This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft File: nSVxkIIfcFio6v1IGWl0NoutjxQ.mft (raw, json) Hash identifier: hTqC52643k7W1isc574Oueu9Qkk4r0s/QppZzcC0gAU= Subject key identifier: 68:0B:0B:5E:E5:4E:98:DE:42:AA:9D:FC:5D:20:B0:45:9A:77:9A:5F Authority key identifier: 9D:25:71:90:82:1F:70:58:A8:EA:FD:48:19:69:74:36:8B:AD:8F:14 Certificate issuer: /CN=9d257190821f7058a8eafd48196974368bad8f14 Certificate serial: 019B4BF30EC27C926E518D5717C6C410CC4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSVxkIIfcFio6v1IGWl0NoutjxQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft Manifest number: 1792 Signing time: Tue 23 Dec 2025 16:02:58 +0000 Manifest this update: Tue 23 Dec 2025 16:02:58 +0000 Manifest next update: Wed 24 Dec 2025 16:02:58 +0000 Files and hashes: 1: S6yD0xSsAdYMuFY-SqJP0As2TGI.roa (hash: NWiZKpb2JP7oKryMsUVnNHlDjQunxGKrj2ir9mx8k8E=) 2: lkhGtmHtTBEdKgsUVjONXoB0iQc.roa (hash: 9yZ07+0QCixTukFaKD5cKhr7FU+NHBM/0FUydctI6gg=) 3: nSVxkIIfcFio6v1IGWl0NoutjxQ.crl (hash: ozwy5JtSnQJYufNlSh28nCJxBqTvVM2Fp6H33QCwsQw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft rsync://rpki.ripe.net/repository/DEFAULT/nSVxkIIfcFio6v1IGWl0NoutjxQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:f3:0e:c2:7c:92:6e:51:8d:57:17:c6:c4:10:cc:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d257190821f7058a8eafd48196974368bad8f14 Validity Not Before: Dec 23 16:02:58 2025 GMT Not After : Dec 24 16:02:58 2025 GMT Subject: CN=680b0b5ee54e98de42aa9dfc5d20b0459a779a5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d6:ce:81:ba:8b:8f:df:89:96:19:2d:53:54: a3:9d:88:4e:29:c7:9c:67:ac:cd:a8:f2:06:29:8b: da:47:f8:67:83:7f:1a:a0:28:36:e1:fa:a6:a6:f8: 23:6f:39:5d:05:fd:6f:3a:74:b3:12:96:e5:d0:4b: ef:74:af:eb:c7:c1:aa:e3:08:5e:d7:63:28:f6:a2: 37:9e:ad:d1:a0:91:13:d9:6b:6a:c2:0e:58:4a:4e: 14:4f:5c:95:63:04:34:d8:10:94:7b:2e:1f:78:90: 65:10:81:2b:1f:a3:7f:21:a0:0a:48:6c:c4:a8:b9: 62:45:e6:91:a1:44:08:3f:22:fe:6b:27:84:ba:e6: f0:7f:28:3a:64:ac:13:3f:aa:b3:d9:63:4b:ca:71: 60:0f:16:1a:7d:66:f3:bb:eb:ca:c8:3a:6f:83:5c: 02:39:2a:4e:cd:0e:e4:51:12:62:7e:fb:81:80:a0: cf:d2:5c:5d:6e:d4:ad:d2:b5:cb:8a:7d:39:69:73: 92:fa:2e:1a:be:a6:07:70:a3:da:8c:41:04:5a:8f: 6e:6e:4c:87:09:5d:92:b8:10:a2:b2:d9:3b:7f:82: 53:9d:7b:b5:da:1d:fd:4e:e4:ef:15:d6:1c:f1:57: 33:b9:b9:02:41:6c:a4:ba:a1:bc:88:32:cb:2d:f2: d4:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:0B:0B:5E:E5:4E:98:DE:42:AA:9D:FC:5D:20:B0:45:9A:77:9A:5F X509v3 Authority Key Identifier: keyid:9D:25:71:90:82:1F:70:58:A8:EA:FD:48:19:69:74:36:8B:AD:8F:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSVxkIIfcFio6v1IGWl0NoutjxQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:cd:de:ba:3f:74:8c:db:a7:d9:7c:cc:f0:51:c3:d3:2d:21: c1:27:86:3f:4c:d1:85:13:a9:45:91:9b:10:08:1f:8a:d2:a3: 6e:60:54:e8:ad:e7:55:0e:20:83:62:a4:fc:bc:ff:76:83:5c: 16:6b:80:32:a8:2d:f9:86:e9:2f:97:90:af:1d:7a:b6:85:fe: ec:57:7f:7a:71:93:37:84:18:68:a8:f5:09:e6:4d:a8:02:47: 64:d2:cf:ec:a4:2e:e6:3b:c9:b2:f4:3d:81:13:99:95:15:a8: 64:7c:35:07:51:19:a8:9d:14:0b:04:8f:2d:e5:64:06:39:38: 15:b4:a4:fe:79:06:1a:1c:18:87:fd:99:12:06:01:b7:60:48: 7c:e1:b9:f0:b9:0a:b4:23:e3:30:24:4b:56:1b:a3:59:52:6b: 85:b6:3e:68:ee:cd:52:b0:83:bb:f6:9b:3e:e4:a0:89:5c:5b: 0d:64:92:27:22:81:62:3c:bd:00:31:ca:d9:7c:3c:03:bc:d2: 74:cc:21:e1:38:42:76:1c:2a:24:68:d5:78:be:c4:70:61:3a: 3c:92:1b:68:d1:9d:96:cc:a1:90:f5:47:03:3a:e1:0f:33:93: 3c:ad:2b:8c:2c:28:ae:10:8d:75:7b:db:1d:46:23:51:66:32: e2:af:c2:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtL8w7CfJJuUY1XF8bEEMxOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMjU3MTkwODIxZjcwNThhOGVhZmQ0ODE5Njk3NDM2OGJh ZDhmMTQwHhcNMjUxMjIzMTYwMjU4WhcNMjUxMjI0MTYwMjU4WjAzMTEwLwYDVQQD Eyg2ODBiMGI1ZWU1NGU5OGRlNDJhYTlkZmM1ZDIwYjA0NTlhNzc5YTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtbOgbqLj9+JlhktU1SjnYhOKcec Z6zNqPIGKYvaR/hng38aoCg24fqmpvgjbzldBf1vOnSzEpbl0EvvdK/rx8Gq4whe 12Mo9qI3nq3RoJET2Wtqwg5YSk4UT1yVYwQ02BCUey4feJBlEIErH6N/IaAKSGzE qLliReaRoUQIPyL+ayeEuubwfyg6ZKwTP6qz2WNLynFgDxYafWbzu+vKyDpvg1wC OSpOzQ7kURJifvuBgKDP0lxdbtSt0rXLin05aXOS+i4avqYHcKPajEEEWo9ubkyH CV2SuBCistk7f4JTnXu12h39TuTvFdYc8VczubkCQWykuqG8iDLLLfLUXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGgLC17lTpjeQqqd/F0gsEWad5pfMB8GA1UdIwQY MBaAFJ0lcZCCH3BYqOr9SBlpdDaLrY8UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblNWeGtJSWZjRmlvNnYxSUdXbDBOb3V0anhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS82NmY4MjktNTEyOS00ODQyLWE1YzAt Mzc0MGIwOTQxZGI4LzEvblNWeGtJSWZjRmlvNnYxSUdXbDBOb3V0anhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS82NmY4MjktNTEyOS00ODQyLWE1YzAtMzc0MGIwOTQxZGI4 LzEvblNWeGtJSWZjRmlvNnYxSUdXbDBOb3V0anhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAes3euj90 jNun2XzM8FHD0y0hwSeGP0zRhROpRZGbEAgfitKjbmBU6K3nVQ4gg2Kk/Lz/doNc FmuAMqgt+YbpL5eQrx16toX+7Fd/enGTN4QYaKj1CeZNqAJHZNLP7KQu5jvJsvQ9 gROZlRWoZHw1B1EZqJ0UCwSPLeVkBjk4FbSk/nkGGhwYh/2ZEgYBt2BIfOG58LkK tCPjMCRLVhujWVJrhbY+aO7NUrCDu/abPuSgiVxbDWSSJyKBYjy9ADHK2Xw8A7zS dMwh4ThCdhwqJGjVeL7EcGE6PJIbaNGdlsyhkPVHAzrhDzOTPK0rjCworhCNdXvb HUYjUWYy4q/CPw== -----END CERTIFICATE-----Generated at Tue Dec 23 22:26:07 2025 by rpki-client