This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft File: nSVxkIIfcFio6v1IGWl0NoutjxQ.mft (raw, json) Hash identifier: CjXkulHeJdgjGZhCg/GcFeQcAqfAAccBkqatGQBfW1A= Subject key identifier: B8:13:7C:9C:70:56:27:D2:08:E7:59:9D:04:6B:94:CD:8A:F2:7A:DE Authority key identifier: 9D:25:71:90:82:1F:70:58:A8:EA:FD:48:19:69:74:36:8B:AD:8F:14 Certificate issuer: /CN=9d257190821f7058a8eafd48196974368bad8f14 Certificate serial: 019AF50AED631AED3E82FCD1EF0E0DAAE7ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSVxkIIfcFio6v1IGWl0NoutjxQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 19:02:05 +0000 Manifest this update: Sat 06 Dec 2025 19:02:05 +0000 Manifest next update: Sun 07 Dec 2025 19:02:05 +0000 Files and hashes: 1: S6yD0xSsAdYMuFY-SqJP0As2TGI.roa (hash: NWiZKpb2JP7oKryMsUVnNHlDjQunxGKrj2ir9mx8k8E=) 2: lkhGtmHtTBEdKgsUVjONXoB0iQc.roa (hash: 9yZ07+0QCixTukFaKD5cKhr7FU+NHBM/0FUydctI6gg=) 3: nSVxkIIfcFio6v1IGWl0NoutjxQ.crl (hash: TUQwuFfVufsm+/mTYS8KMroPPVg9vzbxLuRPtO2o6oE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft rsync://rpki.ripe.net/repository/DEFAULT/nSVxkIIfcFio6v1IGWl0NoutjxQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:02:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:ed:63:1a:ed:3e:82:fc:d1:ef:0e:0d:aa:e7:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d257190821f7058a8eafd48196974368bad8f14 Validity Not Before: Dec 6 19:02:05 2025 GMT Not After : Dec 7 19:02:05 2025 GMT Subject: CN=b8137c9c705627d208e7599d046b94cd8af27ade Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:dd:71:01:41:8a:22:58:85:8f:63:1f:74:e0: 54:a8:ed:34:66:d2:58:1d:42:1a:da:e7:c4:51:1f: 40:8b:bb:89:69:2e:6c:36:54:b6:9c:9e:3b:10:d4: dd:d2:57:46:91:92:0d:d9:ad:ff:ef:6f:32:db:36: c6:eb:83:53:eb:89:c0:38:62:59:57:8f:96:6a:2f: 18:0a:e1:64:ed:e4:5e:d3:80:27:df:de:71:ff:b0: 3c:fe:39:a5:50:a8:1d:22:1d:66:53:11:25:50:18: 39:f7:2f:62:79:68:7c:3f:e3:f1:b9:a9:08:e3:ea: 66:20:19:06:f3:11:66:44:b7:66:ac:82:17:09:ea: 74:e1:e7:a2:8a:e2:12:59:2a:7f:af:e3:ba:69:6d: 30:b8:58:ba:22:7e:19:ed:98:6c:88:55:3a:4a:99: b9:20:89:2a:b3:2f:9e:b9:c9:69:84:dc:7f:8a:6e: e3:9a:9a:6b:b6:d3:79:51:6c:5f:d3:87:41:8e:37: 6e:39:2f:bd:f3:99:bd:3e:1b:97:58:ea:7a:e5:cf: e4:7f:b0:b5:8d:f6:91:40:af:26:50:68:2d:d1:99: 35:7b:c9:a0:d4:7e:eb:ad:28:1b:ba:88:39:a8:2a: 72:09:8a:1b:7b:19:08:a2:55:0e:9d:8e:cf:e1:60: 1a:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:13:7C:9C:70:56:27:D2:08:E7:59:9D:04:6B:94:CD:8A:F2:7A:DE X509v3 Authority Key Identifier: keyid:9D:25:71:90:82:1F:70:58:A8:EA:FD:48:19:69:74:36:8B:AD:8F:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSVxkIIfcFio6v1IGWl0NoutjxQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:b4:d6:55:26:21:ac:a9:f6:30:54:31:ae:b7:ca:59:4f:95: ff:ca:27:9c:44:27:a3:92:c0:55:b2:64:49:56:ed:f6:d7:f7: 34:19:cf:a1:cd:2c:53:d2:58:2f:89:0b:c4:31:8b:6e:64:68: ba:68:d8:5a:0e:bb:11:ae:a1:4f:7e:51:8e:37:53:c1:42:3c: 44:be:ca:38:2e:2e:30:7d:d6:54:61:40:fc:33:95:f5:30:90: 71:83:91:6a:1f:55:00:71:74:9c:ae:3e:0d:8c:21:e7:2b:bf: 34:d4:dc:ea:6d:a1:5a:bb:9b:c4:7a:5d:d2:d8:a1:d7:b2:74: b2:bf:33:73:2f:2c:e2:17:eb:29:d6:73:29:53:c8:00:8b:69: e7:2c:de:70:7a:d0:ba:87:cc:c7:70:a6:f6:b8:71:e3:03:72: 1a:14:6b:13:e7:de:80:a4:73:7f:bf:61:18:40:a4:e7:87:73: 93:3e:dc:ae:5a:4e:df:53:04:f7:de:d1:f4:30:68:23:e8:2e: b5:25:89:42:79:ef:72:33:b9:66:86:14:02:61:11:92:99:d2: 6e:7c:a4:f7:65:e2:21:f2:bb:d9:89:7e:d9:a2:03:c2:41:db: 03:4c:3a:1e:42:e0:96:e0:c6:11:1d:f3:54:0c:ce:7a:9d:a0: 9b:2c:fa:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Cu1jGu0+gvzR7w4NquftMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMjU3MTkwODIxZjcwNThhOGVhZmQ0ODE5Njk3NDM2OGJh ZDhmMTQwHhcNMjUxMjA2MTkwMjA1WhcNMjUxMjA3MTkwMjA1WjAzMTEwLwYDVQQD EyhiODEzN2M5YzcwNTYyN2QyMDhlNzU5OWQwNDZiOTRjZDhhZjI3YWRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1d1xAUGKIliFj2MfdOBUqO00ZtJY HUIa2ufEUR9Ai7uJaS5sNlS2nJ47ENTd0ldGkZIN2a3/728y2zbG64NT64nAOGJZ V4+Wai8YCuFk7eRe04An395x/7A8/jmlUKgdIh1mUxElUBg59y9ieWh8P+PxuakI 4+pmIBkG8xFmRLdmrIIXCep04eeiiuISWSp/r+O6aW0wuFi6In4Z7ZhsiFU6Spm5 IIkqsy+euclphNx/im7jmpprttN5UWxf04dBjjduOS+985m9PhuXWOp65c/kf7C1 jfaRQK8mUGgt0Zk1e8mg1H7rrSgbuog5qCpyCYobexkIolUOnY7P4WAaMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLgTfJxwVifSCOdZnQRrlM2K8nreMB8GA1UdIwQY MBaAFJ0lcZCCH3BYqOr9SBlpdDaLrY8UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblNWeGtJSWZjRmlvNnYxSUdXbDBOb3V0anhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS82NmY4MjktNTEyOS00ODQyLWE1YzAt Mzc0MGIwOTQxZGI4LzEvblNWeGtJSWZjRmlvNnYxSUdXbDBOb3V0anhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS82NmY4MjktNTEyOS00ODQyLWE1YzAtMzc0MGIwOTQxZGI4 LzEvblNWeGtJSWZjRmlvNnYxSUdXbDBOb3V0anhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAibTWVSYh rKn2MFQxrrfKWU+V/8onnEQno5LAVbJkSVbt9tf3NBnPoc0sU9JYL4kLxDGLbmRo umjYWg67Ea6hT35RjjdTwUI8RL7KOC4uMH3WVGFA/DOV9TCQcYORah9VAHF0nK4+ DYwh5yu/NNTc6m2hWrubxHpd0tih17J0sr8zcy8s4hfrKdZzKVPIAItp5yzecHrQ uofMx3Cm9rhx4wNyGhRrE+fegKRzf79hGECk54dzkz7crlpO31ME997R9DBoI+gu tSWJQnnvcjO5ZoYUAmERkpnSbnyk92XiIfK72Yl+2aIDwkHbA0w6HkLgluDGER3z VAzOep2gmyz6jA== -----END CERTIFICATE-----Generated at Sun Dec 7 02:33:19 2025 by rpki-client