This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/8bdb68-7016-468b-9751-0f59527f34cb/1/NoEciv-vsKwfX39v97ZLtwNGRX0.mft File: NoEciv-vsKwfX39v97ZLtwNGRX0.mft (raw, json) Hash identifier: DYAVTS1C8u4B197dgr5mVSZSYGsuz5GgcdRprHKhXSU= Subject key identifier: A0:11:B6:81:0B:75:DB:78:97:F6:47:6B:BB:C9:56:F9:8C:82:C5:85 Authority key identifier: 36:81:1C:8A:FF:AF:B0:AC:1F:5F:7F:6F:F7:B6:4B:B7:03:46:45:7D Certificate issuer: /CN=36811c8affafb0ac1f5f7f6ff7b64bb70346457d Certificate serial: 019B3344B00812551F5DDF37A2BC1F6F07A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NoEciv-vsKwfX39v97ZLtwNGRX0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/8bdb68-7016-468b-9751-0f59527f34cb/1/NoEciv-vsKwfX39v97ZLtwNGRX0.mft Manifest number: 0934 Signing time: Thu 18 Dec 2025 21:01:38 +0000 Manifest this update: Thu 18 Dec 2025 21:01:38 +0000 Manifest next update: Fri 19 Dec 2025 21:01:38 +0000 Files and hashes: 1: NoEciv-vsKwfX39v97ZLtwNGRX0.crl (hash: kvZMkmEIwgDJcF6Q+v0BwxNeoNasDAkXzQ+QEZZRFZo=) 2: sKsIMzPD584L0VxOKj3vB4o7BOo.roa (hash: rcaZ/4MvSYNPC9u83vkkXq81Cjv7cMoYe82DYi6JocE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/8bdb68-7016-468b-9751-0f59527f34cb/1/NoEciv-vsKwfX39v97ZLtwNGRX0.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/8bdb68-7016-468b-9751-0f59527f34cb/1/NoEciv-vsKwfX39v97ZLtwNGRX0.mft rsync://rpki.ripe.net/repository/DEFAULT/NoEciv-vsKwfX39v97ZLtwNGRX0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 21:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:44:b0:08:12:55:1f:5d:df:37:a2:bc:1f:6f:07:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36811c8affafb0ac1f5f7f6ff7b64bb70346457d Validity Not Before: Dec 18 21:01:38 2025 GMT Not After : Dec 19 21:01:38 2025 GMT Subject: CN=a011b6810b75db7897f6476bbbc956f98c82c585 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:84:ff:2b:23:0f:be:ff:22:4e:18:a0:7b:06: 17:10:da:38:84:4e:2d:2e:57:dd:bc:b0:b9:9c:ab: 83:68:f4:c0:6d:d4:ad:8a:0b:fc:05:46:3c:a6:2f: 1b:a0:a8:dd:38:12:13:63:6a:0b:50:aa:65:fb:e0: c5:5f:a8:34:f5:17:b2:76:45:5d:2e:a7:87:13:a7: 71:b2:69:5e:a0:da:f5:c0:20:d7:80:5d:af:24:33: 9d:e0:15:58:b6:7f:96:85:91:cc:c8:a2:93:47:49: 9d:67:f8:54:11:ba:2b:9f:c9:2d:84:0c:d7:49:20: bb:a9:9b:7d:4a:d5:38:ce:17:ca:a1:ea:6e:6b:14: cd:de:af:65:c1:82:b2:b3:16:a5:e2:8c:6c:1f:0d: 7a:14:1b:2c:56:10:7d:e6:44:1a:00:a2:44:a7:83: 51:bc:fa:6d:ca:2b:7c:4f:43:47:d5:45:c2:b9:a8: ca:7a:29:44:c4:4a:a0:7c:2c:6c:bf:f4:9d:74:05: a9:ea:e2:22:e3:24:ea:25:36:81:5a:84:d4:c1:f8: 14:09:63:52:93:7e:2e:a5:98:18:59:5c:18:b9:e1: 88:c3:3e:3a:c6:25:17:8c:45:61:59:df:29:25:5f: 25:44:81:f1:4c:0f:a0:60:91:d8:fd:ea:6a:e6:9e: 3e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:11:B6:81:0B:75:DB:78:97:F6:47:6B:BB:C9:56:F9:8C:82:C5:85 X509v3 Authority Key Identifier: keyid:36:81:1C:8A:FF:AF:B0:AC:1F:5F:7F:6F:F7:B6:4B:B7:03:46:45:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NoEciv-vsKwfX39v97ZLtwNGRX0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8bdb68-7016-468b-9751-0f59527f34cb/1/NoEciv-vsKwfX39v97ZLtwNGRX0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8bdb68-7016-468b-9751-0f59527f34cb/1/NoEciv-vsKwfX39v97ZLtwNGRX0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:78:17:2a:f1:31:a2:79:d2:d0:88:5e:f4:1c:37:71:2e:c7: 2f:7c:a5:d0:f0:70:b8:f2:0c:2a:f9:66:0b:86:44:81:d1:88: cc:90:87:8c:c2:52:9f:6d:ea:b5:f5:16:d5:30:37:5c:40:75: 1e:44:c7:eb:83:48:0b:99:36:0e:30:d4:b4:f5:4a:45:61:a4: 4f:52:18:1b:64:40:42:af:ff:8e:07:9a:fe:86:a4:d3:f2:56: 86:82:15:95:55:3a:f7:51:95:a8:dc:cc:a2:1e:e2:f0:09:19: 25:4b:0a:4e:32:0b:01:58:41:8e:91:c0:99:e3:ae:3d:ce:2b: 93:aa:ba:b7:af:c4:3c:f5:49:74:6b:c7:43:28:7c:cd:f5:99: dc:1a:11:e6:da:c0:b8:d7:6c:09:0f:83:3b:10:11:42:47:54: 64:0b:a7:2d:12:29:b8:1e:54:9d:28:b1:3d:fc:ea:0f:a9:29: 9f:5f:10:24:7a:1a:5a:46:ad:c4:cf:b0:91:9b:57:41:18:d8: a6:17:b5:93:46:10:82:5f:69:cc:28:77:b1:ac:82:1c:34:51: 2d:6c:96:c3:a6:6f:cf:5c:90:d7:a8:07:ae:26:66:1d:12:44: 94:19:55:78:75:dd:a1:12:b3:6d:2c:d9:f7:ea:bb:84:17:c4: 72:f2:5f:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszRLAIElUfXd83orwfbwenMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2ODExYzhhZmZhZmIwYWMxZjVmN2Y2ZmY3YjY0YmI3MDM0 NjQ1N2QwHhcNMjUxMjE4MjEwMTM4WhcNMjUxMjE5MjEwMTM4WjAzMTEwLwYDVQQD EyhhMDExYjY4MTBiNzVkYjc4OTdmNjQ3NmJiYmM5NTZmOThjODJjNTg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4T/KyMPvv8iThigewYXENo4hE4t LlfdvLC5nKuDaPTAbdStigv8BUY8pi8boKjdOBITY2oLUKpl++DFX6g09ReydkVd LqeHE6dxsmleoNr1wCDXgF2vJDOd4BVYtn+WhZHMyKKTR0mdZ/hUEborn8kthAzX SSC7qZt9StU4zhfKoepuaxTN3q9lwYKysxal4oxsHw16FBssVhB95kQaAKJEp4NR vPptyit8T0NH1UXCuajKeilExEqgfCxsv/SddAWp6uIi4yTqJTaBWoTUwfgUCWNS k34upZgYWVwYueGIwz46xiUXjEVhWd8pJV8lRIHxTA+gYJHY/epq5p4+bQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKARtoELddt4l/ZHa7vJVvmMgsWFMB8GA1UdIwQY MBaAFDaBHIr/r7CsH19/b/e2S7cDRkV9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTm9FY2l2LXZzS3dmWDM5djk3Wkx0d05HUlgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi84YmRiNjgtNzAxNi00NjhiLTk3NTEt MGY1OTUyN2YzNGNiLzEvTm9FY2l2LXZzS3dmWDM5djk3Wkx0d05HUlgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi84YmRiNjgtNzAxNi00NjhiLTk3NTEtMGY1OTUyN2YzNGNi LzEvTm9FY2l2LXZzS3dmWDM5djk3Wkx0d05HUlgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaXgXKvEx onnS0Ihe9Bw3cS7HL3yl0PBwuPIMKvlmC4ZEgdGIzJCHjMJSn23qtfUW1TA3XEB1 HkTH64NIC5k2DjDUtPVKRWGkT1IYG2RAQq//jgea/oak0/JWhoIVlVU691GVqNzM oh7i8AkZJUsKTjILAVhBjpHAmeOuPc4rk6q6t6/EPPVJdGvHQyh8zfWZ3BoR5trA uNdsCQ+DOxARQkdUZAunLRIpuB5UnSixPfzqD6kpn18QJHoaWkatxM+wkZtXQRjY phe1k0YQgl9pzCh3sayCHDRRLWyWw6Zvz1yQ16gHriZmHRJElBlVeHXdoRKzbSzZ 9+q7hBfEcvJf7Q== -----END CERTIFICATE-----Generated at Fri Dec 19 03:09:04 2025 by rpki-client