This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft File: nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft (raw, json) Hash identifier: 62irpi+CqkbPu0LttvPZaNZC+ZEnMAL10HXLlDExbeY= Subject key identifier: A2:B5:10:C0:57:4B:33:40:06:17:5D:EA:B8:F0:E4:DC:B6:52:BF:F2 Authority key identifier: 9D:5E:CC:E8:C8:7C:4F:0A:75:BA:21:E5:C8:4F:62:41:21:E0:8E:32 Certificate issuer: /CN=9d5ecce8c87c4f0a75ba21e5c84f624121e08e32 Certificate serial: 019AF3BFE2F3F49033D7964F63B0798EA239 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft Manifest number: 0287 Signing time: Sat 06 Dec 2025 13:00:30 +0000 Manifest this update: Sat 06 Dec 2025 13:00:30 +0000 Manifest next update: Sun 07 Dec 2025 13:00:30 +0000 Files and hashes: 1: W1gtHYOxkSQKrOdwkNpP1ZoMoUY.roa (hash: 5S4JEcGJktduCewz9POQY0aRBOXQzpGOLodHYl3CjqI=) 2: nV7M6Mh8Twp1uiHlyE9iQSHgjjI.crl (hash: AhxSfLSgJD3ufrn8+dzmcVm7xmSGpA/aRORf5+lHNEE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft rsync://rpki.ripe.net/repository/DEFAULT/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:bf:e2:f3:f4:90:33:d7:96:4f:63:b0:79:8e:a2:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d5ecce8c87c4f0a75ba21e5c84f624121e08e32 Validity Not Before: Dec 6 13:00:30 2025 GMT Not After : Dec 7 13:00:30 2025 GMT Subject: CN=a2b510c0574b334006175deab8f0e4dcb652bff2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:7e:cf:87:69:e9:a7:ba:c2:76:b4:66:77:a4: d6:46:9b:6b:eb:2f:28:f2:b9:a8:fc:af:ab:75:3b: d2:9f:40:ad:ea:fd:f3:0f:aa:35:12:b5:6e:08:74: bb:3a:82:34:40:cc:82:fa:96:43:1b:7d:62:70:db: 8a:1d:02:0b:ce:3e:e8:ac:fd:d9:cf:82:1e:4a:10: e7:4c:f5:7f:5f:6b:6b:04:eb:51:3a:86:36:9b:d2: 1b:68:84:79:ad:5e:31:13:e0:01:28:44:76:9b:e2: d5:6e:81:c9:15:e6:88:ce:86:6d:14:1d:9c:2c:89: d9:d5:ee:a1:f4:dd:28:ff:11:d0:3c:0f:7d:7a:9a: 0a:3a:ae:62:d9:ac:f5:5b:7c:e3:94:0c:ca:97:cd: 66:5a:25:a2:0b:e0:0b:f5:17:99:1a:e8:5b:21:18: d9:3a:27:02:42:3f:a5:a3:81:8a:1e:c0:53:2d:50: a0:f7:49:73:b5:41:bb:87:bc:29:ff:99:48:ba:a9: d2:f7:63:bd:1b:fb:95:d4:03:aa:30:11:78:5d:fa: fa:cf:08:92:89:cd:c1:6b:18:4a:9e:d9:15:db:53: ff:d8:89:f1:1c:82:66:22:71:5f:ac:6e:d2:16:c9: 19:4e:67:61:86:cd:9d:99:f6:43:f2:d4:d2:5d:e7: 48:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:B5:10:C0:57:4B:33:40:06:17:5D:EA:B8:F0:E4:DC:B6:52:BF:F2 X509v3 Authority Key Identifier: keyid:9D:5E:CC:E8:C8:7C:4F:0A:75:BA:21:E5:C8:4F:62:41:21:E0:8E:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:26:eb:81:b9:d2:7e:a0:7f:c4:16:ac:39:84:08:c2:58:84: 2b:fd:8b:b1:05:e9:e5:2c:fb:ad:bb:9a:0e:c4:ba:68:4a:4d: 64:8b:d8:35:9c:0d:0e:7b:d7:1a:a7:0a:04:49:c1:ac:f6:9d: 86:8c:6d:af:21:40:42:67:88:3e:3f:a7:8b:da:4b:55:f0:eb: 00:1f:81:1c:f6:92:df:99:a6:14:f3:6a:23:a4:33:73:4c:73: a3:18:e7:73:75:0c:26:c4:bd:02:62:43:8b:e8:54:72:cc:68: db:a7:d1:4d:25:6a:69:ce:11:ec:78:b9:b7:18:cb:44:05:3f: 74:03:5d:96:71:40:34:f0:02:94:4e:ba:fe:87:2b:0e:52:83: 8a:5c:7f:04:ef:6b:13:b4:18:57:5e:68:5a:89:cb:a2:fc:68: 50:33:e4:47:3a:2c:85:87:b5:c9:25:23:71:c1:72:51:16:a8: 8e:af:12:e3:ce:06:ad:37:25:e2:d3:a9:05:cb:70:e6:8d:1a: dc:58:02:1f:91:a2:5a:cb:4d:97:2f:43:8d:51:13:5f:67:21: 37:1a:ba:e1:98:37:17:e8:00:c6:b3:12:37:82:16:21:f4:7c: ab:fa:a8:b8:f0:50:c1:25:43:7d:2c:06:19:72:fa:4d:b5:26: d4:8c:f7:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzv+Lz9JAz15ZPY7B5jqI5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkNWVjY2U4Yzg3YzRmMGE3NWJhMjFlNWM4NGY2MjQxMjFl MDhlMzIwHhcNMjUxMjA2MTMwMDMwWhcNMjUxMjA3MTMwMDMwWjAzMTEwLwYDVQQD EyhhMmI1MTBjMDU3NGIzMzQwMDYxNzVkZWFiOGYwZTRkY2I2NTJiZmYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv37Ph2npp7rCdrRmd6TWRptr6y8o 8rmo/K+rdTvSn0Ct6v3zD6o1ErVuCHS7OoI0QMyC+pZDG31icNuKHQILzj7orP3Z z4IeShDnTPV/X2trBOtROoY2m9IbaIR5rV4xE+ABKER2m+LVboHJFeaIzoZtFB2c LInZ1e6h9N0o/xHQPA99epoKOq5i2az1W3zjlAzKl81mWiWiC+AL9ReZGuhbIRjZ OicCQj+lo4GKHsBTLVCg90lztUG7h7wp/5lIuqnS92O9G/uV1AOqMBF4Xfr6zwiS ic3BaxhKntkV21P/2InxHIJmInFfrG7SFskZTmdhhs2dmfZD8tTSXedIZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKK1EMBXSzNABhdd6rjw5Ny2Ur/yMB8GA1UdIwQY MBaAFJ1ezOjIfE8Kdboh5chPYkEh4I4yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblY3TTZNaDhUd3AxdWlIbHlFOWlRU0hnampJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9iZWM3NTYtMWRmZS00Mzc0LTg2MDct OWQ4ZjBlZjVjNTAzLzEvblY3TTZNaDhUd3AxdWlIbHlFOWlRU0hnampJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS9iZWM3NTYtMWRmZS00Mzc0LTg2MDctOWQ4ZjBlZjVjNTAz LzEvblY3TTZNaDhUd3AxdWlIbHlFOWlRU0hnampJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnSbrgbnS fqB/xBasOYQIwliEK/2LsQXp5Sz7rbuaDsS6aEpNZIvYNZwNDnvXGqcKBEnBrPad hoxtryFAQmeIPj+ni9pLVfDrAB+BHPaS35mmFPNqI6Qzc0xzoxjnc3UMJsS9AmJD i+hUcsxo26fRTSVqac4R7Hi5txjLRAU/dANdlnFANPAClE66/ocrDlKDilx/BO9r E7QYV15oWonLovxoUDPkRzoshYe1ySUjccFyURaojq8S484GrTcl4tOpBctw5o0a 3FgCH5GiWstNly9DjVETX2chNxq64Zg3F+gAxrMSN4IWIfR8q/qouPBQwSVDfSwG GXL6TbUm1Iz3hA== -----END CERTIFICATE-----Generated at Sat Dec 6 17:30:20 2025 by rpki-client