This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.mft File: Nr1KOC2uK-XLmLNeWgSNA7TMvis.mft (raw, json) Hash identifier: FVENJBxEJG3CteD3t0H3YPPZWTzioSTqAnz2WeVbRY0= Subject key identifier: 9E:0F:1C:A1:DB:EB:D3:D3:48:78:63:FE:BE:14:63:4C:84:16:39:F1 Authority key identifier: 36:BD:4A:38:2D:AE:2B:E5:CB:98:B3:5E:5A:04:8D:03:B4:CC:BE:2B Certificate issuer: /CN=36bd4a382dae2be5cb98b35e5a048d03b4ccbe2b Certificate serial: 019AF16465650AFC44D530E2AF6F78871B93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nr1KOC2uK-XLmLNeWgSNA7TMvis.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.mft Manifest number: 0AAC Signing time: Sat 06 Dec 2025 02:01:19 +0000 Manifest this update: Sat 06 Dec 2025 02:01:19 +0000 Manifest next update: Sun 07 Dec 2025 02:01:19 +0000 Files and hashes: 1: 4wDopbEXjk43Rw4mbcMJ6Q0c3jA.roa (hash: VBD+7i2pGd2GcSGT6qMiuwjn3HP93susB4QpbZwY04c=) 2: C-H7cUZDR8Fn5bAwbFaXEXvgd-E.roa (hash: HsvEFF3yXL6NktNRceT9btK/0vgIKnScyehQHmjIyPs=) 3: Nr1KOC2uK-XLmLNeWgSNA7TMvis.crl (hash: RpAny1/eIGvTVEaSf5FfZ7/zI0kLKEY2Kz20nWQmhVA=) 4: OsSemMFuJIzlguBNFL5i99h59ac.roa (hash: wej6G9fzYwe+kpr/KR/AvxkzN1danDVs2QQt2gCzdwo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.crl rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.mft rsync://rpki.ripe.net/repository/DEFAULT/Nr1KOC2uK-XLmLNeWgSNA7TMvis.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:65:65:0a:fc:44:d5:30:e2:af:6f:78:87:1b:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36bd4a382dae2be5cb98b35e5a048d03b4ccbe2b Validity Not Before: Dec 6 02:01:19 2025 GMT Not After : Dec 7 02:01:19 2025 GMT Subject: CN=9e0f1ca1dbebd3d3487863febe14634c841639f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:58:d8:9f:14:6e:f6:73:eb:2e:68:2a:13:f8: e8:58:c7:2b:54:13:8f:54:48:25:50:14:e8:3e:10: 22:be:27:8a:fb:af:06:e4:34:65:66:05:5d:c3:e5: f1:59:f3:09:43:18:81:06:ca:e0:ca:3c:6a:8b:99: a7:d4:67:96:49:22:10:2e:12:ef:4b:9a:93:22:27: d8:0f:fa:9e:75:b2:8e:89:3c:6b:88:d7:25:b3:5c: 24:27:64:76:77:b7:bf:a4:f1:5c:eb:a8:38:21:71: 20:56:ab:b6:91:de:2e:70:0e:aa:39:e6:3c:66:71: b4:5a:fd:71:29:bf:ec:22:1d:03:9a:d6:b7:b1:f7: 76:a5:fa:67:1d:4f:3c:8e:f7:cf:7d:d8:e3:6b:b4: f4:33:55:87:37:4a:b6:1f:b0:76:e6:81:60:e5:da: 71:16:b6:c9:93:2e:4f:28:c9:f4:84:b9:79:f9:9a: 08:da:dc:72:e3:b7:38:39:35:b5:1c:02:24:a4:a7: 3f:ea:e4:84:cf:24:f0:a4:81:85:00:a4:09:06:1d: 67:b9:83:38:84:43:84:14:23:0f:fc:f3:10:37:d8: 11:b2:ac:34:a8:78:dd:7e:c0:80:8f:a4:ea:02:7a: 98:8d:a8:65:66:88:a6:8c:46:7d:84:8f:ed:96:1d: 3b:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:0F:1C:A1:DB:EB:D3:D3:48:78:63:FE:BE:14:63:4C:84:16:39:F1 X509v3 Authority Key Identifier: keyid:36:BD:4A:38:2D:AE:2B:E5:CB:98:B3:5E:5A:04:8D:03:B4:CC:BE:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nr1KOC2uK-XLmLNeWgSNA7TMvis.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:1d:a0:9c:55:79:1a:82:8e:ad:03:34:38:11:02:f9:6b:ea: 08:c3:78:62:10:2a:a5:a7:89:f4:0a:48:48:8a:8e:b8:7e:63: 16:b8:c0:f5:65:f8:48:f7:6b:43:f0:d6:dc:45:74:c0:bf:12: ab:a4:7b:a5:be:66:45:f9:9d:b6:0a:8d:c1:79:cb:61:56:01: da:71:b0:30:39:a8:d4:b8:e9:10:a8:01:a7:f1:1b:d0:48:79: ae:44:90:e1:6b:2f:e7:0d:de:4c:bf:f6:4b:2a:18:22:dd:6c: 12:54:1a:dc:86:fe:4b:30:b1:e4:a0:a9:b4:27:26:da:41:f8: 14:8d:a0:b5:ea:ad:58:e7:82:55:66:80:06:b1:73:43:eb:94: 82:43:47:cb:67:19:96:91:18:65:d6:ec:e3:f8:36:b0:e6:9d: 56:07:4c:3c:a1:cd:a0:81:3c:5c:4c:b5:2a:62:dc:f8:05:6d: 68:0b:b1:98:50:d6:54:d0:a7:cf:98:9f:b9:7a:cd:f5:5c:47: 0f:84:3e:61:30:b6:07:74:48:e0:3d:1c:61:f8:e2:bf:f4:59: 1e:14:c2:d8:63:55:cf:bc:35:72:fd:10:81:b0:ca:af:b4:14: dd:aa:ab:04:a6:e7:c2:ff:b2:13:eb:05:a7:24:26:e6:dd:5b: c0:f5:46:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZGVlCvxE1TDir294hxuTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YmQ0YTM4MmRhZTJiZTVjYjk4YjM1ZTVhMDQ4ZDAzYjRj Y2JlMmIwHhcNMjUxMjA2MDIwMTE5WhcNMjUxMjA3MDIwMTE5WjAzMTEwLwYDVQQD Eyg5ZTBmMWNhMWRiZWJkM2QzNDg3ODYzZmViZTE0NjM0Yzg0MTYzOWYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArljYnxRu9nPrLmgqE/joWMcrVBOP VEglUBToPhAivieK+68G5DRlZgVdw+XxWfMJQxiBBsrgyjxqi5mn1GeWSSIQLhLv S5qTIifYD/qedbKOiTxriNcls1wkJ2R2d7e/pPFc66g4IXEgVqu2kd4ucA6qOeY8 ZnG0Wv1xKb/sIh0Dmta3sfd2pfpnHU88jvfPfdjja7T0M1WHN0q2H7B25oFg5dpx FrbJky5PKMn0hLl5+ZoI2txy47c4OTW1HAIkpKc/6uSEzyTwpIGFAKQJBh1nuYM4 hEOEFCMP/PMQN9gRsqw0qHjdfsCAj6TqAnqYjahlZoimjEZ9hI/tlh07UQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ4PHKHb69PTSHhj/r4UY0yEFjnxMB8GA1UdIwQY MBaAFDa9Sjgtrivly5izXloEjQO0zL4rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnIxS09DMnVLLVhMbUxOZVdnU05BN1RNdmlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9lNzRmNWYtNzVjNS00YTc1LTk4Yjkt OWZlY2JkMjVkNDM0LzEvTnIxS09DMnVLLVhMbUxOZVdnU05BN1RNdmlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9lNzRmNWYtNzVjNS00YTc1LTk4YjktOWZlY2JkMjVkNDM0 LzEvTnIxS09DMnVLLVhMbUxOZVdnU05BN1RNdmlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOB2gnFV5 GoKOrQM0OBEC+WvqCMN4YhAqpaeJ9ApISIqOuH5jFrjA9WX4SPdrQ/DW3EV0wL8S q6R7pb5mRfmdtgqNwXnLYVYB2nGwMDmo1LjpEKgBp/Eb0Eh5rkSQ4Wsv5w3eTL/2 SyoYIt1sElQa3Ib+SzCx5KCptCcm2kH4FI2gteqtWOeCVWaABrFzQ+uUgkNHy2cZ lpEYZdbs4/g2sOadVgdMPKHNoIE8XEy1KmLc+AVtaAuxmFDWVNCnz5ifuXrN9VxH D4Q+YTC2B3RI4D0cYfjiv/RZHhTC2GNVz7w1cv0QgbDKr7QU3aqrBKbnwv+yE+sF pyQm5t1bwPVGZg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:36:47 2025 by rpki-client