This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.mft File: nvJ_rhUw6nFnBwzxLEhoEdjgusU.mft (raw, json) Hash identifier: zhHNseSV+V0UQ4ajsUIRwPdxRLzZHjWUt29C115z8u8= Subject key identifier: AB:5A:27:EB:1E:7F:3A:C7:11:F2:92:08:9D:52:2E:B0:66:4A:38:45 Authority key identifier: 9E:F2:7F:AE:15:30:EA:71:67:07:0C:F1:2C:48:68:11:D8:E0:BA:C5 Certificate issuer: /CN=9ef27fae1530ea7167070cf12c486811d8e0bac5 Certificate serial: 019B4882A5F165E4218C1D92DD310E5A1AE0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nvJ_rhUw6nFnBwzxLEhoEdjgusU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.mft Manifest number: 082F Signing time: Tue 23 Dec 2025 00:01:20 +0000 Manifest this update: Tue 23 Dec 2025 00:01:20 +0000 Manifest next update: Wed 24 Dec 2025 00:01:20 +0000 Files and hashes: 1: 3bmAz9vtv2JfaPatPhAR81BLdD4.roa (hash: pscVtMzNszIXtiYFoQgUwJA4nkNZDSRzSpGrx8TMuU8=) 2: nvJ_rhUw6nFnBwzxLEhoEdjgusU.crl (hash: Ml2eggj4EKUhcDQUY14PNNuxgjkjNIz5ue3fyP53oxU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.crl rsync://rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.mft rsync://rpki.ripe.net/repository/DEFAULT/nvJ_rhUw6nFnBwzxLEhoEdjgusU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:82:a5:f1:65:e4:21:8c:1d:92:dd:31:0e:5a:1a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ef27fae1530ea7167070cf12c486811d8e0bac5 Validity Not Before: Dec 23 00:01:20 2025 GMT Not After : Dec 24 00:01:20 2025 GMT Subject: CN=ab5a27eb1e7f3ac711f292089d522eb0664a3845 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f3:12:b5:b0:1f:3c:f1:29:42:3f:1e:60:39: e8:4d:b4:06:a8:f9:43:84:c3:8c:98:00:8a:f9:39: 52:23:45:ce:34:8b:b8:a6:ce:72:5a:19:e8:69:12: f4:49:c4:16:09:16:ab:37:b2:73:83:80:a6:f3:95: 05:fc:51:35:f5:27:b9:8c:c9:d7:9b:a8:1f:76:df: 69:02:e3:76:41:f6:20:4f:28:7c:e2:d4:a1:8f:26: 00:5e:bc:2e:29:94:17:69:5d:de:2b:bb:ec:22:fc: 00:5c:b3:29:79:c1:25:4f:45:4e:b4:3d:24:e7:87: 75:62:ff:6e:46:36:8e:cd:eb:b9:d2:1f:c6:6c:1c: ad:11:c7:7e:11:bc:0f:3b:48:40:9a:1b:ba:6a:d8: 9f:18:44:fc:c0:8f:0f:0e:cb:33:93:9f:bf:af:6b: 8e:55:d5:97:2b:16:fb:23:5c:06:79:96:a9:d1:3a: cf:65:39:b3:6a:de:fd:10:8f:69:e0:4c:ba:16:48: 1d:30:6d:0b:0e:4b:2a:83:e5:2e:8d:10:ef:99:bb: b9:d7:e9:39:ff:d4:51:b0:af:a3:82:f5:fc:04:bb: 76:84:6d:bc:aa:af:9c:b2:73:0a:15:05:09:53:aa: bc:1f:9e:f2:10:b9:be:83:2b:9b:95:38:3a:89:c2: f9:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:5A:27:EB:1E:7F:3A:C7:11:F2:92:08:9D:52:2E:B0:66:4A:38:45 X509v3 Authority Key Identifier: keyid:9E:F2:7F:AE:15:30:EA:71:67:07:0C:F1:2C:48:68:11:D8:E0:BA:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nvJ_rhUw6nFnBwzxLEhoEdjgusU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:b4:09:00:a2:23:d4:18:bf:2d:a5:7c:69:46:d1:90:23:d3: 78:c0:71:da:fc:38:42:41:17:1c:b2:4a:63:ef:f5:4c:08:21: 6a:98:bb:29:99:5e:7d:cf:8b:f6:f3:12:e3:00:ef:13:c0:e0: 36:fd:b0:72:80:26:7a:5b:35:2e:b0:87:ff:cb:42:a5:72:52: 75:23:aa:09:d4:ef:44:b4:ae:d8:2d:63:fe:13:2e:64:cf:1e: 81:3b:2d:b1:ed:85:e1:7b:d0:6e:8f:13:8c:6f:23:02:df:66: 64:ea:3a:d0:1a:c8:ec:8b:26:27:75:54:88:c6:38:67:8e:a2: 30:04:7b:00:91:d2:fa:45:ce:ad:c9:36:13:86:5b:c3:a5:9a: 31:16:d6:d6:d4:03:00:c9:5a:aa:d5:07:e0:7f:63:d7:2b:05: 7c:59:2c:a0:bd:19:b1:7f:35:aa:3a:f0:3b:db:5d:5e:48:64: ef:3f:8a:a7:74:4a:7a:27:8e:1d:fe:2f:0c:a3:49:a5:f0:1f: 0a:9b:bd:94:f2:fd:5c:d8:f9:00:d5:53:8c:88:ae:75:9c:ea: fd:0f:20:22:03:a5:5c:e2:c4:80:ef:1f:5f:f6:9c:e6:f8:90: dc:e7:54:68:f3:ea:48:d6:11:c9:c5:eb:f3:e5:d6:49:4e:24: b3:51:19:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIgqXxZeQhjB2S3TEOWhrgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllZjI3ZmFlMTUzMGVhNzE2NzA3MGNmMTJjNDg2ODExZDhl MGJhYzUwHhcNMjUxMjIzMDAwMTIwWhcNMjUxMjI0MDAwMTIwWjAzMTEwLwYDVQQD EyhhYjVhMjdlYjFlN2YzYWM3MTFmMjkyMDg5ZDUyMmViMDY2NGEzODQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfMStbAfPPEpQj8eYDnoTbQGqPlD hMOMmACK+TlSI0XONIu4ps5yWhnoaRL0ScQWCRarN7Jzg4Cm85UF/FE19Se5jMnX m6gfdt9pAuN2QfYgTyh84tShjyYAXrwuKZQXaV3eK7vsIvwAXLMpecElT0VOtD0k 54d1Yv9uRjaOzeu50h/GbBytEcd+EbwPO0hAmhu6atifGET8wI8PDsszk5+/r2uO VdWXKxb7I1wGeZap0TrPZTmzat79EI9p4Ey6FkgdMG0LDksqg+UujRDvmbu51+k5 /9RRsK+jgvX8BLt2hG28qq+csnMKFQUJU6q8H57yELm+gyublTg6icL5dQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKtaJ+sefzrHEfKSCJ1SLrBmSjhFMB8GA1UdIwQY MBaAFJ7yf64VMOpxZwcM8SxIaBHY4LrFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnZKX3JoVXc2bkZuQnd6eExFaG9FZGpndXNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC81MjllODQtZmVhMS00NDI5LTgzYjIt ZGY4MjNlNGRiMWVhLzEvbnZKX3JoVXc2bkZuQnd6eExFaG9FZGpndXNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC81MjllODQtZmVhMS00NDI5LTgzYjItZGY4MjNlNGRiMWVh LzEvbnZKX3JoVXc2bkZuQnd6eExFaG9FZGpndXNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk7QJAKIj 1Bi/LaV8aUbRkCPTeMBx2vw4QkEXHLJKY+/1TAghapi7KZlefc+L9vMS4wDvE8Dg Nv2wcoAmels1LrCH/8tCpXJSdSOqCdTvRLSu2C1j/hMuZM8egTstse2F4XvQbo8T jG8jAt9mZOo60BrI7IsmJ3VUiMY4Z46iMAR7AJHS+kXOrck2E4Zbw6WaMRbW1tQD AMlaqtUH4H9j1ysFfFksoL0ZsX81qjrwO9tdXkhk7z+Kp3RKeieOHf4vDKNJpfAf Cpu9lPL9XNj5ANVTjIiudZzq/Q8gIgOlXOLEgO8fX/ac5viQ3OdUaPPqSNYRycXr 8+XWSU4ks1EZ6A== -----END CERTIFICATE-----Generated at Tue Dec 23 03:15:53 2025 by rpki-client