This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2b3f2f-14ae-464b-9b7c-7980a2e23007/1/nVgf-JVKiXizTYSRAVRszmHEr6M.mft File: nVgf-JVKiXizTYSRAVRszmHEr6M.mft (raw, json) Hash identifier: BYZv+YGS8BixA6fymGU7xqAKrScRcRy+iWvkhXv8rZU= Subject key identifier: FF:48:0B:94:6F:11:55:E9:98:1C:98:0D:15:83:38:76:84:EF:26:CD Authority key identifier: 9D:58:1F:F8:95:4A:89:78:B3:4D:84:91:01:54:6C:CE:61:C4:AF:A3 Certificate issuer: /CN=9d581ff8954a8978b34d849101546cce61c4afa3 Certificate serial: 019B53E1555EEECA82672F23C1EC0825CBD3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nVgf-JVKiXizTYSRAVRszmHEr6M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2b3f2f-14ae-464b-9b7c-7980a2e23007/1/nVgf-JVKiXizTYSRAVRszmHEr6M.mft Manifest number: 1797 Signing time: Thu 25 Dec 2025 05:00:34 +0000 Manifest this update: Thu 25 Dec 2025 05:00:34 +0000 Manifest next update: Fri 26 Dec 2025 05:00:34 +0000 Files and hashes: 1: nVgf-JVKiXizTYSRAVRszmHEr6M.crl (hash: 36lUzCLHGkw/EwQDrWMI1eaasFKGgFI2ERPX3yUbnlA=) 2: pbhnhbhAo7f81mspcf47i1RiwC4.roa (hash: cy6NBeCA9q+KpxmPFPQqLF3HwYWfNZwADzV/UaXEKik=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2b3f2f-14ae-464b-9b7c-7980a2e23007/1/nVgf-JVKiXizTYSRAVRszmHEr6M.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/2b3f2f-14ae-464b-9b7c-7980a2e23007/1/nVgf-JVKiXizTYSRAVRszmHEr6M.mft rsync://rpki.ripe.net/repository/DEFAULT/nVgf-JVKiXizTYSRAVRszmHEr6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:e1:55:5e:ee:ca:82:67:2f:23:c1:ec:08:25:cb:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d581ff8954a8978b34d849101546cce61c4afa3 Validity Not Before: Dec 25 05:00:34 2025 GMT Not After : Dec 26 05:00:34 2025 GMT Subject: CN=ff480b946f1155e9981c980d1583387684ef26cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:9c:6a:f8:b3:61:42:7b:d9:75:a9:3e:50:26: 7a:cd:7e:23:ce:a3:e8:81:e5:6d:44:c1:d2:2e:c1: 6d:a2:36:92:3e:bd:2c:10:c0:17:eb:ec:8a:da:65: 73:ab:dc:b6:46:27:06:81:6b:bc:b9:1b:0f:5a:81: 74:f8:62:30:7d:41:68:1e:a2:f5:2c:04:a2:b9:37: e3:6f:75:51:06:e0:20:78:53:3c:a9:a4:f4:92:22: 49:da:4f:aa:69:30:68:3a:ba:3d:95:bc:5e:29:6b: 47:12:87:ef:41:63:bc:30:2c:89:c7:16:45:13:19: 14:1f:4a:fe:11:f7:b4:5b:ff:52:0b:4c:b6:4b:a0: 9c:55:10:90:3e:4e:97:7c:f4:d3:ad:60:af:ea:12: bb:46:5f:f1:31:7f:fa:c8:78:c2:e8:3a:68:f6:ca: 20:77:ae:6f:e8:3a:0e:6d:32:d2:99:82:da:7a:c9: d7:19:fe:08:16:13:f7:18:89:e3:77:d1:7e:b9:27: 1c:93:ba:08:51:a7:74:68:39:af:4f:53:b3:a8:84: f9:a3:69:40:a5:03:2d:be:8d:40:a5:f3:e9:07:f1: 94:c5:41:3f:1b:19:dd:08:5b:23:9c:8e:8e:31:ce: 20:88:77:bc:06:7d:7e:78:24:c8:b7:36:39:41:b5: ce:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:48:0B:94:6F:11:55:E9:98:1C:98:0D:15:83:38:76:84:EF:26:CD X509v3 Authority Key Identifier: keyid:9D:58:1F:F8:95:4A:89:78:B3:4D:84:91:01:54:6C:CE:61:C4:AF:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nVgf-JVKiXizTYSRAVRszmHEr6M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2b3f2f-14ae-464b-9b7c-7980a2e23007/1/nVgf-JVKiXizTYSRAVRszmHEr6M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2b3f2f-14ae-464b-9b7c-7980a2e23007/1/nVgf-JVKiXizTYSRAVRszmHEr6M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:bb:42:16:5a:13:f2:f6:f1:26:bf:41:da:62:ee:e7:a6:1a: 23:7a:bc:ca:04:37:64:7e:a5:38:f8:ed:35:87:10:37:81:11: b0:7a:fe:84:66:1d:00:92:45:64:fc:48:c6:ab:7f:3a:64:af: 9f:55:8f:cb:44:84:3e:8a:d7:a2:a9:60:57:6e:da:97:1e:8d: 56:e8:cf:ff:6c:45:8e:6f:c8:d7:d3:f7:38:f6:d2:1f:7d:2e: 77:ab:02:af:c8:e3:7b:02:03:51:38:54:33:38:ee:61:74:cb: a4:b6:60:dd:7d:a0:1c:93:d8:a0:4a:0d:ce:12:59:d1:5a:75: 12:03:42:36:93:ba:eb:31:7a:28:b4:c7:be:f1:f0:cd:26:dd: 4e:af:d2:5e:25:a4:db:38:7b:5a:f1:0e:90:0e:c4:5c:52:81: 94:3a:a4:cc:c0:95:fa:e3:56:de:99:b8:8f:42:5d:1c:e3:73: 30:26:ca:c6:4a:bd:42:13:8b:af:0c:6d:dd:43:29:e2:93:a6: e0:5f:44:55:f7:59:ac:f1:72:88:3c:7b:09:4b:d4:90:6a:ab: 8c:ef:d4:3f:d4:bb:d3:2e:d8:b6:1a:8a:55:0c:45:ad:9b:77: 8b:59:3c:c6:f3:bc:54:5a:7c:6a:db:2f:62:93:a5:9b:20:30: 80:e0:6f:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtT4VVe7sqCZy8jwewIJcvTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkNTgxZmY4OTU0YTg5NzhiMzRkODQ5MTAxNTQ2Y2NlNjFj NGFmYTMwHhcNMjUxMjI1MDUwMDM0WhcNMjUxMjI2MDUwMDM0WjAzMTEwLwYDVQQD EyhmZjQ4MGI5NDZmMTE1NWU5OTgxYzk4MGQxNTgzMzg3Njg0ZWYyNmNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Zxq+LNhQnvZdak+UCZ6zX4jzqPo geVtRMHSLsFtojaSPr0sEMAX6+yK2mVzq9y2RicGgWu8uRsPWoF0+GIwfUFoHqL1 LASiuTfjb3VRBuAgeFM8qaT0kiJJ2k+qaTBoOro9lbxeKWtHEofvQWO8MCyJxxZF ExkUH0r+Efe0W/9SC0y2S6CcVRCQPk6XfPTTrWCv6hK7Rl/xMX/6yHjC6Dpo9sog d65v6DoObTLSmYLaesnXGf4IFhP3GInjd9F+uScck7oIUad0aDmvT1OzqIT5o2lA pQMtvo1ApfPpB/GUxUE/GxndCFsjnI6OMc4giHe8Bn1+eCTItzY5QbXO8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP9IC5RvEVXpmByYDRWDOHaE7ybNMB8GA1UdIwQY MBaAFJ1YH/iVSol4s02EkQFUbM5hxK+jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblZnZi1KVktpWGl6VFlTUkFWUnN6bUhFcjZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yYjNmMmYtMTRhZS00NjRiLTliN2Mt Nzk4MGEyZTIzMDA3LzEvblZnZi1KVktpWGl6VFlTUkFWUnN6bUhFcjZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8yYjNmMmYtMTRhZS00NjRiLTliN2MtNzk4MGEyZTIzMDA3 LzEvblZnZi1KVktpWGl6VFlTUkFWUnN6bUhFcjZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF7tCFloT 8vbxJr9B2mLu56YaI3q8ygQ3ZH6lOPjtNYcQN4ERsHr+hGYdAJJFZPxIxqt/OmSv n1WPy0SEPorXoqlgV27alx6NVujP/2xFjm/I19P3OPbSH30ud6sCr8jjewIDUThU MzjuYXTLpLZg3X2gHJPYoEoNzhJZ0Vp1EgNCNpO66zF6KLTHvvHwzSbdTq/SXiWk 2zh7WvEOkA7EXFKBlDqkzMCV+uNW3pm4j0JdHONzMCbKxkq9QhOLrwxt3UMp4pOm 4F9EVfdZrPFyiDx7CUvUkGqrjO/UP9S70y7YthqKVQxFrZt3i1k8xvO8VFp8atsv YpOlmyAwgOBvzA== -----END CERTIFICATE-----Generated at Thu Dec 25 09:15:50 2025 by rpki-client