This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/75b43d-e742-48ea-945a-aa832db7b50a/1/nvtWQV815j-nQDpQH97druzqR1o.mft File: nvtWQV815j-nQDpQH97druzqR1o.mft (raw, json) Hash identifier: WB1T/NBuYrBJjRAnWUY0VXJj/yD6HeQ7VQ7Gw1Kc/Vc= Subject key identifier: CB:42:63:0D:2F:DA:99:E7:F6:79:B9:06:33:97:5F:15:73:C7:B8:B1 Authority key identifier: 9E:FB:56:41:5F:35:E6:3F:A7:40:3A:50:1F:DE:DD:AE:EC:EA:47:5A Certificate issuer: /CN=9efb56415f35e63fa7403a501fdeddaeecea475a Certificate serial: 019B40C8806B0B61631E177E3D3EB3725F62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nvtWQV815j-nQDpQH97druzqR1o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/75b43d-e742-48ea-945a-aa832db7b50a/1/nvtWQV815j-nQDpQH97druzqR1o.mft Manifest number: 178D Signing time: Sun 21 Dec 2025 12:00:40 +0000 Manifest this update: Sun 21 Dec 2025 12:00:40 +0000 Manifest next update: Mon 22 Dec 2025 12:00:40 +0000 Files and hashes: 1: SEfajqd6Fo8tBAWadiViUIYfxIc.roa (hash: buws3E1khkxa0hWtFXM/6/Y2Vl2k7b7xq83eMENRDLs=) 2: nvtWQV815j-nQDpQH97druzqR1o.crl (hash: 2JK06EI/EY0k9Fxj4V0ByR0iCzgHTKScuBFVg7MjkD0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/75b43d-e742-48ea-945a-aa832db7b50a/1/nvtWQV815j-nQDpQH97druzqR1o.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/75b43d-e742-48ea-945a-aa832db7b50a/1/nvtWQV815j-nQDpQH97druzqR1o.mft rsync://rpki.ripe.net/repository/DEFAULT/nvtWQV815j-nQDpQH97druzqR1o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 12:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:c8:80:6b:0b:61:63:1e:17:7e:3d:3e:b3:72:5f:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9efb56415f35e63fa7403a501fdeddaeecea475a Validity Not Before: Dec 21 12:00:40 2025 GMT Not After : Dec 22 12:00:40 2025 GMT Subject: CN=cb42630d2fda99e7f679b90633975f1573c7b8b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:65:9c:99:c3:9e:dc:37:42:7c:55:d5:5f:17: 87:01:3e:c5:5c:d4:0e:d0:a3:f7:d9:3e:a7:8b:d1: fd:00:42:97:82:e5:13:33:5e:cb:3b:6a:2b:92:e6: fe:57:f6:06:52:a1:7f:b8:ed:ec:e2:ef:f3:0c:3d: 31:b0:89:27:92:ab:03:a8:05:18:e9:66:31:eb:7d: c1:64:87:12:41:cf:e4:04:4d:3a:21:f7:aa:61:78: 22:10:6c:b5:a9:4d:14:e3:be:d2:96:09:5e:6d:67: aa:06:a3:b1:b0:8d:64:7f:66:82:fe:ac:dc:d2:97: f8:ac:a7:b0:57:ca:c1:9c:c1:28:dc:f4:31:e6:54: b3:11:b6:fa:e3:94:ba:50:35:7f:71:2b:83:1b:67: f9:2d:c4:cb:5f:2d:51:6d:3e:3a:92:80:32:9b:98: 45:5b:fa:86:9e:3e:37:df:06:52:27:9a:1f:a4:3e: 8c:a1:08:9a:20:2c:c6:97:1e:ac:ea:37:51:0d:da: 46:75:a2:60:d2:74:48:85:f7:d6:35:33:44:22:61: e8:13:e4:4c:2f:2d:9e:e3:ce:9c:3d:b9:f4:27:a3: 88:11:e7:72:20:36:3c:4d:44:74:b1:7e:ee:02:f0: c1:48:cd:0a:06:b1:ab:09:b6:7e:ca:89:4d:81:4d: c3:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:42:63:0D:2F:DA:99:E7:F6:79:B9:06:33:97:5F:15:73:C7:B8:B1 X509v3 Authority Key Identifier: keyid:9E:FB:56:41:5F:35:E6:3F:A7:40:3A:50:1F:DE:DD:AE:EC:EA:47:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nvtWQV815j-nQDpQH97druzqR1o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/75b43d-e742-48ea-945a-aa832db7b50a/1/nvtWQV815j-nQDpQH97druzqR1o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/75b43d-e742-48ea-945a-aa832db7b50a/1/nvtWQV815j-nQDpQH97druzqR1o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:bc:7f:ee:00:00:54:da:ec:71:aa:b7:d9:30:c0:64:f7:ea: c6:59:30:0c:e0:df:0b:8b:2c:4c:38:0c:11:88:ae:f9:98:fa: 72:b3:86:4f:d3:94:4b:ff:82:d9:e6:b0:88:79:c0:13:f1:65: e8:01:de:4f:0d:34:18:e1:d5:ab:97:82:4d:47:3d:96:a0:d5: 3e:77:5e:c0:71:88:aa:b6:11:e6:3a:dc:b6:04:9f:91:f8:73: 71:4c:8b:55:30:d8:00:89:e7:5c:d9:5e:b8:be:5a:48:0d:43: 1b:6b:fa:ea:27:8b:e2:44:18:db:52:2a:98:09:86:30:3c:8d: 9a:bb:dd:09:31:0b:03:82:11:de:f2:9f:04:b9:45:6c:be:82: 00:93:f2:69:ba:79:05:64:22:5f:e1:b7:fd:09:5e:72:34:7e: d9:f0:2b:40:25:34:b4:99:2e:f0:96:20:e3:18:5a:26:3d:3d: 4f:d5:37:2a:78:35:95:68:4e:d6:0b:8f:a2:50:ed:1d:e8:b5: c3:2f:2b:de:7b:9c:a0:47:b0:d2:3f:c1:00:49:c0:f1:c3:48: 07:21:cf:33:ec:39:b5:08:1d:f3:57:1d:72:18:01:26:be:6a: 54:a5:53:f8:bd:b2:97:05:c8:8b:17:bf:4f:0a:4f:cd:31:97: e4:f7:0b:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAyIBrC2FjHhd+PT6zcl9iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllZmI1NjQxNWYzNWU2M2ZhNzQwM2E1MDFmZGVkZGFlZWNl YTQ3NWEwHhcNMjUxMjIxMTIwMDQwWhcNMjUxMjIyMTIwMDQwWjAzMTEwLwYDVQQD EyhjYjQyNjMwZDJmZGE5OWU3ZjY3OWI5MDYzMzk3NWYxNTczYzdiOGIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmWcmcOe3DdCfFXVXxeHAT7FXNQO 0KP32T6ni9H9AEKXguUTM17LO2orkub+V/YGUqF/uO3s4u/zDD0xsIknkqsDqAUY 6WYx633BZIcSQc/kBE06IfeqYXgiEGy1qU0U477SlglebWeqBqOxsI1kf2aC/qzc 0pf4rKewV8rBnMEo3PQx5lSzEbb645S6UDV/cSuDG2f5LcTLXy1RbT46koAym5hF W/qGnj433wZSJ5ofpD6MoQiaICzGlx6s6jdRDdpGdaJg0nRIhffWNTNEImHoE+RM Ly2e486cPbn0J6OIEedyIDY8TUR0sX7uAvDBSM0KBrGrCbZ+yolNgU3DzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMtCYw0v2pnn9nm5BjOXXxVzx7ixMB8GA1UdIwQY MBaAFJ77VkFfNeY/p0A6UB/e3a7s6kdaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnZ0V1FWODE1ai1uUURwUUg5N2RydXpxUjFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS83NWI0M2QtZTc0Mi00OGVhLTk0NWEt YWE4MzJkYjdiNTBhLzEvbnZ0V1FWODE1ai1uUURwUUg5N2RydXpxUjFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS83NWI0M2QtZTc0Mi00OGVhLTk0NWEtYWE4MzJkYjdiNTBh LzEvbnZ0V1FWODE1ai1uUURwUUg5N2RydXpxUjFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfbx/7gAA VNrscaq32TDAZPfqxlkwDODfC4ssTDgMEYiu+Zj6crOGT9OUS/+C2eawiHnAE/Fl 6AHeTw00GOHVq5eCTUc9lqDVPndewHGIqrYR5jrctgSfkfhzcUyLVTDYAInnXNle uL5aSA1DG2v66ieL4kQY21IqmAmGMDyNmrvdCTELA4IR3vKfBLlFbL6CAJPyabp5 BWQiX+G3/QlecjR+2fArQCU0tJku8JYg4xhaJj09T9U3Kng1lWhO1guPolDtHei1 wy8r3nucoEew0j/BAEnA8cNIByHPM+w5tQgd81cdchgBJr5qVKVT+L2ylwXIixe/ TwpPzTGX5PcLQA== -----END CERTIFICATE-----Generated at Sun Dec 21 20:58:26 2025 by rpki-client