This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/e29852-7e5c-452a-9e73-0c10dc507173/1/Nv1unnrLN1gyW7PkJFkY8yT_7aE.mft File: Nv1unnrLN1gyW7PkJFkY8yT_7aE.mft (raw, json) Hash identifier: 8mRY9TjbrDwdh/0AhhUd/c1I9iGPBQ0FdQ5hMkiDYO0= Subject key identifier: DF:24:14:A6:1D:A0:D9:53:E7:0B:BF:27:14:84:D2:1D:7F:A1:2D:8E Authority key identifier: 36:FD:6E:9E:7A:CB:37:58:32:5B:B3:E4:24:59:18:F3:24:FF:ED:A1 Certificate issuer: /CN=36fd6e9e7acb3758325bb3e4245918f324ffeda1 Certificate serial: 019AF3BFF3C67EA57F382C05EBAE73A73103 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nv1unnrLN1gyW7PkJFkY8yT_7aE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/e29852-7e5c-452a-9e73-0c10dc507173/1/Nv1unnrLN1gyW7PkJFkY8yT_7aE.mft Manifest number: 070B Signing time: Sat 06 Dec 2025 13:00:34 +0000 Manifest this update: Sat 06 Dec 2025 13:00:34 +0000 Manifest next update: Sun 07 Dec 2025 13:00:34 +0000 Files and hashes: 1: GPRnxVZYbgXJj70_iEKvlXgPN24.roa (hash: 4zWTgka5oRO1IFS4EYqUZybX548raJeNOyBzsRKEzd0=) 2: Nv1unnrLN1gyW7PkJFkY8yT_7aE.crl (hash: wPu+J5kGPARvcTDSqRBzSHtxgSw6hcYmCxkEJCZhWIg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/e29852-7e5c-452a-9e73-0c10dc507173/1/Nv1unnrLN1gyW7PkJFkY8yT_7aE.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/e29852-7e5c-452a-9e73-0c10dc507173/1/Nv1unnrLN1gyW7PkJFkY8yT_7aE.mft rsync://rpki.ripe.net/repository/DEFAULT/Nv1unnrLN1gyW7PkJFkY8yT_7aE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:bf:f3:c6:7e:a5:7f:38:2c:05:eb:ae:73:a7:31:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36fd6e9e7acb3758325bb3e4245918f324ffeda1 Validity Not Before: Dec 6 13:00:34 2025 GMT Not After : Dec 7 13:00:34 2025 GMT Subject: CN=df2414a61da0d953e70bbf271484d21d7fa12d8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:fb:00:7e:da:55:dc:4c:22:1f:7e:f4:da:c0: e4:01:b1:73:29:fa:01:38:39:48:68:be:b6:92:82: c0:c4:97:df:d9:79:61:d0:fc:3e:a0:83:e6:aa:a0: ec:62:0b:25:78:23:a8:32:08:2e:44:bb:b2:27:ad: 8e:b7:6d:40:dc:df:58:fd:a9:67:5c:ea:69:e3:c3: dd:ec:d6:4e:a6:65:44:8a:11:b3:35:70:6e:4c:08: f8:84:9b:b3:5b:5b:0d:b4:1b:66:ad:2c:24:83:41: 4b:f2:6c:8e:ee:6c:7d:a9:fd:20:91:b4:47:5d:b6: 3a:30:cc:4a:f1:ca:ab:3d:b4:15:ba:07:9a:54:31: f3:db:e3:8a:2f:35:15:a0:a9:ed:38:76:97:f1:1a: 3f:fc:ac:8c:07:51:d1:6b:18:c1:4b:a0:9a:a9:f5: 4b:d3:ba:bb:89:61:48:cc:22:f9:8a:d9:68:b6:78: fe:6f:19:74:57:05:74:1b:98:9f:60:bb:1e:80:a6: 17:75:bc:1b:54:0e:67:13:6f:3b:6a:65:8c:88:01: f8:1c:59:ce:07:65:f5:11:ba:01:f0:b9:f6:4a:e9: 09:a1:df:74:85:2a:e7:ce:f2:00:39:f0:b8:56:50: db:00:95:eb:df:91:44:f4:e9:29:4c:17:74:18:f4: 85:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:24:14:A6:1D:A0:D9:53:E7:0B:BF:27:14:84:D2:1D:7F:A1:2D:8E X509v3 Authority Key Identifier: keyid:36:FD:6E:9E:7A:CB:37:58:32:5B:B3:E4:24:59:18:F3:24:FF:ED:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nv1unnrLN1gyW7PkJFkY8yT_7aE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/e29852-7e5c-452a-9e73-0c10dc507173/1/Nv1unnrLN1gyW7PkJFkY8yT_7aE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/e29852-7e5c-452a-9e73-0c10dc507173/1/Nv1unnrLN1gyW7PkJFkY8yT_7aE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:bf:31:87:8c:b3:d6:d4:27:4e:61:9c:a8:73:24:b9:c1:f7: 50:0a:c0:34:2e:0d:95:8f:a9:db:1e:8a:1a:6c:d0:99:35:30: eb:80:22:85:9a:0c:0c:17:66:b3:64:cf:d5:d9:46:3c:c9:ad: d6:03:ad:81:4d:ae:a4:c4:c2:14:12:84:f4:16:5b:fc:a1:7b: 0f:c6:04:0a:39:09:c4:41:9a:76:3b:99:53:92:3d:b8:7e:31: b7:78:04:32:1c:10:cc:a1:33:06:ee:ee:09:fb:12:70:d9:49: b5:38:ee:4b:69:0b:f8:0d:b4:2a:78:b6:41:8f:7e:8d:96:92: ee:46:3a:c4:ff:4f:19:a7:3c:81:55:12:95:36:e4:9a:4f:42: 26:3f:f1:37:71:f6:15:2b:6a:38:33:6b:6c:d7:16:38:23:e1: d6:89:b6:21:04:3a:00:cc:e7:65:52:d9:22:2f:0b:6e:7b:ee: 1c:52:6d:0e:fa:93:52:1f:41:5c:2e:47:fb:66:84:83:d0:84: ee:f9:a2:02:cd:c1:7e:66:ab:28:c1:c4:ab:2e:fe:0f:ee:d7: d4:a7:ce:ee:a2:b6:3c:f1:68:5b:3d:30:3f:d0:c3:ee:e9:37: 44:3a:b1:b4:f2:9a:2a:fb:72:9d:18:e3:77:fe:d8:0b:f0:15: 51:1b:d5:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzv/PGfqV/OCwF665zpzEDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2ZmQ2ZTllN2FjYjM3NTgzMjViYjNlNDI0NTkxOGYzMjRm ZmVkYTEwHhcNMjUxMjA2MTMwMDM0WhcNMjUxMjA3MTMwMDM0WjAzMTEwLwYDVQQD EyhkZjI0MTRhNjFkYTBkOTUzZTcwYmJmMjcxNDg0ZDIxZDdmYTEyZDhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPsAftpV3EwiH3702sDkAbFzKfoB ODlIaL62koLAxJff2Xlh0Pw+oIPmqqDsYgsleCOoMgguRLuyJ62Ot21A3N9Y/aln XOpp48Pd7NZOpmVEihGzNXBuTAj4hJuzW1sNtBtmrSwkg0FL8myO7mx9qf0gkbRH XbY6MMxK8cqrPbQVugeaVDHz2+OKLzUVoKntOHaX8Ro//KyMB1HRaxjBS6CaqfVL 07q7iWFIzCL5itlotnj+bxl0VwV0G5ifYLsegKYXdbwbVA5nE287amWMiAH4HFnO B2X1EboB8Ln2SukJod90hSrnzvIAOfC4VlDbAJXr35FE9OkpTBd0GPSFaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN8kFKYdoNlT5wu/JxSE0h1/oS2OMB8GA1UdIwQY MBaAFDb9bp56yzdYMluz5CRZGPMk/+2hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnYxdW5uckxOMWd5VzdQa0pGa1k4eVRfN2FFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9lMjk4NTItN2U1Yy00NTJhLTllNzMt MGMxMGRjNTA3MTczLzEvTnYxdW5uckxOMWd5VzdQa0pGa1k4eVRfN2FFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9lMjk4NTItN2U1Yy00NTJhLTllNzMtMGMxMGRjNTA3MTcz LzEvTnYxdW5uckxOMWd5VzdQa0pGa1k4eVRfN2FFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO78xh4yz 1tQnTmGcqHMkucH3UArANC4NlY+p2x6KGmzQmTUw64AihZoMDBdms2TP1dlGPMmt 1gOtgU2upMTCFBKE9BZb/KF7D8YECjkJxEGadjuZU5I9uH4xt3gEMhwQzKEzBu7u CfsScNlJtTjuS2kL+A20Kni2QY9+jZaS7kY6xP9PGac8gVUSlTbkmk9CJj/xN3H2 FStqODNrbNcWOCPh1om2IQQ6AMznZVLZIi8LbnvuHFJtDvqTUh9BXC5H+2aEg9CE 7vmiAs3BfmarKMHEqy7+D+7X1KfO7qK2PPFoWz0wP9DD7uk3RDqxtPKaKvtynRjj d/7YC/AVURvVIw== -----END CERTIFICATE-----Generated at Sat Dec 6 20:28:09 2025 by rpki-client