This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/nv2KDm5t1Wpu-CieSxhPDKAMM90.mft File: nv2KDm5t1Wpu-CieSxhPDKAMM90.mft (raw, json) Hash identifier: k+lHzDatwafqdd/7jAgF/3K4ytf5oz+x5BXWfAHhJEY= Subject key identifier: 07:A9:EA:3D:30:B5:18:DE:B7:6F:32:B4:8E:BD:DE:97:91:AD:CF:2B Authority key identifier: 9E:FD:8A:0E:6E:6D:D5:6A:6E:F8:28:9E:4B:18:4F:0C:A0:0C:33:DD Certificate issuer: /CN=9efd8a0e6e6dd56a6ef8289e4b184f0ca00c33dd Certificate serial: 019B560775EEBE314A3F55BB74F243E80C07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nv2KDm5t1Wpu-CieSxhPDKAMM90.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/nv2KDm5t1Wpu-CieSxhPDKAMM90.mft Manifest number: 1794 Signing time: Thu 25 Dec 2025 15:01:27 +0000 Manifest this update: Thu 25 Dec 2025 15:01:27 +0000 Manifest next update: Fri 26 Dec 2025 15:01:27 +0000 Files and hashes: 1: QNOJOIm1SKvhgHP8ibivnBfVSQA.roa (hash: pi8uHE5UurLC5GTyPY+S33YCsYwTr9zqOvpf//OyfMo=) 2: nv2KDm5t1Wpu-CieSxhPDKAMM90.crl (hash: cOqAzZIRv9nmcFipfDnwTULq0zVe2lwSnpwCdMmXvx4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/nv2KDm5t1Wpu-CieSxhPDKAMM90.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/nv2KDm5t1Wpu-CieSxhPDKAMM90.mft rsync://rpki.ripe.net/repository/DEFAULT/nv2KDm5t1Wpu-CieSxhPDKAMM90.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 10:17:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:56:07:75:ee:be:31:4a:3f:55:bb:74:f2:43:e8:0c:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9efd8a0e6e6dd56a6ef8289e4b184f0ca00c33dd Validity Not Before: Dec 25 15:01:27 2025 GMT Not After : Dec 26 15:01:27 2025 GMT Subject: CN=07a9ea3d30b518deb76f32b48ebdde9791adcf2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:de:72:6f:7f:84:d4:88:33:cb:9b:42:ef:97: 57:79:f7:96:bc:a9:7c:a9:db:ab:19:51:2e:4b:bf: a3:83:ba:7b:11:9e:9e:eb:7d:36:b3:4d:2a:4b:df: 34:40:a1:c0:f8:43:dd:40:1d:77:46:96:47:7e:69: 86:1a:d2:0c:eb:63:b3:b0:b4:53:85:40:a7:e6:5a: 5d:20:5f:b6:3f:32:bc:c8:ed:17:a4:20:f7:5e:1c: d5:51:d5:0f:d5:2f:9c:3b:b5:77:44:9f:e5:5e:e2: d6:3b:9f:10:1c:5d:c8:94:06:1e:2c:2f:5a:19:2c: 66:1a:2f:56:14:10:53:d0:fb:62:9e:b0:bb:fc:4e: 7c:89:5d:f4:7f:e9:8e:52:1b:2f:d6:d4:a4:5f:3b: 7e:80:0e:81:11:7e:e7:3d:5d:12:12:30:20:3b:2d: 23:69:20:64:a7:c1:b8:6a:31:a8:49:12:9f:a3:f9: 24:41:78:d4:6d:9c:ce:79:70:17:8b:eb:80:67:a6: 60:3f:56:67:c2:c6:fa:bc:e1:88:a5:c6:90:5b:be: a8:91:d2:17:c0:4a:db:87:e5:c4:65:d4:e7:74:07: 99:33:ae:32:f8:69:65:e7:dd:e0:d4:ef:44:0e:a4: a6:5a:b2:21:f0:83:de:07:29:ae:14:59:49:86:51: 43:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:A9:EA:3D:30:B5:18:DE:B7:6F:32:B4:8E:BD:DE:97:91:AD:CF:2B X509v3 Authority Key Identifier: keyid:9E:FD:8A:0E:6E:6D:D5:6A:6E:F8:28:9E:4B:18:4F:0C:A0:0C:33:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nv2KDm5t1Wpu-CieSxhPDKAMM90.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/nv2KDm5t1Wpu-CieSxhPDKAMM90.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/nv2KDm5t1Wpu-CieSxhPDKAMM90.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:96:62:7d:3b:b9:2e:7b:f4:77:69:65:27:bf:6c:4c:c1:8e: 28:62:fc:87:4b:a8:ff:ca:74:b6:7a:bb:cb:ec:12:f2:5a:9a: ed:97:3e:05:58:2e:1c:ae:1b:6a:73:35:d4:7b:0f:84:09:23: 01:0a:60:57:d0:3e:9e:a4:a6:33:6f:62:28:39:4c:d0:3e:f7: 88:d2:a5:37:00:d2:0f:b3:1f:17:08:f8:b2:4d:25:f7:97:ef: 6a:13:4a:d8:77:87:b0:86:f7:2a:2a:55:03:3c:9f:d5:e1:10: 46:eb:e7:ca:e4:24:67:74:cf:0f:2d:69:7b:6d:c9:7a:3e:e2: d4:1e:fc:7e:21:3e:e1:99:9a:90:50:47:1f:8a:90:23:d0:e0: 5e:fe:5b:43:87:44:37:02:45:65:7f:6b:1b:98:40:93:f4:1c: bf:79:8f:54:96:88:89:6e:8d:b1:85:38:f1:73:a5:c1:b0:d3: 64:f9:e5:ad:ab:3f:35:99:d6:51:be:66:18:95:35:27:de:6f: aa:7d:91:58:1e:a9:91:74:2b:77:56:64:05:58:c4:5c:55:16: b9:f2:f5:ae:54:5a:8e:af:e0:7e:97:10:88:7f:9e:0c:d6:c8: 9a:ad:27:ad:91:ee:27:f9:16:c8:e2:3c:21:a8:86:d0:00:0e: 4c:ed:fc:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtWB3XuvjFKP1W7dPJD6AwHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllZmQ4YTBlNmU2ZGQ1NmE2ZWY4Mjg5ZTRiMTg0ZjBjYTAw YzMzZGQwHhcNMjUxMjI1MTUwMTI3WhcNMjUxMjI2MTUwMTI3WjAzMTEwLwYDVQQD EygwN2E5ZWEzZDMwYjUxOGRlYjc2ZjMyYjQ4ZWJkZGU5NzkxYWRjZjJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmd5yb3+E1Igzy5tC75dXefeWvKl8 qdurGVEuS7+jg7p7EZ6e6302s00qS980QKHA+EPdQB13RpZHfmmGGtIM62OzsLRT hUCn5lpdIF+2PzK8yO0XpCD3XhzVUdUP1S+cO7V3RJ/lXuLWO58QHF3IlAYeLC9a GSxmGi9WFBBT0PtinrC7/E58iV30f+mOUhsv1tSkXzt+gA6BEX7nPV0SEjAgOy0j aSBkp8G4ajGoSRKfo/kkQXjUbZzOeXAXi+uAZ6ZgP1Znwsb6vOGIpcaQW76okdIX wErbh+XEZdTndAeZM64y+Gll593g1O9EDqSmWrIh8IPeBymuFFlJhlFDvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAep6j0wtRjet28ytI693peRrc8rMB8GA1UdIwQY MBaAFJ79ig5ubdVqbvgonksYTwygDDPdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnYyS0RtNXQxV3B1LUNpZVN4aFBES0FNTTkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9kNTNkN2MtYTgzMi00N2IzLTlmOTQt NTljMjMwNTQ0NDJkLzEvbnYyS0RtNXQxV3B1LUNpZVN4aFBES0FNTTkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9kNTNkN2MtYTgzMi00N2IzLTlmOTQtNTljMjMwNTQ0NDJk LzEvbnYyS0RtNXQxV3B1LUNpZVN4aFBES0FNTTkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAypZifTu5 Lnv0d2llJ79sTMGOKGL8h0uo/8p0tnq7y+wS8lqa7Zc+BVguHK4banM11HsPhAkj AQpgV9A+nqSmM29iKDlM0D73iNKlNwDSD7MfFwj4sk0l95fvahNK2HeHsIb3KipV Azyf1eEQRuvnyuQkZ3TPDy1pe23Jej7i1B78fiE+4ZmakFBHH4qQI9DgXv5bQ4dE NwJFZX9rG5hAk/Qcv3mPVJaIiW6NsYU48XOlwbDTZPnlras/NZnWUb5mGJU1J95v qn2RWB6pkXQrd1ZkBVjEXFUWufL1rlRajq/gfpcQiH+eDNbImq0nrZHuJ/kWyOI8 IaiG0AAOTO38jA== -----END CERTIFICATE-----Generated at Thu Dec 25 19:39:08 2025 by rpki-client