This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft File: nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft (raw, json) Hash identifier: VbW54jrwVE0rrbgTsnC13HnGlpvTZXmcd6vUHaGo5dc= Subject key identifier: 41:B8:BD:29:7A:F5:89:78:6D:B2:6B:47:50:BC:36:8F:FE:D1:61:63 Authority key identifier: 9D:5E:CC:E8:C8:7C:4F:0A:75:BA:21:E5:C8:4F:62:41:21:E0:8E:32 Certificate issuer: /CN=9d5ecce8c87c4f0a75ba21e5c84f624121e08e32 Certificate serial: 019B24079EF7FE33E00A19B3C4E2C8E1021B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft Manifest number: 02A0 Signing time: Mon 15 Dec 2025 22:00:37 +0000 Manifest this update: Mon 15 Dec 2025 22:00:37 +0000 Manifest next update: Tue 16 Dec 2025 22:00:37 +0000 Files and hashes: 1: W1gtHYOxkSQKrOdwkNpP1ZoMoUY.roa (hash: 5S4JEcGJktduCewz9POQY0aRBOXQzpGOLodHYl3CjqI=) 2: nV7M6Mh8Twp1uiHlyE9iQSHgjjI.crl (hash: gzoRlxJd4/UVjxudSr9bJgzWBADpJfDyUkX9K74bTx4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft rsync://rpki.ripe.net/repository/DEFAULT/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 22:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:07:9e:f7:fe:33:e0:0a:19:b3:c4:e2:c8:e1:02:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d5ecce8c87c4f0a75ba21e5c84f624121e08e32 Validity Not Before: Dec 15 22:00:37 2025 GMT Not After : Dec 16 22:00:37 2025 GMT Subject: CN=41b8bd297af589786db26b4750bc368ffed16163 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:cf:f9:08:cf:04:f4:11:63:48:6e:42:cf:03: 0a:36:7b:c6:07:10:37:a9:f9:d8:b6:00:a5:0c:78: 4f:96:6a:ae:a1:46:ff:f8:59:a1:86:16:a2:b9:58: b2:db:2e:5f:11:10:21:95:4c:88:9c:0c:c2:87:d0: 93:6c:38:17:ba:d7:a8:90:f2:0b:1f:84:f8:9c:ab: b5:74:8c:3a:05:00:ae:bd:66:b9:d5:82:cd:8e:2d: 39:a3:cc:d4:c8:10:0e:1e:0b:0c:13:45:a7:8e:f5: e6:1a:2c:87:ef:ee:2e:53:ec:a6:56:de:cf:05:63: 18:19:33:53:4d:88:14:3f:7b:0d:23:cd:0f:00:24: b9:51:c9:24:9b:e6:8b:71:c0:13:c8:3f:d5:e5:74: 00:73:16:72:4a:62:b0:9e:bd:01:ec:ac:66:29:91: 4b:81:f9:0f:7b:d7:e0:24:9f:df:38:0d:37:8e:b4: 77:d2:95:0d:e7:4c:86:17:8f:5b:c4:aa:cb:3b:71: 82:6c:b9:cc:15:11:97:41:da:83:6a:5b:6f:a2:d9: 8c:d4:fa:49:18:37:3f:f1:a3:6e:43:0d:ff:24:e1: 1f:41:06:d4:b0:3a:35:a9:52:74:67:1d:86:6b:a9: bc:c3:01:9f:28:23:f1:b6:ee:22:11:20:69:42:4c: d3:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:B8:BD:29:7A:F5:89:78:6D:B2:6B:47:50:BC:36:8F:FE:D1:61:63 X509v3 Authority Key Identifier: keyid:9D:5E:CC:E8:C8:7C:4F:0A:75:BA:21:E5:C8:4F:62:41:21:E0:8E:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:73:fa:3e:7f:29:52:d8:cd:88:13:d6:a6:e2:5a:da:6e:95: b9:1c:3f:6d:cb:b9:80:96:48:96:ee:b7:4f:56:3e:18:f2:d6: 34:aa:3d:2c:19:14:bb:76:e1:0b:4c:9e:ac:a7:52:4a:08:26: fb:a2:13:31:ac:59:03:04:e8:a9:4f:f1:db:22:42:d9:06:18: 1a:e2:1e:e8:11:2b:ed:ca:56:3a:98:69:ab:b0:2f:0a:56:d7: ff:6b:26:12:55:cd:3a:83:96:a8:35:e3:fd:14:07:50:7e:ec: 66:ab:aa:ee:cc:9d:de:2a:02:ab:58:31:32:0b:0f:2f:76:31: 67:cf:c3:f8:fa:ac:75:ee:9e:cd:fe:3f:a2:66:28:40:b8:ae: a5:23:e8:1c:11:23:63:f9:0e:bc:89:75:cd:27:6d:eb:80:00: cc:3d:c5:86:c5:13:e5:67:c4:a2:4e:3e:6e:77:7f:6b:1b:7c: 18:a2:3b:d8:15:87:40:1f:bb:b8:0c:6f:46:83:b0:78:28:55: 8d:8f:68:40:1f:bb:00:b9:ab:6b:97:d4:46:09:bd:09:c6:81: 08:43:0b:8d:58:32:9a:63:eb:89:90:40:6b:66:d6:b5:ce:1e: 8f:51:12:35:b2:cd:42:b8:29:c4:c7:f5:3e:2b:11:85:23:a2: c8:cc:67:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskB573/jPgChmzxOLI4QIbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkNWVjY2U4Yzg3YzRmMGE3NWJhMjFlNWM4NGY2MjQxMjFl MDhlMzIwHhcNMjUxMjE1MjIwMDM3WhcNMjUxMjE2MjIwMDM3WjAzMTEwLwYDVQQD Eyg0MWI4YmQyOTdhZjU4OTc4NmRiMjZiNDc1MGJjMzY4ZmZlZDE2MTYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtc/5CM8E9BFjSG5CzwMKNnvGBxA3 qfnYtgClDHhPlmquoUb/+FmhhhaiuViy2y5fERAhlUyInAzCh9CTbDgXuteokPIL H4T4nKu1dIw6BQCuvWa51YLNji05o8zUyBAOHgsME0WnjvXmGiyH7+4uU+ymVt7P BWMYGTNTTYgUP3sNI80PACS5Uckkm+aLccATyD/V5XQAcxZySmKwnr0B7KxmKZFL gfkPe9fgJJ/fOA03jrR30pUN50yGF49bxKrLO3GCbLnMFRGXQdqDaltvotmM1PpJ GDc/8aNuQw3/JOEfQQbUsDo1qVJ0Zx2Ga6m8wwGfKCPxtu4iESBpQkzTkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEG4vSl69Yl4bbJrR1C8No/+0WFjMB8GA1UdIwQY MBaAFJ1ezOjIfE8Kdboh5chPYkEh4I4yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblY3TTZNaDhUd3AxdWlIbHlFOWlRU0hnampJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9iZWM3NTYtMWRmZS00Mzc0LTg2MDct OWQ4ZjBlZjVjNTAzLzEvblY3TTZNaDhUd3AxdWlIbHlFOWlRU0hnampJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS9iZWM3NTYtMWRmZS00Mzc0LTg2MDctOWQ4ZjBlZjVjNTAz LzEvblY3TTZNaDhUd3AxdWlIbHlFOWlRU0hnampJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ3P6Pn8p UtjNiBPWpuJa2m6VuRw/bcu5gJZIlu63T1Y+GPLWNKo9LBkUu3bhC0yerKdSSggm +6ITMaxZAwToqU/x2yJC2QYYGuIe6BEr7cpWOphpq7AvClbX/2smElXNOoOWqDXj /RQHUH7sZquq7syd3ioCq1gxMgsPL3YxZ8/D+Pqsde6ezf4/omYoQLiupSPoHBEj Y/kOvIl1zSdt64AAzD3FhsUT5WfEok4+bnd/axt8GKI72BWHQB+7uAxvRoOweChV jY9oQB+7ALmra5fURgm9CcaBCEMLjVgymmPriZBAa2bWtc4ej1ESNbLNQrgpxMf1 PisRhSOiyMxnbg== -----END CERTIFICATE-----Generated at Tue Dec 16 04:05:38 2025 by rpki-client