This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft File: nSVxkIIfcFio6v1IGWl0NoutjxQ.mft (raw, json) Hash identifier: mzXuf/3jzVCsa8J3z4fujrv90Gh8/uvnqQ8lu4eRV2k= Subject key identifier: 82:94:0E:67:1C:0B:87:9A:A3:AE:24:21:6E:07:DD:A8:40:94:88:EF Authority key identifier: 9D:25:71:90:82:1F:70:58:A8:EA:FD:48:19:69:74:36:8B:AD:8F:14 Certificate issuer: /CN=9d257190821f7058a8eafd48196974368bad8f14 Certificate serial: 019B405C7B6053107E807000294DB525F030 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSVxkIIfcFio6v1IGWl0NoutjxQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft Manifest number: 178C Signing time: Sun 21 Dec 2025 10:02:41 +0000 Manifest this update: Sun 21 Dec 2025 10:02:41 +0000 Manifest next update: Mon 22 Dec 2025 10:02:41 +0000 Files and hashes: 1: S6yD0xSsAdYMuFY-SqJP0As2TGI.roa (hash: NWiZKpb2JP7oKryMsUVnNHlDjQunxGKrj2ir9mx8k8E=) 2: lkhGtmHtTBEdKgsUVjONXoB0iQc.roa (hash: 9yZ07+0QCixTukFaKD5cKhr7FU+NHBM/0FUydctI6gg=) 3: nSVxkIIfcFio6v1IGWl0NoutjxQ.crl (hash: X9eNLa4/q9LY+3j+lARFfq/+5210uGyGCate+RNSUe4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft rsync://rpki.ripe.net/repository/DEFAULT/nSVxkIIfcFio6v1IGWl0NoutjxQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5c:7b:60:53:10:7e:80:70:00:29:4d:b5:25:f0:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d257190821f7058a8eafd48196974368bad8f14 Validity Not Before: Dec 21 10:02:41 2025 GMT Not After : Dec 22 10:02:41 2025 GMT Subject: CN=82940e671c0b879aa3ae24216e07dda8409488ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:43:af:a6:73:85:0e:c9:87:24:20:d5:31:e9: 12:19:4b:2e:70:ab:be:bf:c0:66:07:fc:69:1d:de: fb:2a:84:ec:66:91:97:7f:47:b0:42:4a:3f:fe:7f: e8:c1:6a:94:8b:aa:85:ad:1f:80:36:fe:5a:49:69: 84:08:18:4f:41:ae:84:1f:fc:a9:bb:f8:79:e1:b5: 0e:b9:6c:e4:4e:60:2d:e1:66:ca:7b:a0:f5:0c:ec: 72:b3:ac:86:a0:c4:91:20:bc:9b:c5:96:7d:8c:45: bf:aa:d3:be:6d:9a:1a:a3:42:06:59:58:61:49:88: 48:74:1b:69:b4:4f:78:f4:82:8b:7f:81:ab:fa:19: f3:19:3f:bb:b6:73:75:dc:b0:cc:02:ed:31:83:dc: ea:01:03:87:51:7c:5c:9e:91:6f:4b:c6:3c:de:74: 4c:3f:dd:1e:cd:3c:e6:a0:8c:6e:a8:b4:cf:ce:f2: 4e:b4:09:eb:5e:85:4c:f6:6f:99:0e:3a:a5:d0:cf: 21:2a:73:18:90:09:9e:ed:ef:07:53:04:fd:63:4b: 48:ad:95:84:74:a6:44:66:47:f1:70:9c:d3:61:14: 80:1f:1c:bb:ee:28:d6:24:fc:0c:aa:ea:16:a6:2d: ba:23:14:4e:ed:6c:c2:06:d3:3c:f4:9e:ea:8d:65: 66:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:94:0E:67:1C:0B:87:9A:A3:AE:24:21:6E:07:DD:A8:40:94:88:EF X509v3 Authority Key Identifier: keyid:9D:25:71:90:82:1F:70:58:A8:EA:FD:48:19:69:74:36:8B:AD:8F:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSVxkIIfcFio6v1IGWl0NoutjxQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:9d:70:c9:79:d0:68:3a:56:d7:e3:53:4e:2f:34:ab:b0:53: 26:dd:d9:d5:da:47:2c:16:d5:ac:71:3b:c6:a8:d7:e0:0d:78: ea:91:fe:77:fd:fe:19:0f:07:9f:a6:92:f2:d9:19:58:82:48: 2f:36:04:38:99:d0:b5:74:d7:82:23:f2:c8:37:b5:b5:b4:7c: f4:75:39:2c:79:69:74:d4:92:75:9a:ba:9a:b7:44:87:4e:34: 61:e8:75:5b:b5:3b:9a:f8:2d:90:f4:8a:79:b5:1e:38:40:4d: 2f:db:5c:48:c9:40:73:96:d3:64:a8:9c:31:18:ea:dd:e0:d0: bb:cf:b4:d9:5c:b6:4e:cd:0b:6d:b8:f3:eb:dd:1d:d8:7f:58: 2a:bd:a2:a2:5c:20:54:f9:03:41:0d:d6:77:73:23:16:5e:c6: f3:2e:e5:b8:cd:2a:31:5d:90:32:bd:9d:9e:d3:3c:29:a5:b2: 71:ee:e6:6f:98:0e:e6:f7:ae:54:96:3b:2d:f3:9e:65:75:48: e5:6c:8a:74:3b:68:29:85:66:d6:27:ad:be:fa:3e:5c:93:b0: 36:f8:6d:20:5f:31:ca:86:a0:4d:01:02:7a:02:35:ce:d4:56: 0e:ef:f9:c5:35:39:5d:9a:d6:72:7e:71:31:f7:5e:10:c7:f7: aa:0e:2d:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAXHtgUxB+gHAAKU21JfAwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMjU3MTkwODIxZjcwNThhOGVhZmQ0ODE5Njk3NDM2OGJh ZDhmMTQwHhcNMjUxMjIxMTAwMjQxWhcNMjUxMjIyMTAwMjQxWjAzMTEwLwYDVQQD Eyg4Mjk0MGU2NzFjMGI4NzlhYTNhZTI0MjE2ZTA3ZGRhODQwOTQ4OGVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA20OvpnOFDsmHJCDVMekSGUsucKu+ v8BmB/xpHd77KoTsZpGXf0ewQko//n/owWqUi6qFrR+ANv5aSWmECBhPQa6EH/yp u/h54bUOuWzkTmAt4WbKe6D1DOxys6yGoMSRILybxZZ9jEW/qtO+bZoao0IGWVhh SYhIdBtptE949IKLf4Gr+hnzGT+7tnN13LDMAu0xg9zqAQOHUXxcnpFvS8Y83nRM P90ezTzmoIxuqLTPzvJOtAnrXoVM9m+ZDjql0M8hKnMYkAme7e8HUwT9Y0tIrZWE dKZEZkfxcJzTYRSAHxy77ijWJPwMquoWpi26IxRO7WzCBtM89J7qjWVmIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIKUDmccC4eao64kIW4H3ahAlIjvMB8GA1UdIwQY MBaAFJ0lcZCCH3BYqOr9SBlpdDaLrY8UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblNWeGtJSWZjRmlvNnYxSUdXbDBOb3V0anhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS82NmY4MjktNTEyOS00ODQyLWE1YzAt Mzc0MGIwOTQxZGI4LzEvblNWeGtJSWZjRmlvNnYxSUdXbDBOb3V0anhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS82NmY4MjktNTEyOS00ODQyLWE1YzAtMzc0MGIwOTQxZGI4 LzEvblNWeGtJSWZjRmlvNnYxSUdXbDBOb3V0anhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgJ1wyXnQ aDpW1+NTTi80q7BTJt3Z1dpHLBbVrHE7xqjX4A146pH+d/3+GQ8Hn6aS8tkZWIJI LzYEOJnQtXTXgiPyyDe1tbR89HU5LHlpdNSSdZq6mrdEh040Yeh1W7U7mvgtkPSK ebUeOEBNL9tcSMlAc5bTZKicMRjq3eDQu8+02Vy2Ts0Lbbjz690d2H9YKr2iolwg VPkDQQ3Wd3MjFl7G8y7luM0qMV2QMr2dntM8KaWyce7mb5gO5veuVJY7LfOeZXVI 5WyKdDtoKYVm1ietvvo+XJOwNvhtIF8xyoagTQECegI1ztRWDu/5xTU5XZrWcn5x MfdeEMf3qg4tWw== -----END CERTIFICATE-----Generated at Sun Dec 21 13:42:00 2025 by rpki-client