This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft File: nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft (raw, json) Hash identifier: bVJUaJKnUzQ9BNp3mgfHRFuYEUl6uC0c4AoMgkBVNXk= Subject key identifier: 5D:1E:62:92:25:84:2F:02:7D:88:21:5E:71:ED:68:56:C7:0C:EE:15 Authority key identifier: 9D:5D:E4:90:FF:87:4E:96:89:CE:CF:72:6C:BB:4E:2F:51:F6:C7:31 Certificate issuer: /CN=9d5de490ff874e9689cecf726cbb4e2f51f6c731 Certificate serial: 019AF389A88936F5E6AFADBBA280EE7B0C57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft Manifest number: 1767 Signing time: Sat 06 Dec 2025 12:01:16 +0000 Manifest this update: Sat 06 Dec 2025 12:01:16 +0000 Manifest next update: Sun 07 Dec 2025 12:01:16 +0000 Files and hashes: 1: 3vl8XIfuhRt73vGy6IwhrWPuLQI.roa (hash: q3Fh75KrQyoQfVHvtuNwmD855fGW6oB7xId9MSHUyb4=) 2: 6wuhUyQ6B8hcKFtpQPLF4a8xiLM.roa (hash: PVP/CIAq5vbBthYH2NgEEDe22Dw5jd7urf5cJiuVvXo=) 3: 9NNSEhajneEgbt66V0EkEE6XolA.roa (hash: xTgVQs+MsZfir4Ub3DiVbK1ClBqkcXuh9whyhrkEvAM=) 4: BzRg7cqbGCxPjaoZhAl0Moquf1Y.roa (hash: 6kEaZouendLfYXdknvUfHV20sm02LURoxyHpm7Wn7AY=) 5: G-7uTcKf4R76KSJdYf98itHFuPU.roa (hash: uB9gNVUlSjqGsS16y0z5ke/O0agEGAvuljoiA6PJrUM=) 6: QgQPTUqWSoJLC8pH1ZTpV9J6Spg.roa (hash: roAeP2l3vRUpAFpkZSsf9wX3WRLL0BI8ikMQ5kYqDxQ=) 7: boQOxWTekJ3fuliQX6wA5NrzcDw.roa (hash: iBt1fZb/eDFa0+FbNgFw1iaoZwq8Lef/jP1ErHsxE5U=) 8: ftQQpBrk0ZFia4n99q7-wX-5E0M.roa (hash: U0GhDpZiZ5saXJRfz3p+tKxwcbveFdHD/WbcCpSo+CQ=) 9: mUKuky3l-ZY5p-RPO9s2pPEyk78.roa (hash: ti7kzq8iHsvI0iGcqQO/PpqkoDoJf7orqrrfuhBfEKg=) 10: nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl (hash: 66tLnbBjqG3qgA3C50qAXcYUAJo+9ZrjxwW1kUwHS8c=) 11: pp90XH9ku5igKr_7gjm59WVXVs4.roa (hash: bfssuNaaIGlZ7LKFXdiYHHy+DIw/jcyEOsfVzSQEBMQ=) 12: qFB-AfrzECXh6GN5dVSZvb0x6SI.roa (hash: GzIs503Dc0bsL2WCHQKf2MOheJQNWlvUYNrT8tj73vc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:a8:89:36:f5:e6:af:ad:bb:a2:80:ee:7b:0c:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d5de490ff874e9689cecf726cbb4e2f51f6c731 Validity Not Before: Dec 6 12:01:16 2025 GMT Not After : Dec 7 12:01:16 2025 GMT Subject: CN=5d1e629225842f027d88215e71ed6856c70cee15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:7d:1e:dc:7c:09:08:3a:58:1d:07:e9:91:aa: 10:12:e9:7d:20:35:e3:47:5c:df:f3:12:f1:92:be: cd:e0:7f:69:2a:42:e8:71:a1:fd:af:e4:e4:e9:24: 3c:99:3d:39:2e:d8:00:dc:50:11:fe:b6:d8:73:20: 42:40:cb:14:2a:3f:0a:3f:79:1f:5c:7d:78:78:92: d3:8b:b6:bc:6e:a2:91:68:51:cc:59:15:f3:42:b1: 80:25:04:bd:6d:2b:af:32:b1:38:c9:18:54:83:89: a3:d3:12:1f:59:82:ec:b3:a1:f8:a5:0f:5c:e7:c5: 19:a0:e6:95:2b:6d:87:1a:85:19:76:6b:d4:24:65: 83:3b:be:9e:e4:31:b1:63:76:5b:e1:69:48:e2:b1: e4:c7:97:61:3c:b9:74:a7:66:c0:f5:e4:51:94:2f: a8:06:00:a2:2a:12:4f:24:e2:9f:83:c5:51:40:d8: 82:f3:cd:96:2f:36:74:e5:7a:ea:16:5a:89:74:12: 03:e9:36:b3:98:1a:65:41:f4:f2:f3:75:1d:3b:90: 5b:89:14:f4:1b:0b:bc:24:9a:93:f3:14:90:09:ce: b8:75:8f:3c:ae:66:d0:fc:8b:81:06:5d:02:07:14: 99:2a:ee:91:60:af:7f:08:42:48:ae:cb:eb:31:6f: f3:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:1E:62:92:25:84:2F:02:7D:88:21:5E:71:ED:68:56:C7:0C:EE:15 X509v3 Authority Key Identifier: keyid:9D:5D:E4:90:FF:87:4E:96:89:CE:CF:72:6C:BB:4E:2F:51:F6:C7:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:dc:17:1f:30:e5:1f:a0:66:9e:17:b7:a6:ef:97:d0:13:36: 2c:08:a2:4f:f2:86:95:76:49:29:89:25:1f:74:a5:ad:ef:04: d2:ad:c6:5e:54:b7:89:37:af:a0:7b:de:12:76:80:c4:51:aa: 69:fa:af:4a:b4:9a:7f:19:a4:43:3f:c3:36:17:e1:6f:50:e1: 69:c9:79:3e:d8:1d:c7:1d:58:0d:a0:eb:a5:99:45:6b:3d:82: 2a:a2:95:87:d7:f3:d6:f7:b1:9a:25:a9:72:33:04:8d:97:fe: 8a:ee:c8:dd:8c:b3:65:de:6f:e0:37:c0:af:82:7e:7c:5e:eb: 70:4c:51:f5:e4:d4:a7:98:66:ce:a2:7a:ee:fc:77:1f:ad:1f: 1b:b6:f1:dc:22:a0:97:56:ea:47:74:b7:5f:85:f4:f5:17:ca: 94:b2:8c:a3:cb:45:c7:4e:69:5e:45:4d:16:89:a3:3f:bf:0f: 6d:39:03:d7:8f:9c:e6:3d:6d:b6:80:f2:21:30:2e:ea:5f:70: 6e:aa:9d:90:55:19:48:5e:02:24:94:08:3b:f0:c5:84:a2:bc: 26:ee:28:9e:c8:f8:df:0d:56:2c:36:43:cb:15:d8:06:c4:0f: 3b:88:71:c5:a3:d4:3e:5c:34:90:3e:19:e3:b3:ec:af:81:28: f4:da:43:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziaiJNvXmr627ooDuewxXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkNWRlNDkwZmY4NzRlOTY4OWNlY2Y3MjZjYmI0ZTJmNTFm NmM3MzEwHhcNMjUxMjA2MTIwMTE2WhcNMjUxMjA3MTIwMTE2WjAzMTEwLwYDVQQD Eyg1ZDFlNjI5MjI1ODQyZjAyN2Q4ODIxNWU3MWVkNjg1NmM3MGNlZTE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0n0e3HwJCDpYHQfpkaoQEul9IDXj R1zf8xLxkr7N4H9pKkLocaH9r+Tk6SQ8mT05LtgA3FAR/rbYcyBCQMsUKj8KP3kf XH14eJLTi7a8bqKRaFHMWRXzQrGAJQS9bSuvMrE4yRhUg4mj0xIfWYLss6H4pQ9c 58UZoOaVK22HGoUZdmvUJGWDO76e5DGxY3Zb4WlI4rHkx5dhPLl0p2bA9eRRlC+o BgCiKhJPJOKfg8VRQNiC882WLzZ05XrqFlqJdBID6TazmBplQfTy83UdO5BbiRT0 Gwu8JJqT8xSQCc64dY88rmbQ/IuBBl0CBxSZKu6RYK9/CEJIrsvrMW/zrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF0eYpIlhC8CfYghXnHtaFbHDO4VMB8GA1UdIwQY MBaAFJ1d5JD/h06Wic7Pcmy7Ti9R9scxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblYza2tQLUhUcGFKenM5eWJMdE9MMUgyeHpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC83NDViZGItMTA0Yi00OWM3LTk5ZDUt Y2VjMzNiYTFiZGY1LzEvblYza2tQLUhUcGFKenM5eWJMdE9MMUgyeHpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC83NDViZGItMTA0Yi00OWM3LTk5ZDUtY2VjMzNiYTFiZGY1 LzEvblYza2tQLUhUcGFKenM5eWJMdE9MMUgyeHpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPNwXHzDl H6Bmnhe3pu+X0BM2LAiiT/KGlXZJKYklH3Slre8E0q3GXlS3iTevoHveEnaAxFGq afqvSrSafxmkQz/DNhfhb1Dhacl5Ptgdxx1YDaDrpZlFaz2CKqKVh9fz1vexmiWp cjMEjZf+iu7I3YyzZd5v4DfAr4J+fF7rcExR9eTUp5hmzqJ67vx3H60fG7bx3CKg l1bqR3S3X4X09RfKlLKMo8tFx05pXkVNFomjP78PbTkD14+c5j1ttoDyITAu6l9w bqqdkFUZSF4CJJQIO/DFhKK8Ju4onsj43w1WLDZDyxXYBsQPO4hxxaPUPlw0kD4Z 47Psr4Eo9NpD1A== -----END CERTIFICATE-----Generated at Sat Dec 6 15:12:04 2025 by rpki-client