This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.mft File: NrVfs00p-WJUUTKgJbUmRP3_v28.mft (raw, json) Hash identifier: JRcsmQ4QbD2c+gmH00RdmNwydiegJ1xETVq/hidVlvs= Subject key identifier: 0E:45:9F:C2:A9:58:22:74:8D:85:20:BE:71:91:4C:8F:C4:D8:03:1F Authority key identifier: 36:B5:5F:B3:4D:29:F9:62:54:51:32:A0:25:B5:26:44:FD:FF:BF:6F Certificate issuer: /CN=36b55fb34d29f962545132a025b52644fdffbf6f Certificate serial: 019B2B8AAA16550303EFE7913CE8BE81047F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NrVfs00p-WJUUTKgJbUmRP3_v28.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.mft Manifest number: 135C Signing time: Wed 17 Dec 2025 09:01:06 +0000 Manifest this update: Wed 17 Dec 2025 09:01:06 +0000 Manifest next update: Thu 18 Dec 2025 09:01:06 +0000 Files and hashes: 1: 7dJIur2rO8jTQ_NHZt4L26PKtBw.roa (hash: fR/fcQi32Cz8cbo8M3f8TE+0bMDxdxf78ySV2CU/bwY=) 2: EzVC6hFH0RtKA1lARrwdwMJ07Q0.roa (hash: 2S3sYcvaMN06mor0RfdxJiX/gftEZ6TMLtUoAQi1mDE=) 3: NrVfs00p-WJUUTKgJbUmRP3_v28.crl (hash: /T/I/0JAXcpUDDv4Z95MnNfiMQKyfoxP1R+fDKTS4G4=) 4: Wqg9hZ9wuWYWaqC8TF_Eeg_AEfc.roa (hash: 0aRSdpBzh4xSW9RCKPtMxwA4FTF50Xso2kHVHvgf+yc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.mft rsync://rpki.ripe.net/repository/DEFAULT/NrVfs00p-WJUUTKgJbUmRP3_v28.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 09:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:8a:aa:16:55:03:03:ef:e7:91:3c:e8:be:81:04:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36b55fb34d29f962545132a025b52644fdffbf6f Validity Not Before: Dec 17 09:01:06 2025 GMT Not After : Dec 18 09:01:06 2025 GMT Subject: CN=0e459fc2a95822748d8520be71914c8fc4d8031f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:da:3d:4f:a7:34:ae:cf:e2:16:9a:51:80:e3: e3:97:ca:f2:c7:71:34:67:80:56:27:a9:7d:c2:98: b2:8f:d8:26:f6:99:10:62:39:5a:e5:54:f8:3d:bd: 24:22:28:b5:70:dd:88:83:ee:a6:7c:72:a2:87:84: 16:09:ab:69:aa:cb:46:d8:bd:a2:cf:70:64:ef:b6: 6a:b5:01:f2:22:47:03:1f:37:0b:c4:c0:fb:2e:80: 62:6d:8d:71:00:49:17:08:08:81:09:02:0b:c9:35: db:dd:fc:01:96:b4:14:61:b3:97:0e:eb:43:82:72: b6:84:b5:58:01:1e:c2:37:b5:0d:0c:c8:f9:c5:3f: 2c:18:2f:57:51:f9:b3:77:a8:53:4a:4c:9a:b2:35: 12:2b:c2:99:21:eb:ba:d2:67:4f:35:d3:84:23:09: ce:b4:3f:a4:e0:c8:5b:07:10:d0:59:ab:48:af:30: 89:d8:c7:d4:7f:f2:b0:e0:84:15:f0:6a:76:d7:29: 20:78:97:2b:70:a7:49:3b:4f:3e:92:9a:9d:1e:68: f0:f1:9e:75:5d:a7:b0:bf:38:23:8f:51:16:79:48: 8d:ff:b5:94:8d:71:0d:33:aa:53:0c:9a:66:6b:2f: 76:46:74:f8:d4:da:0b:63:92:1f:15:d9:fb:25:c5: 17:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:45:9F:C2:A9:58:22:74:8D:85:20:BE:71:91:4C:8F:C4:D8:03:1F X509v3 Authority Key Identifier: keyid:36:B5:5F:B3:4D:29:F9:62:54:51:32:A0:25:B5:26:44:FD:FF:BF:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NrVfs00p-WJUUTKgJbUmRP3_v28.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:e2:57:2b:07:2e:2d:9c:16:f2:52:ed:1c:47:fc:f9:c0:b0: 90:c7:da:29:57:cb:74:83:86:7f:74:84:b4:3e:67:ad:2c:b0: 24:01:f9:33:ab:8e:84:ad:1f:dd:2e:62:e8:7d:c2:6a:da:08: 7e:fb:27:a0:87:f8:d4:90:8d:73:d9:3f:2c:5e:8f:03:8e:4f: 5d:b6:5e:5d:4f:e4:ce:cc:d1:21:94:0d:bf:da:18:6b:34:17: fd:13:98:19:bd:c7:80:0c:9a:a0:22:ab:d6:ac:49:d7:d0:14: 05:40:f8:58:fd:f2:21:20:06:dd:d6:b6:92:8b:aa:a9:ba:08: 33:d2:92:f3:c8:56:56:98:75:a9:51:62:20:56:c1:dd:52:8d: f4:85:89:bf:e8:53:f0:09:1e:20:f4:74:c1:61:00:5f:cc:fe: d0:39:6a:3c:fe:fd:d2:3b:38:e5:5b:1e:bf:75:b5:c4:e3:63: 27:a2:9f:5d:3d:6c:90:dd:c0:98:39:e8:33:a8:77:b7:e7:74: e1:0c:fa:5a:6c:bc:cc:8d:f1:45:4c:03:ec:9d:09:bc:04:38: e1:6d:da:99:d5:5e:38:44:e4:23:39:4b:25:69:59:fa:bf:60: 12:8a:4b:14:ee:2a:f7:9e:64:d0:e8:3c:74:35:68:ee:56:fc: 72:86:9b:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsriqoWVQMD7+eRPOi+gQR/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YjU1ZmIzNGQyOWY5NjI1NDUxMzJhMDI1YjUyNjQ0ZmRm ZmJmNmYwHhcNMjUxMjE3MDkwMTA2WhcNMjUxMjE4MDkwMTA2WjAzMTEwLwYDVQQD EygwZTQ1OWZjMmE5NTgyMjc0OGQ4NTIwYmU3MTkxNGM4ZmM0ZDgwMzFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9o9T6c0rs/iFppRgOPjl8ryx3E0 Z4BWJ6l9wpiyj9gm9pkQYjla5VT4Pb0kIii1cN2Ig+6mfHKih4QWCatpqstG2L2i z3Bk77ZqtQHyIkcDHzcLxMD7LoBibY1xAEkXCAiBCQILyTXb3fwBlrQUYbOXDutD gnK2hLVYAR7CN7UNDMj5xT8sGC9XUfmzd6hTSkyasjUSK8KZIeu60mdPNdOEIwnO tD+k4MhbBxDQWatIrzCJ2MfUf/Kw4IQV8Gp21ykgeJcrcKdJO08+kpqdHmjw8Z51 Xaewvzgjj1EWeUiN/7WUjXENM6pTDJpmay92RnT41NoLY5IfFdn7JcUXRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA5Fn8KpWCJ0jYUgvnGRTI/E2AMfMB8GA1UdIwQY MBaAFDa1X7NNKfliVFEyoCW1JkT9/79vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnJWZnMwMHAtV0pVVVRLZ0piVW1SUDNfdjI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8yYmYwMGItYmZiYy00ZjZiLWExM2Ut ZjEwZjczYTllY2IzLzEvTnJWZnMwMHAtV0pVVVRLZ0piVW1SUDNfdjI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy8yYmYwMGItYmZiYy00ZjZiLWExM2UtZjEwZjczYTllY2Iz LzEvTnJWZnMwMHAtV0pVVVRLZ0piVW1SUDNfdjI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb+JXKwcu LZwW8lLtHEf8+cCwkMfaKVfLdIOGf3SEtD5nrSywJAH5M6uOhK0f3S5i6H3CatoI fvsnoIf41JCNc9k/LF6PA45PXbZeXU/kzszRIZQNv9oYazQX/ROYGb3HgAyaoCKr 1qxJ19AUBUD4WP3yISAG3da2kouqqboIM9KS88hWVph1qVFiIFbB3VKN9IWJv+hT 8AkeIPR0wWEAX8z+0DlqPP790js45Vsev3W1xONjJ6KfXT1skN3AmDnoM6h3t+d0 4Qz6Wmy8zI3xRUwD7J0JvAQ44W3amdVeOETkIzlLJWlZ+r9gEopLFO4q955k0Og8 dDVo7lb8coabMA== -----END CERTIFICATE-----Generated at Wed Dec 17 12:54:24 2025 by rpki-client