This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/NvdiEfPFj2yYr5nPZabx6P98Q7o.mft File: NvdiEfPFj2yYr5nPZabx6P98Q7o.mft (raw, json) Hash identifier: 1XrihQuZVxn3ueTPv9tZBbAnJSC5RV7EkQNySjoAPXM= Subject key identifier: 72:CC:81:58:D7:15:CA:58:F0:54:25:9B:D3:55:BF:57:3D:F8:DD:70 Authority key identifier: 36:F7:62:11:F3:C5:8F:6C:98:AF:99:CF:65:A6:F1:E8:FF:7C:43:BA Certificate issuer: /CN=36f76211f3c58f6c98af99cf65a6f1e8ff7c43ba Certificate serial: 019AF3F773D9E17CFECB43052C7CC56DDEE1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NvdiEfPFj2yYr5nPZabx6P98Q7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/NvdiEfPFj2yYr5nPZabx6P98Q7o.mft Manifest number: 1129 Signing time: Sat 06 Dec 2025 14:01:11 +0000 Manifest this update: Sat 06 Dec 2025 14:01:11 +0000 Manifest next update: Sun 07 Dec 2025 14:01:11 +0000 Files and hashes: 1: IMiPI_sQJpS-dko-Db8d2-Qz-B0.roa (hash: fyR22c3qbngtIbooNJXlmC6fXpgIjnWVTMNZ/hhGG0A=) 2: NvdiEfPFj2yYr5nPZabx6P98Q7o.crl (hash: XQtSJNp8D/20bl5mFKD9peZ0cOoA7gQN/KnqyiRsF2c=) 3: SAAncdb2H87xzD0WkojsMdkjI9E.roa (hash: bzjggaHNN8SzirhLiuBFGlBjgMu/vnVg8ZfnlYMY9GY=) 4: _E9iapjx7rmdCjMi6lOxJAzw41c.roa (hash: XzeBU1MqaK56hZttRGiRoj2k5rsX6aCywVY+pFC+b8Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/NvdiEfPFj2yYr5nPZabx6P98Q7o.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/NvdiEfPFj2yYr5nPZabx6P98Q7o.mft rsync://rpki.ripe.net/repository/DEFAULT/NvdiEfPFj2yYr5nPZabx6P98Q7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:73:d9:e1:7c:fe:cb:43:05:2c:7c:c5:6d:de:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36f76211f3c58f6c98af99cf65a6f1e8ff7c43ba Validity Not Before: Dec 6 14:01:11 2025 GMT Not After : Dec 7 14:01:11 2025 GMT Subject: CN=72cc8158d715ca58f054259bd355bf573df8dd70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:96:16:91:03:2e:59:1e:3c:5b:7f:f1:5e:50: 02:77:5b:7c:41:af:2a:2f:30:ff:78:2c:76:2d:ab: e4:10:75:9f:ea:b4:63:a4:cd:09:4e:50:4d:6a:46: 1c:3f:28:20:77:b4:0f:c0:cd:5c:44:cd:f7:46:a2: 92:6c:2b:5a:33:98:68:95:66:69:f9:da:02:e3:2d: a3:43:81:c6:f8:f9:de:bc:8a:c9:c2:eb:83:9f:20: 1c:18:cd:84:98:63:12:01:02:84:7f:c3:55:b2:e6: ef:d7:25:a3:ac:3f:9e:86:a7:57:6b:c6:62:06:7d: 6d:a0:3c:6f:af:77:d9:cd:e6:b9:53:ad:e8:76:7d: e6:d4:78:cb:8b:1c:c3:6b:96:53:46:5f:9e:55:a4: 68:6e:eb:da:f9:fb:31:fa:7e:2e:f8:fd:11:c2:5e: b3:3b:78:e5:f5:4b:43:5f:af:bc:fc:44:50:3f:da: 4d:ee:53:5c:91:e4:c9:6f:b7:9c:c1:54:04:a6:9a: a6:6d:f5:5c:a5:0c:b3:f9:55:ef:d3:b9:78:90:b7: a1:8a:21:13:c4:f8:6d:81:c6:29:94:ec:23:69:fa: 6b:b9:1b:1e:99:da:6d:53:ff:63:18:e4:71:fd:4d: fa:1c:f7:78:c9:04:99:ce:76:c0:33:25:97:d6:64: 57:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:CC:81:58:D7:15:CA:58:F0:54:25:9B:D3:55:BF:57:3D:F8:DD:70 X509v3 Authority Key Identifier: keyid:36:F7:62:11:F3:C5:8F:6C:98:AF:99:CF:65:A6:F1:E8:FF:7C:43:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NvdiEfPFj2yYr5nPZabx6P98Q7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/NvdiEfPFj2yYr5nPZabx6P98Q7o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/NvdiEfPFj2yYr5nPZabx6P98Q7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:0a:73:0c:27:e3:cd:cf:31:08:64:2d:18:63:0a:5b:be:d5: eb:a4:c9:51:06:d3:fc:56:11:f2:27:18:ad:0f:69:17:a9:05: 80:75:3c:34:ff:a4:1a:83:e1:87:1b:91:a4:ec:ea:53:4b:2a: 71:31:e9:3f:c6:18:31:5e:57:b6:6d:ad:1e:af:a6:ec:6c:10: aa:c1:92:89:e1:8d:de:21:95:18:32:7e:2c:0c:d7:46:2e:d1: 2f:3c:8e:0d:11:8c:cc:1f:f9:39:e5:76:aa:78:bd:0b:9b:9f: e7:81:da:f5:a5:fa:87:b1:2d:cc:c1:5b:e0:08:69:b4:e9:cc: f3:b2:69:1e:a8:24:ca:39:e4:5f:e8:19:9b:f6:0e:fa:bb:ce: 9b:15:2c:15:f3:cc:e2:28:07:ac:9e:b5:38:b2:7e:b1:42:49: d3:79:51:8e:9e:4f:32:da:fd:a7:17:6e:7c:77:95:7b:07:21: 22:1a:f3:86:e7:2b:79:f8:fc:ac:46:f3:0a:a7:52:93:08:26: 49:a2:df:64:75:28:4f:a9:48:16:93:55:66:33:73:1a:22:1c: 52:5a:d5:50:6d:01:76:11:52:fe:49:b6:51:f8:2c:79:67:a7: ce:a6:43:e9:c2:4c:ce:86:95:b5:90:90:92:37:a1:ad:c5:b3: 3b:a9:14:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz93PZ4Xz+y0MFLHzFbd7hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2Zjc2MjExZjNjNThmNmM5OGFmOTljZjY1YTZmMWU4ZmY3 YzQzYmEwHhcNMjUxMjA2MTQwMTExWhcNMjUxMjA3MTQwMTExWjAzMTEwLwYDVQQD Eyg3MmNjODE1OGQ3MTVjYTU4ZjA1NDI1OWJkMzU1YmY1NzNkZjhkZDcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJYWkQMuWR48W3/xXlACd1t8Qa8q LzD/eCx2LavkEHWf6rRjpM0JTlBNakYcPyggd7QPwM1cRM33RqKSbCtaM5holWZp +doC4y2jQ4HG+PnevIrJwuuDnyAcGM2EmGMSAQKEf8NVsubv1yWjrD+ehqdXa8Zi Bn1toDxvr3fZzea5U63odn3m1HjLixzDa5ZTRl+eVaRobuva+fsx+n4u+P0Rwl6z O3jl9UtDX6+8/ERQP9pN7lNckeTJb7ecwVQEppqmbfVcpQyz+VXv07l4kLehiiET xPhtgcYplOwjafpruRsemdptU/9jGORx/U36HPd4yQSZznbAMyWX1mRXmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHLMgVjXFcpY8FQlm9NVv1c9+N1wMB8GA1UdIwQY MBaAFDb3YhHzxY9smK+Zz2Wm8ej/fEO6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnZkaUVmUEZqMnlZcjVuUFphYng2UDk4UTdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9mY2FkMmQtODZkOS00MmIxLWIxMTUt MmZjZjM5NjI1M2I4LzEvTnZkaUVmUEZqMnlZcjVuUFphYng2UDk4UTdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS9mY2FkMmQtODZkOS00MmIxLWIxMTUtMmZjZjM5NjI1M2I4 LzEvTnZkaUVmUEZqMnlZcjVuUFphYng2UDk4UTdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANQpzDCfj zc8xCGQtGGMKW77V66TJUQbT/FYR8icYrQ9pF6kFgHU8NP+kGoPhhxuRpOzqU0sq cTHpP8YYMV5Xtm2tHq+m7GwQqsGSieGN3iGVGDJ+LAzXRi7RLzyODRGMzB/5OeV2 qni9C5uf54Ha9aX6h7EtzMFb4AhptOnM87JpHqgkyjnkX+gZm/YO+rvOmxUsFfPM 4igHrJ61OLJ+sUJJ03lRjp5PMtr9pxdufHeVewchIhrzhucrefj8rEbzCqdSkwgm SaLfZHUoT6lIFpNVZjNzGiIcUlrVUG0BdhFS/km2UfgseWenzqZD6cJMzoaVtZCQ kjehrcWzO6kUQg== -----END CERTIFICATE-----Generated at Sat Dec 6 16:30:28 2025 by rpki-client