This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/a0faca-db7f-4ed8-b11a-eec46ca82a33/1/NVi7R941Tgng_CyywfoU1x2Sbug.mft File: NVi7R941Tgng_CyywfoU1x2Sbug.mft (raw, json) Hash identifier: SfAZVsDegIvnJAfknV67XS+6EnGAWkL8YoKY20WUXwc= Subject key identifier: A0:D1:70:D7:D7:7C:FD:9B:DA:B3:D3:61:C8:FF:AA:27:01:C8:D2:9E Authority key identifier: 35:58:BB:47:DE:35:4E:09:E0:FC:2C:B2:C1:FA:14:D7:1D:92:6E:E8 Certificate issuer: /CN=3558bb47de354e09e0fc2cb2c1fa14d71d926ee8 Certificate serial: 019B2BC211D00F09A2C70D73A72328B6C3BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NVi7R941Tgng_CyywfoU1x2Sbug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/a0faca-db7f-4ed8-b11a-eec46ca82a33/1/NVi7R941Tgng_CyywfoU1x2Sbug.mft Manifest number: 1787 Signing time: Wed 17 Dec 2025 10:01:37 +0000 Manifest this update: Wed 17 Dec 2025 10:01:37 +0000 Manifest next update: Thu 18 Dec 2025 10:01:37 +0000 Files and hashes: 1: 0iLUxeXNyLeCeJPOBWFetpkhzr8.roa (hash: GzvKjvrXUQtFRvTqnLO3SZbgmgXYnbU1huTzG2YJ5xg=) 2: NVi7R941Tgng_CyywfoU1x2Sbug.crl (hash: RagbzNQMPOT4PKg/e78A7ZXveCvq1rLVme/q4UHxCB8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/a0faca-db7f-4ed8-b11a-eec46ca82a33/1/NVi7R941Tgng_CyywfoU1x2Sbug.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/a0faca-db7f-4ed8-b11a-eec46ca82a33/1/NVi7R941Tgng_CyywfoU1x2Sbug.mft rsync://rpki.ripe.net/repository/DEFAULT/NVi7R941Tgng_CyywfoU1x2Sbug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:c2:11:d0:0f:09:a2:c7:0d:73:a7:23:28:b6:c3:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3558bb47de354e09e0fc2cb2c1fa14d71d926ee8 Validity Not Before: Dec 17 10:01:37 2025 GMT Not After : Dec 18 10:01:37 2025 GMT Subject: CN=a0d170d7d77cfd9bdab3d361c8ffaa2701c8d29e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:55:e3:7b:0e:dc:8e:8d:da:33:d8:14:ea:2c: 9f:0d:d0:5a:3b:a7:25:ea:99:a3:d8:0c:ea:9b:8b: ee:36:71:29:02:fb:ce:57:83:f7:f8:cc:c6:3f:b4: d8:d7:bb:78:67:1f:e4:ee:ec:ea:8c:e2:9d:1d:d5: 2d:a9:7a:90:a3:8d:57:53:1f:7e:0e:db:9a:a8:8c: 97:b6:bb:9c:d4:77:42:3f:ea:7c:a8:de:c7:06:21: 72:85:94:77:3c:ac:e2:58:84:ef:25:33:6c:b2:24: b9:b0:3f:9f:fa:6f:88:2d:93:b6:cf:20:c8:f4:58: 5a:d7:ee:2e:eb:9a:96:3c:c5:97:36:4a:49:fa:a5: f3:b9:25:23:7a:17:5d:ec:20:15:4a:c2:05:06:39: d7:89:c6:7b:b7:6a:f3:cf:f3:fb:5f:71:91:b7:b2: a1:b5:09:16:68:69:ba:cd:83:d0:c8:f5:ba:f6:d4: f5:93:66:79:e7:23:da:82:b6:1b:4f:ad:a4:19:37: 30:34:d4:b3:62:a7:de:08:a9:df:7e:6f:46:0c:47: 25:7d:a7:cb:42:2a:c1:4a:97:a8:7a:e5:f9:9f:24: 26:3b:9f:b1:7b:5b:b3:ec:86:6f:cf:c1:ff:a9:ba: 2f:0f:e8:d9:b9:42:40:57:eb:bb:45:6c:66:e6:ac: e3:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:D1:70:D7:D7:7C:FD:9B:DA:B3:D3:61:C8:FF:AA:27:01:C8:D2:9E X509v3 Authority Key Identifier: keyid:35:58:BB:47:DE:35:4E:09:E0:FC:2C:B2:C1:FA:14:D7:1D:92:6E:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NVi7R941Tgng_CyywfoU1x2Sbug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a0faca-db7f-4ed8-b11a-eec46ca82a33/1/NVi7R941Tgng_CyywfoU1x2Sbug.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a0faca-db7f-4ed8-b11a-eec46ca82a33/1/NVi7R941Tgng_CyywfoU1x2Sbug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:6d:1c:33:92:02:7b:f2:99:4d:3d:8c:1a:42:3d:0f:4a:5f: fc:9f:7a:ec:77:49:0e:87:2e:77:60:ea:5c:fb:ac:96:ad:13: ec:47:6d:01:56:ca:a3:48:8e:b3:8d:df:bf:21:7c:e1:2a:b5: 0a:c9:78:5b:2e:bd:26:90:ab:e5:4d:f3:cc:ff:c0:71:e3:82: f2:d8:85:16:b2:ed:c2:8b:24:fc:29:8d:b0:01:bb:30:c0:db: ce:67:2e:57:f4:74:ba:bc:64:b0:28:e2:b0:72:13:b6:c7:11: a7:05:4a:40:bf:03:59:90:e9:37:b7:9a:5c:be:60:e7:d9:a7: 53:af:80:ef:c5:4b:74:88:90:24:a5:f8:5d:c1:32:6d:18:03: 04:05:90:26:58:66:29:bf:93:ff:f1:32:ec:0a:0f:35:ad:73: de:81:2a:69:b5:7d:3f:c9:f9:8b:6d:b6:96:32:1e:69:58:ef: b8:dc:07:01:a0:1e:55:72:ee:37:0f:c0:35:46:c1:6a:00:94: 89:04:7a:a9:d1:93:ee:4a:fe:85:ee:39:e3:eb:32:42:da:e6: 14:1d:09:6a:8f:dc:a3:48:fe:ce:49:91:00:1b:61:b1:52:44: 53:4f:a9:17:3b:c8:c6:9d:9a:5a:96:c1:62:9b:43:03:c0:f8: 42:db:51:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrwhHQDwmixw1zpyMotsO/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NThiYjQ3ZGUzNTRlMDllMGZjMmNiMmMxZmExNGQ3MWQ5 MjZlZTgwHhcNMjUxMjE3MTAwMTM3WhcNMjUxMjE4MTAwMTM3WjAzMTEwLwYDVQQD EyhhMGQxNzBkN2Q3N2NmZDliZGFiM2QzNjFjOGZmYWEyNzAxYzhkMjllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1Xjew7cjo3aM9gU6iyfDdBaO6cl 6pmj2Azqm4vuNnEpAvvOV4P3+MzGP7TY17t4Zx/k7uzqjOKdHdUtqXqQo41XUx9+ DtuaqIyXtruc1HdCP+p8qN7HBiFyhZR3PKziWITvJTNssiS5sD+f+m+ILZO2zyDI 9Fha1+4u65qWPMWXNkpJ+qXzuSUjehdd7CAVSsIFBjnXicZ7t2rzz/P7X3GRt7Kh tQkWaGm6zYPQyPW69tT1k2Z55yPagrYbT62kGTcwNNSzYqfeCKnffm9GDEclfafL QirBSpeoeuX5nyQmO5+xe1uz7IZvz8H/qbovD+jZuUJAV+u7RWxm5qzjqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKDRcNfXfP2b2rPTYcj/qicByNKeMB8GA1UdIwQY MBaAFDVYu0feNU4J4PwsssH6FNcdkm7oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlZpN1I5NDFUZ25nX0N5eXdmb1UxeDJTYnVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9hMGZhY2EtZGI3Zi00ZWQ4LWIxMWEt ZWVjNDZjYTgyYTMzLzEvTlZpN1I5NDFUZ25nX0N5eXdmb1UxeDJTYnVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9hMGZhY2EtZGI3Zi00ZWQ4LWIxMWEtZWVjNDZjYTgyYTMz LzEvTlZpN1I5NDFUZ25nX0N5eXdmb1UxeDJTYnVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe20cM5IC e/KZTT2MGkI9D0pf/J967HdJDocud2DqXPuslq0T7EdtAVbKo0iOs43fvyF84Sq1 Csl4Wy69JpCr5U3zzP/AceOC8tiFFrLtwosk/CmNsAG7MMDbzmcuV/R0urxksCji sHITtscRpwVKQL8DWZDpN7eaXL5g59mnU6+A78VLdIiQJKX4XcEybRgDBAWQJlhm Kb+T//Ey7AoPNa1z3oEqabV9P8n5i222ljIeaVjvuNwHAaAeVXLuNw/ANUbBagCU iQR6qdGT7kr+he454+syQtrmFB0Jao/co0j+zkmRABthsVJEU0+pFzvIxp2aWpbB YptDA8D4QttR+w== -----END CERTIFICATE-----Generated at Wed Dec 17 13:45:36 2025 by rpki-client