This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.mft File: NrVfs00p-WJUUTKgJbUmRP3_v28.mft (raw, json) Hash identifier: AjcWt1a1/S0Q0BmtFgINvS5XPDnkLxi9E86uCWNsO5k= Subject key identifier: 06:92:0E:CE:9C:5F:D5:DF:C8:E7:9A:37:EF:A3:1F:7C:5B:35:28:E8 Authority key identifier: 36:B5:5F:B3:4D:29:F9:62:54:51:32:A0:25:B5:26:44:FD:FF:BF:6F Certificate issuer: /CN=36b55fb34d29f962545132a025b52644fdffbf6f Certificate serial: 019AF3895DC61BB6F597A86279266B124637 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NrVfs00p-WJUUTKgJbUmRP3_v28.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.mft Manifest number: 133F Signing time: Sat 06 Dec 2025 12:00:57 +0000 Manifest this update: Sat 06 Dec 2025 12:00:57 +0000 Manifest next update: Sun 07 Dec 2025 12:00:57 +0000 Files and hashes: 1: 7dJIur2rO8jTQ_NHZt4L26PKtBw.roa (hash: fR/fcQi32Cz8cbo8M3f8TE+0bMDxdxf78ySV2CU/bwY=) 2: EzVC6hFH0RtKA1lARrwdwMJ07Q0.roa (hash: 2S3sYcvaMN06mor0RfdxJiX/gftEZ6TMLtUoAQi1mDE=) 3: NrVfs00p-WJUUTKgJbUmRP3_v28.crl (hash: VRT4pq/Rvk6RpphypToeWBedwfe6Myc/HAYTucLogQM=) 4: Wqg9hZ9wuWYWaqC8TF_Eeg_AEfc.roa (hash: 0aRSdpBzh4xSW9RCKPtMxwA4FTF50Xso2kHVHvgf+yc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.mft rsync://rpki.ripe.net/repository/DEFAULT/NrVfs00p-WJUUTKgJbUmRP3_v28.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:5d:c6:1b:b6:f5:97:a8:62:79:26:6b:12:46:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36b55fb34d29f962545132a025b52644fdffbf6f Validity Not Before: Dec 6 12:00:57 2025 GMT Not After : Dec 7 12:00:57 2025 GMT Subject: CN=06920ece9c5fd5dfc8e79a37efa31f7c5b3528e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:5b:65:9f:12:8a:a3:0f:d5:87:67:0c:91:94: 8e:91:d4:90:27:0f:bd:b8:ac:51:cd:dc:79:8a:83: 25:bc:69:c4:2f:60:87:71:cd:88:88:07:23:f0:b3: 0e:8d:5d:56:da:40:63:bf:ce:81:7a:75:79:8b:07: 2b:5c:01:7e:91:8c:47:0c:61:60:78:4d:38:eb:52: 95:1b:fb:81:23:24:ce:a5:7a:7e:e4:70:69:a0:d1: ab:48:fd:15:7f:b1:a3:a1:cb:65:35:28:86:d6:9f: 8b:04:51:30:73:c9:d6:2b:d5:5b:7d:af:bd:cb:9f: 98:0b:92:83:d4:2f:9e:14:9c:51:bf:e9:d2:ad:d5: 5b:15:86:a2:12:56:3d:ff:b7:52:05:65:70:e2:6f: 18:56:92:0d:e7:fe:73:dc:12:2c:ee:0f:a6:3a:2d: 47:da:47:42:0e:4b:06:a9:9c:89:5c:cc:f0:07:6e: a5:97:70:08:92:40:26:d8:7d:4a:10:b4:e3:de:09: 9d:d5:5b:09:3f:4a:b8:63:81:f0:31:a8:f6:52:f0: df:6a:9a:a6:66:16:94:ce:25:bf:f6:6c:1a:b8:22: ef:ed:76:3f:78:8d:3f:c3:c6:44:14:3d:2c:d8:7a: da:09:a9:8f:9e:f3:24:eb:13:51:ba:0e:d1:30:b0: 17:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:92:0E:CE:9C:5F:D5:DF:C8:E7:9A:37:EF:A3:1F:7C:5B:35:28:E8 X509v3 Authority Key Identifier: keyid:36:B5:5F:B3:4D:29:F9:62:54:51:32:A0:25:B5:26:44:FD:FF:BF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NrVfs00p-WJUUTKgJbUmRP3_v28.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:4d:23:76:9f:48:17:5a:e7:2f:e6:20:8f:1c:ed:5a:db:fa: 69:64:89:89:53:37:25:41:53:e3:69:c6:de:15:0a:af:b7:8f: c0:f9:18:b9:8a:ee:0a:2a:3f:6c:90:4a:12:19:d1:ee:85:f5: f5:03:55:38:36:d2:40:19:7a:fe:7f:25:b8:80:24:90:fb:c8: 94:45:19:f8:d1:6a:33:95:34:f1:05:23:ec:d1:af:5e:04:d0: 2c:12:47:97:5f:88:58:61:0c:f0:82:80:91:1b:e7:1a:37:24: 6f:4f:13:7b:a4:1d:cb:94:b1:6d:21:0b:1a:d7:e9:f7:ad:63: d6:4c:e4:73:df:72:61:3a:d9:9a:01:28:19:f7:8f:15:84:c9: eb:c6:c9:37:6a:fb:c9:0c:e9:3f:4f:13:e0:39:df:21:3f:b3: c5:10:9c:bf:1a:cb:2b:32:9e:63:23:ea:40:7f:a6:89:4f:ef: f0:92:4c:00:72:7f:92:94:a9:f5:56:bc:29:d0:f1:da:7a:e7: eb:a8:1d:27:09:81:b6:fd:4e:99:70:c0:d2:87:07:f7:eb:01: b4:1a:e6:84:29:cf:03:fb:ea:46:96:a7:e2:7d:2c:c4:a1:6e: 9b:cb:b9:08:5d:77:7e:10:84:96:0f:27:41:86:a7:90:c6:47: cc:d5:47:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziV3GG7b1l6hieSZrEkY3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YjU1ZmIzNGQyOWY5NjI1NDUxMzJhMDI1YjUyNjQ0ZmRm ZmJmNmYwHhcNMjUxMjA2MTIwMDU3WhcNMjUxMjA3MTIwMDU3WjAzMTEwLwYDVQQD EygwNjkyMGVjZTljNWZkNWRmYzhlNzlhMzdlZmEzMWY3YzViMzUyOGU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFtlnxKKow/Vh2cMkZSOkdSQJw+9 uKxRzdx5ioMlvGnEL2CHcc2IiAcj8LMOjV1W2kBjv86BenV5iwcrXAF+kYxHDGFg eE0461KVG/uBIyTOpXp+5HBpoNGrSP0Vf7GjoctlNSiG1p+LBFEwc8nWK9Vbfa+9 y5+YC5KD1C+eFJxRv+nSrdVbFYaiElY9/7dSBWVw4m8YVpIN5/5z3BIs7g+mOi1H 2kdCDksGqZyJXMzwB26ll3AIkkAm2H1KELTj3gmd1VsJP0q4Y4HwMaj2UvDfapqm ZhaUziW/9mwauCLv7XY/eI0/w8ZEFD0s2HraCamPnvMk6xNRug7RMLAXswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAaSDs6cX9XfyOeaN++jH3xbNSjoMB8GA1UdIwQY MBaAFDa1X7NNKfliVFEyoCW1JkT9/79vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnJWZnMwMHAtV0pVVVRLZ0piVW1SUDNfdjI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8yYmYwMGItYmZiYy00ZjZiLWExM2Ut ZjEwZjczYTllY2IzLzEvTnJWZnMwMHAtV0pVVVRLZ0piVW1SUDNfdjI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy8yYmYwMGItYmZiYy00ZjZiLWExM2UtZjEwZjczYTllY2Iz LzEvTnJWZnMwMHAtV0pVVVRLZ0piVW1SUDNfdjI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS00jdp9I F1rnL+YgjxztWtv6aWSJiVM3JUFT42nG3hUKr7ePwPkYuYruCio/bJBKEhnR7oX1 9QNVODbSQBl6/n8luIAkkPvIlEUZ+NFqM5U08QUj7NGvXgTQLBJHl1+IWGEM8IKA kRvnGjckb08Te6Qdy5SxbSELGtfp961j1kzkc99yYTrZmgEoGfePFYTJ68bJN2r7 yQzpP08T4DnfIT+zxRCcvxrLKzKeYyPqQH+miU/v8JJMAHJ/kpSp9Va8KdDx2nrn 66gdJwmBtv1OmXDA0ocH9+sBtBrmhCnPA/vqRpan4n0sxKFum8u5CF13fhCElg8n QYankMZHzNVHjg== -----END CERTIFICATE-----Generated at Sat Dec 6 14:58:37 2025 by rpki-client