This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft File: nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft (raw, json) Hash identifier: oViKb0KNEILXeAx95ZQ+ee+BZe5DiJl0PBdA4CSU3oM= Subject key identifier: B6:66:A5:0D:DF:A8:D6:23:30:7D:5B:AB:FE:FA:50:BE:74:60:3B:BD Authority key identifier: 9D:5E:CC:E8:C8:7C:4F:0A:75:BA:21:E5:C8:4F:62:41:21:E0:8E:32 Certificate issuer: /CN=9d5ecce8c87c4f0a75ba21e5c84f624121e08e32 Certificate serial: 019B5261170A142D3E4951C8AFD1EF5D98D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft Manifest number: 02B8 Signing time: Wed 24 Dec 2025 22:00:53 +0000 Manifest this update: Wed 24 Dec 2025 22:00:53 +0000 Manifest next update: Thu 25 Dec 2025 22:00:53 +0000 Files and hashes: 1: W1gtHYOxkSQKrOdwkNpP1ZoMoUY.roa (hash: 5S4JEcGJktduCewz9POQY0aRBOXQzpGOLodHYl3CjqI=) 2: nV7M6Mh8Twp1uiHlyE9iQSHgjjI.crl (hash: 4Sgb4/ojQG6xF8AiiZYsjB+1W6BQpjoso8POSbwZDe4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft rsync://rpki.ripe.net/repository/DEFAULT/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 22:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:61:17:0a:14:2d:3e:49:51:c8:af:d1:ef:5d:98:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d5ecce8c87c4f0a75ba21e5c84f624121e08e32 Validity Not Before: Dec 24 22:00:53 2025 GMT Not After : Dec 25 22:00:53 2025 GMT Subject: CN=b666a50ddfa8d623307d5babfefa50be74603bbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f0:9e:df:58:0a:09:9a:bb:2f:8e:18:a1:af: 18:27:07:05:2c:d9:bd:ce:14:8b:96:8c:91:3f:b9: d4:17:19:24:fe:21:4f:c9:bb:bc:9e:89:ad:22:f4: 4b:f7:9b:ff:14:20:a5:f4:cb:d8:1e:ce:f5:f6:3a: cb:23:03:ea:f0:f5:a4:dd:b5:7d:cc:ed:69:01:30: 83:06:d5:db:7b:ad:77:88:e5:de:59:44:d5:56:a7: 50:b6:60:7c:e8:79:75:07:09:eb:6b:99:c8:8e:a5: e6:62:4e:25:01:10:22:17:5e:96:42:73:55:7c:62: 6f:61:44:10:56:da:eb:30:3d:15:fe:97:39:d4:de: ab:4e:71:ff:0a:03:92:74:62:c8:d5:6d:80:b1:33: d8:5b:a1:cd:24:e6:01:d5:9c:d6:a9:45:1a:b5:67: d6:f4:23:0e:9c:1e:8e:7c:33:87:7d:6c:e0:c9:bb: e9:09:67:8e:d0:fb:3f:e1:af:c7:6b:8a:66:b1:11: 43:ef:12:ad:bb:97:b5:8b:7a:fd:1a:d2:28:29:ca: 22:e2:17:dc:3b:33:96:13:e6:9b:9f:34:36:5a:33: 00:05:db:6b:ea:87:d4:80:63:57:08:4f:f2:61:e7: 5a:1d:68:df:c4:c5:0f:1b:52:3f:e8:be:ad:a5:33: d5:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:66:A5:0D:DF:A8:D6:23:30:7D:5B:AB:FE:FA:50:BE:74:60:3B:BD X509v3 Authority Key Identifier: keyid:9D:5E:CC:E8:C8:7C:4F:0A:75:BA:21:E5:C8:4F:62:41:21:E0:8E:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:0c:87:fc:e5:2c:6b:dd:ba:b6:28:ae:48:bd:91:c0:59:b9: 1f:ca:7a:27:50:6d:f4:c7:37:23:e6:c4:61:ea:28:fb:0f:fd: 00:87:e5:59:07:52:1b:4c:dd:a1:b6:49:2f:8c:ec:e0:e5:ed: 45:de:46:d6:35:18:2e:19:93:be:6c:30:54:a9:71:c2:29:7b: aa:04:94:81:4e:0b:21:f2:a3:cd:40:a6:19:5d:98:a3:ec:0d: cd:9b:f9:d7:48:32:4e:8f:61:75:26:8c:c8:ed:5d:83:d6:c7: 78:54:18:df:6c:28:6d:5c:81:54:72:d9:85:86:64:ae:87:f8: bb:fd:c1:f9:b8:d8:51:eb:d1:29:ee:76:0d:69:4e:74:2a:d9: 1b:57:00:4a:c8:3a:12:68:c8:b6:bf:f8:85:30:37:4d:92:3c: 84:af:ad:e1:08:c6:cd:11:77:42:d5:e4:21:24:8d:62:b6:a4: ec:fa:5e:34:6b:96:a5:1f:ff:e5:a3:bc:e2:f0:35:ed:9d:04: f4:1b:3b:4c:b2:d7:9d:b4:f3:fc:af:8d:10:f5:e0:0c:59:3b: 7c:1b:84:a3:b6:8b:c4:6d:24:62:26:eb:51:28:84:17:46:2d: f1:84:35:a5:3f:43:62:4d:75:7e:54:f3:33:4f:4d:0b:e1:58: 7e:14:c5:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSYRcKFC0+SVHIr9HvXZjXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkNWVjY2U4Yzg3YzRmMGE3NWJhMjFlNWM4NGY2MjQxMjFl MDhlMzIwHhcNMjUxMjI0MjIwMDUzWhcNMjUxMjI1MjIwMDUzWjAzMTEwLwYDVQQD EyhiNjY2YTUwZGRmYThkNjIzMzA3ZDViYWJmZWZhNTBiZTc0NjAzYmJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovCe31gKCZq7L44Yoa8YJwcFLNm9 zhSLloyRP7nUFxkk/iFPybu8nomtIvRL95v/FCCl9MvYHs719jrLIwPq8PWk3bV9 zO1pATCDBtXbe613iOXeWUTVVqdQtmB86Hl1Bwnra5nIjqXmYk4lARAiF16WQnNV fGJvYUQQVtrrMD0V/pc51N6rTnH/CgOSdGLI1W2AsTPYW6HNJOYB1ZzWqUUatWfW 9CMOnB6OfDOHfWzgybvpCWeO0Ps/4a/Ha4pmsRFD7xKtu5e1i3r9GtIoKcoi4hfc OzOWE+abnzQ2WjMABdtr6ofUgGNXCE/yYedaHWjfxMUPG1I/6L6tpTPV9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLZmpQ3fqNYjMH1bq/76UL50YDu9MB8GA1UdIwQY MBaAFJ1ezOjIfE8Kdboh5chPYkEh4I4yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblY3TTZNaDhUd3AxdWlIbHlFOWlRU0hnampJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9iZWM3NTYtMWRmZS00Mzc0LTg2MDct OWQ4ZjBlZjVjNTAzLzEvblY3TTZNaDhUd3AxdWlIbHlFOWlRU0hnampJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS9iZWM3NTYtMWRmZS00Mzc0LTg2MDctOWQ4ZjBlZjVjNTAz LzEvblY3TTZNaDhUd3AxdWlIbHlFOWlRU0hnampJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWgyH/OUs a926tiiuSL2RwFm5H8p6J1Bt9Mc3I+bEYeoo+w/9AIflWQdSG0zdobZJL4zs4OXt Rd5G1jUYLhmTvmwwVKlxwil7qgSUgU4LIfKjzUCmGV2Yo+wNzZv510gyTo9hdSaM yO1dg9bHeFQY32wobVyBVHLZhYZkrof4u/3B+bjYUevRKe52DWlOdCrZG1cASsg6 EmjItr/4hTA3TZI8hK+t4QjGzRF3QtXkISSNYrak7PpeNGuWpR//5aO84vA17Z0E 9Bs7TLLXnbTz/K+NEPXgDFk7fBuEo7aLxG0kYibrUSiEF0Yt8YQ1pT9DYk11flTz M09NC+FYfhTFSA== -----END CERTIFICATE-----Generated at Thu Dec 25 05:34:15 2025 by rpki-client