This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/nv2KDm5t1Wpu-CieSxhPDKAMM90.mft File: nv2KDm5t1Wpu-CieSxhPDKAMM90.mft (raw, json) Hash identifier: MGbMwFnkscVOPQVHd2+p3Mw1udkB/TpOBafh8uZ8ux0= Subject key identifier: AC:B7:E7:D0:88:B0:9E:AD:9F:BB:39:2D:8D:41:B8:DC:D7:8F:BB:F3 Authority key identifier: 9E:FD:8A:0E:6E:6D:D5:6A:6E:F8:28:9E:4B:18:4F:0C:A0:0C:33:DD Certificate issuer: /CN=9efd8a0e6e6dd56a6ef8289e4b184f0ca00c33dd Certificate serial: 019AF38A14173AE7A29F160CFDE4632D01FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nv2KDm5t1Wpu-CieSxhPDKAMM90.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/nv2KDm5t1Wpu-CieSxhPDKAMM90.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 12:01:43 +0000 Manifest this update: Sat 06 Dec 2025 12:01:43 +0000 Manifest next update: Sun 07 Dec 2025 12:01:43 +0000 Files and hashes: 1: QNOJOIm1SKvhgHP8ibivnBfVSQA.roa (hash: pi8uHE5UurLC5GTyPY+S33YCsYwTr9zqOvpf//OyfMo=) 2: nv2KDm5t1Wpu-CieSxhPDKAMM90.crl (hash: xJWKf+AezRaAMPYbOvp7F6S0+OiAJgVUL+7a7Pk5FAI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/nv2KDm5t1Wpu-CieSxhPDKAMM90.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/nv2KDm5t1Wpu-CieSxhPDKAMM90.mft rsync://rpki.ripe.net/repository/DEFAULT/nv2KDm5t1Wpu-CieSxhPDKAMM90.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:8a:14:17:3a:e7:a2:9f:16:0c:fd:e4:63:2d:01:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9efd8a0e6e6dd56a6ef8289e4b184f0ca00c33dd Validity Not Before: Dec 6 12:01:43 2025 GMT Not After : Dec 7 12:01:43 2025 GMT Subject: CN=acb7e7d088b09ead9fbb392d8d41b8dcd78fbbf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:38:cf:e2:81:d4:c7:c8:bc:42:55:4e:17:89: 49:e3:27:23:ae:01:73:e8:e6:23:39:01:0c:fe:17: 77:76:b3:bd:5e:9f:48:f7:08:ef:ba:7c:d5:a8:84: 62:0c:03:ac:7f:f1:6c:61:fe:65:62:89:d3:9a:bf: 7e:b9:a7:89:03:aa:71:19:36:bc:a0:4e:3c:04:f0: 2b:28:ec:64:40:bf:07:58:04:d8:d8:7d:3c:5c:f8: f8:af:19:dc:72:3d:66:a7:a3:f1:86:4a:e8:1b:1e: 9d:ed:bc:18:41:97:3b:cd:64:e5:16:4c:05:b6:36: ae:86:c9:43:8b:12:f8:fc:b4:71:65:a1:f2:e7:9e: d8:1a:8d:a4:4f:3c:c9:29:66:49:d3:28:85:a5:88: 10:11:ff:9b:4c:36:ac:65:48:43:79:df:21:af:a5: 72:26:3b:44:e5:34:49:1a:e1:c1:e8:96:9f:15:fe: 13:6a:1d:9e:cc:a9:04:a9:8e:81:2e:bb:25:b2:1a: 01:dc:7c:07:cb:49:d6:69:38:89:0f:2b:25:f4:8b: b9:69:c3:c6:ad:0a:e8:ae:98:6c:35:28:d8:70:86: d5:a2:d2:f1:13:99:94:2c:4b:82:1d:cc:7f:2b:87: 66:a1:42:01:8c:4d:9f:db:3e:2d:af:73:fc:c9:32: ad:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:B7:E7:D0:88:B0:9E:AD:9F:BB:39:2D:8D:41:B8:DC:D7:8F:BB:F3 X509v3 Authority Key Identifier: keyid:9E:FD:8A:0E:6E:6D:D5:6A:6E:F8:28:9E:4B:18:4F:0C:A0:0C:33:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nv2KDm5t1Wpu-CieSxhPDKAMM90.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/nv2KDm5t1Wpu-CieSxhPDKAMM90.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/nv2KDm5t1Wpu-CieSxhPDKAMM90.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:e5:2c:61:ec:cf:41:dd:ad:67:55:0b:54:b0:36:ef:7c:67: ae:9a:e7:95:5a:b1:76:1d:83:8a:dd:63:34:da:57:77:16:b7: 70:67:f0:d1:4e:26:5c:91:f0:bc:4d:24:63:51:be:79:44:c4: cf:6a:b8:4a:81:c8:9e:9a:13:6d:68:8c:3f:52:c7:69:79:06: e6:2b:d1:b2:80:6d:f6:8a:bc:8a:55:bf:61:46:3e:46:42:6e: 21:c9:04:26:46:38:e3:4a:7b:19:8a:0e:2f:bd:1f:6b:24:c1: cd:94:f2:49:01:b7:2a:8c:51:0f:4f:ee:e9:c2:e4:ad:e9:86: f9:80:44:43:d5:e5:47:91:33:e3:2c:81:fb:2e:f2:99:17:03: 8d:73:16:3c:fc:c9:2c:fe:22:ad:b7:67:9c:fa:94:c6:f3:48: 2c:59:51:18:4d:ef:75:4d:82:9d:f7:d6:6b:a7:03:b8:40:97: c0:a9:85:a9:f5:1a:d6:38:41:9d:b9:f2:d9:a7:08:c8:22:31: 75:66:9e:0d:94:c0:ad:d4:be:c4:ee:fd:23:46:5e:7e:71:df: 9a:2e:ac:2c:9e:55:4d:35:fd:d6:b2:5e:a9:48:dd:04:de:8a: c0:d4:85:27:7e:8f:fd:7f:f8:3d:5c:de:03:a2:50:98:eb:96: 3e:64:3f:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzihQXOueinxYM/eRjLQH7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllZmQ4YTBlNmU2ZGQ1NmE2ZWY4Mjg5ZTRiMTg0ZjBjYTAw YzMzZGQwHhcNMjUxMjA2MTIwMTQzWhcNMjUxMjA3MTIwMTQzWjAzMTEwLwYDVQQD EyhhY2I3ZTdkMDg4YjA5ZWFkOWZiYjM5MmQ4ZDQxYjhkY2Q3OGZiYmYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/TjP4oHUx8i8QlVOF4lJ4ycjrgFz 6OYjOQEM/hd3drO9Xp9I9wjvunzVqIRiDAOsf/FsYf5lYonTmr9+uaeJA6pxGTa8 oE48BPArKOxkQL8HWATY2H08XPj4rxnccj1mp6PxhkroGx6d7bwYQZc7zWTlFkwF tjauhslDixL4/LRxZaHy557YGo2kTzzJKWZJ0yiFpYgQEf+bTDasZUhDed8hr6Vy JjtE5TRJGuHB6JafFf4Tah2ezKkEqY6BLrslshoB3HwHy0nWaTiJDysl9Iu5acPG rQrorphsNSjYcIbVotLxE5mULEuCHcx/K4dmoUIBjE2f2z4tr3P8yTKtmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKy359CIsJ6tn7s5LY1BuNzXj7vzMB8GA1UdIwQY MBaAFJ79ig5ubdVqbvgonksYTwygDDPdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnYyS0RtNXQxV3B1LUNpZVN4aFBES0FNTTkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9kNTNkN2MtYTgzMi00N2IzLTlmOTQt NTljMjMwNTQ0NDJkLzEvbnYyS0RtNXQxV3B1LUNpZVN4aFBES0FNTTkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9kNTNkN2MtYTgzMi00N2IzLTlmOTQtNTljMjMwNTQ0NDJk LzEvbnYyS0RtNXQxV3B1LUNpZVN4aFBES0FNTTkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMOUsYezP Qd2tZ1ULVLA273xnrprnlVqxdh2Dit1jNNpXdxa3cGfw0U4mXJHwvE0kY1G+eUTE z2q4SoHInpoTbWiMP1LHaXkG5ivRsoBt9oq8ilW/YUY+RkJuIckEJkY440p7GYoO L70fayTBzZTySQG3KoxRD0/u6cLkremG+YBEQ9XlR5Ez4yyB+y7ymRcDjXMWPPzJ LP4irbdnnPqUxvNILFlRGE3vdU2CnffWa6cDuECXwKmFqfUa1jhBnbny2acIyCIx dWaeDZTArdS+xO79I0ZefnHfmi6sLJ5VTTX91rJeqUjdBN6KwNSFJ36P/X/4PVze A6JQmOuWPmQ/Bw== -----END CERTIFICATE-----Generated at Sat Dec 6 22:41:26 2025 by rpki-client