU.mft (raw, json) Hash identifier: RNC1JKRipmagPHctjQLTjhvge61QV8//TBs1R/BQ594= Subject key identifier: FF:F2:29:00:A6:DE:CF:56:B7:33:0F:FB:0F:88:68:DB:8F:56:0B:BC Authority key identifier: 9E:F2:7F:AE:15:30:EA:71:67:07:0C:F1:2C:48:68:11:D8:E0:BA:C5 Certificate issuer: /CN=9ef27fae1530ea7167070cf12c486811d8e0bac5 Certificate serial: 019B3EDA850267D2C7A1A833A9CF3ECDC03A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nvJ_rhUw6nFnBwzxLEhoEdjgusU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.mft Manifest number: 082A Signing time: Sun 21 Dec 2025 03:01:06 +0000 Manifest this update: Sun 21 Dec 2025 03:01:06 +0000 Manifest next update: Mon 22 Dec 2025 03:01:06 +0000 Files and hashes: 1: 3bmAz9vtv2JfaPatPhAR81BLdD4.roa (hash: pscVtMzNszIXtiYFoQgUwJA4nkNZDSRzSpGrx8TMuU8=) 2: nvJ_rhUw6nFnBwzxLEhoEdjgusU.crl (hash: DPscRtBMNLs5lQfAllxKbZmlE24KrwWGmxHOojp7PWs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.crl rsync://rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.mft rsync://rpki.ripe.net/repository/DEFAULT/nvJ_rhUw6nFnBwzxLEhoEdjgusU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:85:02:67:d2:c7:a1:a8:33:a9:cf:3e:cd:c0:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ef27fae1530ea7167070cf12c486811d8e0bac5 Validity Not Before: Dec 21 03:01:06 2025 GMT Not After : Dec 22 03:01:06 2025 GMT Subject: CN=fff22900a6decf56b7330ffb0f8868db8f560bbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:13:3e:92:a4:02:95:0c:ce:a5:a9:84:21:e0: 56:9c:f5:78:e1:d7:a7:46:57:ec:7e:dc:6b:94:96: ac:36:97:84:50:25:ed:e0:6c:73:a2:38:37:62:5e: a9:ad:a0:31:6e:a2:99:47:e9:49:89:ab:5d:04:7e: bb:95:9f:94:71:fa:e7:24:f5:4c:99:92:2f:3a:34: 2e:e5:74:38:e3:e3:ee:52:cd:06:41:46:22:6c:f7: f9:56:77:64:ea:f3:d2:48:c1:22:5f:82:0c:13:7e: 93:c7:87:71:e7:9a:c9:f8:9b:80:41:33:53:e2:8f: 0c:a3:93:a8:f3:6f:6a:e2:c0:af:91:2a:8d:c4:e5: 27:ea:fd:65:7f:15:12:27:3f:65:8f:15:58:41:45: d2:9a:79:64:10:6c:7a:22:d4:7d:2e:38:ae:41:c4: c4:ca:1b:0e:8a:a6:35:8b:68:e5:7d:da:da:b4:6a: 60:3c:e1:78:93:1e:a4:b6:70:05:bd:29:d0:bb:94: 08:5d:9b:de:b4:01:af:f5:dc:2f:e4:22:ed:60:74: 07:5b:12:b7:0b:30:12:89:0f:6f:53:b9:4c:03:0e: 05:1f:c6:b9:0d:73:a7:92:c8:a1:95:bc:2c:fe:23: 3c:14:88:f3:92:7e:bc:c7:e4:28:8e:76:a0:f1:ec: 94:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:F2:29:00:A6:DE:CF:56:B7:33:0F:FB:0F:88:68:DB:8F:56:0B:BC X509v3 Authority Key Identifier: keyid:9E:F2:7F:AE:15:30:EA:71:67:07:0C:F1:2C:48:68:11:D8:E0:BA:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nvJ_rhUw6nFnBwzxLEhoEdjgusU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:d5:0e:47:00:44:5d:aa:dd:a2:ba:be:f6:a0:91:f9:3d:28: 7d:2d:29:15:ec:68:ce:b6:fa:85:ce:54:41:c5:04:c3:73:1a: 06:06:f8:0d:78:c5:80:3e:7b:4d:fe:01:cf:87:e1:b2:66:a2: 98:e2:ee:25:b2:57:3c:43:e8:0f:95:67:61:c5:a4:4f:2f:77: cf:4d:9c:11:06:89:8d:a6:c9:07:4f:73:85:38:fe:74:85:bb: 4b:9c:80:9c:c0:58:a3:d9:11:13:f6:1e:e0:c6:b8:e1:3c:aa: c1:91:42:c1:8b:2a:18:54:77:e0:fd:ce:3f:65:ab:2c:fb:e3: b9:ef:b4:46:95:91:aa:56:af:79:43:d2:b6:28:0a:79:42:2b: 64:47:63:99:7f:36:1a:2c:be:e7:02:c7:35:be:59:b4:49:ec: cf:7e:8d:76:4a:5f:7e:ee:f6:45:8d:91:76:36:c1:07:ad:7a: 6d:68:0c:52:21:a2:63:af:f9:f4:e4:1c:5d:b0:9a:eb:60:b1: a1:c3:ff:1a:fc:ed:6e:8d:62:1e:b4:c7:62:80:87:d2:dc:55: b1:39:88:0c:7b:ec:8a:cb:45:db:9f:7a:41:8a:66:ba:e8:16: 03:f8:d8:c8:42:22:6c:0a:49:98:61:6b:fd:bc:7c:1b:6f:b7: ab:b5:ae:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2oUCZ9LHoagzqc8+zcA6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllZjI3ZmFlMTUzMGVhNzE2NzA3MGNmMTJjNDg2ODExZDhl MGJhYzUwHhcNMjUxMjIxMDMwMTA2WhcNMjUxMjIyMDMwMTA2WjAzMTEwLwYDVQQD EyhmZmYyMjkwMGE2ZGVjZjU2YjczMzBmZmIwZjg4NjhkYjhmNTYwYmJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRM+kqQClQzOpamEIeBWnPV44den RlfsftxrlJasNpeEUCXt4Gxzojg3Yl6praAxbqKZR+lJiatdBH67lZ+UcfrnJPVM mZIvOjQu5XQ44+PuUs0GQUYibPf5Vndk6vPSSMEiX4IME36Tx4dx55rJ+JuAQTNT 4o8Mo5Oo829q4sCvkSqNxOUn6v1lfxUSJz9ljxVYQUXSmnlkEGx6ItR9LjiuQcTE yhsOiqY1i2jlfdratGpgPOF4kx6ktnAFvSnQu5QIXZvetAGv9dwv5CLtYHQHWxK3 CzASiQ9vU7lMAw4FH8a5DXOnksihlbws/iM8FIjzkn68x+Qojnag8eyUEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP/yKQCm3s9WtzMP+w+IaNuPVgu8MB8GA1UdIwQY MBaAFJ7yf64VMOpxZwcM8SxIaBHY4LrFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnZKX3JoVXc2bkZuQnd6eExFaG9FZGpndXNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC81MjllODQtZmVhMS00NDI5LTgzYjIt ZGY4MjNlNGRiMWVhLzEvbnZKX3JoVXc2bkZuQnd6eExFaG9FZGpndXNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC81MjllODQtZmVhMS00NDI5LTgzYjItZGY4MjNlNGRiMWVh LzEvbnZKX3JoVXc2bkZuQnd6eExFaG9FZGpndXNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg9UORwBE Xardorq+9qCR+T0ofS0pFexozrb6hc5UQcUEw3MaBgb4DXjFgD57Tf4Bz4fhsmai mOLuJbJXPEPoD5VnYcWkTy93z02cEQaJjabJB09zhTj+dIW7S5yAnMBYo9kRE/Ye 4Ma44TyqwZFCwYsqGFR34P3OP2WrLPvjue+0RpWRqlaveUPStigKeUIrZEdjmX82 Giy+5wLHNb5ZtEnsz36Ndkpffu72RY2RdjbBB616bWgMUiGiY6/59OQcXbCa62Cx ocP/Gvztbo1iHrTHYoCH0txVsTmIDHvsistF2596QYpmuugWA/jYyEIibApJmGFr /bx8G2+3q7WuiA== -----END CERTIFICATE-----Generated at Sun Dec 21 05:21:32 2025 by rpki-client