This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft File: NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft (raw, json) Hash identifier: sArzkrDxm/faVEr49Lp4FCiVkkBvENZF9v6jM4UkuIw= Subject key identifier: C8:B7:F6:48:F1:95:4D:00:27:15:69:82:CF:26:BC:85:75:64:72:5A Authority key identifier: 35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4 Certificate issuer: /CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4 Certificate serial: 019B0DEDD42912C877DC8AAFF7C48C942971 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft Manifest number: 1796 Signing time: Thu 11 Dec 2025 15:00:48 +0000 Manifest this update: Thu 11 Dec 2025 15:00:48 +0000 Manifest next update: Fri 12 Dec 2025 15:00:48 +0000 Files and hashes: 1: 0tzBINqIR5UARhUC_SN4dqUsHbs.roa (hash: dkpQVlm2NilQ3sBxk5jABsHQoOKhZ/gA5zaornlR6rQ=) 2: 4Kndf8f0K38NeByF4eDeojFEkWc.roa (hash: z9ZWxvxCc7vC5TAiLfa7y9gNN02jk+BIQEMSzkn78Bk=) 3: 8sgH-ZOMo18VOXKP7ZiwbPqCqiQ.roa (hash: eGf/pzyBqq1cxIFxS42rOeSUvmat4xHxNvblptUlpg4=) 4: CSQPKu-qpPTqg1yhCPEmsJhRnzI.roa (hash: auSoLSfduR8C0x2bAUZMvWJdtjGO1f6pjFPhEJiTFRA=) 5: Fm18RFfmtw-ty_MOYt1iAF-NS08.roa (hash: pq2vFSrbuWCHpjKgD2s5D798cXhhJkM/C70Aaa/iCuA=) 6: GPRtp5xOkeL5cFbOcLZLwwHI9s8.roa (hash: qEFXixGocvZk8lkNUHp2R4rSCKUt6DKkNZt4rBzX0SY=) 7: HiKOjaGmDxpi59kezYj2Aw_UxJE.roa (hash: IDFiNaoIwOJrP6SVw5rUJ9NDJDF8ucwCpy8kzd1Ucqk=) 8: Lr0nKbirlPmBX-3lvJsCJOROKJM.roa (hash: TqdXd4s2N+H906Qbg6lObKToYZQaynILZEigcrAh59E=) 9: NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl (hash: yVPBezPghYICoTwNUquNqtm+ojR52Kzt+u2EnEE9omY=) 10: NRsmmESxlwOZ9E_FA7G05km4PzY.roa (hash: gj7FhRBAZvoKHYNfOr+mSSSV4JbsWKf5GeUgXwnq8h4=) 11: VWhVpICVoAdzB9EQIkXWDcCWifs.roa (hash: QRblW0tqls+p82T8xFTpIjMYlVKizBoeE6qJKM11/3k=) 12: ZilTqGeKBQ2tryG8q3trVBCr-kw.roa (hash: PwgBz8bW1BvrcChPP0zRLTeusRgOrK5lGOMisutfo94=) 13: e-v0jP0Yr1s-j_LETXIOOzdyLGk.roa (hash: xcWMYa3OgNb5AY/zol6hl7sqGF74VxIwNPjPwmEIM7U=) 14: fKVs2lzJco8yky1RgsvfRpsERwg.roa (hash: RSt0/ulmpZFZg4SLAM6kZKlm2sOebMgPJyz/oV0nMGg=) 15: hKtl6YrzcFs2c5akQ4QGQkOqaqs.roa (hash: zejLevyjCi1eBLeaN7L1PcRyE8TcqoV2q3GNhHozY7Q=) 16: i9SX3nWo4NzvcKgFdy_Fb9U00JU.roa (hash: 1YuxocoriVhQ/l4n2Sas0LfPCL7SyxG7duq+UXS6TBU=) 17: lYSlQ-4feryLZZTaUJ-AJBOZotM.roa (hash: Z1Weo02vp6uD0aD+NKaCNak3b37ID56s/v4nECqj3gE=) 18: m0n-EeeEBvd94sdHj2oT-Qvcf9M.roa (hash: thErL0hsxuW8JBkWuUQgnCtldZunPMy1NfMos+CWV7s=) 19: mrA5cb-6XNKXA6shM0taqYUQYA0.roa (hash: cuTtxcWCbnIrKZ9sDiv8cAUpJWdrJ+DCwm6h65W47E0=) 20: p_T_usfdv8xlZZdYjAIfsVouVbk.roa (hash: 6jbjq1+jiWQ0ooeWaGdPlb/s9JUI9tUJMn1ZAmNsUm8=) 21: rOy5uy_NTIjdgXXxIju3UL-TKY4.roa (hash: ShPP3cFWgf+p1Ts/WZ7cZBJeKVFu0VhveaoD9AjxE14=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 15:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:ed:d4:29:12:c8:77:dc:8a:af:f7:c4:8c:94:29:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4 Validity Not Before: Dec 11 15:00:48 2025 GMT Not After : Dec 12 15:00:48 2025 GMT Subject: CN=c8b7f648f1954d0027156982cf26bc857564725a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ca:93:83:29:35:7e:4a:0e:33:e1:91:2c:d7: 5e:2f:84:62:f7:e4:db:9b:2c:61:ac:7f:68:ee:d4: 74:1a:93:5d:5b:38:98:b2:e5:e7:6f:b3:f2:91:b8: c2:9e:5d:d9:6d:dc:ca:2b:79:d6:ac:0c:35:3b:e3: dc:b2:9e:5f:bb:32:e5:37:d5:06:61:54:8f:bc:7f: a1:22:2a:26:da:12:95:72:a4:ad:59:b1:dc:53:4a: 85:ba:76:01:cb:98:9c:76:ff:c0:aa:20:83:f5:97: 50:d5:6e:be:68:a1:dc:4d:bc:4d:fa:1c:bc:60:3e: 92:2d:bc:d7:ab:ea:1f:67:e9:4a:00:43:16:30:e5: 03:68:fc:d3:00:a5:e8:27:86:da:aa:07:84:d2:58: 4c:33:a8:d7:66:fc:36:cb:10:b0:f5:48:fb:28:35: 91:4f:2b:30:59:ca:cd:e6:74:ba:95:49:77:ab:08: c9:d0:fd:12:e9:46:f5:16:51:0d:cb:74:9c:d4:c4: 6d:88:3b:53:fe:2c:ce:6d:d5:12:84:5b:b5:39:b8: 5c:ce:7c:85:c8:7c:73:cd:4e:85:63:f3:7f:41:b2: 76:d4:40:a7:38:d2:5e:3e:8c:b5:1c:4b:b8:b0:40: d4:28:37:76:16:cd:0f:1a:18:b5:e2:39:09:db:98: 39:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:B7:F6:48:F1:95:4D:00:27:15:69:82:CF:26:BC:85:75:64:72:5A X509v3 Authority Key Identifier: keyid:35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:17:2b:a8:26:0a:08:30:87:19:3a:d2:df:8f:be:fb:6f:34: 9e:05:8e:04:76:b7:75:00:b4:58:ef:cd:b4:af:b3:1e:bf:20: fc:e4:1f:13:c6:da:2b:e9:e3:36:96:de:c3:fc:64:d7:bd:59: b5:69:e8:97:fb:e7:3e:8f:12:82:63:eb:83:d7:f1:1e:85:a0: 60:3e:61:a2:59:82:60:a2:4f:43:b6:d8:25:a6:a1:78:08:1e: 1a:27:ed:28:12:4e:2f:7e:bc:cf:89:98:a6:c7:40:ba:04:d4: 90:2a:3b:84:55:0c:98:5a:99:c4:9c:e6:c6:5c:5c:51:61:27: 35:55:55:03:09:52:b7:08:db:90:69:54:9b:52:b5:c9:99:e9: c6:31:3b:af:63:de:25:34:56:02:14:1b:69:d3:13:66:b1:99: a5:b0:00:97:42:ab:28:62:c0:21:13:03:6a:63:70:ae:9a:e2: b4:cd:24:79:7e:6e:a6:fe:00:a7:d9:2a:5e:1d:e2:78:5e:4f: 1b:38:fb:30:5f:f7:4d:ab:a3:6e:69:0c:5e:aa:67:5a:1e:74: b6:de:af:f2:79:6b:04:19:1e:2f:ed:94:b8:b1:e0:86:99:72: 1c:8b:44:82:2d:49:97:6e:06:78:b9:da:01:a2:68:c5:f6:98: c8:2c:ef:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsN7dQpEsh33Iqv98SMlClxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MWEyZmQ2ZjVlNWFmODdkNWNlYTA5NTA2NmZiY2MzZDNl NTQ2YTQwHhcNMjUxMjExMTUwMDQ4WhcNMjUxMjEyMTUwMDQ4WjAzMTEwLwYDVQQD EyhjOGI3ZjY0OGYxOTU0ZDAwMjcxNTY5ODJjZjI2YmM4NTc1NjQ3MjVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMqTgyk1fkoOM+GRLNdeL4Ri9+Tb myxhrH9o7tR0GpNdWziYsuXnb7PykbjCnl3ZbdzKK3nWrAw1O+Pcsp5fuzLlN9UG YVSPvH+hIiom2hKVcqStWbHcU0qFunYBy5icdv/AqiCD9ZdQ1W6+aKHcTbxN+hy8 YD6SLbzXq+ofZ+lKAEMWMOUDaPzTAKXoJ4baqgeE0lhMM6jXZvw2yxCw9Uj7KDWR TyswWcrN5nS6lUl3qwjJ0P0S6Ub1FlENy3Sc1MRtiDtT/izObdUShFu1ObhcznyF yHxzzU6FY/N/QbJ21ECnONJePoy1HEu4sEDUKDd2Fs0PGhi14jkJ25g5owIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMi39kjxlU0AJxVpgs8mvIV1ZHJaMB8GA1UdIwQY MBaAFDUaL9b15a+H1c6glQZvvMPT5UakMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9jZGRkZDUtODE3YS00MTEzLThiODIt MjMwNDllNGQyZjEyLzEvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9jZGRkZDUtODE3YS00MTEzLThiODItMjMwNDllNGQyZjEy LzEvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmBcrqCYK CDCHGTrS34+++280ngWOBHa3dQC0WO/NtK+zHr8g/OQfE8baK+njNpbew/xk171Z tWnol/vnPo8SgmPrg9fxHoWgYD5holmCYKJPQ7bYJaaheAgeGiftKBJOL368z4mY psdAugTUkCo7hFUMmFqZxJzmxlxcUWEnNVVVAwlStwjbkGlUm1K1yZnpxjE7r2Pe JTRWAhQbadMTZrGZpbAAl0KrKGLAIRMDamNwrpritM0keX5upv4Ap9kqXh3ieF5P Gzj7MF/3TaujbmkMXqpnWh50tt6v8nlrBBkeL+2UuLHghplyHItEgi1Jl24GeLna AaJoxfaYyCzvPw== -----END CERTIFICATE-----Generated at Fri Dec 12 00:17:42 2025 by rpki-client