This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/c39b2f-ce86-40bc-9ee5-9f0ad18f039a/1/nv9H-JUh2bSSt9BCG8J2kevwbv0.mft File: nv9H-JUh2bSSt9BCG8J2kevwbv0.mft (raw, json) Hash identifier: Q9Q9DLZFSKSpeCpTU8VEY5pgpje6+sq4kCjEbbPbVjE= Subject key identifier: 17:5B:12:7C:D2:B0:E2:19:77:74:8B:A0:5D:F2:82:AC:53:50:4D:0D Authority key identifier: 9E:FF:47:F8:95:21:D9:B4:92:B7:D0:42:1B:C2:76:91:EB:F0:6E:FD Certificate issuer: /CN=9eff47f89521d9b492b7d0421bc27691ebf06efd Certificate serial: 019B25BFB96976F05B00B6B4F5BFCF8E90D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nv9H-JUh2bSSt9BCG8J2kevwbv0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/c39b2f-ce86-40bc-9ee5-9f0ad18f039a/1/nv9H-JUh2bSSt9BCG8J2kevwbv0.mft Manifest number: 177D Signing time: Tue 16 Dec 2025 06:01:20 +0000 Manifest this update: Tue 16 Dec 2025 06:01:20 +0000 Manifest next update: Wed 17 Dec 2025 06:01:20 +0000 Files and hashes: 1: RKq6Jd2UH9wWubKSgst7pZ7LyKU.roa (hash: ifDG8ANyaXOjVuCl1ow9SIV2BWxCkzstlJEhmLPckaQ=) 2: nv9H-JUh2bSSt9BCG8J2kevwbv0.crl (hash: Z26U/QMmNX4MT35VY9fNU/x1vPW8l8Ijx8BavB4UtFQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/c39b2f-ce86-40bc-9ee5-9f0ad18f039a/1/nv9H-JUh2bSSt9BCG8J2kevwbv0.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/c39b2f-ce86-40bc-9ee5-9f0ad18f039a/1/nv9H-JUh2bSSt9BCG8J2kevwbv0.mft rsync://rpki.ripe.net/repository/DEFAULT/nv9H-JUh2bSSt9BCG8J2kevwbv0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 06:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:bf:b9:69:76:f0:5b:00:b6:b4:f5:bf:cf:8e:90:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9eff47f89521d9b492b7d0421bc27691ebf06efd Validity Not Before: Dec 16 06:01:20 2025 GMT Not After : Dec 17 06:01:20 2025 GMT Subject: CN=175b127cd2b0e21977748ba05df282ac53504d0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c8:39:a9:02:f3:51:b1:42:13:4e:f4:7f:3a: 79:d5:d4:6a:90:ee:1c:cc:d2:d1:5c:8f:82:dc:8c: 68:59:8a:75:c1:e8:08:18:3e:f3:d0:5d:4d:b1:ec: 47:de:e4:07:4d:7e:f1:6f:5a:a6:c5:dc:9e:d5:21: ec:3a:c2:fb:01:be:c0:99:e5:ee:ef:19:74:70:ca: 68:c8:d0:87:6f:16:e2:f2:86:2a:11:02:04:21:ea: 8c:93:d8:c8:9d:17:ee:40:10:58:02:b0:7a:63:5b: e8:ca:8c:ae:85:69:b2:f8:7c:fe:83:a7:30:c3:be: 2d:4b:2c:71:0d:09:41:04:5b:6d:8f:1e:7d:fb:80: 82:fe:46:54:db:59:d1:f8:3b:18:34:ac:87:51:df: e6:1e:c2:41:0f:07:e7:90:c4:ab:c9:0b:5d:8f:c4: 17:ff:af:09:7d:f9:14:ef:d1:b8:d9:85:58:b9:66: d0:8b:24:eb:ab:64:31:f1:a5:9d:73:ae:1d:24:5d: 1f:db:99:dc:6b:50:e6:26:bb:2c:71:a9:e1:5f:05: 88:c5:01:27:61:ff:b0:d2:ee:bb:12:d7:98:4c:fe: 8b:6a:19:13:f1:e4:9f:9f:53:8c:f4:16:ea:7c:bb: 4e:67:f1:26:5e:b9:5a:d1:83:d5:60:f1:ec:1b:75: 85:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:5B:12:7C:D2:B0:E2:19:77:74:8B:A0:5D:F2:82:AC:53:50:4D:0D X509v3 Authority Key Identifier: keyid:9E:FF:47:F8:95:21:D9:B4:92:B7:D0:42:1B:C2:76:91:EB:F0:6E:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nv9H-JUh2bSSt9BCG8J2kevwbv0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/c39b2f-ce86-40bc-9ee5-9f0ad18f039a/1/nv9H-JUh2bSSt9BCG8J2kevwbv0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/c39b2f-ce86-40bc-9ee5-9f0ad18f039a/1/nv9H-JUh2bSSt9BCG8J2kevwbv0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:9c:df:26:44:e1:de:a1:c3:b7:82:5a:57:ad:74:01:ed:d8: e8:f0:1f:06:2a:93:c9:aa:c3:19:b7:fb:43:cc:7d:07:0e:b9: af:9e:e1:46:a3:db:5f:f0:48:cf:3d:66:2c:21:bd:91:d5:ad: 4b:d8:f9:66:e4:cf:76:6f:0f:cb:c0:1c:fe:b4:34:8e:30:42: 8f:ff:82:c0:d1:90:51:15:13:8e:ba:2d:b3:dc:42:6e:38:76: 87:7c:6d:d8:84:95:05:8a:0e:1a:31:23:cb:38:e7:c5:0e:cc: 9f:eb:03:a6:35:1f:35:0d:91:b5:f6:b1:c1:1e:72:f1:e2:13: 5d:2e:84:49:59:92:ec:58:ac:cb:3e:69:70:5b:01:9a:02:a1: 98:3b:94:8e:6e:2d:e4:7d:54:77:de:74:95:36:8d:6b:bf:d6: 4c:c2:3d:a3:d3:80:0c:e9:49:bc:7f:0a:ab:a4:7f:bc:68:d9: 34:e6:da:fd:72:5a:8b:f6:ad:9e:b7:e8:9e:0f:61:e6:21:99: d7:cd:ab:16:a8:1d:f1:97:19:1c:f2:8c:86:87:ec:3c:da:7c: af:1c:f3:77:5e:de:56:48:f9:dd:cb:69:90:3e:75:82:5d:ee: 40:4c:1c:33:63:07:8c:0a:67:9e:f8:a7:65:71:09:d4:9e:26: c9:b1:d8:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslv7lpdvBbALa09b/PjpDWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllZmY0N2Y4OTUyMWQ5YjQ5MmI3ZDA0MjFiYzI3NjkxZWJm MDZlZmQwHhcNMjUxMjE2MDYwMTIwWhcNMjUxMjE3MDYwMTIwWjAzMTEwLwYDVQQD EygxNzViMTI3Y2QyYjBlMjE5Nzc3NDhiYTA1ZGYyODJhYzUzNTA0ZDBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMg5qQLzUbFCE070fzp51dRqkO4c zNLRXI+C3IxoWYp1wegIGD7z0F1NsexH3uQHTX7xb1qmxdye1SHsOsL7Ab7AmeXu 7xl0cMpoyNCHbxbi8oYqEQIEIeqMk9jInRfuQBBYArB6Y1voyoyuhWmy+Hz+g6cw w74tSyxxDQlBBFttjx59+4CC/kZU21nR+DsYNKyHUd/mHsJBDwfnkMSryQtdj8QX /68JffkU79G42YVYuWbQiyTrq2Qx8aWdc64dJF0f25nca1DmJrsscanhXwWIxQEn Yf+w0u67EteYTP6LahkT8eSfn1OM9BbqfLtOZ/EmXrla0YPVYPHsG3WF5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBdbEnzSsOIZd3SLoF3ygqxTUE0NMB8GA1UdIwQY MBaAFJ7/R/iVIdm0krfQQhvCdpHr8G79MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnY5SC1KVWgyYlNTdDlCQ0c4SjJrZXZ3YnYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9jMzliMmYtY2U4Ni00MGJjLTllZTUt OWYwYWQxOGYwMzlhLzEvbnY5SC1KVWgyYlNTdDlCQ0c4SjJrZXZ3YnYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS9jMzliMmYtY2U4Ni00MGJjLTllZTUtOWYwYWQxOGYwMzlh LzEvbnY5SC1KVWgyYlNTdDlCQ0c4SjJrZXZ3YnYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ5zfJkTh 3qHDt4JaV610Ae3Y6PAfBiqTyarDGbf7Q8x9Bw65r57hRqPbX/BIzz1mLCG9kdWt S9j5ZuTPdm8Py8Ac/rQ0jjBCj/+CwNGQURUTjrots9xCbjh2h3xt2ISVBYoOGjEj yzjnxQ7Mn+sDpjUfNQ2RtfaxwR5y8eITXS6ESVmS7Fisyz5pcFsBmgKhmDuUjm4t 5H1Ud950lTaNa7/WTMI9o9OADOlJvH8Kq6R/vGjZNOba/XJai/atnrfong9h5iGZ 182rFqgd8ZcZHPKMhofsPNp8rxzzd17eVkj53ctpkD51gl3uQEwcM2MHjApnnvin ZXEJ1J4mybHYPw== -----END CERTIFICATE-----Generated at Tue Dec 16 13:40:23 2025 by rpki-client