This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.mft File: nHjvvmeG-eICxCeI4bv3F4HKjEc.mft (raw, json) Hash identifier: jpOw0vgaNyX3o0Xgt0Ry4qNlAdthT3cawOn2Zz5v8tI= Subject key identifier: F2:B5:FB:18:F2:12:02:B6:69:0D:8F:D4:06:3D:98:9B:10:A6:36:8D Authority key identifier: 9C:78:EF:BE:67:86:F9:E2:02:C4:27:88:E1:BB:F7:17:81:CA:8C:47 Certificate issuer: /CN=9c78efbe6786f9e202c42788e1bbf71781ca8c47 Certificate serial: 019AF5775A507CDEB9F82897EF767490FA70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nHjvvmeG-eICxCeI4bv3F4HKjEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 21:00:30 +0000 Manifest this update: Sat 06 Dec 2025 21:00:30 +0000 Manifest next update: Sun 07 Dec 2025 21:00:30 +0000 Files and hashes: 1: BhSQf1yX1uLwgzRbSbyaxC2Eyyk.roa (hash: QYypOcFPdcc9ArENcLdBU9X1TsVQ+7g/yqAYCtsdaqk=) 2: nHjvvmeG-eICxCeI4bv3F4HKjEc.crl (hash: /Kqs6toFKubZoJRwaJ2wP5zQsrvKtYy/r8eaZBdN6cY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.mft rsync://rpki.ripe.net/repository/DEFAULT/nHjvvmeG-eICxCeI4bv3F4HKjEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:77:5a:50:7c:de:b9:f8:28:97:ef:76:74:90:fa:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c78efbe6786f9e202c42788e1bbf71781ca8c47 Validity Not Before: Dec 6 21:00:30 2025 GMT Not After : Dec 7 21:00:30 2025 GMT Subject: CN=f2b5fb18f21202b6690d8fd4063d989b10a6368d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:02:48:44:01:ec:7b:64:57:e7:0e:82:e5:ee: 6a:0b:10:8b:c9:f8:91:3b:c2:7e:f9:3a:47:8c:23: 8c:4b:e5:48:cd:f7:c7:13:a6:a4:e1:6b:89:6a:4e: 24:98:0a:00:13:23:da:85:82:f2:0a:04:f1:35:58: 59:03:6e:28:4d:a7:b5:06:3a:e0:ce:66:8b:99:be: dd:89:32:f7:a0:6e:1f:68:58:d2:ce:7b:03:36:4c: 74:00:af:f9:d6:0c:ca:77:85:31:39:92:7c:1b:a2: 63:88:dc:98:cc:e9:9b:17:b0:bb:e7:ff:65:39:bb: 23:36:bf:32:24:89:e8:5d:73:41:e2:75:16:c8:50: 06:38:f4:86:5d:bb:97:06:80:59:5d:78:34:a9:ee: 3c:3d:88:bd:31:1a:ae:f5:ad:86:40:d2:2c:22:f3: 09:9d:20:a6:f5:dc:5e:5b:3a:c8:30:09:3e:41:60: f8:c1:22:f7:00:e5:f9:38:81:e0:fd:e9:72:13:01: 50:4c:13:9c:40:fb:0d:39:23:f2:16:ea:67:b9:be: e7:a6:57:90:af:a6:1e:22:f3:51:e0:f6:b2:46:c1: 04:bd:52:7a:ca:a2:7f:f2:e3:5e:0b:89:4e:63:d3: a7:49:8c:21:67:34:4b:bf:17:ca:f0:6b:c3:16:f5: 88:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:B5:FB:18:F2:12:02:B6:69:0D:8F:D4:06:3D:98:9B:10:A6:36:8D X509v3 Authority Key Identifier: keyid:9C:78:EF:BE:67:86:F9:E2:02:C4:27:88:E1:BB:F7:17:81:CA:8C:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nHjvvmeG-eICxCeI4bv3F4HKjEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:51:70:ad:23:52:d1:fe:0d:0a:28:fc:58:10:e2:8e:c5:17: 01:61:cb:b7:8a:9a:ed:9e:27:40:3b:64:07:66:12:d3:2e:59: 33:bd:3a:96:a0:18:3b:0f:f1:c8:1f:10:e5:4b:90:b8:ab:76: 03:10:a7:c6:c7:13:7e:e8:73:d9:e4:6a:b4:31:7b:a5:73:e2: d0:96:c0:b5:f8:16:27:6a:1d:6b:f5:de:cd:94:e7:03:56:e4: c1:14:d4:bc:ea:d4:fa:50:5f:e4:57:be:de:ea:8b:11:d8:e0: 4e:11:6b:9a:37:8e:af:59:2d:f8:db:a0:d6:ec:5e:bc:36:a9: fb:82:af:75:d4:9d:30:d7:31:eb:99:2e:a4:1b:6c:73:3f:34: a6:5d:a9:6d:a9:d2:ac:f4:c6:36:06:73:6d:ec:6a:f4:2e:2c: 14:c3:60:e4:08:ab:ce:32:15:bd:d4:a7:e3:9f:cf:0c:39:a3: 31:9a:8f:be:a9:31:d8:c3:10:4c:cf:bb:c5:37:a3:e3:02:f7: 7d:20:23:0c:48:ff:26:65:7d:45:ef:e7:df:99:3b:60:46:3a: 5c:b2:26:74:95:20:f4:c2:82:db:37:3f:9d:ac:76:51:bd:51: 1e:b2:f9:cf:f3:79:b1:98:43:ab:42:f7:eb:cf:49:b6:67:a1: b0:b7:f5:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1d1pQfN65+CiX73Z0kPpwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljNzhlZmJlNjc4NmY5ZTIwMmM0Mjc4OGUxYmJmNzE3ODFj YThjNDcwHhcNMjUxMjA2MjEwMDMwWhcNMjUxMjA3MjEwMDMwWjAzMTEwLwYDVQQD EyhmMmI1ZmIxOGYyMTIwMmI2NjkwZDhmZDQwNjNkOTg5YjEwYTYzNjhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswJIRAHse2RX5w6C5e5qCxCLyfiR O8J++TpHjCOMS+VIzffHE6ak4WuJak4kmAoAEyPahYLyCgTxNVhZA24oTae1Bjrg zmaLmb7diTL3oG4faFjSznsDNkx0AK/51gzKd4UxOZJ8G6JjiNyYzOmbF7C75/9l ObsjNr8yJInoXXNB4nUWyFAGOPSGXbuXBoBZXXg0qe48PYi9MRqu9a2GQNIsIvMJ nSCm9dxeWzrIMAk+QWD4wSL3AOX5OIHg/elyEwFQTBOcQPsNOSPyFupnub7npleQ r6YeIvNR4PayRsEEvVJ6yqJ/8uNeC4lOY9OnSYwhZzRLvxfK8GvDFvWIBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPK1+xjyEgK2aQ2P1AY9mJsQpjaNMB8GA1UdIwQY MBaAFJx4775nhvniAsQniOG79xeByoxHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkhqdnZtZUctZUlDeENlSTRidjNGNEhLakVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC80YzE2NDItODBmMy00NTIzLTk3NGQt NGZjMWNhZDhhYjIyLzEvbkhqdnZtZUctZUlDeENlSTRidjNGNEhLakVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC80YzE2NDItODBmMy00NTIzLTk3NGQtNGZjMWNhZDhhYjIy LzEvbkhqdnZtZUctZUlDeENlSTRidjNGNEhLakVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdlFwrSNS 0f4NCij8WBDijsUXAWHLt4qa7Z4nQDtkB2YS0y5ZM706lqAYOw/xyB8Q5UuQuKt2 AxCnxscTfuhz2eRqtDF7pXPi0JbAtfgWJ2oda/XezZTnA1bkwRTUvOrU+lBf5Fe+ 3uqLEdjgThFrmjeOr1kt+Nug1uxevDap+4KvddSdMNcx65kupBtscz80pl2pbanS rPTGNgZzbexq9C4sFMNg5AirzjIVvdSn45/PDDmjMZqPvqkx2MMQTM+7xTej4wL3 fSAjDEj/JmV9Re/n35k7YEY6XLImdJUg9MKC2zc/nax2Ub1RHrL5z/N5sZhDq0L3 689JtmehsLf1zw== -----END CERTIFICATE-----Generated at Sun Dec 7 03:18:18 2025 by rpki-client