This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/8bdb68-7016-468b-9751-0f59527f34cb/1/NoEciv-vsKwfX39v97ZLtwNGRX0.mft File: NoEciv-vsKwfX39v97ZLtwNGRX0.mft (raw, json) Hash identifier: tZm4axIwsSq9wU3McuY/O0OtfMP634edGq+n9sniI94= Subject key identifier: D2:30:14:B5:E5:96:5A:72:6E:6B:3A:37:EB:AA:92:31:DF:DE:53:83 Authority key identifier: 36:81:1C:8A:FF:AF:B0:AC:1F:5F:7F:6F:F7:B6:4B:B7:03:46:45:7D Certificate issuer: /CN=36811c8affafb0ac1f5f7f6ff7b64bb70346457d Certificate serial: 019AF19B600A79CF243B9B517A0F5DCB1C60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NoEciv-vsKwfX39v97ZLtwNGRX0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/8bdb68-7016-468b-9751-0f59527f34cb/1/NoEciv-vsKwfX39v97ZLtwNGRX0.mft Manifest number: 0912 Signing time: Sat 06 Dec 2025 03:01:22 +0000 Manifest this update: Sat 06 Dec 2025 03:01:22 +0000 Manifest next update: Sun 07 Dec 2025 03:01:22 +0000 Files and hashes: 1: NoEciv-vsKwfX39v97ZLtwNGRX0.crl (hash: /B0SLUoEbWAzv8sDRWLSNw0A4k6nc9GaO8ObTfMUT0o=) 2: sKsIMzPD584L0VxOKj3vB4o7BOo.roa (hash: rcaZ/4MvSYNPC9u83vkkXq81Cjv7cMoYe82DYi6JocE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/8bdb68-7016-468b-9751-0f59527f34cb/1/NoEciv-vsKwfX39v97ZLtwNGRX0.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/8bdb68-7016-468b-9751-0f59527f34cb/1/NoEciv-vsKwfX39v97ZLtwNGRX0.mft rsync://rpki.ripe.net/repository/DEFAULT/NoEciv-vsKwfX39v97ZLtwNGRX0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:60:0a:79:cf:24:3b:9b:51:7a:0f:5d:cb:1c:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36811c8affafb0ac1f5f7f6ff7b64bb70346457d Validity Not Before: Dec 6 03:01:22 2025 GMT Not After : Dec 7 03:01:22 2025 GMT Subject: CN=d23014b5e5965a726e6b3a37ebaa9231dfde5383 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:80:26:90:66:08:d9:fb:aa:ba:25:f0:bd:36: 2b:db:d3:6e:97:b4:8a:2d:9d:4b:cd:c3:f7:8a:a5: 36:81:8d:ce:2f:db:74:18:c1:d7:b2:ff:a2:ee:5c: 29:33:15:48:5a:15:83:d8:cb:15:cf:33:f2:70:2c: 05:0e:77:56:b7:f2:f3:d5:59:73:48:2c:91:04:8d: d3:0a:03:b0:a9:1f:cc:e0:57:f5:07:cc:cd:f0:66: 9c:fe:23:c8:91:f5:b8:ea:1e:62:6d:27:75:5c:65: 4c:9c:fa:bc:70:cf:5c:51:8e:0e:4b:ce:4a:1f:29: c6:39:45:10:9f:e1:57:eb:21:f0:db:24:2b:70:ba: ea:ed:6b:cf:1c:85:99:10:03:02:26:04:d6:a1:dc: dc:32:4e:01:09:13:12:82:11:f2:b2:01:3e:01:88: bc:3c:a3:ed:a6:de:54:91:8f:ef:b3:81:95:c2:b4: 60:dd:83:00:24:35:08:cc:17:d9:a2:cd:f3:33:77: 5a:11:e0:4e:e4:c3:43:75:89:f7:9c:39:81:b3:d8: 7b:88:e1:d1:5f:14:11:57:f2:bf:86:3e:98:6f:3c: df:ed:57:0e:4d:4f:f3:ea:b5:e6:3a:06:9e:0b:fc: 6b:8e:32:1a:bb:76:bd:65:4b:7a:e6:86:96:ed:cd: 87:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:30:14:B5:E5:96:5A:72:6E:6B:3A:37:EB:AA:92:31:DF:DE:53:83 X509v3 Authority Key Identifier: keyid:36:81:1C:8A:FF:AF:B0:AC:1F:5F:7F:6F:F7:B6:4B:B7:03:46:45:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NoEciv-vsKwfX39v97ZLtwNGRX0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8bdb68-7016-468b-9751-0f59527f34cb/1/NoEciv-vsKwfX39v97ZLtwNGRX0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8bdb68-7016-468b-9751-0f59527f34cb/1/NoEciv-vsKwfX39v97ZLtwNGRX0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:17:b6:7f:3d:d6:9b:ff:bb:a6:f5:43:b3:91:df:86:ec:08: 52:a3:d4:18:34:ae:c1:84:1d:1b:3c:9b:01:2e:e7:26:f7:d7: 76:ad:95:e3:02:35:d7:af:9d:a9:e5:d1:03:c7:77:30:57:de: 44:a1:9f:1e:8e:6a:38:9a:d2:78:f4:24:ce:c4:31:09:99:26: 77:b6:32:37:1e:d6:21:90:04:c1:2f:b3:0c:2d:44:12:e8:26: 21:59:9e:25:12:ac:2e:7e:b9:07:8e:a2:7a:00:59:f0:54:0a: 80:ea:10:94:9b:ea:c0:b9:90:51:17:63:e3:cc:6f:99:90:c6: ce:c0:7f:34:14:72:ac:00:7c:cb:63:a4:d8:d4:53:be:1e:0f: fe:12:cb:ed:38:e4:74:a4:f9:c1:ab:8a:d8:aa:cd:85:86:cf: 97:aa:6c:da:82:e1:e1:30:e8:f7:64:72:84:05:ab:85:ee:b6: 75:4c:66:c8:1b:b9:53:39:00:5e:e0:d2:0a:54:85:69:c5:5e: a8:33:1f:0b:54:54:e2:47:74:6e:ab:95:27:ef:40:51:a2:7a: 75:3e:44:f8:39:b3:69:ea:d1:c6:62:cf:2a:54:12:74:df:a0: a9:23:4f:8e:91:7c:48:8b:17:28:d7:b8:32:72:7d:ea:f5:be: e5:b2:c8:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm2AKec8kO5tReg9dyxxgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2ODExYzhhZmZhZmIwYWMxZjVmN2Y2ZmY3YjY0YmI3MDM0 NjQ1N2QwHhcNMjUxMjA2MDMwMTIyWhcNMjUxMjA3MDMwMTIyWjAzMTEwLwYDVQQD EyhkMjMwMTRiNWU1OTY1YTcyNmU2YjNhMzdlYmFhOTIzMWRmZGU1MzgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4AmkGYI2fuquiXwvTYr29Nul7SK LZ1LzcP3iqU2gY3OL9t0GMHXsv+i7lwpMxVIWhWD2MsVzzPycCwFDndWt/Lz1Vlz SCyRBI3TCgOwqR/M4Ff1B8zN8Gac/iPIkfW46h5ibSd1XGVMnPq8cM9cUY4OS85K HynGOUUQn+FX6yHw2yQrcLrq7WvPHIWZEAMCJgTWodzcMk4BCRMSghHysgE+AYi8 PKPtpt5UkY/vs4GVwrRg3YMAJDUIzBfZos3zM3daEeBO5MNDdYn3nDmBs9h7iOHR XxQRV/K/hj6Ybzzf7VcOTU/z6rXmOgaeC/xrjjIau3a9ZUt65oaW7c2HzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNIwFLXlllpybms6N+uqkjHf3lODMB8GA1UdIwQY MBaAFDaBHIr/r7CsH19/b/e2S7cDRkV9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTm9FY2l2LXZzS3dmWDM5djk3Wkx0d05HUlgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi84YmRiNjgtNzAxNi00NjhiLTk3NTEt MGY1OTUyN2YzNGNiLzEvTm9FY2l2LXZzS3dmWDM5djk3Wkx0d05HUlgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi84YmRiNjgtNzAxNi00NjhiLTk3NTEtMGY1OTUyN2YzNGNi LzEvTm9FY2l2LXZzS3dmWDM5djk3Wkx0d05HUlgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAche2fz3W m/+7pvVDs5HfhuwIUqPUGDSuwYQdGzybAS7nJvfXdq2V4wI116+dqeXRA8d3MFfe RKGfHo5qOJrSePQkzsQxCZkmd7YyNx7WIZAEwS+zDC1EEugmIVmeJRKsLn65B46i egBZ8FQKgOoQlJvqwLmQURdj48xvmZDGzsB/NBRyrAB8y2Ok2NRTvh4P/hLL7Tjk dKT5wauK2KrNhYbPl6ps2oLh4TDo92RyhAWrhe62dUxmyBu5UzkAXuDSClSFacVe qDMfC1RU4kd0bquVJ+9AUaJ6dT5E+DmzaerRxmLPKlQSdN+gqSNPjpF8SIsXKNe4 MnJ96vW+5bLIFg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:10:21 2025 by rpki-client