This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.mft File: Nr1KOC2uK-XLmLNeWgSNA7TMvis.mft (raw, json) Hash identifier: v2mZUUG6O33vj6pPvRm57RFGBqhZLtdpvgqiBP95Pp0= Subject key identifier: 6B:ED:A7:2D:8B:8E:8F:5C:80:D1:3A:F5:B7:BE:BC:56:D2:E7:E6:39 Authority key identifier: 36:BD:4A:38:2D:AE:2B:E5:CB:98:B3:5E:5A:04:8D:03:B4:CC:BE:2B Certificate issuer: /CN=36bd4a382dae2be5cb98b35e5a048d03b4ccbe2b Certificate serial: 019B1BE0A270AAFCAE1C7AA4B8AD24E9F2B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nr1KOC2uK-XLmLNeWgSNA7TMvis.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.mft Manifest number: 0AC2 Signing time: Sun 14 Dec 2025 08:01:04 +0000 Manifest this update: Sun 14 Dec 2025 08:01:04 +0000 Manifest next update: Mon 15 Dec 2025 08:01:04 +0000 Files and hashes: 1: 4wDopbEXjk43Rw4mbcMJ6Q0c3jA.roa (hash: VBD+7i2pGd2GcSGT6qMiuwjn3HP93susB4QpbZwY04c=) 2: C-H7cUZDR8Fn5bAwbFaXEXvgd-E.roa (hash: HsvEFF3yXL6NktNRceT9btK/0vgIKnScyehQHmjIyPs=) 3: Nr1KOC2uK-XLmLNeWgSNA7TMvis.crl (hash: 5Z/pP4f6Q8nJXQIA9vqzrV97GLEY/DLudtRGdQDQeXU=) 4: OsSemMFuJIzlguBNFL5i99h59ac.roa (hash: wej6G9fzYwe+kpr/KR/AvxkzN1danDVs2QQt2gCzdwo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.crl rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.mft rsync://rpki.ripe.net/repository/DEFAULT/Nr1KOC2uK-XLmLNeWgSNA7TMvis.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:e0:a2:70:aa:fc:ae:1c:7a:a4:b8:ad:24:e9:f2:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36bd4a382dae2be5cb98b35e5a048d03b4ccbe2b Validity Not Before: Dec 14 08:01:04 2025 GMT Not After : Dec 15 08:01:04 2025 GMT Subject: CN=6beda72d8b8e8f5c80d13af5b7bebc56d2e7e639 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:1c:36:4e:17:50:5a:e9:9b:a8:27:5b:a2:f1: 97:bb:e1:e0:83:f2:5e:83:31:4f:e6:9a:b0:26:6c: f9:3c:0e:5f:ed:0e:14:a2:e5:b2:e5:74:1c:b2:82: 9c:c2:61:33:a7:c0:4d:75:2f:61:19:e7:59:b2:f6: 5b:75:2c:71:c8:17:18:65:42:17:78:43:32:ec:05: 63:da:bd:85:a0:e2:79:00:9c:fc:b8:ae:56:0a:11: 46:47:f8:7a:fd:3a:d6:61:c3:df:a6:60:2a:df:77: 75:66:98:67:b4:14:d2:b3:27:74:ce:c2:87:42:12: f5:73:34:11:ff:df:6f:90:82:36:2f:d9:1b:e7:c4: 25:b2:bc:7d:60:7b:8a:a8:72:41:0f:34:e9:cb:d5: 5e:f2:6d:f0:0a:f7:71:80:a4:6e:20:31:21:88:5b: bb:fc:d6:2e:25:64:a4:2f:1c:3a:06:a0:7f:91:bd: 0b:e0:e8:81:aa:26:60:83:af:be:8f:0e:58:45:46: 74:da:3f:92:39:27:fa:d2:e9:ce:df:28:80:ad:82: f6:a2:15:9f:cd:52:fe:0b:a8:9f:da:2b:5f:f7:2b: 9c:8f:05:0e:f3:b6:5b:72:64:5f:ac:b5:9e:f9:69: c2:e6:55:95:e0:a8:af:ba:a3:f6:f4:d7:33:97:9f: 8c:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:ED:A7:2D:8B:8E:8F:5C:80:D1:3A:F5:B7:BE:BC:56:D2:E7:E6:39 X509v3 Authority Key Identifier: keyid:36:BD:4A:38:2D:AE:2B:E5:CB:98:B3:5E:5A:04:8D:03:B4:CC:BE:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nr1KOC2uK-XLmLNeWgSNA7TMvis.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:1d:c4:ae:00:6f:50:33:1e:c1:03:23:81:67:0e:fa:6a:0c: b3:7e:b1:b5:30:34:f5:71:e9:35:59:be:9e:52:ca:ab:79:be: 8e:84:94:43:ce:ff:cd:fa:60:53:15:2c:7f:ef:80:5f:ce:f7: e1:65:9d:ed:a6:9d:da:3e:99:1e:0c:ab:63:e3:a3:68:47:e5: 38:94:02:5f:f2:53:5d:57:7e:1e:73:48:51:fb:44:16:3f:2a: 9b:a5:39:6b:1c:3e:83:ad:e3:f4:71:3c:bd:db:0d:54:da:03: 61:3f:ce:10:8e:88:63:f2:61:1e:71:be:66:fc:13:3f:b3:33: b3:c1:9d:73:b3:82:16:a8:b2:81:50:c2:94:b3:12:3c:03:ef: 95:82:e7:ea:f5:bd:36:4b:1a:1c:71:17:2b:75:77:6e:1a:c2: e6:da:50:aa:21:4c:1a:8a:8f:d9:e5:cc:4b:ef:3f:eb:cc:e5: 19:13:17:b8:94:5d:75:33:cb:1b:5d:95:46:b4:48:c8:af:48: 89:19:80:9c:f8:84:0f:32:eb:e3:83:9a:42:57:cc:f9:b0:14: be:72:b0:0b:93:5d:a3:31:97:5a:0b:99:aa:a0:0f:2d:ab:18: ca:81:21:75:72:e8:c9:f7:3d:79:65:60:9f:72:83:d0:07:40: 07:c0:fe:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsb4KJwqvyuHHqkuK0k6fK4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YmQ0YTM4MmRhZTJiZTVjYjk4YjM1ZTVhMDQ4ZDAzYjRj Y2JlMmIwHhcNMjUxMjE0MDgwMTA0WhcNMjUxMjE1MDgwMTA0WjAzMTEwLwYDVQQD Eyg2YmVkYTcyZDhiOGU4ZjVjODBkMTNhZjViN2JlYmM1NmQyZTdlNjM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxw2ThdQWumbqCdbovGXu+Hgg/Je gzFP5pqwJmz5PA5f7Q4UouWy5XQcsoKcwmEzp8BNdS9hGedZsvZbdSxxyBcYZUIX eEMy7AVj2r2FoOJ5AJz8uK5WChFGR/h6/TrWYcPfpmAq33d1ZphntBTSsyd0zsKH QhL1czQR/99vkII2L9kb58Qlsrx9YHuKqHJBDzTpy9Ve8m3wCvdxgKRuIDEhiFu7 /NYuJWSkLxw6BqB/kb0L4OiBqiZgg6++jw5YRUZ02j+SOSf60unO3yiArYL2ohWf zVL+C6if2itf9yucjwUO87ZbcmRfrLWe+WnC5lWV4KivuqP29Nczl5+MgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGvtpy2Ljo9cgNE69be+vFbS5+Y5MB8GA1UdIwQY MBaAFDa9Sjgtrivly5izXloEjQO0zL4rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnIxS09DMnVLLVhMbUxOZVdnU05BN1RNdmlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9lNzRmNWYtNzVjNS00YTc1LTk4Yjkt OWZlY2JkMjVkNDM0LzEvTnIxS09DMnVLLVhMbUxOZVdnU05BN1RNdmlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9lNzRmNWYtNzVjNS00YTc1LTk4YjktOWZlY2JkMjVkNDM0 LzEvTnIxS09DMnVLLVhMbUxOZVdnU05BN1RNdmlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIx3ErgBv UDMewQMjgWcO+moMs36xtTA09XHpNVm+nlLKq3m+joSUQ87/zfpgUxUsf++AX873 4WWd7aad2j6ZHgyrY+OjaEflOJQCX/JTXVd+HnNIUftEFj8qm6U5axw+g63j9HE8 vdsNVNoDYT/OEI6IY/JhHnG+ZvwTP7Mzs8Gdc7OCFqiygVDClLMSPAPvlYLn6vW9 NksaHHEXK3V3bhrC5tpQqiFMGoqP2eXMS+8/68zlGRMXuJRddTPLG12VRrRIyK9I iRmAnPiEDzLr44OaQlfM+bAUvnKwC5NdozGXWguZqqAPLasYyoEhdXLoyfc9eWVg n3KD0AdAB8D+HQ== -----END CERTIFICATE-----Generated at Sun Dec 14 09:32:58 2025 by rpki-client