This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2b3f2f-14ae-464b-9b7c-7980a2e23007/1/nVgf-JVKiXizTYSRAVRszmHEr6M.mft File: nVgf-JVKiXizTYSRAVRszmHEr6M.mft (raw, json) Hash identifier: +jDXJU+QlzUrwiyPY5jQQgju33pWdWreFi/m9RYq1Wo= Subject key identifier: 89:74:E7:D0:04:4F:08:F0:87:9E:CF:5C:A6:EF:99:C2:E9:40:C6:0F Authority key identifier: 9D:58:1F:F8:95:4A:89:78:B3:4D:84:91:01:54:6C:CE:61:C4:AF:A3 Certificate issuer: /CN=9d581ff8954a8978b34d849101546cce61c4afa3 Certificate serial: 019AF163D968452A9179EC901162F304C828 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nVgf-JVKiXizTYSRAVRszmHEr6M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2b3f2f-14ae-464b-9b7c-7980a2e23007/1/nVgf-JVKiXizTYSRAVRszmHEr6M.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 02:00:43 +0000 Manifest this update: Sat 06 Dec 2025 02:00:43 +0000 Manifest next update: Sun 07 Dec 2025 02:00:43 +0000 Files and hashes: 1: nVgf-JVKiXizTYSRAVRszmHEr6M.crl (hash: N6P/RJBvkabLFkz3xyNOCzuB33wWwSXox/kOZtsp9eQ=) 2: pbhnhbhAo7f81mspcf47i1RiwC4.roa (hash: cy6NBeCA9q+KpxmPFPQqLF3HwYWfNZwADzV/UaXEKik=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2b3f2f-14ae-464b-9b7c-7980a2e23007/1/nVgf-JVKiXizTYSRAVRszmHEr6M.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/2b3f2f-14ae-464b-9b7c-7980a2e23007/1/nVgf-JVKiXizTYSRAVRszmHEr6M.mft rsync://rpki.ripe.net/repository/DEFAULT/nVgf-JVKiXizTYSRAVRszmHEr6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:d9:68:45:2a:91:79:ec:90:11:62:f3:04:c8:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d581ff8954a8978b34d849101546cce61c4afa3 Validity Not Before: Dec 6 02:00:43 2025 GMT Not After : Dec 7 02:00:43 2025 GMT Subject: CN=8974e7d0044f08f0879ecf5ca6ef99c2e940c60f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:34:76:59:40:ef:d9:28:15:0a:00:36:2d:cd: f2:8e:d4:7f:9a:26:39:13:b9:8f:da:80:a7:b7:90: 78:6b:d3:95:58:a2:8a:8b:77:8a:8b:1e:69:d8:3d: 24:1b:3a:ea:a6:de:5e:1d:5c:e7:fd:23:e6:db:ef: c0:c8:80:67:b1:50:68:8a:a8:23:45:50:8a:a1:54: 1b:aa:4e:87:97:53:6c:0c:03:a4:2a:ea:41:5b:1f: 78:25:2a:60:bf:2d:f9:22:af:16:92:7e:d3:74:3f: 4b:21:0d:37:86:c0:da:ba:76:a9:73:19:de:d3:02: 7d:82:f6:42:8f:bd:27:7e:f9:88:28:9e:fc:d3:a6: 22:c8:5e:91:2d:2b:6f:b7:79:9c:5e:4c:b3:06:91: a8:3b:5d:80:9c:78:c9:48:4e:60:ef:76:34:c5:e9: e9:33:fa:ad:7e:3d:21:a9:7e:c2:37:ea:49:df:ed: 0d:f2:80:1a:0b:56:ea:64:c2:d9:29:d8:57:0b:27: 36:fb:04:be:f0:7d:49:3b:ed:8d:fc:4d:35:2a:64: 1a:a4:cf:ea:87:05:c3:25:f1:f8:3c:46:a1:55:05: 7a:1d:92:2b:85:22:62:d4:9a:a5:dc:a7:bb:a7:aa: df:bb:c5:70:b4:d3:e4:83:25:50:22:10:1b:1e:1b: 37:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:74:E7:D0:04:4F:08:F0:87:9E:CF:5C:A6:EF:99:C2:E9:40:C6:0F X509v3 Authority Key Identifier: keyid:9D:58:1F:F8:95:4A:89:78:B3:4D:84:91:01:54:6C:CE:61:C4:AF:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nVgf-JVKiXizTYSRAVRszmHEr6M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2b3f2f-14ae-464b-9b7c-7980a2e23007/1/nVgf-JVKiXizTYSRAVRszmHEr6M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2b3f2f-14ae-464b-9b7c-7980a2e23007/1/nVgf-JVKiXizTYSRAVRszmHEr6M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:b5:2b:81:41:4c:7c:4a:a8:40:31:36:14:c7:c8:98:54:c5: 3f:15:b9:8a:2a:16:70:95:13:d0:5e:b0:c9:fe:8a:15:0e:e6: f9:5a:21:10:67:44:a5:c2:d8:4f:48:67:35:f0:47:8c:7d:9e: 13:5f:5a:27:03:75:c4:2e:16:4a:b2:b5:b3:19:e0:51:90:f3: 23:dc:d4:ca:7b:fe:25:a6:f9:e1:9f:ef:4d:c4:8f:d1:9c:06: 54:da:7c:38:37:16:60:bf:b2:bf:c4:19:7e:6c:7b:77:89:f2: b4:71:b0:56:22:b6:b9:f9:27:07:31:a3:27:93:bf:1c:bb:3c: 09:4a:89:bf:59:cf:fb:e2:20:0d:9e:66:b6:39:0e:ed:21:4f: be:c3:b8:62:ef:b7:ff:61:10:5d:6d:01:b2:8f:3e:b5:81:c1: d6:8e:c8:57:d5:4f:71:3e:2f:85:52:10:2e:e3:76:3d:c5:b8: cc:7e:4a:77:6e:d6:b7:b7:88:d7:f3:59:3f:1a:ac:7d:b0:f0: 1d:0b:e2:29:b8:4a:1a:10:e0:36:15:fa:8c:75:c7:9c:a4:ee: 52:f9:80:bd:d6:83:f0:71:9a:fe:df:f1:7e:a9:1e:28:b0:ef: 12:6a:27:f4:c5:01:a3:76:22:f2:0e:2a:df:76:92:b3:c4:2a: a0:c7:df:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY9loRSqReeyQEWLzBMgoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkNTgxZmY4OTU0YTg5NzhiMzRkODQ5MTAxNTQ2Y2NlNjFj NGFmYTMwHhcNMjUxMjA2MDIwMDQzWhcNMjUxMjA3MDIwMDQzWjAzMTEwLwYDVQQD Eyg4OTc0ZTdkMDA0NGYwOGYwODc5ZWNmNWNhNmVmOTljMmU5NDBjNjBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2DR2WUDv2SgVCgA2Lc3yjtR/miY5 E7mP2oCnt5B4a9OVWKKKi3eKix5p2D0kGzrqpt5eHVzn/SPm2+/AyIBnsVBoiqgj RVCKoVQbqk6Hl1NsDAOkKupBWx94JSpgvy35Iq8Wkn7TdD9LIQ03hsDaunapcxne 0wJ9gvZCj70nfvmIKJ7806YiyF6RLStvt3mcXkyzBpGoO12AnHjJSE5g73Y0xenp M/qtfj0hqX7CN+pJ3+0N8oAaC1bqZMLZKdhXCyc2+wS+8H1JO+2N/E01KmQapM/q hwXDJfH4PEahVQV6HZIrhSJi1Jql3Ke7p6rfu8VwtNPkgyVQIhAbHhs30wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIl059AETwjwh57PXKbvmcLpQMYPMB8GA1UdIwQY MBaAFJ1YH/iVSol4s02EkQFUbM5hxK+jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblZnZi1KVktpWGl6VFlTUkFWUnN6bUhFcjZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yYjNmMmYtMTRhZS00NjRiLTliN2Mt Nzk4MGEyZTIzMDA3LzEvblZnZi1KVktpWGl6VFlTUkFWUnN6bUhFcjZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8yYjNmMmYtMTRhZS00NjRiLTliN2MtNzk4MGEyZTIzMDA3 LzEvblZnZi1KVktpWGl6VFlTUkFWUnN6bUhFcjZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT7UrgUFM fEqoQDE2FMfImFTFPxW5iioWcJUT0F6wyf6KFQ7m+VohEGdEpcLYT0hnNfBHjH2e E19aJwN1xC4WSrK1sxngUZDzI9zUynv+Jab54Z/vTcSP0ZwGVNp8ODcWYL+yv8QZ fmx7d4nytHGwViK2ufknBzGjJ5O/HLs8CUqJv1nP++IgDZ5mtjkO7SFPvsO4Yu+3 /2EQXW0Bso8+tYHB1o7IV9VPcT4vhVIQLuN2PcW4zH5Kd27Wt7eI1/NZPxqsfbDw HQviKbhKGhDgNhX6jHXHnKTuUvmAvdaD8HGa/t/xfqkeKLDvEmon9MUBo3Yi8g4q 33aSs8QqoMffYw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:16:04 2025 by rpki-client