This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.mft File: NrVfs00p-WJUUTKgJbUmRP3_v28.mft (raw, json) Hash identifier: 5QkCFjlV+97VR28brfZb0ztAoniDaHElCajUkOsObz0= Subject key identifier: 35:3F:02:A7:82:04:F7:4F:8E:FA:DB:0C:3E:74:F7:2E:E9:63:1E:A7 Authority key identifier: 36:B5:5F:B3:4D:29:F9:62:54:51:32:A0:25:B5:26:44:FD:FF:BF:6F Certificate issuer: /CN=36b55fb34d29f962545132a025b52644fdffbf6f Certificate serial: 019B3532FB272FAE8DB1B9971F4DB33005ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NrVfs00p-WJUUTKgJbUmRP3_v28.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.mft Manifest number: 1361 Signing time: Fri 19 Dec 2025 06:01:32 +0000 Manifest this update: Fri 19 Dec 2025 06:01:32 +0000 Manifest next update: Sat 20 Dec 2025 06:01:32 +0000 Files and hashes: 1: 7dJIur2rO8jTQ_NHZt4L26PKtBw.roa (hash: fR/fcQi32Cz8cbo8M3f8TE+0bMDxdxf78ySV2CU/bwY=) 2: EzVC6hFH0RtKA1lARrwdwMJ07Q0.roa (hash: 2S3sYcvaMN06mor0RfdxJiX/gftEZ6TMLtUoAQi1mDE=) 3: NrVfs00p-WJUUTKgJbUmRP3_v28.crl (hash: UI+1bL7+Kh/wc+/qACnMSwFIz7nhseBXsmH25FeVg3M=) 4: Wqg9hZ9wuWYWaqC8TF_Eeg_AEfc.roa (hash: 0aRSdpBzh4xSW9RCKPtMxwA4FTF50Xso2kHVHvgf+yc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.mft rsync://rpki.ripe.net/repository/DEFAULT/NrVfs00p-WJUUTKgJbUmRP3_v28.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 01:23:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:32:fb:27:2f:ae:8d:b1:b9:97:1f:4d:b3:30:05:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36b55fb34d29f962545132a025b52644fdffbf6f Validity Not Before: Dec 19 06:01:32 2025 GMT Not After : Dec 20 06:01:32 2025 GMT Subject: CN=353f02a78204f74f8efadb0c3e74f72ee9631ea7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:64:12:35:2f:f6:e2:33:d0:90:a3:ca:5b:17: 5c:43:3d:f6:25:5a:14:9e:a9:d4:6d:36:b4:d3:92: 8b:31:65:c8:c9:30:dc:56:8e:0f:bd:e6:5f:bf:88: 0f:25:20:2a:d8:d5:56:03:d8:4d:a4:86:4c:03:97: b8:6a:a6:57:1d:3c:72:87:82:56:05:69:60:78:6d: a6:8f:94:a9:b9:38:db:b9:ee:ab:8c:ad:bf:b9:00: 23:38:59:bd:33:78:b9:ee:3f:d4:20:34:19:2a:6f: 2c:37:83:d4:c5:94:68:13:a2:64:a1:26:65:3f:65: 3f:b1:3f:64:b1:aa:0b:bf:31:e3:7b:19:f0:75:1f: 56:7f:e9:f9:69:08:14:ea:c4:f8:2a:90:48:a4:b8: 2c:a9:95:c5:a0:30:33:80:69:12:68:ed:f5:72:21: 04:0d:db:c0:83:ac:93:ff:40:e2:f5:a5:27:d8:01: 5a:f3:59:85:15:af:c3:aa:0f:a4:18:df:1b:23:b2: 3f:2c:61:63:a3:42:76:9e:69:e2:46:e6:a6:49:42: 72:6e:06:2b:3a:8a:6b:b9:a8:a0:a8:19:37:bf:1c: c2:39:59:f5:8f:fc:5c:eb:16:3f:ba:73:50:22:d4: 70:b5:f0:35:b2:fe:fb:69:85:a6:85:e1:8a:bd:0d: 9d:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:3F:02:A7:82:04:F7:4F:8E:FA:DB:0C:3E:74:F7:2E:E9:63:1E:A7 X509v3 Authority Key Identifier: keyid:36:B5:5F:B3:4D:29:F9:62:54:51:32:A0:25:B5:26:44:FD:FF:BF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NrVfs00p-WJUUTKgJbUmRP3_v28.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:db:f7:ce:d8:06:f9:17:a0:ab:9e:f2:fe:43:b3:28:5b:af: d0:da:1e:b3:00:67:fd:e8:d2:c8:a0:c6:93:aa:f3:19:cc:5b: 32:4c:8b:9f:89:88:5d:c0:77:c1:a2:f0:9f:a3:d8:c3:d4:7f: 6b:1c:4c:b7:40:07:0b:3d:72:10:2e:c4:8f:3b:3f:ed:4b:8a: 4a:82:15:a3:87:d1:bd:d2:1e:fc:7d:da:85:3a:0f:bc:16:70: d8:6c:ef:05:11:b4:a6:a2:3d:51:ed:f0:42:1a:05:de:87:73: b0:bf:2e:f1:54:fa:3b:40:95:db:71:42:a2:0c:3c:66:69:57: 17:d9:1b:12:3e:d2:1f:2a:00:21:f0:cd:fc:d7:f2:14:38:b4: 31:3d:d3:f6:4d:2f:a9:33:d3:f5:09:26:a1:e5:64:64:8f:ff: a5:a3:0c:3c:55:55:9d:b6:99:4f:0f:c8:5c:03:95:4a:15:ae: cf:fa:b4:07:c8:c2:40:6b:93:04:d0:1a:ed:de:ac:d4:2f:7a: 43:73:4f:77:ed:86:43:e9:a7:9d:25:83:a7:c6:58:4c:8c:6c: 9e:ad:a5:98:c8:8a:63:af:d7:35:55:35:1a:d5:5c:ed:34:bb: f2:7f:fa:74:dc:bd:29:c1:b9:e3:41:ee:ad:f4:e7:e7:92:0e: f5:29:fa:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1MvsnL66NsbmXH02zMAXtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YjU1ZmIzNGQyOWY5NjI1NDUxMzJhMDI1YjUyNjQ0ZmRm ZmJmNmYwHhcNMjUxMjE5MDYwMTMyWhcNMjUxMjIwMDYwMTMyWjAzMTEwLwYDVQQD EygzNTNmMDJhNzgyMDRmNzRmOGVmYWRiMGMzZTc0ZjcyZWU5NjMxZWE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2QSNS/24jPQkKPKWxdcQz32JVoU nqnUbTa005KLMWXIyTDcVo4PveZfv4gPJSAq2NVWA9hNpIZMA5e4aqZXHTxyh4JW BWlgeG2mj5SpuTjbue6rjK2/uQAjOFm9M3i57j/UIDQZKm8sN4PUxZRoE6JkoSZl P2U/sT9ksaoLvzHjexnwdR9Wf+n5aQgU6sT4KpBIpLgsqZXFoDAzgGkSaO31ciEE DdvAg6yT/0Di9aUn2AFa81mFFa/Dqg+kGN8bI7I/LGFjo0J2nmniRuamSUJybgYr OopruaigqBk3vxzCOVn1j/xc6xY/unNQItRwtfA1sv77aYWmheGKvQ2d6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDU/AqeCBPdPjvrbDD509y7pYx6nMB8GA1UdIwQY MBaAFDa1X7NNKfliVFEyoCW1JkT9/79vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnJWZnMwMHAtV0pVVVRLZ0piVW1SUDNfdjI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8yYmYwMGItYmZiYy00ZjZiLWExM2Ut ZjEwZjczYTllY2IzLzEvTnJWZnMwMHAtV0pVVVRLZ0piVW1SUDNfdjI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy8yYmYwMGItYmZiYy00ZjZiLWExM2UtZjEwZjczYTllY2Iz LzEvTnJWZnMwMHAtV0pVVVRLZ0piVW1SUDNfdjI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm9v3ztgG +Regq57y/kOzKFuv0NoeswBn/ejSyKDGk6rzGcxbMkyLn4mIXcB3waLwn6PYw9R/ axxMt0AHCz1yEC7Ejzs/7UuKSoIVo4fRvdIe/H3ahToPvBZw2GzvBRG0pqI9Ue3w QhoF3odzsL8u8VT6O0CV23FCogw8ZmlXF9kbEj7SHyoAIfDN/NfyFDi0MT3T9k0v qTPT9QkmoeVkZI//paMMPFVVnbaZTw/IXAOVShWuz/q0B8jCQGuTBNAa7d6s1C96 Q3NPd+2GQ+mnnSWDp8ZYTIxsnq2lmMiKY6/XNVU1GtVc7TS78n/6dNy9KcG540Hu rfTn55IO9Sn63g== -----END CERTIFICATE-----Generated at Fri Dec 19 08:26:21 2025 by rpki-client