This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft File: nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft (raw, json) Hash identifier: epHmSKvLYVMoXRbhF28lf4zZtf9XRjU5jcT2zbs0xqo= Subject key identifier: BB:8B:7A:4C:94:77:6F:0F:FA:94:A2:D8:EA:E0:A1:8E:2C:18:45:74 Authority key identifier: 9F:2B:CD:73:70:5B:93:74:75:A9:58:C6:34:ED:D6:4C:9C:64:AF:B6 Certificate issuer: /CN=9f2bcd73705b937475a958c634edd64c9c64afb6 Certificate serial: 019B43CA234109A4D16F31FCA1A8C48FE3BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft Manifest number: 01F0 Signing time: Mon 22 Dec 2025 02:01:19 +0000 Manifest this update: Mon 22 Dec 2025 02:01:19 +0000 Manifest next update: Tue 23 Dec 2025 02:01:19 +0000 Files and hashes: 1: B7c_NuomsMLePlv4BqYRjDtq6rA.roa (hash: 9F/KOglkwN1+3aYHtjpMXcocrWjjPZ/arLWSx9kmqyY=) 2: LfG4OjHPoLHsAJrtCsFzB1-WA1c.roa (hash: l1BlIjqmxWuuS5MgIueayr3dbyb+8P1GNcaS+TuAghU=) 3: nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.crl (hash: nomWlHf9ZjlNYU2WAu3iyGLLhjgajFRTfHfVIcNDcF4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.crl rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft rsync://rpki.ripe.net/repository/DEFAULT/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:ca:23:41:09:a4:d1:6f:31:fc:a1:a8:c4:8f:e3:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f2bcd73705b937475a958c634edd64c9c64afb6 Validity Not Before: Dec 22 02:01:19 2025 GMT Not After : Dec 23 02:01:19 2025 GMT Subject: CN=bb8b7a4c94776f0ffa94a2d8eae0a18e2c184574 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:4a:1f:3b:31:04:58:fd:91:a7:a5:9c:5c:9e: 90:3d:37:ee:66:e8:15:6e:70:f5:48:6c:2c:ac:83: 41:5a:f1:e1:fd:89:b2:9e:83:a8:c2:8c:d5:f9:9f: c5:d7:91:dc:92:61:51:6f:6f:41:97:03:51:60:6d: fd:33:33:87:e8:23:25:4d:a3:12:68:20:6e:ba:71: 85:02:cc:2f:d7:a3:59:02:7e:ac:40:17:dd:6b:f4: b5:e1:e7:77:fd:4a:b4:6c:49:1b:e7:72:5f:37:60: a3:63:4f:02:a4:ac:b7:1e:2f:e6:62:71:09:bb:77: 7e:c9:89:3d:38:f1:24:93:de:14:8c:92:d1:be:74: 37:42:b3:cf:4f:39:91:97:f4:92:24:3c:b4:dc:3a: 48:95:61:9a:41:8c:26:35:b6:31:c4:7c:23:90:cf: 4b:77:89:3f:70:f9:f1:62:c7:f5:10:ae:f4:23:22: 80:4f:ff:d5:53:73:7d:c6:45:11:d1:a4:12:65:84: eb:51:35:4c:85:ef:52:39:6b:d0:53:b0:03:2c:18: cb:71:27:2b:ce:57:1f:62:33:b1:00:82:63:8d:b9: fb:51:a3:00:70:95:bd:b8:fb:f4:2b:99:0d:95:48: cc:97:21:45:82:6d:28:d5:1a:de:89:bf:14:72:fc: 02:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:8B:7A:4C:94:77:6F:0F:FA:94:A2:D8:EA:E0:A1:8E:2C:18:45:74 X509v3 Authority Key Identifier: keyid:9F:2B:CD:73:70:5B:93:74:75:A9:58:C6:34:ED:D6:4C:9C:64:AF:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e8dbbb-70da-42f7-ae47-9084fb0be9c1/1/nyvNc3Bbk3R1qVjGNO3WTJxkr7Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:5f:b4:48:b8:2d:78:95:a9:27:75:b3:e2:22:58:de:d2:ff: 9f:f0:52:7b:d1:b1:4e:c8:e6:5e:33:13:8b:23:2e:91:1f:99: 2c:ba:75:79:7e:96:e2:9d:66:35:ba:58:76:e3:c8:48:47:8c: 73:bc:40:1f:4f:90:34:bb:97:d2:6a:e6:ca:e8:0d:ee:6a:33: 90:07:b7:30:bf:e3:a5:e5:7b:00:d7:7d:ca:6e:00:72:4b:e0: 7c:88:2a:ec:a5:37:88:75:40:4d:47:5e:df:cd:5c:21:91:86: 58:c1:b1:68:fd:e1:df:78:27:00:e0:e9:f8:61:ea:62:be:97: 4e:a7:ec:a1:dd:b4:88:4a:2c:b7:a5:3e:92:aa:f5:a3:4e:c9: 86:db:9d:8a:12:c3:e7:9a:72:b4:40:54:1e:6c:88:6e:57:73: f4:f9:86:6e:12:71:d9:5c:38:38:6f:3c:d5:83:bd:5c:b0:d1: 76:33:0b:4c:69:1f:5c:18:f7:fc:d6:c3:7e:4e:3a:1f:11:dd: fa:59:16:86:8d:54:69:b6:57:48:34:bb:88:38:b4:41:67:79: 34:0a:0a:42:be:8f:7a:50:dd:14:9c:4f:7f:2e:26:89:2c:2b: 50:a2:96:e4:0a:0d:69:7c:c5:6d:6b:e9:8b:b1:d5:6a:32:6e: 58:46:98:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDyiNBCaTRbzH8oajEj+O+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmMmJjZDczNzA1YjkzNzQ3NWE5NThjNjM0ZWRkNjRjOWM2 NGFmYjYwHhcNMjUxMjIyMDIwMTE5WhcNMjUxMjIzMDIwMTE5WjAzMTEwLwYDVQQD EyhiYjhiN2E0Yzk0Nzc2ZjBmZmE5NGEyZDhlYWUwYTE4ZTJjMTg0NTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0ofOzEEWP2Rp6WcXJ6QPTfuZugV bnD1SGwsrINBWvHh/YmynoOowozV+Z/F15HckmFRb29BlwNRYG39MzOH6CMlTaMS aCBuunGFAswv16NZAn6sQBfda/S14ed3/Uq0bEkb53JfN2CjY08CpKy3Hi/mYnEJ u3d+yYk9OPEkk94UjJLRvnQ3QrPPTzmRl/SSJDy03DpIlWGaQYwmNbYxxHwjkM9L d4k/cPnxYsf1EK70IyKAT//VU3N9xkUR0aQSZYTrUTVMhe9SOWvQU7ADLBjLcScr zlcfYjOxAIJjjbn7UaMAcJW9uPv0K5kNlUjMlyFFgm0o1Rreib8UcvwCPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLuLekyUd28P+pSi2OrgoY4sGEV0MB8GA1UdIwQY MBaAFJ8rzXNwW5N0dalYxjTt1kycZK+2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnl2TmMzQmJrM1IxcVZqR05PM1dUSnhrcjdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lOGRiYmItNzBkYS00MmY3LWFlNDct OTA4NGZiMGJlOWMxLzEvbnl2TmMzQmJrM1IxcVZqR05PM1dUSnhrcjdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9lOGRiYmItNzBkYS00MmY3LWFlNDctOTA4NGZiMGJlOWMx LzEvbnl2TmMzQmJrM1IxcVZqR05PM1dUSnhrcjdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYV+0SLgt eJWpJ3Wz4iJY3tL/n/BSe9GxTsjmXjMTiyMukR+ZLLp1eX6W4p1mNbpYduPISEeM c7xAH0+QNLuX0mrmyugN7mozkAe3ML/jpeV7ANd9ym4AckvgfIgq7KU3iHVATUde 381cIZGGWMGxaP3h33gnAODp+GHqYr6XTqfsod20iEost6U+kqr1o07JhtudihLD 55pytEBUHmyIbldz9PmGbhJx2Vw4OG881YO9XLDRdjMLTGkfXBj3/NbDfk46HxHd +lkWho1UabZXSDS7iDi0QWd5NAoKQr6PelDdFJxPfy4miSwrUKKW5AoNaXzFbWvp i7HVajJuWEaYnQ== -----END CERTIFICATE-----Generated at Mon Dec 22 07:40:22 2025 by rpki-client