This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.mft File: nVoXJx2ZzxW3PsxlhnMUPCjiB-0.mft (raw, json) Hash identifier: qWGjzJBLTOgAlRo3SRasEOT2/RKRN3HhQe4/G7j5L1Y= Subject key identifier: FC:29:AD:A4:A6:01:35:44:95:39:29:35:9E:C0:96:8C:2F:07:67:43 Authority key identifier: 9D:5A:17:27:1D:99:CF:15:B7:3E:CC:65:86:73:14:3C:28:E2:07:ED Certificate issuer: /CN=9d5a17271d99cf15b73ecc658673143c28e207ed Certificate serial: 019B413654B3677C2FC48BA8F15C1502E6D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.mft Manifest number: 0390 Signing time: Sun 21 Dec 2025 14:00:38 +0000 Manifest this update: Sun 21 Dec 2025 14:00:38 +0000 Manifest next update: Mon 22 Dec 2025 14:00:38 +0000 Files and hashes: 1: MaMIYt08Tc0Dvw5CdW33aL4DYlE.roa (hash: 1yCq3fhsKBl5S18vVeljQHZ1fPWzPn1J4kkG7WWFZZc=) 2: jzoaRST14iVv_bSGhulsr5_HKjg.roa (hash: eDucU+vORvsLhsrcVm/yMIU0JKeTCq2CqXsu5GoLiJA=) 3: nVoXJx2ZzxW3PsxlhnMUPCjiB-0.crl (hash: RzlMJ3RprYJu7iS/teEonunHPs35bueMCUZja4tJ7OA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.crl rsync://rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.mft rsync://rpki.ripe.net/repository/DEFAULT/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:36:54:b3:67:7c:2f:c4:8b:a8:f1:5c:15:02:e6:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d5a17271d99cf15b73ecc658673143c28e207ed Validity Not Before: Dec 21 14:00:38 2025 GMT Not After : Dec 22 14:00:38 2025 GMT Subject: CN=fc29ada4a6013544953929359ec0968c2f076743 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ba:7a:1d:a4:12:61:00:e4:99:91:d2:83:56: ab:e9:08:96:b7:57:de:3e:62:97:0b:8c:d3:c5:1e: a3:7a:c4:8a:71:a2:7e:04:16:02:f8:85:fa:90:b0: cb:f6:04:54:73:27:57:91:dc:bf:6c:f8:fc:58:fa: 49:27:34:cd:0b:2c:b5:1f:db:74:06:c6:03:76:cb: 74:b0:95:94:29:d5:7d:c7:f1:b3:e5:ab:06:93:47: 52:f1:42:d3:42:3d:c6:b0:30:c2:3e:2e:7c:b0:b2: 24:00:a9:56:d4:2a:29:76:7c:44:ca:2d:34:32:15: c5:1d:9e:2c:5d:fb:20:09:7b:ff:31:e4:a1:81:b3: ac:0b:08:73:c3:9d:e6:11:3b:04:17:e3:ba:a9:28: c5:d1:71:47:24:01:63:1a:ea:6d:70:15:22:de:e1: 6a:47:f1:de:29:b7:76:95:3f:07:06:70:9b:4a:86: d7:4e:c5:52:2d:83:b1:74:5c:e8:47:6c:ba:b1:10: d3:0e:6d:30:a0:c5:34:83:93:27:18:78:a5:d3:e3: 7d:d2:92:4a:01:57:34:0f:f9:77:e2:19:9c:1e:c2: 66:7a:52:27:31:68:c6:2f:8f:64:f0:45:d7:ec:49: ad:45:b8:5d:be:03:ab:66:90:e1:5f:4e:a0:86:f3: 36:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:29:AD:A4:A6:01:35:44:95:39:29:35:9E:C0:96:8C:2F:07:67:43 X509v3 Authority Key Identifier: keyid:9D:5A:17:27:1D:99:CF:15:B7:3E:CC:65:86:73:14:3C:28:E2:07:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:d1:1b:0a:57:91:0f:2e:24:44:fc:1e:41:d3:5d:9f:7e:b5: 8b:80:fc:26:be:67:5c:14:8b:b0:2d:ee:42:f2:98:47:9c:9c: 30:aa:a0:b5:5f:20:9a:7c:f9:df:e1:a5:2e:4e:c5:3d:19:dd: 8d:28:54:c7:55:5b:be:1f:56:14:f6:f3:ef:c5:d0:fd:e5:33: 8a:5c:64:67:d0:9d:08:c9:14:0c:f6:0f:02:78:15:c2:ec:47: c5:f0:df:20:a9:07:3f:d4:d2:91:8e:03:2b:56:32:ff:58:d6: 1f:f4:be:8a:05:83:a0:ce:d7:4c:a4:38:42:67:c5:07:8a:9c: 8a:a0:7b:a0:30:9c:12:41:33:d0:98:50:23:e0:d8:c0:77:53: c8:57:4f:fe:bf:c9:71:fa:f7:d8:af:03:93:e1:0a:4b:39:ab: b6:8b:61:ce:bd:42:43:18:5c:97:3f:c7:e4:10:f3:7f:92:a4: ab:6b:27:37:a7:e4:97:3a:5f:43:fd:dd:8c:80:4f:15:1b:01: 91:61:e5:d7:a3:85:2b:27:74:ae:5f:72:45:8b:2b:bf:a4:bd: 7b:43:f3:e5:0e:b6:2c:a8:05:ba:2a:f6:43:0e:67:0a:80:18: 2f:ab:3b:c7:e8:8d:08:2f:d6:2e:0c:da:50:fe:18:6e:2f:00: c8:2e:f8:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBNlSzZ3wvxIuo8VwVAubTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkNWExNzI3MWQ5OWNmMTViNzNlY2M2NTg2NzMxNDNjMjhl MjA3ZWQwHhcNMjUxMjIxMTQwMDM4WhcNMjUxMjIyMTQwMDM4WjAzMTEwLwYDVQQD EyhmYzI5YWRhNGE2MDEzNTQ0OTUzOTI5MzU5ZWMwOTY4YzJmMDc2NzQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLp6HaQSYQDkmZHSg1ar6QiWt1fe PmKXC4zTxR6jesSKcaJ+BBYC+IX6kLDL9gRUcydXkdy/bPj8WPpJJzTNCyy1H9t0 BsYDdst0sJWUKdV9x/Gz5asGk0dS8ULTQj3GsDDCPi58sLIkAKlW1CopdnxEyi00 MhXFHZ4sXfsgCXv/MeShgbOsCwhzw53mETsEF+O6qSjF0XFHJAFjGuptcBUi3uFq R/HeKbd2lT8HBnCbSobXTsVSLYOxdFzoR2y6sRDTDm0woMU0g5MnGHil0+N90pJK AVc0D/l34hmcHsJmelInMWjGL49k8EXX7EmtRbhdvgOrZpDhX06ghvM2YwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPwpraSmATVElTkpNZ7AlowvB2dDMB8GA1UdIwQY MBaAFJ1aFycdmc8Vtz7MZYZzFDwo4gftMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblZvWEp4Mlp6eFczUHN4bGhuTVVQQ2ppQi0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My85MDg5NTYtYzVlNi00YTNlLTlmMTct YTE0Y2EwZWMxYzFhLzEvblZvWEp4Mlp6eFczUHN4bGhuTVVQQ2ppQi0wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My85MDg5NTYtYzVlNi00YTNlLTlmMTctYTE0Y2EwZWMxYzFh LzEvblZvWEp4Mlp6eFczUHN4bGhuTVVQQ2ppQi0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE9EbCleR Dy4kRPweQdNdn361i4D8Jr5nXBSLsC3uQvKYR5ycMKqgtV8gmnz53+GlLk7FPRnd jShUx1Vbvh9WFPbz78XQ/eUzilxkZ9CdCMkUDPYPAngVwuxHxfDfIKkHP9TSkY4D K1Yy/1jWH/S+igWDoM7XTKQ4QmfFB4qciqB7oDCcEkEz0JhQI+DYwHdTyFdP/r/J cfr32K8Dk+EKSzmrtothzr1CQxhclz/H5BDzf5Kkq2snN6fklzpfQ/3djIBPFRsB kWHl16OFKyd0rl9yRYsrv6S9e0Pz5Q62LKgFuir2Qw5nCoAYL6s7x+iNCC/WLgza UP4Ybi8AyC74Tg== -----END CERTIFICATE-----Generated at Sun Dec 21 19:07:17 2025 by rpki-client