This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/0660e4-8d5d-43b9-8c89-b5a428b7d14c/1/Nv7f7M_QD1d8t5H45DqmWSYuk9s.mft File: Nv7f7M_QD1d8t5H45DqmWSYuk9s.mft (raw, json) Hash identifier: NzzFCduBj2aEqEhy2IcfcN9vPUJS8IaQSoCsK0ZXB+c= Subject key identifier: AD:A9:54:33:9B:20:84:52:D1:AD:75:31:1B:2F:27:4C:9F:B3:7A:98 Authority key identifier: 36:FE:DF:EC:CF:D0:0F:57:7C:B7:91:F8:E4:3A:A6:59:26:2E:93:DB Certificate issuer: /CN=36fedfeccfd00f577cb791f8e43aa659262e93db Certificate serial: 019AF0F5D4C56B774FF534DB6B07E67E5EBD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nv7f7M_QD1d8t5H45DqmWSYuk9s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/0660e4-8d5d-43b9-8c89-b5a428b7d14c/1/Nv7f7M_QD1d8t5H45DqmWSYuk9s.mft Manifest number: 018E Signing time: Sat 06 Dec 2025 00:00:33 +0000 Manifest this update: Sat 06 Dec 2025 00:00:33 +0000 Manifest next update: Sun 07 Dec 2025 00:00:33 +0000 Files and hashes: 1: Nv7f7M_QD1d8t5H45DqmWSYuk9s.crl (hash: dXhrD9O/ElLjLaZEIqwMtoexonIgL6huuXs3IxPLcjk=) 2: _Yf7Te2uvhwWX_l1JN9UjpNgrZY.roa (hash: f5+J7yt13fqQYgFUTN4kcse4XeHLgbH6pOCZG6b6MbQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/0660e4-8d5d-43b9-8c89-b5a428b7d14c/1/Nv7f7M_QD1d8t5H45DqmWSYuk9s.crl rsync://rpki.ripe.net/repository/DEFAULT/20/0660e4-8d5d-43b9-8c89-b5a428b7d14c/1/Nv7f7M_QD1d8t5H45DqmWSYuk9s.mft rsync://rpki.ripe.net/repository/DEFAULT/Nv7f7M_QD1d8t5H45DqmWSYuk9s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:f5:d4:c5:6b:77:4f:f5:34:db:6b:07:e6:7e:5e:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36fedfeccfd00f577cb791f8e43aa659262e93db Validity Not Before: Dec 6 00:00:33 2025 GMT Not After : Dec 7 00:00:33 2025 GMT Subject: CN=ada954339b208452d1ad75311b2f274c9fb37a98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:22:38:a1:e1:4d:f9:84:28:7f:4f:4a:98:13: b6:5e:90:4f:e0:11:85:4b:c1:3b:13:67:27:09:b2: 76:d2:38:74:84:c1:f3:e3:7a:b5:13:b9:eb:2b:1c: a7:30:c6:30:ff:1a:ab:45:9e:fd:47:bb:8b:21:75: 31:5c:6f:47:02:b0:56:3b:71:9d:a0:ce:66:4e:15: 29:3e:55:9e:00:02:fc:ee:f0:d8:71:94:84:d6:cb: cf:0e:2d:3a:31:25:dc:a2:bc:e3:4d:34:9d:3b:72: 0f:d9:23:0e:ab:63:1b:7a:94:58:de:b7:ae:21:71: d9:66:ac:f6:64:0a:29:db:d8:70:f3:26:8a:f2:97: 6e:ee:ea:32:a4:a0:4c:4a:57:d2:74:b9:0a:50:62: 7e:8a:8f:18:dc:32:8e:72:69:69:3c:fe:2b:c4:ef: aa:75:19:c1:81:7d:96:8d:34:44:f1:88:57:e9:6f: f5:63:1e:ab:f0:f0:f8:2b:9f:e7:7b:3d:52:11:66: 89:79:8c:bf:3d:7a:b8:f8:20:15:f7:d6:19:3b:66: a5:d8:04:dc:53:1d:da:21:be:46:f0:c7:ee:57:a1: 85:09:63:c1:18:d1:e0:72:7b:0a:5b:69:98:c2:0f: 11:b8:be:23:bf:cc:db:7a:fb:4d:60:55:de:25:d1: a1:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:A9:54:33:9B:20:84:52:D1:AD:75:31:1B:2F:27:4C:9F:B3:7A:98 X509v3 Authority Key Identifier: keyid:36:FE:DF:EC:CF:D0:0F:57:7C:B7:91:F8:E4:3A:A6:59:26:2E:93:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nv7f7M_QD1d8t5H45DqmWSYuk9s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0660e4-8d5d-43b9-8c89-b5a428b7d14c/1/Nv7f7M_QD1d8t5H45DqmWSYuk9s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0660e4-8d5d-43b9-8c89-b5a428b7d14c/1/Nv7f7M_QD1d8t5H45DqmWSYuk9s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:1c:3d:23:5c:f8:03:7b:16:f7:40:b1:75:23:bf:94:36:dc: ca:2c:f1:6c:cd:3d:e8:05:93:fa:9e:6f:03:e1:ca:e8:bd:cb: bb:63:49:39:68:9f:96:69:ff:29:8d:f9:fd:48:60:4c:f9:8e: 4a:bc:01:fd:21:7e:48:cd:55:81:67:46:37:df:53:05:64:ae: 3e:29:94:d9:84:dd:e9:52:18:69:72:1a:db:16:91:ce:84:05: bc:f9:87:e1:9e:db:70:1b:bc:c7:6b:05:58:c4:c8:9a:e0:cb: 52:11:db:e5:b0:66:f3:12:09:e4:e9:1b:dd:bd:3b:d1:b1:c6: 57:63:03:19:aa:03:87:20:f0:62:9c:04:38:2d:16:ef:ef:88: 5a:70:4c:3c:83:6a:76:97:58:33:8d:c8:56:44:69:6e:dd:e3: 3e:4f:71:16:c7:99:e8:66:9e:ee:90:6c:18:b6:7e:db:bf:7a: a4:11:bb:3f:e6:31:13:0e:f3:5b:d3:84:70:e9:fc:2d:7f:73: 09:b8:7f:bf:fd:72:5b:e5:6a:b6:db:cf:01:0a:a7:2a:30:f8: 29:94:8a:f3:d6:5b:63:cc:b2:08:b8:bd:de:31:db:e1:84:5b: f3:96:e5:5c:7c:86:7f:1a:f9:cc:d8:4d:57:6e:9a:51:14:f4: 9b:78:ff:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrw9dTFa3dP9TTbawfmfl69MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2ZmVkZmVjY2ZkMDBmNTc3Y2I3OTFmOGU0M2FhNjU5MjYy ZTkzZGIwHhcNMjUxMjA2MDAwMDMzWhcNMjUxMjA3MDAwMDMzWjAzMTEwLwYDVQQD EyhhZGE5NTQzMzliMjA4NDUyZDFhZDc1MzExYjJmMjc0YzlmYjM3YTk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSI4oeFN+YQof09KmBO2XpBP4BGF S8E7E2cnCbJ20jh0hMHz43q1E7nrKxynMMYw/xqrRZ79R7uLIXUxXG9HArBWO3Gd oM5mThUpPlWeAAL87vDYcZSE1svPDi06MSXcorzjTTSdO3IP2SMOq2MbepRY3reu IXHZZqz2ZAop29hw8yaK8pdu7uoypKBMSlfSdLkKUGJ+io8Y3DKOcmlpPP4rxO+q dRnBgX2WjTRE8YhX6W/1Yx6r8PD4K5/nez1SEWaJeYy/PXq4+CAV99YZO2al2ATc Ux3aIb5G8MfuV6GFCWPBGNHgcnsKW2mYwg8RuL4jv8zbevtNYFXeJdGhowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK2pVDObIIRS0a11MRsvJ0yfs3qYMB8GA1UdIwQY MBaAFDb+3+zP0A9XfLeR+OQ6plkmLpPbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnY3ZjdNX1FEMWQ4dDVINDVEcW1XU1l1azlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC8wNjYwZTQtOGQ1ZC00M2I5LThjODkt YjVhNDI4YjdkMTRjLzEvTnY3ZjdNX1FEMWQ4dDVINDVEcW1XU1l1azlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC8wNjYwZTQtOGQ1ZC00M2I5LThjODktYjVhNDI4YjdkMTRj LzEvTnY3ZjdNX1FEMWQ4dDVINDVEcW1XU1l1azlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmBw9I1z4 A3sW90CxdSO/lDbcyizxbM096AWT+p5vA+HK6L3Lu2NJOWiflmn/KY35/UhgTPmO SrwB/SF+SM1VgWdGN99TBWSuPimU2YTd6VIYaXIa2xaRzoQFvPmH4Z7bcBu8x2sF WMTImuDLUhHb5bBm8xIJ5Okb3b070bHGV2MDGaoDhyDwYpwEOC0W7++IWnBMPINq dpdYM43IVkRpbt3jPk9xFseZ6Gae7pBsGLZ+2796pBG7P+YxEw7zW9OEcOn8LX9z Cbh/v/1yW+VqttvPAQqnKjD4KZSK89ZbY8yyCLi93jHb4YRb85blXHyGfxr5zNhN V26aURT0m3j/Ew== -----END CERTIFICATE-----Generated at Sat Dec 6 09:59:57 2025 by rpki-client