This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.mft File: nvJ_rhUw6nFnBwzxLEhoEdjgusU.mft (raw, json) Hash identifier: RPgTHrWt+DaEfaeK6LSF3xr2v7aflpq3iUsYlWcE2Bs= Subject key identifier: F1:0E:E5:86:8B:75:A7:0B:94:07:7C:28:ED:1E:DE:05:0E:A7:E9:15 Authority key identifier: 9E:F2:7F:AE:15:30:EA:71:67:07:0C:F1:2C:48:68:11:D8:E0:BA:C5 Certificate issuer: /CN=9ef27fae1530ea7167070cf12c486811d8e0bac5 Certificate serial: 019B7AB897E8AD661E3E9CC7FC66C34FF545 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nvJ_rhUw6nFnBwzxLEhoEdjgusU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.mft Manifest number: 0849 Signing time: Thu 01 Jan 2026 18:01:16 +0000 Manifest this update: Thu 01 Jan 2026 18:01:16 +0000 Manifest next update: Fri 02 Jan 2026 18:01:16 +0000 Files and hashes: 1: 3bmAz9vtv2JfaPatPhAR81BLdD4.roa (hash: pscVtMzNszIXtiYFoQgUwJA4nkNZDSRzSpGrx8TMuU8=) 2: nvJ_rhUw6nFnBwzxLEhoEdjgusU.crl (hash: aXFdE+pbMoWI6fw7RI5PqGUBCSVA3t3tuFCeXUfXAeM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.crl rsync://rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.mft rsync://rpki.ripe.net/repository/DEFAULT/nvJ_rhUw6nFnBwzxLEhoEdjgusU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 17:19:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:b8:97:e8:ad:66:1e:3e:9c:c7:fc:66:c3:4f:f5:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ef27fae1530ea7167070cf12c486811d8e0bac5 Validity Not Before: Jan 1 18:01:16 2026 GMT Not After : Jan 2 18:01:16 2026 GMT Subject: CN=f10ee5868b75a70b94077c28ed1ede050ea7e915 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:18:bd:30:ad:81:86:53:41:c1:25:ed:a6:3f: 40:fe:b6:59:ff:91:14:0e:80:b0:90:c9:ec:6f:a6: 8f:2f:b8:d5:4c:29:98:7b:e5:25:d2:37:c6:23:4b: 54:63:d2:7c:96:db:3b:c4:16:49:9f:3b:58:0b:3d: fa:20:62:91:b6:1c:cb:a8:dd:93:a9:72:d2:dc:3a: bd:39:08:54:fa:74:8b:cf:3e:0d:52:db:3c:06:19: 2b:b7:3d:7e:f1:fa:4b:f0:a5:99:a5:69:63:84:7d: 1e:27:59:46:d3:06:3f:d0:90:bb:fa:e2:64:ba:2f: b8:2d:01:00:86:28:bf:8c:ef:b2:46:09:3f:1e:de: 38:f1:2f:ff:6e:3a:3a:63:98:da:2a:4f:de:59:35: fe:dc:0c:e4:1c:c3:af:ca:3b:47:c2:c4:9d:91:ee: f5:80:c3:18:17:f8:7d:1b:7f:99:0c:22:eb:14:ea: ba:f7:34:c7:1f:8a:49:c9:fb:c7:ca:7f:88:54:a0: bc:91:49:30:76:9c:80:d1:64:d0:4c:27:58:68:52: a1:69:2e:2d:ff:39:0f:60:8f:bc:ca:f6:b4:9e:8d: 01:58:c1:4c:c7:c2:27:56:bc:ef:2b:9c:25:a1:9a: f6:a1:f7:cf:2f:d2:2e:c9:bd:a6:e3:05:f2:3a:2c: ce:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:0E:E5:86:8B:75:A7:0B:94:07:7C:28:ED:1E:DE:05:0E:A7:E9:15 X509v3 Authority Key Identifier: keyid:9E:F2:7F:AE:15:30:EA:71:67:07:0C:F1:2C:48:68:11:D8:E0:BA:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nvJ_rhUw6nFnBwzxLEhoEdjgusU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:d2:ab:59:09:4f:b9:76:95:96:23:4e:81:c2:60:6f:8f:2d: 06:6c:65:6e:2b:2c:70:0a:b6:19:32:2c:58:6f:7b:f0:d5:7d: 7c:f7:37:c0:84:ae:e7:92:ac:d4:8a:b5:2c:55:00:2e:d5:2c: 10:7e:c6:0d:6f:e4:b6:33:55:42:7b:13:00:c6:1e:fc:f1:1c: 3b:67:a9:2a:24:88:11:f7:54:88:e0:80:09:71:e3:fc:cd:47: 97:6c:37:29:cd:25:c6:88:83:25:75:61:bf:8f:bd:aa:1f:d4: a7:0d:92:42:a0:e5:5b:26:db:6f:a2:52:c1:60:b0:f7:d1:be: cc:71:ee:be:d4:3a:34:96:6d:20:57:76:44:b5:64:a2:c0:34: 15:3c:6f:8f:9e:c0:e0:f5:97:5c:49:1f:bd:8c:3e:4a:1d:45: 19:bb:99:a1:37:95:39:1d:5b:09:18:75:a4:78:e5:13:93:0d: 08:9d:f9:a6:68:df:4d:f4:9c:65:89:98:83:82:d1:d0:dc:1a: ec:90:57:d4:b7:25:fc:b3:28:ab:56:b6:b5:5b:79:03:c2:32: ec:27:3e:8a:ba:91:1a:3a:0b:07:32:85:ec:70:eb:70:b1:f3: f2:63:00:1f:08:42:94:c4:b0:fe:7a:c5:3f:a1:cf:38:b2:9c: e6:c5:72:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt6uJforWYePpzH/GbDT/VFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllZjI3ZmFlMTUzMGVhNzE2NzA3MGNmMTJjNDg2ODExZDhl MGJhYzUwHhcNMjYwMTAxMTgwMTE2WhcNMjYwMTAyMTgwMTE2WjAzMTEwLwYDVQQD EyhmMTBlZTU4NjhiNzVhNzBiOTQwNzdjMjhlZDFlZGUwNTBlYTdlOTE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxi9MK2BhlNBwSXtpj9A/rZZ/5EU DoCwkMnsb6aPL7jVTCmYe+Ul0jfGI0tUY9J8lts7xBZJnztYCz36IGKRthzLqN2T qXLS3Dq9OQhU+nSLzz4NUts8Bhkrtz1+8fpL8KWZpWljhH0eJ1lG0wY/0JC7+uJk ui+4LQEAhii/jO+yRgk/Ht448S//bjo6Y5jaKk/eWTX+3AzkHMOvyjtHwsSdke71 gMMYF/h9G3+ZDCLrFOq69zTHH4pJyfvHyn+IVKC8kUkwdpyA0WTQTCdYaFKhaS4t /zkPYI+8yva0no0BWMFMx8InVrzvK5wloZr2offPL9Iuyb2m4wXyOizOowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPEO5YaLdacLlAd8KO0e3gUOp+kVMB8GA1UdIwQY MBaAFJ7yf64VMOpxZwcM8SxIaBHY4LrFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnZKX3JoVXc2bkZuQnd6eExFaG9FZGpndXNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC81MjllODQtZmVhMS00NDI5LTgzYjIt ZGY4MjNlNGRiMWVhLzEvbnZKX3JoVXc2bkZuQnd6eExFaG9FZGpndXNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC81MjllODQtZmVhMS00NDI5LTgzYjItZGY4MjNlNGRiMWVh LzEvbnZKX3JoVXc2bkZuQnd6eExFaG9FZGpndXNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw9KrWQlP uXaVliNOgcJgb48tBmxlbisscAq2GTIsWG978NV9fPc3wISu55Ks1Iq1LFUALtUs EH7GDW/ktjNVQnsTAMYe/PEcO2epKiSIEfdUiOCACXHj/M1Hl2w3Kc0lxoiDJXVh v4+9qh/Upw2SQqDlWybbb6JSwWCw99G+zHHuvtQ6NJZtIFd2RLVkosA0FTxvj57A 4PWXXEkfvYw+Sh1FGbuZoTeVOR1bCRh1pHjlE5MNCJ35pmjfTfScZYmYg4LR0Nwa 7JBX1Lcl/LMoq1a2tVt5A8Iy7Cc+irqRGjoLBzKF7HDrcLHz8mMAHwhClMSw/nrF P6HPOLKc5sVy9g== -----END CERTIFICATE-----Generated at Thu Jan 1 19:54:35 2026 by rpki-client