This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.mft File: NkgvLv77kno8r_6h2R8kF_PS59c.mft (raw, json) Hash identifier: aCD6WXPfeW6vLbChLcDq4Hj7Sz0Xdwx8w+nzOtYGNFE= Subject key identifier: C7:B3:27:FE:F6:D7:15:A0:D0:11:B0:92:34:57:E0:86:F2:DD:E3:C0 Authority key identifier: 36:48:2F:2E:FE:FB:92:7A:3C:AF:FE:A1:D9:1F:24:17:F3:D2:E7:D7 Certificate issuer: /CN=36482f2efefb927a3caffea1d91f2417f3d2e7d7 Certificate serial: 019AF31B42F5A61222EF4CA0C2E3A7DEFB66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NkgvLv77kno8r_6h2R8kF_PS59c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.mft Manifest number: 1123 Signing time: Sat 06 Dec 2025 10:00:41 +0000 Manifest this update: Sat 06 Dec 2025 10:00:41 +0000 Manifest next update: Sun 07 Dec 2025 10:00:41 +0000 Files and hashes: 1: G4a30ttfjHFxij-eVrmW-fidH94.roa (hash: WeyOFJKV6AN+3rP0u3s/qWHiA31iewGjEQEJOzY4D5I=) 2: NkgvLv77kno8r_6h2R8kF_PS59c.crl (hash: Dp7zVr8tk5+/lbZluR3dIi8MiTbKaIftGSMBcedkOb8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.mft rsync://rpki.ripe.net/repository/DEFAULT/NkgvLv77kno8r_6h2R8kF_PS59c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:42:f5:a6:12:22:ef:4c:a0:c2:e3:a7:de:fb:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36482f2efefb927a3caffea1d91f2417f3d2e7d7 Validity Not Before: Dec 6 10:00:41 2025 GMT Not After : Dec 7 10:00:41 2025 GMT Subject: CN=c7b327fef6d715a0d011b0923457e086f2dde3c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:08:e9:b3:5e:59:57:73:39:55:48:5f:1b:04: b2:ce:0a:ff:af:ec:74:2e:a2:5d:39:96:3e:15:92: 79:4e:80:a0:d6:91:99:d6:e6:ab:fe:aa:34:78:63: 22:41:82:68:84:47:ea:fe:38:e0:fb:6a:3d:f0:77: 3a:3a:a0:aa:3c:9d:df:f5:31:a5:6d:b1:9a:eb:5c: 2a:d3:cd:67:b4:3c:7c:54:82:e1:ef:44:95:ee:07: 15:bc:fa:b9:b2:06:5f:26:d8:75:95:13:b8:00:73: e5:69:f9:5a:91:d1:9e:14:5b:36:49:51:fc:6d:7c: ba:41:9e:c2:dd:c3:c7:07:42:eb:33:af:1d:05:b2: 27:44:bc:40:c1:f7:4b:4e:8e:e9:89:ae:43:81:c2: 1d:bc:4c:a4:5c:c1:70:f4:6b:f6:aa:45:41:d6:c0: f1:61:fa:ad:46:c6:d7:32:27:86:0a:65:7f:43:59: d4:24:d3:3c:8f:71:c8:88:4e:c1:14:89:c6:d8:9d: 72:e8:15:8d:ef:b6:e0:70:56:ce:04:ca:a9:ce:a7: c2:15:45:07:6b:3c:03:b7:9c:45:f1:12:bb:84:90: a0:a8:0c:f4:f8:d0:75:cd:fa:32:ee:67:cc:25:d0: d4:de:98:ed:61:fa:79:bb:9e:ad:57:5f:d4:2d:eb: b9:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:B3:27:FE:F6:D7:15:A0:D0:11:B0:92:34:57:E0:86:F2:DD:E3:C0 X509v3 Authority Key Identifier: keyid:36:48:2F:2E:FE:FB:92:7A:3C:AF:FE:A1:D9:1F:24:17:F3:D2:E7:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkgvLv77kno8r_6h2R8kF_PS59c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:fa:f4:84:6d:fd:ec:cb:0d:91:08:fd:d9:36:33:7d:57:b8: c8:c9:d1:a1:5e:08:1e:a9:39:4c:74:8d:44:99:b9:f5:24:2f: 7f:26:eb:48:ac:37:89:78:28:4a:52:cd:53:8e:55:9e:31:22: 0a:7d:90:7a:e1:36:31:2c:59:f0:ff:62:47:6c:8c:6c:22:bd: a2:fc:45:12:2c:13:a4:17:7b:67:2f:88:bf:3c:62:87:db:65: 36:3b:a5:dc:72:f0:f8:27:c7:a0:a7:f0:4e:1f:c8:4c:cd:02: 73:8b:5a:7d:67:99:54:b0:f1:ce:69:5c:30:9f:95:fb:7b:d8: b1:d1:64:ae:f7:7f:f3:10:37:d3:8a:f9:ea:60:f6:96:e6:ce: 11:b7:63:87:d1:4e:77:ac:ee:c6:75:b1:91:58:f9:dd:0d:3e: 0f:d8:bb:c9:c6:d9:6e:ec:53:28:96:b1:17:8a:46:e7:2c:07: bf:ac:b0:92:c6:54:8f:c9:63:d7:77:5e:1d:47:b7:f1:d1:88: 48:6c:30:bf:dd:db:c7:4f:7c:0d:fd:06:25:e1:38:fb:bd:35: 3a:42:80:06:90:82:1b:7a:d4:2d:88:02:5f:d9:5d:7a:e5:8c: 0a:61:80:4d:f2:51:ef:d0:68:61:9a:af:b4:2f:cf:b9:91:3b: fe:8f:85:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG0L1phIi70ygwuOn3vtmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2NDgyZjJlZmVmYjkyN2EzY2FmZmVhMWQ5MWYyNDE3ZjNk MmU3ZDcwHhcNMjUxMjA2MTAwMDQxWhcNMjUxMjA3MTAwMDQxWjAzMTEwLwYDVQQD EyhjN2IzMjdmZWY2ZDcxNWEwZDAxMWIwOTIzNDU3ZTA4NmYyZGRlM2MwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAjps15ZV3M5VUhfGwSyzgr/r+x0 LqJdOZY+FZJ5ToCg1pGZ1uar/qo0eGMiQYJohEfq/jjg+2o98Hc6OqCqPJ3f9TGl bbGa61wq081ntDx8VILh70SV7gcVvPq5sgZfJth1lRO4AHPlaflakdGeFFs2SVH8 bXy6QZ7C3cPHB0LrM68dBbInRLxAwfdLTo7pia5DgcIdvEykXMFw9Gv2qkVB1sDx YfqtRsbXMieGCmV/Q1nUJNM8j3HIiE7BFInG2J1y6BWN77bgcFbOBMqpzqfCFUUH azwDt5xF8RK7hJCgqAz0+NB1zfoy7mfMJdDU3pjtYfp5u56tV1/ULeu5rQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMezJ/721xWg0BGwkjRX4Iby3ePAMB8GA1UdIwQY MBaAFDZILy7++5J6PK/+odkfJBfz0ufXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmtndkx2Nzdrbm84cl82aDJSOGtGX1BTNTljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9lNGIwMGMtYTkyOS00OGQ0LWI3ZDgt NzY4ODczMWJlZDlkLzEvTmtndkx2Nzdrbm84cl82aDJSOGtGX1BTNTljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi9lNGIwMGMtYTkyOS00OGQ0LWI3ZDgtNzY4ODczMWJlZDlk LzEvTmtndkx2Nzdrbm84cl82aDJSOGtGX1BTNTljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJPr0hG39 7MsNkQj92TYzfVe4yMnRoV4IHqk5THSNRJm59SQvfybrSKw3iXgoSlLNU45VnjEi Cn2QeuE2MSxZ8P9iR2yMbCK9ovxFEiwTpBd7Zy+Ivzxih9tlNjul3HLw+CfHoKfw Th/ITM0Cc4tafWeZVLDxzmlcMJ+V+3vYsdFkrvd/8xA304r56mD2lubOEbdjh9FO d6zuxnWxkVj53Q0+D9i7ycbZbuxTKJaxF4pG5ywHv6ywksZUj8lj13deHUe38dGI SGwwv93bx098Df0GJeE4+701OkKABpCCG3rULYgCX9ldeuWMCmGATfJR79BoYZqv tC/PuZE7/o+FLQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:48:46 2025 by rpki-client