This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.mft File: nxvZcy5s3W50lNeRh_yoVbUZmQk.mft (raw, json) Hash identifier: DzX+VpDby3ZRXdxEh4NjnaWsQJo4gK028xsKd4EB6f8= Subject key identifier: 87:61:D0:A1:9D:62:C2:EB:1A:5A:D7:C2:0E:72:7D:43:BB:85:88:E6 Authority key identifier: 9F:1B:D9:73:2E:6C:DD:6E:74:94:D7:91:87:FC:A8:55:B5:19:99:09 Certificate issuer: /CN=9f1bd9732e6cdd6e7494d79187fca855b5199909 Certificate serial: 019B1A97A17B717B0353CD33B4CC8FDF02F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nxvZcy5s3W50lNeRh_yoVbUZmQk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.mft Manifest number: 14F7 Signing time: Sun 14 Dec 2025 02:01:43 +0000 Manifest this update: Sun 14 Dec 2025 02:01:43 +0000 Manifest next update: Mon 15 Dec 2025 02:01:43 +0000 Files and hashes: 1: L2MFVzLu5kpVjnsb4Kb2Ip5hD4I.roa (hash: wDHsr026DvaBiTyi7BBF/QmvI/bBUdaI/D33HJF38Y8=) 2: _JE8lnLT-86sHVAHJKlkVaAyjr4.roa (hash: UompnxxivZ8Fg0ySIbxl1tWe4K+WK1YpWsyZpIJAPwU=) 3: nxvZcy5s3W50lNeRh_yoVbUZmQk.crl (hash: 0Vs5s4mEo4fvfkqa5gO8/cafS1P3QKt91l/m5UPuxS8=) 4: qdHDAHiWQsmCFoNetHDwXmdq01A.roa (hash: go8toSa0Pfxl9RGM5eMA7V4+YqEI5lyucr5i8lNbh0M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.crl rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.mft rsync://rpki.ripe.net/repository/DEFAULT/nxvZcy5s3W50lNeRh_yoVbUZmQk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:97:a1:7b:71:7b:03:53:cd:33:b4:cc:8f:df:02:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f1bd9732e6cdd6e7494d79187fca855b5199909 Validity Not Before: Dec 14 02:01:43 2025 GMT Not After : Dec 15 02:01:43 2025 GMT Subject: CN=8761d0a19d62c2eb1a5ad7c20e727d43bb8588e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3a:a0:2e:99:26:59:a4:96:b5:72:5d:dc:68: bf:8e:fd:ad:2b:7e:87:f1:7f:3f:9e:72:2e:90:72: 13:75:93:39:1a:c5:3c:2e:6c:ba:80:a6:0b:88:de: bf:19:47:a4:8a:6f:3d:cb:83:f7:cf:a5:da:82:70: c0:d5:ee:b8:d4:fc:b9:83:60:51:f9:b4:15:ca:64: 2c:04:cd:e5:77:87:6d:b1:df:8b:46:7e:e1:6f:28: b2:e9:24:7a:69:50:91:49:6a:5f:5d:3b:b4:1c:d0: 66:35:d6:78:ff:3e:fe:a0:be:25:84:e5:0d:c2:cc: 3a:15:91:cb:2e:38:6f:f8:87:fc:dd:a3:4d:49:30: 74:84:2a:8c:e6:8a:19:c4:5a:21:8d:cd:cb:62:d4: f9:46:72:ce:7a:94:61:f4:e2:4b:30:be:9b:3e:2c: 29:59:35:4d:42:87:c9:e4:9a:29:3a:df:61:d4:98: 45:c0:01:22:fe:5b:c8:90:8d:07:5b:70:96:1c:11: 62:d1:61:05:68:1d:e2:77:cb:82:d6:7f:4f:62:a2: 6b:0d:1d:d5:f6:d4:79:51:7f:56:3d:2f:47:dc:d4: 67:6d:f5:7b:98:ac:cb:75:42:7e:24:ed:97:ce:e4: bd:d3:6d:a5:9a:41:bb:4d:45:f2:b1:82:6b:63:c0: 4c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:61:D0:A1:9D:62:C2:EB:1A:5A:D7:C2:0E:72:7D:43:BB:85:88:E6 X509v3 Authority Key Identifier: keyid:9F:1B:D9:73:2E:6C:DD:6E:74:94:D7:91:87:FC:A8:55:B5:19:99:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nxvZcy5s3W50lNeRh_yoVbUZmQk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:26:ed:98:33:05:1b:53:45:34:e4:bc:84:cc:b9:bd:25:c3: db:1f:cc:5b:52:56:f7:8c:90:ea:99:20:c9:c1:bc:b0:99:6c: 81:aa:a5:fd:bc:a3:8b:bb:d0:da:f6:ce:c3:3d:35:36:4d:0a: e4:cf:10:29:22:31:15:bf:aa:21:e6:a7:5c:09:a5:cc:c5:ce: 29:bc:4f:40:dd:61:a0:0e:02:6e:1e:e5:4d:9d:31:54:8d:a0: ed:03:6d:08:1e:72:0c:7c:cf:02:05:76:48:b1:33:c7:8c:3a: 5a:66:0e:f4:b1:fb:61:f4:83:2c:f8:7a:d9:79:1e:94:89:a8: 50:bd:fd:49:04:66:67:25:12:0c:2b:63:f5:e8:03:89:da:0a: d2:28:4f:55:75:78:a6:d9:2f:76:84:4c:c3:63:2a:0e:03:77: 95:f1:e8:49:40:bf:a1:8c:0b:21:a4:6f:87:24:cc:d0:f9:f4: be:be:16:b0:18:17:a2:5a:c2:e8:16:0f:d0:e6:3d:f3:21:72: 0e:8c:64:03:2a:a8:b1:b6:41:a8:7c:94:26:49:87:29:45:1a: de:f2:3d:0a:71:40:72:65:06:99:85:b9:88:c8:42:7c:86:34: 51:85:6e:70:90:b9:63:ee:cd:0f:42:ef:ea:bd:db:d6:b5:7a: bd:39:a6:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsal6F7cXsDU80ztMyP3wL2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmMWJkOTczMmU2Y2RkNmU3NDk0ZDc5MTg3ZmNhODU1YjUx OTk5MDkwHhcNMjUxMjE0MDIwMTQzWhcNMjUxMjE1MDIwMTQzWjAzMTEwLwYDVQQD Eyg4NzYxZDBhMTlkNjJjMmViMWE1YWQ3YzIwZTcyN2Q0M2JiODU4OGU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjqgLpkmWaSWtXJd3Gi/jv2tK36H 8X8/nnIukHITdZM5GsU8Lmy6gKYLiN6/GUekim89y4P3z6XagnDA1e641Py5g2BR +bQVymQsBM3ld4dtsd+LRn7hbyiy6SR6aVCRSWpfXTu0HNBmNdZ4/z7+oL4lhOUN wsw6FZHLLjhv+If83aNNSTB0hCqM5ooZxFohjc3LYtT5RnLOepRh9OJLML6bPiwp WTVNQofJ5JopOt9h1JhFwAEi/lvIkI0HW3CWHBFi0WEFaB3id8uC1n9PYqJrDR3V 9tR5UX9WPS9H3NRnbfV7mKzLdUJ+JO2XzuS9022lmkG7TUXysYJrY8BMdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIdh0KGdYsLrGlrXwg5yfUO7hYjmMB8GA1UdIwQY MBaAFJ8b2XMubN1udJTXkYf8qFW1GZkJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnh2WmN5NXMzVzUwbE5lUmhfeW9WYlVabVFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi8xNGVhZDktY2JiMS00NjM5LTgxYTct ZDhiODIwMmQ3Nzg2LzEvbnh2WmN5NXMzVzUwbE5lUmhfeW9WYlVabVFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi8xNGVhZDktY2JiMS00NjM5LTgxYTctZDhiODIwMmQ3Nzg2 LzEvbnh2WmN5NXMzVzUwbE5lUmhfeW9WYlVabVFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcCbtmDMF G1NFNOS8hMy5vSXD2x/MW1JW94yQ6pkgycG8sJlsgaql/byji7vQ2vbOwz01Nk0K 5M8QKSIxFb+qIeanXAmlzMXOKbxPQN1hoA4Cbh7lTZ0xVI2g7QNtCB5yDHzPAgV2 SLEzx4w6WmYO9LH7YfSDLPh62XkelImoUL39SQRmZyUSDCtj9egDidoK0ihPVXV4 ptkvdoRMw2MqDgN3lfHoSUC/oYwLIaRvhyTM0Pn0vr4WsBgXolrC6BYP0OY98yFy DoxkAyqosbZBqHyUJkmHKUUa3vI9CnFAcmUGmYW5iMhCfIY0UYVucJC5Y+7ND0Lv 6r3b1rV6vTmm/Q== -----END CERTIFICATE-----Generated at Sun Dec 14 08:26:39 2025 by rpki-client