This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2b3f2f-14ae-464b-9b7c-7980a2e23007/1/nVgf-JVKiXizTYSRAVRszmHEr6M.mft File: nVgf-JVKiXizTYSRAVRszmHEr6M.mft (raw, json) Hash identifier: c4Pqvuxnzf4+g6wT2D52N9KzN1WnnSY+eYyr8CaT4JA= Subject key identifier: 17:46:20:24:B4:98:FE:F8:EE:E2:A6:2C:EF:8E:7D:5C:4C:E3:AF:16 Authority key identifier: 9D:58:1F:F8:95:4A:89:78:B3:4D:84:91:01:54:6C:CE:61:C4:AF:A3 Certificate issuer: /CN=9d581ff8954a8978b34d849101546cce61c4afa3 Certificate serial: 019B427FE3583C3B5123F237B3F798A162E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nVgf-JVKiXizTYSRAVRszmHEr6M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2b3f2f-14ae-464b-9b7c-7980a2e23007/1/nVgf-JVKiXizTYSRAVRszmHEr6M.mft Manifest number: 178E Signing time: Sun 21 Dec 2025 20:00:36 +0000 Manifest this update: Sun 21 Dec 2025 20:00:36 +0000 Manifest next update: Mon 22 Dec 2025 20:00:36 +0000 Files and hashes: 1: nVgf-JVKiXizTYSRAVRszmHEr6M.crl (hash: KgNkJo56SNfGsMoflpLPoQfWhBaTLNbbtX4eBQr8HgI=) 2: pbhnhbhAo7f81mspcf47i1RiwC4.roa (hash: cy6NBeCA9q+KpxmPFPQqLF3HwYWfNZwADzV/UaXEKik=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2b3f2f-14ae-464b-9b7c-7980a2e23007/1/nVgf-JVKiXizTYSRAVRszmHEr6M.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/2b3f2f-14ae-464b-9b7c-7980a2e23007/1/nVgf-JVKiXizTYSRAVRszmHEr6M.mft rsync://rpki.ripe.net/repository/DEFAULT/nVgf-JVKiXizTYSRAVRszmHEr6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 20:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:7f:e3:58:3c:3b:51:23:f2:37:b3:f7:98:a1:62:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d581ff8954a8978b34d849101546cce61c4afa3 Validity Not Before: Dec 21 20:00:36 2025 GMT Not After : Dec 22 20:00:36 2025 GMT Subject: CN=17462024b498fef8eee2a62cef8e7d5c4ce3af16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:82:ca:81:a7:17:88:43:59:cb:40:5e:12:c2: 19:10:8f:5f:ca:c0:5f:48:e4:c0:10:57:15:51:02: 1b:be:b1:5a:0d:b3:dd:b6:75:02:7f:91:0f:ca:e2: a3:ba:20:29:89:b0:e7:01:ec:9c:2e:0c:a4:21:d9: e0:45:81:a6:d3:27:6a:92:07:a2:3d:de:8e:19:46: e6:68:a0:18:d4:5f:56:55:87:52:8e:13:00:02:43: 81:91:34:9a:a2:5a:2a:41:1a:60:1c:df:61:b9:f6: 12:49:32:59:a3:07:a6:6f:71:b0:72:f4:98:15:85: ff:c4:29:75:0c:69:15:34:c0:d9:58:25:74:8d:3d: c7:49:76:22:df:67:44:54:c8:7a:27:c4:9a:0b:77: 12:7d:1f:ec:15:5b:b9:77:6e:62:62:9d:73:c0:17: 15:13:79:5c:33:8e:aa:42:35:99:20:56:7f:72:d5: de:cf:64:2d:48:89:a9:f6:d5:a5:ef:e0:6c:fd:e4: 0a:6a:40:ea:74:4c:d6:50:0a:7d:d1:0f:3b:90:a4: 8c:18:e2:40:e5:a7:c7:72:8a:3b:fc:a0:1b:99:7e: 5b:69:fd:41:a6:8e:ea:3b:b4:05:fb:5e:19:eb:5f: a4:c1:e8:e0:3f:b5:8d:f5:c1:0f:f6:6b:30:be:4f: b6:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:46:20:24:B4:98:FE:F8:EE:E2:A6:2C:EF:8E:7D:5C:4C:E3:AF:16 X509v3 Authority Key Identifier: keyid:9D:58:1F:F8:95:4A:89:78:B3:4D:84:91:01:54:6C:CE:61:C4:AF:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nVgf-JVKiXizTYSRAVRszmHEr6M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2b3f2f-14ae-464b-9b7c-7980a2e23007/1/nVgf-JVKiXizTYSRAVRszmHEr6M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2b3f2f-14ae-464b-9b7c-7980a2e23007/1/nVgf-JVKiXizTYSRAVRszmHEr6M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:12:c5:42:23:89:6e:a5:b5:10:b4:ef:0f:5a:23:c5:b9:9c: a5:df:9e:2e:15:10:f9:5c:6d:41:b0:4b:82:5c:24:7d:b4:de: 2b:17:51:7c:20:cb:07:42:70:a0:cd:ce:b0:ea:a8:a6:e3:1f: 9d:b3:64:ac:11:e5:3e:87:50:b8:ae:ea:97:5c:9e:0e:1d:89: 3f:cf:e7:2d:37:d1:d0:0b:07:6e:34:b9:93:9f:bf:ed:78:5e: c1:77:c0:db:3b:6e:93:d5:34:d8:8f:44:54:50:7a:02:a1:87: 3f:ff:b1:f9:05:7d:af:7d:96:c8:cb:06:73:98:f0:76:bc:c8: fe:43:a3:c3:13:29:95:cf:97:f5:f4:a9:b0:98:87:56:30:5c: a5:2c:d4:c8:62:4f:45:f4:00:70:74:c7:e3:4b:fe:75:62:62: 6c:26:4b:e2:4f:ae:09:34:2d:a1:d7:b5:04:e7:8d:b4:c8:5a: ef:72:1f:3d:a0:ed:74:7d:91:23:e3:3b:f0:7c:25:c4:a1:e8: 03:92:8c:fd:23:ca:e0:36:8e:3b:0f:5a:17:72:15:25:6f:fe: 83:e7:18:a8:0c:f8:df:87:ce:57:5a:e5:f5:c8:d3:bc:02:f7: de:2d:b6:3e:c3:cd:0d:db:65:46:ed:09:d7:75:8e:89:19:8c: 73:83:de:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCf+NYPDtRI/I3s/eYoWLgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkNTgxZmY4OTU0YTg5NzhiMzRkODQ5MTAxNTQ2Y2NlNjFj NGFmYTMwHhcNMjUxMjIxMjAwMDM2WhcNMjUxMjIyMjAwMDM2WjAzMTEwLwYDVQQD EygxNzQ2MjAyNGI0OThmZWY4ZWVlMmE2MmNlZjhlN2Q1YzRjZTNhZjE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYLKgacXiENZy0BeEsIZEI9fysBf SOTAEFcVUQIbvrFaDbPdtnUCf5EPyuKjuiApibDnAeycLgykIdngRYGm0ydqkgei Pd6OGUbmaKAY1F9WVYdSjhMAAkOBkTSaoloqQRpgHN9hufYSSTJZowemb3GwcvSY FYX/xCl1DGkVNMDZWCV0jT3HSXYi32dEVMh6J8SaC3cSfR/sFVu5d25iYp1zwBcV E3lcM46qQjWZIFZ/ctXez2QtSImp9tWl7+Bs/eQKakDqdEzWUAp90Q87kKSMGOJA 5afHcoo7/KAbmX5baf1Bpo7qO7QF+14Z61+kwejgP7WN9cEP9mswvk+22QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBdGICS0mP747uKmLO+OfVxM468WMB8GA1UdIwQY MBaAFJ1YH/iVSol4s02EkQFUbM5hxK+jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblZnZi1KVktpWGl6VFlTUkFWUnN6bUhFcjZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yYjNmMmYtMTRhZS00NjRiLTliN2Mt Nzk4MGEyZTIzMDA3LzEvblZnZi1KVktpWGl6VFlTUkFWUnN6bUhFcjZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8yYjNmMmYtMTRhZS00NjRiLTliN2MtNzk4MGEyZTIzMDA3 LzEvblZnZi1KVktpWGl6VFlTUkFWUnN6bUhFcjZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeRLFQiOJ bqW1ELTvD1ojxbmcpd+eLhUQ+VxtQbBLglwkfbTeKxdRfCDLB0JwoM3OsOqopuMf nbNkrBHlPodQuK7ql1yeDh2JP8/nLTfR0AsHbjS5k5+/7XhewXfA2ztuk9U02I9E VFB6AqGHP/+x+QV9r32WyMsGc5jwdrzI/kOjwxMplc+X9fSpsJiHVjBcpSzUyGJP RfQAcHTH40v+dWJibCZL4k+uCTQtode1BOeNtMha73IfPaDtdH2RI+M78HwlxKHo A5KM/SPK4DaOOw9aF3IVJW/+g+cYqAz434fOV1rl9cjTvAL33i22PsPNDdtlRu0J 13WOiRmMc4Pe/A== -----END CERTIFICATE-----Generated at Mon Dec 22 04:43:52 2025 by rpki-client