This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/nv2KDm5t1Wpu-CieSxhPDKAMM90.mft File: nv2KDm5t1Wpu-CieSxhPDKAMM90.mft (raw, json) Hash identifier: FlyP3Cr7ZHq3RIHW6nRyO2GDTM9MorUYKhf5fBMoc4Y= Subject key identifier: D5:72:5E:96:47:EB:27:4F:D6:A1:C9:08:8E:49:83:B4:DD:55:9F:BB Authority key identifier: 9E:FD:8A:0E:6E:6D:D5:6A:6E:F8:28:9E:4B:18:4F:0C:A0:0C:33:DD Certificate issuer: /CN=9efd8a0e6e6dd56a6ef8289e4b184f0ca00c33dd Certificate serial: 019B3532DCE32274351C758DB10FC5D86555 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nv2KDm5t1Wpu-CieSxhPDKAMM90.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/nv2KDm5t1Wpu-CieSxhPDKAMM90.mft Manifest number: 1783 Signing time: Fri 19 Dec 2025 06:01:24 +0000 Manifest this update: Fri 19 Dec 2025 06:01:24 +0000 Manifest next update: Sat 20 Dec 2025 06:01:24 +0000 Files and hashes: 1: QNOJOIm1SKvhgHP8ibivnBfVSQA.roa (hash: pi8uHE5UurLC5GTyPY+S33YCsYwTr9zqOvpf//OyfMo=) 2: nv2KDm5t1Wpu-CieSxhPDKAMM90.crl (hash: si5wQifQ0JMp1MS6HPAqAIDCE2+EgRhqNUijfZKMQXo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/nv2KDm5t1Wpu-CieSxhPDKAMM90.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/nv2KDm5t1Wpu-CieSxhPDKAMM90.mft rsync://rpki.ripe.net/repository/DEFAULT/nv2KDm5t1Wpu-CieSxhPDKAMM90.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:32:dc:e3:22:74:35:1c:75:8d:b1:0f:c5:d8:65:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9efd8a0e6e6dd56a6ef8289e4b184f0ca00c33dd Validity Not Before: Dec 19 06:01:24 2025 GMT Not After : Dec 20 06:01:24 2025 GMT Subject: CN=d5725e9647eb274fd6a1c9088e4983b4dd559fbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b6:17:32:44:f0:a7:71:7b:73:20:dd:59:af: 6b:7a:e5:fd:69:1f:ba:37:fe:68:9b:4f:2b:f8:fd: 0f:0e:83:f0:84:3a:78:a6:cb:29:4b:69:94:0f:3a: 5b:02:17:8f:65:e8:51:40:85:59:6e:59:ec:26:79: 4f:b8:ce:55:ea:65:ff:08:a9:9f:0d:ab:44:0f:e1: c5:01:91:91:0c:7d:d8:ea:35:14:32:1e:b6:bf:a5: 19:77:15:90:83:e1:1e:87:f9:96:8b:d5:b4:6e:a4: 69:d8:a9:8b:a6:88:b0:19:06:1c:70:75:da:1e:d8: 18:f4:2f:99:06:b8:f6:3f:b2:87:18:4e:a6:b2:f2: f1:8f:95:0b:03:f5:ff:60:fa:df:b8:b0:c1:9d:dd: 25:7c:d3:33:f0:b1:87:e5:e1:fa:65:37:84:da:ec: 8f:e7:49:0c:19:a4:5a:e7:83:cc:1f:cb:4f:9b:39: 3b:bd:44:f8:cd:46:17:2e:c6:97:a4:b2:88:6e:f5: 50:30:46:9f:c8:1c:e4:e2:6c:26:0c:71:39:8e:ce: b4:d8:58:f3:e3:79:66:9b:3b:ba:10:aa:69:cd:06: f8:98:c7:e2:20:4a:64:ae:de:c1:51:86:83:a3:67: e1:76:c0:54:1b:ff:49:15:b4:43:b6:e9:37:a0:f3: f4:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:72:5E:96:47:EB:27:4F:D6:A1:C9:08:8E:49:83:B4:DD:55:9F:BB X509v3 Authority Key Identifier: keyid:9E:FD:8A:0E:6E:6D:D5:6A:6E:F8:28:9E:4B:18:4F:0C:A0:0C:33:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nv2KDm5t1Wpu-CieSxhPDKAMM90.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/nv2KDm5t1Wpu-CieSxhPDKAMM90.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/nv2KDm5t1Wpu-CieSxhPDKAMM90.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:e1:af:40:22:68:09:c3:34:09:71:15:b4:05:6b:83:d4:86: 38:8d:24:cc:da:4d:3d:0d:4b:85:ca:d5:c5:78:c4:92:78:68: f6:6d:b2:d4:9e:0b:f7:2c:5c:99:ed:3b:fe:b9:77:da:09:fc: f1:0e:11:b6:a3:95:85:4a:f6:92:f5:26:cb:c8:9d:5c:6f:bc: b1:2c:38:2a:7c:db:2c:ea:59:9b:58:c7:4f:6f:18:c5:7b:4c: 38:77:60:fb:51:fb:36:62:ea:0b:91:cd:45:79:37:6d:83:56: 44:7a:76:0d:68:5e:60:85:c7:8e:91:08:58:4d:42:a0:da:38: 83:af:c2:e5:93:30:63:6e:f1:c9:ad:1b:03:68:c4:02:25:e0: 9a:11:2d:f7:d9:b0:e5:30:11:25:9c:f2:ba:d6:26:1f:c3:b2: 37:02:d4:55:aa:e5:ea:91:8a:8a:a0:d2:ac:85:73:ab:8a:54: 39:cc:a6:15:69:31:59:8c:eb:e8:07:cb:7c:11:dc:37:fa:9c: f2:3e:62:5f:7a:5b:85:25:f3:a7:3a:e5:36:61:97:48:80:ad: 80:67:00:b9:53:66:c8:4c:97:9a:39:a9:8b:6c:c2:70:d7:ef: 09:4d:fc:d6:8b:8a:8a:c1:ba:eb:3c:fa:4a:e1:6f:60:8d:1d: b3:b1:01:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1MtzjInQ1HHWNsQ/F2GVVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllZmQ4YTBlNmU2ZGQ1NmE2ZWY4Mjg5ZTRiMTg0ZjBjYTAw YzMzZGQwHhcNMjUxMjE5MDYwMTI0WhcNMjUxMjIwMDYwMTI0WjAzMTEwLwYDVQQD EyhkNTcyNWU5NjQ3ZWIyNzRmZDZhMWM5MDg4ZTQ5ODNiNGRkNTU5ZmJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLYXMkTwp3F7cyDdWa9reuX9aR+6 N/5om08r+P0PDoPwhDp4psspS2mUDzpbAhePZehRQIVZblnsJnlPuM5V6mX/CKmf DatED+HFAZGRDH3Y6jUUMh62v6UZdxWQg+Eeh/mWi9W0bqRp2KmLpoiwGQYccHXa HtgY9C+ZBrj2P7KHGE6msvLxj5ULA/X/YPrfuLDBnd0lfNMz8LGH5eH6ZTeE2uyP 50kMGaRa54PMH8tPmzk7vUT4zUYXLsaXpLKIbvVQMEafyBzk4mwmDHE5js602Fjz 43lmmzu6EKppzQb4mMfiIEpkrt7BUYaDo2fhdsBUG/9JFbRDtuk3oPP0fQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNVyXpZH6ydP1qHJCI5Jg7TdVZ+7MB8GA1UdIwQY MBaAFJ79ig5ubdVqbvgonksYTwygDDPdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnYyS0RtNXQxV3B1LUNpZVN4aFBES0FNTTkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9kNTNkN2MtYTgzMi00N2IzLTlmOTQt NTljMjMwNTQ0NDJkLzEvbnYyS0RtNXQxV3B1LUNpZVN4aFBES0FNTTkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9kNTNkN2MtYTgzMi00N2IzLTlmOTQtNTljMjMwNTQ0NDJk LzEvbnYyS0RtNXQxV3B1LUNpZVN4aFBES0FNTTkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGeGvQCJo CcM0CXEVtAVrg9SGOI0kzNpNPQ1LhcrVxXjEknho9m2y1J4L9yxcme07/rl32gn8 8Q4RtqOVhUr2kvUmy8idXG+8sSw4KnzbLOpZm1jHT28YxXtMOHdg+1H7NmLqC5HN RXk3bYNWRHp2DWheYIXHjpEIWE1CoNo4g6/C5ZMwY27xya0bA2jEAiXgmhEt99mw 5TARJZzyutYmH8OyNwLUVarl6pGKiqDSrIVzq4pUOcymFWkxWYzr6AfLfBHcN/qc 8j5iX3pbhSXzpzrlNmGXSICtgGcAuVNmyEyXmjmpi2zCcNfvCU381ouKisG66zz6 SuFvYI0ds7EBtw== -----END CERTIFICATE-----Generated at Fri Dec 19 14:12:49 2025 by rpki-client