This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft File: nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft (raw, json) Hash identifier: TOf1jiv7WU5QvKMBYdUtvtpBKjT7jThhy3pFEA7fbEU= Subject key identifier: 81:05:1C:2B:40:1A:EB:46:81:97:3C:97:60:A5:D4:5D:95:CF:4D:42 Authority key identifier: 9F:2B:CD:73:70:5B:93:74:75:A9:58:C6:34:ED:D6:4C:9C:64:AF:B6 Certificate issuer: /CN=9f2bcd73705b937475a958c634edd64c9c64afb6 Certificate serial: 019B05FD4D94C4813DA62BF4298791652955 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft Manifest number: 01D0 Signing time: Wed 10 Dec 2025 02:00:45 +0000 Manifest this update: Wed 10 Dec 2025 02:00:45 +0000 Manifest next update: Thu 11 Dec 2025 02:00:45 +0000 Files and hashes: 1: B7c_NuomsMLePlv4BqYRjDtq6rA.roa (hash: 9F/KOglkwN1+3aYHtjpMXcocrWjjPZ/arLWSx9kmqyY=) 2: LfG4OjHPoLHsAJrtCsFzB1-WA1c.roa (hash: l1BlIjqmxWuuS5MgIueayr3dbyb+8P1GNcaS+TuAghU=) 3: nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.crl (hash: r37tvnebkSHX0aO7EqZ4I1cd+nkbuZgSYtkBdW1yk9Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.crl rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft rsync://rpki.ripe.net/repository/DEFAULT/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:05:fd:4d:94:c4:81:3d:a6:2b:f4:29:87:91:65:29:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f2bcd73705b937475a958c634edd64c9c64afb6 Validity Not Before: Dec 10 02:00:45 2025 GMT Not After : Dec 11 02:00:45 2025 GMT Subject: CN=81051c2b401aeb4681973c9760a5d45d95cf4d42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:08:a2:cf:56:34:51:cf:83:07:a7:e9:70:ce: fd:f4:ae:54:55:14:0b:f0:35:c0:45:d2:b9:c7:83: 0f:9a:eb:9f:e1:ae:20:0f:d2:1e:f1:32:56:fd:c6: 3f:6a:0f:7a:a1:76:7b:b9:a4:32:1e:81:1f:36:7a: f5:a7:65:cc:14:27:a7:cb:98:77:f5:f1:4b:14:93: 26:44:7c:1a:92:27:5d:fc:dc:14:ce:aa:66:dd:35: 7d:88:75:3c:9b:4c:8e:d5:4a:52:0e:b3:93:b0:b3: f6:b0:df:86:40:3d:5d:3d:f2:14:b4:8c:8d:58:85: 51:26:6e:c3:0a:1d:89:3e:8a:06:8f:98:f2:63:db: 45:ac:04:ec:08:25:d3:3f:e3:69:9d:2f:ca:82:23: 13:58:2e:b1:36:f7:02:ac:94:92:45:ef:b1:f4:22: 70:47:ed:0d:51:61:55:4b:d7:9a:15:a9:b1:86:bd: ae:49:50:14:c5:0e:d3:32:05:af:a0:3c:e3:65:aa: 58:bb:a8:1b:c0:00:07:f7:46:9c:85:90:c4:9d:9e: db:d8:5c:27:5e:5a:07:f6:3c:41:92:a6:14:e0:7f: 75:ea:34:12:90:4e:44:98:32:75:ef:68:01:91:07: 52:16:ea:c5:31:ae:49:08:49:fe:9d:bd:74:a9:76: 9a:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:05:1C:2B:40:1A:EB:46:81:97:3C:97:60:A5:D4:5D:95:CF:4D:42 X509v3 Authority Key Identifier: keyid:9F:2B:CD:73:70:5B:93:74:75:A9:58:C6:34:ED:D6:4C:9C:64:AF:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:08:ac:c9:53:f7:a9:41:9f:df:ed:2e:a0:b0:62:8c:71:00: 58:4c:f3:a9:2d:d7:e1:46:35:d0:97:67:04:40:02:15:43:7f: ac:59:a1:51:2e:17:9d:14:b6:19:64:98:51:f1:6c:c8:bf:ed: 7a:64:05:0a:15:dd:ab:f0:ca:e3:6d:4d:3a:02:a7:7b:1d:d2: 85:af:97:5b:9b:6d:3d:50:47:96:2b:95:43:95:61:15:f5:9f: 19:72:c2:d2:28:9d:69:18:ee:f9:29:bb:fc:c8:2e:c7:51:81: 9d:71:91:ce:09:ba:be:4d:22:29:01:c3:d4:4d:4a:3b:33:81: d6:19:c6:0f:d7:5b:92:a8:c9:c7:8e:e0:c7:86:4d:31:9a:3f: 9e:fe:d0:d0:93:42:ec:d2:e1:d4:11:0b:e3:50:4e:dd:07:ca: e0:a1:50:03:61:59:2a:09:d4:5c:12:02:76:79:b1:87:93:67: 2b:3e:dd:24:fd:bf:3c:31:cf:e6:4f:1b:46:3b:f0:8f:11:ac: e8:9c:3b:82:54:95:d2:10:23:f7:5c:84:c7:cf:e2:66:40:04: bc:ad:6e:b3:b5:03:9a:1d:6c:ae:45:00:34:c6:53:2d:d2:fa: 6f:e0:9d:70:bc:bf:8c:b0:8d:c2:a4:3b:06:5d:2b:d3:ca:0b: f6:df:b8:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsF/U2UxIE9piv0KYeRZSlVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmMmJjZDczNzA1YjkzNzQ3NWE5NThjNjM0ZWRkNjRjOWM2 NGFmYjYwHhcNMjUxMjEwMDIwMDQ1WhcNMjUxMjExMDIwMDQ1WjAzMTEwLwYDVQQD Eyg4MTA1MWMyYjQwMWFlYjQ2ODE5NzNjOTc2MGE1ZDQ1ZDk1Y2Y0ZDQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Qiiz1Y0Uc+DB6fpcM799K5UVRQL 8DXARdK5x4MPmuuf4a4gD9Ie8TJW/cY/ag96oXZ7uaQyHoEfNnr1p2XMFCeny5h3 9fFLFJMmRHwakidd/NwUzqpm3TV9iHU8m0yO1UpSDrOTsLP2sN+GQD1dPfIUtIyN WIVRJm7DCh2JPooGj5jyY9tFrATsCCXTP+NpnS/KgiMTWC6xNvcCrJSSRe+x9CJw R+0NUWFVS9eaFamxhr2uSVAUxQ7TMgWvoDzjZapYu6gbwAAH90achZDEnZ7b2Fwn XloH9jxBkqYU4H916jQSkE5EmDJ172gBkQdSFurFMa5JCEn+nb10qXaaqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIEFHCtAGutGgZc8l2Cl1F2Vz01CMB8GA1UdIwQY MBaAFJ8rzXNwW5N0dalYxjTt1kycZK+2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnl2TmMzQmJrM1IxcVZqR05PM1dUSnhrcjdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lOGRiYmItNzBkYS00MmY3LWFlNDct OTA4NGZiMGJlOWMxLzEvbnl2TmMzQmJrM1IxcVZqR05PM1dUSnhrcjdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9lOGRiYmItNzBkYS00MmY3LWFlNDctOTA4NGZiMGJlOWMx LzEvbnl2TmMzQmJrM1IxcVZqR05PM1dUSnhrcjdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPwisyVP3 qUGf3+0uoLBijHEAWEzzqS3X4UY10JdnBEACFUN/rFmhUS4XnRS2GWSYUfFsyL/t emQFChXdq/DK421NOgKnex3Sha+XW5ttPVBHliuVQ5VhFfWfGXLC0iidaRju+Sm7 /Mgux1GBnXGRzgm6vk0iKQHD1E1KOzOB1hnGD9dbkqjJx47gx4ZNMZo/nv7Q0JNC 7NLh1BEL41BO3QfK4KFQA2FZKgnUXBICdnmxh5NnKz7dJP2/PDHP5k8bRjvwjxGs 6Jw7glSV0hAj91yEx8/iZkAEvK1us7UDmh1srkUANMZTLdL6b+CdcLy/jLCNwqQ7 Bl0r08oL9t+4cw== -----END CERTIFICATE-----Generated at Wed Dec 10 04:57:32 2025 by rpki-client