This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.mft File: nVE44frPe2XbtXX6fUckDCeLNN8.mft (raw, json) Hash identifier: lXnlBMSRcmqwJk3D0y+odJj0R4xLprcGWoWqia4DmWo= Subject key identifier: 4A:65:5D:68:57:B2:91:CE:A0:B9:6B:CD:F4:27:BA:9B:2A:60:03:02 Authority key identifier: 9D:51:38:E1:FA:CF:7B:65:DB:B5:75:FA:7D:47:24:0C:27:8B:34:DF Certificate issuer: /CN=9d5138e1facf7b65dbb575fa7d47240c278b34df Certificate serial: 019B42B7B71BC1BA61768B1AC4284EA174A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nVE44frPe2XbtXX6fUckDCeLNN8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.mft Manifest number: 1798 Signing time: Sun 21 Dec 2025 21:01:34 +0000 Manifest this update: Sun 21 Dec 2025 21:01:34 +0000 Manifest next update: Mon 22 Dec 2025 21:01:34 +0000 Files and hashes: 1: EOilBiIenaox7njpqs3_DfcHwlA.roa (hash: fzNbr06IBLk41vJ4PfPSo6OIziKfU6CFjSqPnCza+iE=) 2: SrPm1i3skuiVEboXgAOiwvJ0e24.roa (hash: yv8h4FDHS+rMOcdFcyHu/1yEMbW/iUuOt5Oggkr9ddY=) 3: mpLcK6oOkOzJN_8yv56Qh9Pb3jU.roa (hash: xqGJM6N0Wj7tHelbHPs6OohD0rdA/bMhZJppwS9pXD8=) 4: nVE44frPe2XbtXX6fUckDCeLNN8.crl (hash: 8CzF/0QJCNb/S/Uv/ARbTXHe7juV9v0oL7+uIB9E+s4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.crl rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.mft rsync://rpki.ripe.net/repository/DEFAULT/nVE44frPe2XbtXX6fUckDCeLNN8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 21:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:b7:b7:1b:c1:ba:61:76:8b:1a:c4:28:4e:a1:74:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d5138e1facf7b65dbb575fa7d47240c278b34df Validity Not Before: Dec 21 21:01:34 2025 GMT Not After : Dec 22 21:01:34 2025 GMT Subject: CN=4a655d6857b291cea0b96bcdf427ba9b2a600302 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:81:22:9b:35:ca:98:6a:e8:43:a3:2b:b0:25: 1d:b0:c5:fd:62:f2:6f:c9:36:f3:96:64:b9:80:84: 5a:2d:1a:17:75:a7:ea:2c:82:63:2a:a1:6c:20:01: ff:ea:64:81:d0:40:a3:39:b7:80:99:25:d9:8e:f6: 41:d2:26:89:a3:ae:ad:69:3e:e2:32:ec:f9:b1:9d: 2f:0f:56:6e:56:e2:b6:5f:e8:d1:0b:da:96:f4:36: e5:43:1d:b6:24:54:3a:c0:f9:13:99:49:13:31:05: 42:07:12:9d:3a:b4:36:39:7c:d3:43:58:1f:4a:a4: d4:79:50:cc:f9:81:f7:14:b3:79:39:87:46:38:13: 6e:e7:22:57:4d:fc:c9:7e:f0:2c:8e:08:ce:c8:80: 2e:0a:b5:9b:26:82:15:23:9e:97:b4:1c:70:41:82: e0:2c:7f:e1:92:48:92:9d:78:fd:b2:c7:d9:21:6e: a3:2b:07:0e:9b:ff:f9:1d:e7:aa:f3:fc:89:14:10: c7:22:f5:df:96:c3:3b:67:92:26:47:0a:1c:16:14: 32:53:97:ca:aa:46:70:6d:c6:75:ed:77:3c:19:2d: b6:22:23:29:f4:89:ac:35:a7:2b:c9:03:5e:ac:46: f7:ca:c3:8f:f5:84:37:8c:a2:ba:25:28:42:cd:7f: 94:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:65:5D:68:57:B2:91:CE:A0:B9:6B:CD:F4:27:BA:9B:2A:60:03:02 X509v3 Authority Key Identifier: keyid:9D:51:38:E1:FA:CF:7B:65:DB:B5:75:FA:7D:47:24:0C:27:8B:34:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nVE44frPe2XbtXX6fUckDCeLNN8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:13:f9:49:53:60:03:64:a8:a8:74:d8:91:50:06:8a:1b:fb: c9:d0:4a:7f:24:aa:df:17:6e:85:33:d4:f7:07:3a:3a:7e:37: 88:dc:e9:84:5e:d5:5f:10:a6:50:71:99:e9:5e:46:4a:a9:d9: 74:a8:1d:5b:a3:d7:33:84:59:ae:d9:df:37:e3:aa:a4:d8:2a: 70:3b:c3:d8:00:14:f5:ed:f9:bf:f3:e0:33:04:27:2b:25:92: 59:0a:6b:f5:d8:16:75:53:a9:2f:be:f0:40:74:de:f2:6f:c2: e6:50:38:88:1a:d0:47:a1:e6:3d:f7:a3:d0:6f:70:53:f6:92: ac:27:fb:b2:bd:e2:57:5d:cb:44:e0:f3:81:d8:8f:6e:16:b3: 6f:b3:20:c0:d4:97:c7:c2:a6:a6:90:94:e7:e6:9a:9b:25:17: c5:40:74:39:f5:65:4a:8e:df:69:86:c7:8c:63:0a:57:56:c4: 0e:a8:f6:2f:5b:61:0f:c2:d4:2a:51:6e:53:80:d4:51:6b:92: 07:a5:f6:7b:9a:65:0d:d7:0e:00:74:30:31:a0:5f:a8:8a:cc: 28:57:c5:98:56:54:57:a2:7a:2d:8b:cb:f4:2d:c3:80:88:73: 57:9d:9f:55:0e:b6:df:c2:ba:b6:55:1b:01:44:9e:36:ce:50: c6:90:3c:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCt7cbwbphdosaxChOoXShMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkNTEzOGUxZmFjZjdiNjVkYmI1NzVmYTdkNDcyNDBjMjc4 YjM0ZGYwHhcNMjUxMjIxMjEwMTM0WhcNMjUxMjIyMjEwMTM0WjAzMTEwLwYDVQQD Eyg0YTY1NWQ2ODU3YjI5MWNlYTBiOTZiY2RmNDI3YmE5YjJhNjAwMzAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroEimzXKmGroQ6MrsCUdsMX9YvJv yTbzlmS5gIRaLRoXdafqLIJjKqFsIAH/6mSB0ECjObeAmSXZjvZB0iaJo66taT7i Muz5sZ0vD1ZuVuK2X+jRC9qW9DblQx22JFQ6wPkTmUkTMQVCBxKdOrQ2OXzTQ1gf SqTUeVDM+YH3FLN5OYdGOBNu5yJXTfzJfvAsjgjOyIAuCrWbJoIVI56XtBxwQYLg LH/hkkiSnXj9ssfZIW6jKwcOm//5Heeq8/yJFBDHIvXflsM7Z5ImRwocFhQyU5fK qkZwbcZ17Xc8GS22IiMp9ImsNacryQNerEb3ysOP9YQ3jKK6JShCzX+UewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEplXWhXspHOoLlrzfQnupsqYAMCMB8GA1UdIwQY MBaAFJ1ROOH6z3tl27V1+n1HJAwnizTfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblZFNDRmclBlMlhidFhYNmZVY2tEQ2VMTk44LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDAxZmYtODMyMy00Yjg5LWJlM2Qt YzJlZmViM2IzMmE1LzEvblZFNDRmclBlMlhidFhYNmZVY2tEQ2VMTk44Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kMDAxZmYtODMyMy00Yjg5LWJlM2QtYzJlZmViM2IzMmE1 LzEvblZFNDRmclBlMlhidFhYNmZVY2tEQ2VMTk44LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWRP5SVNg A2SoqHTYkVAGihv7ydBKfySq3xduhTPU9wc6On43iNzphF7VXxCmUHGZ6V5GSqnZ dKgdW6PXM4RZrtnfN+OqpNgqcDvD2AAU9e35v/PgMwQnKyWSWQpr9dgWdVOpL77w QHTe8m/C5lA4iBrQR6HmPfej0G9wU/aSrCf7sr3iV13LRODzgdiPbhazb7MgwNSX x8KmppCU5+aamyUXxUB0OfVlSo7faYbHjGMKV1bEDqj2L1thD8LUKlFuU4DUUWuS B6X2e5plDdcOAHQwMaBfqIrMKFfFmFZUV6J6LYvL9C3DgIhzV52fVQ6238K6tlUb AUSeNs5QxpA8tA== -----END CERTIFICATE-----Generated at Mon Dec 22 02:50:52 2025 by rpki-client