This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/f3e67a-cfd7-4745-82b7-2d90c7fd0d60/1/NMSVb4VnESWILFdM0uLSA6q97QU.mft File: NMSVb4VnESWILFdM0uLSA6q97QU.mft (raw, json) Hash identifier: 2XaSeWsbXGYzHS3G0Q+Y7DbB0cC81WgIq862HL4oA3Q= Subject key identifier: 07:A2:FD:ED:52:A0:D2:47:4D:77:02:32:19:87:DC:CE:5A:2C:54:59 Authority key identifier: 34:C4:95:6F:85:67:11:25:88:2C:57:4C:D2:E2:D2:03:AA:BD:ED:05 Certificate issuer: /CN=34c4956f85671125882c574cd2e2d203aabded05 Certificate serial: 019B5975A2EB8F62230D04E74714353822D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NMSVb4VnESWILFdM0uLSA6q97QU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/f3e67a-cfd7-4745-82b7-2d90c7fd0d60/1/NMSVb4VnESWILFdM0uLSA6q97QU.mft Manifest number: 1796 Signing time: Fri 26 Dec 2025 07:00:40 +0000 Manifest this update: Fri 26 Dec 2025 07:00:40 +0000 Manifest next update: Sat 27 Dec 2025 07:00:40 +0000 Files and hashes: 1: NMSVb4VnESWILFdM0uLSA6q97QU.crl (hash: 78z8YoCq4WqTJN4t3W6InQ65KI8gS8t/LoeOv4aoMp8=) 2: xtLurjJMXgwePFKUT7vd_Bs7y4g.roa (hash: 9QOnyZtRBS25fvMRFyNZdyW0R5uMOP/pXW6ujcGtyGI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/f3e67a-cfd7-4745-82b7-2d90c7fd0d60/1/NMSVb4VnESWILFdM0uLSA6q97QU.crl rsync://rpki.ripe.net/repository/DEFAULT/70/f3e67a-cfd7-4745-82b7-2d90c7fd0d60/1/NMSVb4VnESWILFdM0uLSA6q97QU.mft rsync://rpki.ripe.net/repository/DEFAULT/NMSVb4VnESWILFdM0uLSA6q97QU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:75:a2:eb:8f:62:23:0d:04:e7:47:14:35:38:22:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34c4956f85671125882c574cd2e2d203aabded05 Validity Not Before: Dec 26 07:00:40 2025 GMT Not After : Dec 27 07:00:40 2025 GMT Subject: CN=07a2fded52a0d2474d7702321987dcce5a2c5459 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b7:21:8c:f1:82:17:ee:a9:12:8b:b4:6f:f9: 3a:d4:75:b4:2a:7d:e1:a3:dc:26:de:e5:0e:df:c1: fa:1e:61:af:c4:50:fc:58:21:e6:cf:15:5c:46:85: af:bf:e3:9e:6a:73:76:ef:82:e0:81:49:57:fe:cb: e7:cb:f0:84:01:79:cb:86:18:8f:85:fb:5e:f6:a9: 97:09:9f:90:fb:fc:4b:84:8e:12:2b:aa:dd:9d:d2: 47:86:1e:a0:f8:e6:c8:da:a4:6b:dc:c2:42:cd:da: 7f:13:e4:cf:18:a6:75:1e:0d:1f:94:52:97:d0:d7: 62:17:2b:ac:12:ae:16:31:74:86:23:68:4e:f9:e9: 50:d8:de:7a:63:c3:c5:79:b8:e7:fa:09:88:fa:e5: f1:77:f0:95:0f:91:56:39:60:07:1c:5b:0f:47:67: 87:a6:d6:d5:ed:94:a6:38:cc:b3:b0:6b:5e:e0:48: b6:46:c0:6d:87:52:ca:b4:96:58:e9:f0:8c:f2:bf: fe:ac:ea:eb:d4:97:f0:d7:03:87:84:77:67:99:ff: 37:1d:d5:04:0e:7e:b6:0d:96:76:c0:1e:9b:28:b7: f1:8e:28:a9:39:20:51:cf:3f:44:c3:31:83:52:32: 2a:38:8d:fd:7f:8d:0c:96:e2:cd:c1:e2:26:7e:cd: ea:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:A2:FD:ED:52:A0:D2:47:4D:77:02:32:19:87:DC:CE:5A:2C:54:59 X509v3 Authority Key Identifier: keyid:34:C4:95:6F:85:67:11:25:88:2C:57:4C:D2:E2:D2:03:AA:BD:ED:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NMSVb4VnESWILFdM0uLSA6q97QU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f3e67a-cfd7-4745-82b7-2d90c7fd0d60/1/NMSVb4VnESWILFdM0uLSA6q97QU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f3e67a-cfd7-4745-82b7-2d90c7fd0d60/1/NMSVb4VnESWILFdM0uLSA6q97QU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:ba:dc:7a:ca:85:03:ef:7f:b2:0d:93:10:ac:cf:6b:74:35: 1f:78:67:b7:67:f8:24:bb:75:b6:52:e2:45:f5:ee:38:fe:2e: d2:e8:a8:27:51:3e:fc:e6:31:cc:a9:58:11:e4:72:e4:12:a9: 53:12:ac:b7:1f:ca:29:7d:ff:d7:56:c3:75:a0:e1:b6:48:68: d8:51:f5:7d:7f:3c:5d:ef:96:6a:cd:5f:7a:4c:74:bf:7c:fa: d5:19:b8:e3:fc:c0:7a:bb:7e:5f:14:6f:21:93:74:28:22:83: 1b:9a:0a:f1:3e:f7:ad:71:21:29:f6:01:28:fe:70:6d:cd:a8: 1e:2c:31:46:1b:e3:87:31:73:38:8b:ea:2e:db:1f:11:7a:5d: 76:8f:02:b4:ab:d1:44:7f:e3:b3:cb:0d:0b:2d:a4:4b:9d:9d: 8e:96:7f:23:4d:f1:8f:8f:24:a6:ad:02:db:6c:4d:7e:7d:35: 4f:2e:65:c6:fa:69:3a:6f:34:57:21:08:26:bd:1b:b4:a7:2c: ee:53:21:ba:df:9a:4c:ad:44:f3:8d:31:e0:ca:fc:c6:71:04: 75:c3:90:37:6d:50:f1:e3:f4:bd:42:cc:49:4b:d7:b3:6c:8f: 2c:8b:ab:ae:a6:9b:a6:e6:94:13:1d:3c:83:22:01:35:72:b5: a8:69:9c:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdaLrj2IjDQTnRxQ1OCLZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0YzQ5NTZmODU2NzExMjU4ODJjNTc0Y2QyZTJkMjAzYWFi ZGVkMDUwHhcNMjUxMjI2MDcwMDQwWhcNMjUxMjI3MDcwMDQwWjAzMTEwLwYDVQQD EygwN2EyZmRlZDUyYTBkMjQ3NGQ3NzAyMzIxOTg3ZGNjZTVhMmM1NDU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbchjPGCF+6pEou0b/k61HW0Kn3h o9wm3uUO38H6HmGvxFD8WCHmzxVcRoWvv+OeanN274LggUlX/svny/CEAXnLhhiP hfte9qmXCZ+Q+/xLhI4SK6rdndJHhh6g+ObI2qRr3MJCzdp/E+TPGKZ1Hg0flFKX 0NdiFyusEq4WMXSGI2hO+elQ2N56Y8PFebjn+gmI+uXxd/CVD5FWOWAHHFsPR2eH ptbV7ZSmOMyzsGte4Ei2RsBth1LKtJZY6fCM8r/+rOrr1Jfw1wOHhHdnmf83HdUE Dn62DZZ2wB6bKLfxjiipOSBRzz9EwzGDUjIqOI39f40MluLNweImfs3qMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAei/e1SoNJHTXcCMhmH3M5aLFRZMB8GA1UdIwQY MBaAFDTElW+FZxEliCxXTNLi0gOqve0FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTk1TVmI0Vm5FU1dJTEZkTTB1TFNBNnE5N1FVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9mM2U2N2EtY2ZkNy00NzQ1LTgyYjct MmQ5MGM3ZmQwZDYwLzEvTk1TVmI0Vm5FU1dJTEZkTTB1TFNBNnE5N1FVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC9mM2U2N2EtY2ZkNy00NzQ1LTgyYjctMmQ5MGM3ZmQwZDYw LzEvTk1TVmI0Vm5FU1dJTEZkTTB1TFNBNnE5N1FVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADLrcesqF A+9/sg2TEKzPa3Q1H3hnt2f4JLt1tlLiRfXuOP4u0uioJ1E+/OYxzKlYEeRy5BKp UxKstx/KKX3/11bDdaDhtkho2FH1fX88Xe+Was1fekx0v3z61Rm44/zAert+XxRv IZN0KCKDG5oK8T73rXEhKfYBKP5wbc2oHiwxRhvjhzFzOIvqLtsfEXpddo8CtKvR RH/js8sNCy2kS52djpZ/I03xj48kpq0C22xNfn01Ty5lxvppOm80VyEIJr0btKcs 7lMhut+aTK1E840x4Mr8xnEEdcOQN21Q8eP0vULMSUvXs2yPLIurrqabpuaUEx08 gyIBNXK1qGmcdg== -----END CERTIFICATE-----Generated at Fri Dec 26 14:06:12 2025 by rpki-client