This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.mft File: NvHVZ2vdcEM0sts0ypBNd83Suso.mft (raw, json) Hash identifier: xb/g1KtrMQD8lVFBPkHz8UFj/Ae6lEqop5r8y8fALlQ= Subject key identifier: 0E:5D:E1:D2:AD:DE:A2:87:7C:66:B6:B3:2F:E3:1D:BF:8A:C8:08:4B Authority key identifier: 36:F1:D5:67:6B:DD:70:43:34:B2:DB:34:CA:90:4D:77:CD:D2:BA:CA Certificate issuer: /CN=36f1d5676bdd704334b2db34ca904d77cdd2baca Certificate serial: 019B10131D73C41B7DADB16EB0142FF7C39B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NvHVZ2vdcEM0sts0ypBNd83Suso.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.mft Manifest number: 02D1 Signing time: Fri 12 Dec 2025 01:00:46 +0000 Manifest this update: Fri 12 Dec 2025 01:00:46 +0000 Manifest next update: Sat 13 Dec 2025 01:00:46 +0000 Files and hashes: 1: NvHVZ2vdcEM0sts0ypBNd83Suso.crl (hash: vs88aNEu7vaKLgD2u8yIyQtHWadbJoLa2EnT5MWm3vQ=) 2: dy-p251zL98DN5HbKp4vPRlxutc.roa (hash: 4pwGuhrYIr/OJxEBN4t0YB3KYavBF0QhnyAv6oyh4DA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.crl rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.mft rsync://rpki.ripe.net/repository/DEFAULT/NvHVZ2vdcEM0sts0ypBNd83Suso.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:13:1d:73:c4:1b:7d:ad:b1:6e:b0:14:2f:f7:c3:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36f1d5676bdd704334b2db34ca904d77cdd2baca Validity Not Before: Dec 12 01:00:46 2025 GMT Not After : Dec 13 01:00:46 2025 GMT Subject: CN=0e5de1d2addea2877c66b6b32fe31dbf8ac8084b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:3a:63:7b:e1:6a:7c:72:50:f9:74:4b:57:53: ec:81:cd:25:dd:b8:21:b8:4f:74:a7:b9:a2:32:45: 31:e9:2e:f3:1e:25:2e:71:5e:fb:05:ee:96:b5:84: 77:9c:d1:a6:4b:00:fd:c4:ee:19:22:d9:c3:51:9e: bb:f6:62:23:2d:2e:2e:fb:c4:f1:bc:f8:1c:de:78: cc:60:b4:42:d3:86:f6:02:76:3e:2a:47:82:50:ff: 64:f3:52:e5:4d:c6:aa:f2:35:bf:16:55:d4:94:6f: 30:90:d2:1e:76:03:d0:54:e1:29:54:71:2d:04:38: 5f:e0:89:92:cd:91:22:97:14:55:5c:cd:98:8f:3d: b0:f9:2b:a3:37:45:65:b5:c5:d9:aa:44:a2:07:c8: 2b:01:11:b0:ae:93:ec:f7:72:aa:6e:0d:e1:f4:e5: 8a:5c:00:75:57:48:ab:eb:67:ab:db:21:28:88:12: 92:79:f9:85:7a:b9:4d:fb:a0:9b:5d:a5:4c:94:4a: 0c:cf:4c:4c:50:0e:69:af:0f:ae:57:83:9e:e6:29: f7:9a:59:da:16:33:1a:49:22:ae:83:a3:fd:f4:25: 86:60:4d:8f:e8:d4:19:ed:13:09:a0:7c:26:98:0c: 0c:fe:5c:0f:de:36:90:50:1f:a7:03:b0:cb:53:fd: 07:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:5D:E1:D2:AD:DE:A2:87:7C:66:B6:B3:2F:E3:1D:BF:8A:C8:08:4B X509v3 Authority Key Identifier: keyid:36:F1:D5:67:6B:DD:70:43:34:B2:DB:34:CA:90:4D:77:CD:D2:BA:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NvHVZ2vdcEM0sts0ypBNd83Suso.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:92:aa:fc:40:54:90:0a:32:82:0b:12:a5:1b:34:41:6c:fd: 48:7f:17:c2:58:54:28:20:76:0a:71:fd:da:75:21:ca:88:eb: e6:08:99:ea:c3:5b:6b:08:8a:98:71:5c:aa:c8:39:c7:31:92: ce:3c:6c:5c:b1:06:5d:e3:a2:25:0f:a3:38:63:f3:09:41:60: a7:d2:b0:76:d9:24:54:43:ed:39:46:4b:43:2b:ae:b4:ba:81: e4:47:f4:2b:0a:6e:d4:ed:28:56:8d:64:01:ac:bf:8b:27:db: 52:ff:51:b1:c3:ba:49:6d:40:41:8d:3f:f4:92:64:00:e0:57: b3:c1:bb:38:a9:5c:83:af:c1:97:60:e8:91:25:91:0e:5b:fb: 48:04:45:cd:a9:cc:d8:a4:9f:96:cd:79:47:78:7b:a9:a7:0d: 33:82:f9:ac:6c:ea:a8:29:bd:80:29:97:55:65:b9:63:17:1b: 39:7d:80:79:2f:22:0a:6c:80:e2:bd:c9:14:4d:6a:77:a5:ed: 10:b4:bd:8a:33:64:6c:2f:69:71:4c:ff:43:1a:e4:ed:9a:e6: 22:65:4c:d5:74:b8:b4:78:4e:08:7c:19:94:80:2f:71:9d:f6: 4c:e4:93:ca:60:e0:78:31:36:d5:8c:d8:cc:33:90:a4:e5:c1: ce:62:57:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQEx1zxBt9rbFusBQv98ObMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2ZjFkNTY3NmJkZDcwNDMzNGIyZGIzNGNhOTA0ZDc3Y2Rk MmJhY2EwHhcNMjUxMjEyMDEwMDQ2WhcNMjUxMjEzMDEwMDQ2WjAzMTEwLwYDVQQD EygwZTVkZTFkMmFkZGVhMjg3N2M2NmI2YjMyZmUzMWRiZjhhYzgwODRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTpje+FqfHJQ+XRLV1Psgc0l3bgh uE90p7miMkUx6S7zHiUucV77Be6WtYR3nNGmSwD9xO4ZItnDUZ679mIjLS4u+8Tx vPgc3njMYLRC04b2AnY+KkeCUP9k81LlTcaq8jW/FlXUlG8wkNIedgPQVOEpVHEt BDhf4ImSzZEilxRVXM2Yjz2w+SujN0VltcXZqkSiB8grARGwrpPs93Kqbg3h9OWK XAB1V0ir62er2yEoiBKSefmFerlN+6CbXaVMlEoMz0xMUA5prw+uV4Oe5in3mlna FjMaSSKug6P99CWGYE2P6NQZ7RMJoHwmmAwM/lwP3jaQUB+nA7DLU/0HqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA5d4dKt3qKHfGa2sy/jHb+KyAhLMB8GA1UdIwQY MBaAFDbx1Wdr3XBDNLLbNMqQTXfN0rrKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnZIVloydmRjRU0wc3RzMHlwQk5kODNTdXNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS80ZDg2NWMtNzBmNS00NGI5LTg4YTYt ZWE4YWZlNjc4OTcwLzEvTnZIVloydmRjRU0wc3RzMHlwQk5kODNTdXNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS80ZDg2NWMtNzBmNS00NGI5LTg4YTYtZWE4YWZlNjc4OTcw LzEvTnZIVloydmRjRU0wc3RzMHlwQk5kODNTdXNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs5Kq/EBU kAoyggsSpRs0QWz9SH8XwlhUKCB2CnH92nUhyojr5giZ6sNbawiKmHFcqsg5xzGS zjxsXLEGXeOiJQ+jOGPzCUFgp9KwdtkkVEPtOUZLQyuutLqB5Ef0Kwpu1O0oVo1k Aay/iyfbUv9RscO6SW1AQY0/9JJkAOBXs8G7OKlcg6/Bl2DokSWRDlv7SARFzanM 2KSfls15R3h7qacNM4L5rGzqqCm9gCmXVWW5YxcbOX2AeS8iCmyA4r3JFE1qd6Xt ELS9ijNkbC9pcUz/Qxrk7ZrmImVM1XS4tHhOCHwZlIAvcZ32TOSTymDgeDE21YzY zDOQpOXBzmJXjg== -----END CERTIFICATE-----Generated at Fri Dec 12 02:29:12 2025 by rpki-client