This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/f3e67a-cfd7-4745-82b7-2d90c7fd0d60/1/NMSVb4VnESWILFdM0uLSA6q97QU.mft File: NMSVb4VnESWILFdM0uLSA6q97QU.mft (raw, json) Hash identifier: A+Q5W8m5zZmcxhWbU4vhRJuOx9BJ+B8rlBu6rZ66SQI= Subject key identifier: 08:B0:8A:ED:4D:54:6E:C6:2E:1E:96:BF:E9:C7:42:91:9C:1F:BF:61 Authority key identifier: 34:C4:95:6F:85:67:11:25:88:2C:57:4C:D2:E2:D2:03:AA:BD:ED:05 Certificate issuer: /CN=34c4956f85671125882c574cd2e2d203aabded05 Certificate serial: 019AF12CD4780D71607CB0E681B68F98D687 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NMSVb4VnESWILFdM0uLSA6q97QU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/f3e67a-cfd7-4745-82b7-2d90c7fd0d60/1/NMSVb4VnESWILFdM0uLSA6q97QU.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 01:00:38 +0000 Manifest this update: Sat 06 Dec 2025 01:00:38 +0000 Manifest next update: Sun 07 Dec 2025 01:00:38 +0000 Files and hashes: 1: NMSVb4VnESWILFdM0uLSA6q97QU.crl (hash: dDZ2CNQhcWC8uaspenewgkH5zDnRC1D27KSLss0LCtM=) 2: xtLurjJMXgwePFKUT7vd_Bs7y4g.roa (hash: 9QOnyZtRBS25fvMRFyNZdyW0R5uMOP/pXW6ujcGtyGI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/f3e67a-cfd7-4745-82b7-2d90c7fd0d60/1/NMSVb4VnESWILFdM0uLSA6q97QU.crl rsync://rpki.ripe.net/repository/DEFAULT/70/f3e67a-cfd7-4745-82b7-2d90c7fd0d60/1/NMSVb4VnESWILFdM0uLSA6q97QU.mft rsync://rpki.ripe.net/repository/DEFAULT/NMSVb4VnESWILFdM0uLSA6q97QU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:d4:78:0d:71:60:7c:b0:e6:81:b6:8f:98:d6:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34c4956f85671125882c574cd2e2d203aabded05 Validity Not Before: Dec 6 01:00:38 2025 GMT Not After : Dec 7 01:00:38 2025 GMT Subject: CN=08b08aed4d546ec62e1e96bfe9c742919c1fbf61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:95:14:c6:be:cd:5f:06:40:e6:19:19:31:d4: c3:32:70:02:bb:21:c8:4c:d6:f8:2a:58:4a:cb:14: 7f:76:51:1e:75:5e:e9:7f:d9:b9:ba:5f:40:45:f4: 20:e7:ec:41:e6:0f:bc:19:7d:10:f6:f1:49:85:e0: 59:d2:2e:fd:6a:1a:05:97:b5:88:84:24:5f:ab:ce: ca:e9:f8:06:7d:03:2b:5f:9e:0d:c0:2a:ad:e9:77: e6:e2:d7:46:36:62:27:1a:20:58:ef:b1:97:33:5e: 1f:68:42:f3:9d:73:34:1f:3f:21:06:7a:c9:c3:f4: a7:19:6e:7a:5d:be:6b:4f:03:8c:b2:39:95:9f:fc: c8:22:e1:64:13:4f:12:a4:48:29:4d:1e:1f:10:7a: 56:d6:b3:14:79:72:06:23:6a:73:20:d4:91:0b:fa: 68:8e:55:83:ff:70:10:b1:3a:6e:90:9b:c1:e7:bc: 9d:8e:b1:7e:ba:04:d1:88:a5:9f:e5:3d:88:f3:35: 20:67:f2:a9:3e:19:a4:22:b7:f8:d6:b2:3e:d4:7e: b4:57:86:02:37:4d:19:d8:61:5a:b0:e8:6c:fb:07: 05:ea:49:9a:67:65:1f:31:4f:55:4e:c1:ff:84:0e: 80:6a:4e:35:f8:00:f2:73:28:6b:af:a9:ba:7f:ae: 83:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:B0:8A:ED:4D:54:6E:C6:2E:1E:96:BF:E9:C7:42:91:9C:1F:BF:61 X509v3 Authority Key Identifier: keyid:34:C4:95:6F:85:67:11:25:88:2C:57:4C:D2:E2:D2:03:AA:BD:ED:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NMSVb4VnESWILFdM0uLSA6q97QU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f3e67a-cfd7-4745-82b7-2d90c7fd0d60/1/NMSVb4VnESWILFdM0uLSA6q97QU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f3e67a-cfd7-4745-82b7-2d90c7fd0d60/1/NMSVb4VnESWILFdM0uLSA6q97QU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:72:3b:20:ac:6e:d1:99:36:56:a3:46:ef:88:ff:74:81:b4: 69:d9:ee:2a:74:26:95:74:9f:d3:6d:6e:89:73:06:35:aa:cd: 57:25:55:2c:5e:db:cc:b5:02:d4:61:37:2b:92:83:8f:0f:8b: 9f:4d:5a:76:e6:7b:ba:b4:42:c2:4b:5e:21:ad:66:1f:10:4e: 25:f4:43:5f:83:38:25:bc:0d:e6:41:f3:4c:f1:e0:79:2c:50: 34:5d:c0:11:c7:2c:96:56:33:c7:df:b5:7b:67:13:67:a2:21: 1f:9c:67:d1:23:48:87:15:1c:35:4e:66:0a:34:52:78:1e:92: 6c:1e:c5:aa:dc:87:48:ac:36:5b:4d:18:99:77:70:55:74:a9: e2:f4:a3:bf:b7:72:c4:d0:ee:fc:43:69:5d:2e:de:80:24:c7: d0:07:fa:2b:cb:13:32:c5:ad:af:13:d9:cd:b9:fd:96:28:96: 79:58:52:ff:06:94:a5:e4:05:d9:4e:a6:f5:c1:b7:c8:f8:1a: b0:53:ba:ee:3f:3f:b7:bf:85:8e:cf:d5:ec:d9:be:0c:d7:3c: d4:8a:73:61:a2:67:18:52:26:ef:dc:8e:20:c1:fb:55:18:ce: 7d:f2:48:78:46:82:73:a3:76:92:80:b8:ab:41:fb:ff:68:66: c2:d1:7c:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLNR4DXFgfLDmgbaPmNaHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0YzQ5NTZmODU2NzExMjU4ODJjNTc0Y2QyZTJkMjAzYWFi ZGVkMDUwHhcNMjUxMjA2MDEwMDM4WhcNMjUxMjA3MDEwMDM4WjAzMTEwLwYDVQQD EygwOGIwOGFlZDRkNTQ2ZWM2MmUxZTk2YmZlOWM3NDI5MTljMWZiZjYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJUUxr7NXwZA5hkZMdTDMnACuyHI TNb4KlhKyxR/dlEedV7pf9m5ul9ARfQg5+xB5g+8GX0Q9vFJheBZ0i79ahoFl7WI hCRfq87K6fgGfQMrX54NwCqt6Xfm4tdGNmInGiBY77GXM14faELznXM0Hz8hBnrJ w/SnGW56Xb5rTwOMsjmVn/zIIuFkE08SpEgpTR4fEHpW1rMUeXIGI2pzINSRC/po jlWD/3AQsTpukJvB57ydjrF+ugTRiKWf5T2I8zUgZ/KpPhmkIrf41rI+1H60V4YC N00Z2GFasOhs+wcF6kmaZ2UfMU9VTsH/hA6Aak41+ADycyhrr6m6f66DPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAiwiu1NVG7GLh6Wv+nHQpGcH79hMB8GA1UdIwQY MBaAFDTElW+FZxEliCxXTNLi0gOqve0FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTk1TVmI0Vm5FU1dJTEZkTTB1TFNBNnE5N1FVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9mM2U2N2EtY2ZkNy00NzQ1LTgyYjct MmQ5MGM3ZmQwZDYwLzEvTk1TVmI0Vm5FU1dJTEZkTTB1TFNBNnE5N1FVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC9mM2U2N2EtY2ZkNy00NzQ1LTgyYjctMmQ5MGM3ZmQwZDYw LzEvTk1TVmI0Vm5FU1dJTEZkTTB1TFNBNnE5N1FVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiXI7IKxu 0Zk2VqNG74j/dIG0adnuKnQmlXSf021uiXMGNarNVyVVLF7bzLUC1GE3K5KDjw+L n01aduZ7urRCwkteIa1mHxBOJfRDX4M4JbwN5kHzTPHgeSxQNF3AEccsllYzx9+1 e2cTZ6IhH5xn0SNIhxUcNU5mCjRSeB6SbB7FqtyHSKw2W00YmXdwVXSp4vSjv7dy xNDu/ENpXS7egCTH0Af6K8sTMsWtrxPZzbn9liiWeVhS/waUpeQF2U6m9cG3yPga sFO67j8/t7+Fjs/V7Nm+DNc81IpzYaJnGFIm79yOIMH7VRjOffJIeEaCc6N2koC4 q0H7/2hmwtF8Sg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:00:06 2025 by rpki-client