This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7ba232-8929-410d-bddd-e4b6a9df9a34/1/nVK4OxL6igcTLMgIM6ED4J2L0E8.mft File: nVK4OxL6igcTLMgIM6ED4J2L0E8.mft (raw, json) Hash identifier: czN1gN2/o8KtAlo8IsmYI04dxrJttdEi52vNBMB8Vyg= Subject key identifier: 7D:0D:32:63:3E:B7:8E:87:D5:28:D6:0B:BA:E2:6E:68:CA:5E:BB:E1 Authority key identifier: 9D:52:B8:3B:12:FA:8A:07:13:2C:C8:08:33:A1:03:E0:9D:8B:D0:4F Certificate issuer: /CN=9d52b83b12fa8a07132cc80833a103e09d8bd04f Certificate serial: 019AF19B64D6F98379B657CF5E55673272E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nVK4OxL6igcTLMgIM6ED4J2L0E8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7ba232-8929-410d-bddd-e4b6a9df9a34/1/nVK4OxL6igcTLMgIM6ED4J2L0E8.mft Manifest number: 0459 Signing time: Sat 06 Dec 2025 03:01:24 +0000 Manifest this update: Sat 06 Dec 2025 03:01:24 +0000 Manifest next update: Sun 07 Dec 2025 03:01:24 +0000 Files and hashes: 1: 38Ols_fwuqUro_09-_uv-_Ul2jA.roa (hash: QymLTZTAomDxu/BGko1S2mbZfpR+LRurtzVVTfHo8uA=) 2: nVK4OxL6igcTLMgIM6ED4J2L0E8.crl (hash: h/D87m1NpDYTHOzjECY1V1QGG8VK4SkxhzZfIGBuu2E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/7ba232-8929-410d-bddd-e4b6a9df9a34/1/nVK4OxL6igcTLMgIM6ED4J2L0E8.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/7ba232-8929-410d-bddd-e4b6a9df9a34/1/nVK4OxL6igcTLMgIM6ED4J2L0E8.mft rsync://rpki.ripe.net/repository/DEFAULT/nVK4OxL6igcTLMgIM6ED4J2L0E8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:64:d6:f9:83:79:b6:57:cf:5e:55:67:32:72:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d52b83b12fa8a07132cc80833a103e09d8bd04f Validity Not Before: Dec 6 03:01:24 2025 GMT Not After : Dec 7 03:01:24 2025 GMT Subject: CN=7d0d32633eb78e87d528d60bbae26e68ca5ebbe1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d0:49:8c:b7:aa:8f:a7:99:0d:b2:41:40:f2: 94:49:92:fb:95:9c:1d:9c:d8:00:cc:b1:a9:20:e1: f8:7e:60:e4:b8:fd:49:92:71:f9:e0:ba:03:0a:59: fd:f3:6e:4f:ba:89:f6:a3:64:87:0f:7d:7e:87:c6: 1c:2b:6a:8a:7e:89:1f:63:af:10:e5:5b:82:e9:d0: 4b:80:c4:71:e9:21:85:39:98:06:65:26:93:67:e5: e5:ef:47:28:c5:04:e4:0e:da:f4:43:49:fc:ea:ed: 63:3e:6a:87:31:05:61:7c:ae:6b:38:42:b8:25:3e: 01:2c:a5:25:73:b4:d0:d3:cd:2c:10:ba:bc:db:11: b1:1c:87:ab:42:05:e6:3d:84:f2:1b:98:93:50:1c: 62:1d:0a:43:f9:f5:f7:30:e0:43:0d:b1:3b:8b:99: 49:4a:4f:b0:3e:c0:80:f2:16:ea:a3:cd:5c:3c:5b: 4e:bf:7a:11:aa:8a:ca:dc:3e:d7:30:b3:ff:05:f3: ee:cc:a5:57:e5:e9:72:38:d6:b5:a8:be:ef:a2:19: f5:fc:7b:14:fe:e9:a7:25:d1:92:49:5a:f8:48:64: 8e:ff:e0:89:40:04:44:c6:e0:17:89:db:a1:02:ba: 35:69:17:fd:dd:ed:a8:74:ba:65:58:68:3d:4f:ed: 2e:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:0D:32:63:3E:B7:8E:87:D5:28:D6:0B:BA:E2:6E:68:CA:5E:BB:E1 X509v3 Authority Key Identifier: keyid:9D:52:B8:3B:12:FA:8A:07:13:2C:C8:08:33:A1:03:E0:9D:8B:D0:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nVK4OxL6igcTLMgIM6ED4J2L0E8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7ba232-8929-410d-bddd-e4b6a9df9a34/1/nVK4OxL6igcTLMgIM6ED4J2L0E8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7ba232-8929-410d-bddd-e4b6a9df9a34/1/nVK4OxL6igcTLMgIM6ED4J2L0E8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:79:ee:af:dc:17:20:e6:4f:56:cc:4d:e9:45:d4:ea:96:16: 35:c4:c8:03:d8:eb:9b:d5:0f:64:e6:be:1e:56:5f:56:f5:47: 8c:29:15:ee:3f:ac:d4:80:e2:1d:00:64:cf:4f:4e:eb:64:44: 44:b3:0a:d0:de:06:2f:85:99:9d:f2:c4:41:61:4e:c9:e8:cf: e7:83:c1:2b:2d:f1:70:e0:fd:88:ba:41:e5:3d:f6:c4:42:9c: e3:1a:4e:d7:a8:e9:84:1a:f0:66:80:1b:4f:eb:93:ed:e5:82: b3:ab:11:b7:1e:77:aa:0c:2b:8f:d2:e3:71:7a:67:5c:d2:c2: 1b:02:7d:dc:04:0c:02:70:f2:f7:45:4d:51:2c:b6:45:70:ca: 8a:b8:71:61:6f:e5:0d:7c:88:44:e7:fd:4b:4f:b7:21:b3:ce: c6:65:6d:d5:cf:75:64:d9:e5:de:a8:de:d8:14:2d:9f:d1:63: 9e:d2:b0:de:e1:79:e5:d3:8f:84:c8:84:a6:cc:b0:ee:ce:c4: 5b:3e:fc:cb:a0:c4:ac:9c:1f:2f:74:a3:8f:6d:14:c9:8d:59: 40:fe:9f:c4:88:b5:28:9d:8d:d7:71:21:c2:8d:0c:1a:dd:5c: a1:0a:15:dd:c0:37:e4:05:f9:16:44:37:20:a3:e8:f7:ba:32: 58:64:bf:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm2TW+YN5tlfPXlVnMnLiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkNTJiODNiMTJmYThhMDcxMzJjYzgwODMzYTEwM2UwOWQ4 YmQwNGYwHhcNMjUxMjA2MDMwMTI0WhcNMjUxMjA3MDMwMTI0WjAzMTEwLwYDVQQD Eyg3ZDBkMzI2MzNlYjc4ZTg3ZDUyOGQ2MGJiYWUyNmU2OGNhNWViYmUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstBJjLeqj6eZDbJBQPKUSZL7lZwd nNgAzLGpIOH4fmDkuP1JknH54LoDCln9825Puon2o2SHD31+h8YcK2qKfokfY68Q 5VuC6dBLgMRx6SGFOZgGZSaTZ+Xl70coxQTkDtr0Q0n86u1jPmqHMQVhfK5rOEK4 JT4BLKUlc7TQ080sELq82xGxHIerQgXmPYTyG5iTUBxiHQpD+fX3MOBDDbE7i5lJ Sk+wPsCA8hbqo81cPFtOv3oRqorK3D7XMLP/BfPuzKVX5elyONa1qL7vohn1/HsU /umnJdGSSVr4SGSO/+CJQARExuAXiduhAro1aRf93e2odLplWGg9T+0uRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH0NMmM+t46H1SjWC7ribmjKXrvhMB8GA1UdIwQY MBaAFJ1SuDsS+ooHEyzICDOhA+Cdi9BPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblZLNE94TDZpZ2NUTE1nSU02RUQ0SjJMMEU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83YmEyMzItODkyOS00MTBkLWJkZGQt ZTRiNmE5ZGY5YTM0LzEvblZLNE94TDZpZ2NUTE1nSU02RUQ0SjJMMEU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC83YmEyMzItODkyOS00MTBkLWJkZGQtZTRiNmE5ZGY5YTM0 LzEvblZLNE94TDZpZ2NUTE1nSU02RUQ0SjJMMEU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEXnur9wX IOZPVsxN6UXU6pYWNcTIA9jrm9UPZOa+HlZfVvVHjCkV7j+s1IDiHQBkz09O62RE RLMK0N4GL4WZnfLEQWFOyejP54PBKy3xcOD9iLpB5T32xEKc4xpO16jphBrwZoAb T+uT7eWCs6sRtx53qgwrj9LjcXpnXNLCGwJ93AQMAnDy90VNUSy2RXDKirhxYW/l DXyIROf9S0+3IbPOxmVt1c91ZNnl3qje2BQtn9FjntKw3uF55dOPhMiEpsyw7s7E Wz78y6DErJwfL3Sjj20UyY1ZQP6fxIi1KJ2N13Ehwo0MGt1coQoV3cA35AX5FkQ3 IKPo97oyWGS/3A== -----END CERTIFICATE-----Generated at Sat Dec 6 07:22:04 2025 by rpki-client