This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.mft File: Nr1KOC2uK-XLmLNeWgSNA7TMvis.mft (raw, json) Hash identifier: ekWqkte4/xQyXdgzHtPYgbJjKK5U/0MvPzKvVOZMc8k= Subject key identifier: EC:CC:4C:36:93:1B:37:0A:63:99:5E:FB:2F:C5:5D:F8:4C:10:81:0B Authority key identifier: 36:BD:4A:38:2D:AE:2B:E5:CB:98:B3:5E:5A:04:8D:03:B4:CC:BE:2B Certificate issuer: /CN=36bd4a382dae2be5cb98b35e5a048d03b4ccbe2b Certificate serial: 019B2B540C9D93ABC884280C02D5A940BC50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nr1KOC2uK-XLmLNeWgSNA7TMvis.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.mft Manifest number: 0ACA Signing time: Wed 17 Dec 2025 08:01:27 +0000 Manifest this update: Wed 17 Dec 2025 08:01:27 +0000 Manifest next update: Thu 18 Dec 2025 08:01:27 +0000 Files and hashes: 1: 4wDopbEXjk43Rw4mbcMJ6Q0c3jA.roa (hash: VBD+7i2pGd2GcSGT6qMiuwjn3HP93susB4QpbZwY04c=) 2: C-H7cUZDR8Fn5bAwbFaXEXvgd-E.roa (hash: HsvEFF3yXL6NktNRceT9btK/0vgIKnScyehQHmjIyPs=) 3: Nr1KOC2uK-XLmLNeWgSNA7TMvis.crl (hash: 3YQfQT2WR/UhE35VjYt4Pn1BxIjtP95sqg5GuVSvd9Y=) 4: OsSemMFuJIzlguBNFL5i99h59ac.roa (hash: wej6G9fzYwe+kpr/KR/AvxkzN1danDVs2QQt2gCzdwo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.crl rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.mft rsync://rpki.ripe.net/repository/DEFAULT/Nr1KOC2uK-XLmLNeWgSNA7TMvis.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 08:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:54:0c:9d:93:ab:c8:84:28:0c:02:d5:a9:40:bc:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36bd4a382dae2be5cb98b35e5a048d03b4ccbe2b Validity Not Before: Dec 17 08:01:27 2025 GMT Not After : Dec 18 08:01:27 2025 GMT Subject: CN=eccc4c36931b370a63995efb2fc55df84c10810b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:92:e3:e6:08:15:14:e1:d0:57:c8:df:49:08: a5:34:00:32:d6:21:99:52:a1:a4:03:81:aa:b2:20: 4f:5e:a3:cc:ca:b7:9a:63:40:4d:6e:72:60:f5:52: 53:4a:36:b2:db:90:e5:03:5c:ee:58:57:08:6a:4e: e2:38:90:6a:42:3b:84:85:ac:1c:e5:6d:e6:53:56: 87:1a:71:36:bd:5a:e5:76:2a:9b:01:c6:09:2a:c8: c6:b9:49:8d:14:36:59:42:1c:9e:c3:34:e3:fa:4a: 72:75:b3:6f:f5:2f:39:8f:94:13:df:1c:6c:59:42: 46:da:d3:fa:49:24:ef:8f:7d:d5:a0:f7:f3:2c:10: 94:9d:5b:80:00:8d:0b:5d:4f:5f:27:6b:3b:e8:51: 2b:2e:a7:8e:ac:59:03:22:d2:8a:ed:7e:c5:26:d5: 47:21:3e:c8:4d:7c:bc:1a:54:70:cb:11:46:a1:58: b5:dd:5d:0d:e4:66:29:1b:0a:2b:2f:7b:93:5e:14: a2:81:10:26:b4:9d:82:c7:f2:9d:29:24:2c:41:69: 03:02:9b:86:c0:19:ad:8b:b2:96:11:75:c5:a8:07: af:5d:95:5a:60:0c:4f:40:44:91:90:b2:6d:75:80: 7f:6b:d5:f3:f1:8b:b9:1f:b1:66:f7:91:b3:cb:c5: c3:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:CC:4C:36:93:1B:37:0A:63:99:5E:FB:2F:C5:5D:F8:4C:10:81:0B X509v3 Authority Key Identifier: keyid:36:BD:4A:38:2D:AE:2B:E5:CB:98:B3:5E:5A:04:8D:03:B4:CC:BE:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nr1KOC2uK-XLmLNeWgSNA7TMvis.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:eb:a4:15:4b:ab:db:d8:d9:0c:b6:71:b2:6f:cc:50:64:75: 5b:9c:b3:9b:ab:2c:c5:e5:40:b0:f9:93:33:53:6c:6c:bd:a8: 4f:e4:d4:76:ff:a3:00:01:1e:34:fd:ec:2e:23:7f:b7:6c:95: 42:a1:a8:90:e5:8e:d8:6d:41:fc:06:96:0d:26:6f:59:05:f6: 96:50:74:f3:3f:ee:06:07:c8:79:87:d1:23:53:b3:d7:e1:bf: e4:5a:a6:aa:7f:83:2a:74:0c:6b:74:36:1d:a1:af:cc:cd:a3: de:d1:96:86:b7:18:0f:67:07:78:df:e7:62:fa:dc:54:59:ba: 20:1d:bf:75:6f:ea:96:c1:bc:3a:65:4e:cf:a8:9b:db:61:74: 00:36:8d:c8:94:03:3b:83:88:db:14:6a:09:d9:5a:da:83:be: 7d:f1:d5:59:90:97:84:23:05:bc:88:40:eb:a9:d3:11:65:98: 37:ce:8b:e4:00:e6:a4:16:b4:a8:69:e0:4c:f1:dc:05:f5:8d: 26:2a:b6:7e:3f:fc:6f:f6:8f:5f:a6:34:8e:c2:e7:3a:e6:ea: 81:59:a6:be:d5:6c:1a:27:cf:fd:cb:3e:02:5b:1e:a9:8e:1e: 1d:9e:46:cf:e9:6a:80:33:62:a1:c5:13:0f:9d:48:e0:ea:ef: dc:1a:e7:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrVAydk6vIhCgMAtWpQLxQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YmQ0YTM4MmRhZTJiZTVjYjk4YjM1ZTVhMDQ4ZDAzYjRj Y2JlMmIwHhcNMjUxMjE3MDgwMTI3WhcNMjUxMjE4MDgwMTI3WjAzMTEwLwYDVQQD EyhlY2NjNGMzNjkzMWIzNzBhNjM5OTVlZmIyZmM1NWRmODRjMTA4MTBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpLj5ggVFOHQV8jfSQilNAAy1iGZ UqGkA4GqsiBPXqPMyreaY0BNbnJg9VJTSjay25DlA1zuWFcIak7iOJBqQjuEhawc 5W3mU1aHGnE2vVrldiqbAcYJKsjGuUmNFDZZQhyewzTj+kpydbNv9S85j5QT3xxs WUJG2tP6SSTvj33VoPfzLBCUnVuAAI0LXU9fJ2s76FErLqeOrFkDItKK7X7FJtVH IT7ITXy8GlRwyxFGoVi13V0N5GYpGworL3uTXhSigRAmtJ2Cx/KdKSQsQWkDApuG wBmti7KWEXXFqAevXZVaYAxPQESRkLJtdYB/a9Xz8Yu5H7Fm95Gzy8XD9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOzMTDaTGzcKY5le+y/FXfhMEIELMB8GA1UdIwQY MBaAFDa9Sjgtrivly5izXloEjQO0zL4rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnIxS09DMnVLLVhMbUxOZVdnU05BN1RNdmlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9lNzRmNWYtNzVjNS00YTc1LTk4Yjkt OWZlY2JkMjVkNDM0LzEvTnIxS09DMnVLLVhMbUxOZVdnU05BN1RNdmlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9lNzRmNWYtNzVjNS00YTc1LTk4YjktOWZlY2JkMjVkNDM0 LzEvTnIxS09DMnVLLVhMbUxOZVdnU05BN1RNdmlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk+ukFUur 29jZDLZxsm/MUGR1W5yzm6ssxeVAsPmTM1NsbL2oT+TUdv+jAAEeNP3sLiN/t2yV QqGokOWO2G1B/AaWDSZvWQX2llB08z/uBgfIeYfRI1Oz1+G/5Fqmqn+DKnQMa3Q2 HaGvzM2j3tGWhrcYD2cHeN/nYvrcVFm6IB2/dW/qlsG8OmVOz6ib22F0ADaNyJQD O4OI2xRqCdla2oO+ffHVWZCXhCMFvIhA66nTEWWYN86L5ADmpBa0qGngTPHcBfWN Jiq2fj/8b/aPX6Y0jsLnOubqgVmmvtVsGifP/cs+AlseqY4eHZ5Gz+lqgDNiocUT D51I4Orv3BrnlA== -----END CERTIFICATE-----Generated at Wed Dec 17 18:11:49 2025 by rpki-client