This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/a36dbb-6027-43c4-8194-4a0cb255d73a/1/nvGYcbF1nzI3AS5LbbtsL9K-i0s.mft File: nvGYcbF1nzI3AS5LbbtsL9K-i0s.mft (raw, json) Hash identifier: cbKDaa448mUCj9/L/JLSD0myOeVwcSBio3ttq/hMX2Q= Subject key identifier: 9A:75:4E:03:CD:12:A6:4F:89:90:F3:50:50:3A:A2:77:B8:0C:A6:73 Authority key identifier: 9E:F1:98:71:B1:75:9F:32:37:01:2E:4B:6D:BB:6C:2F:D2:BE:8B:4B Certificate issuer: /CN=9ef19871b1759f3237012e4b6dbb6c2fd2be8b4b Certificate serial: 019B43932A178B9F55D720AAB1E8398B7CD4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nvGYcbF1nzI3AS5LbbtsL9K-i0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/a36dbb-6027-43c4-8194-4a0cb255d73a/1/nvGYcbF1nzI3AS5LbbtsL9K-i0s.mft Manifest number: 10ED Signing time: Mon 22 Dec 2025 01:01:16 +0000 Manifest this update: Mon 22 Dec 2025 01:01:16 +0000 Manifest next update: Tue 23 Dec 2025 01:01:16 +0000 Files and hashes: 1: ZOPpffnLkzVDBFjxA2KB9nv0Bg8.roa (hash: 01ysIczyztSZJ9tJXJJ4fsGrtMUrg5BjoJCrO1jiEBE=) 2: nvGYcbF1nzI3AS5LbbtsL9K-i0s.crl (hash: 5nvil5qd5Mpm2gcf2S4yWC0QL/2+UYLsmrKKDUkk/WY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/a36dbb-6027-43c4-8194-4a0cb255d73a/1/nvGYcbF1nzI3AS5LbbtsL9K-i0s.crl rsync://rpki.ripe.net/repository/DEFAULT/af/a36dbb-6027-43c4-8194-4a0cb255d73a/1/nvGYcbF1nzI3AS5LbbtsL9K-i0s.mft rsync://rpki.ripe.net/repository/DEFAULT/nvGYcbF1nzI3AS5LbbtsL9K-i0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 01:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:93:2a:17:8b:9f:55:d7:20:aa:b1:e8:39:8b:7c:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ef19871b1759f3237012e4b6dbb6c2fd2be8b4b Validity Not Before: Dec 22 01:01:16 2025 GMT Not After : Dec 23 01:01:16 2025 GMT Subject: CN=9a754e03cd12a64f8990f350503aa277b80ca673 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:0a:31:99:46:fd:45:ce:ea:37:23:e7:02:32: 3d:9d:0b:ce:2a:c4:02:f3:08:99:14:27:5c:5a:3b: 8c:35:0f:9f:5b:dd:33:9e:62:2c:6b:3c:65:27:be: ce:09:b5:61:51:d9:a1:46:af:5b:46:7d:22:3e:90: 53:c5:56:aa:0a:bf:0d:90:15:7d:5a:a8:f2:da:d1: e8:44:c4:0a:e2:24:d4:ad:9d:44:6d:1a:2c:f3:78: cb:da:0b:c9:aa:c3:62:73:ce:62:a9:f3:00:a3:82: 92:27:63:cc:19:41:49:25:30:2b:6d:cc:85:12:1f: 45:33:5c:d8:f0:6f:09:d1:75:0b:0e:fd:8b:f8:10: 03:16:99:78:10:a5:9c:a4:2a:1b:c8:01:db:69:59: 2e:5f:21:29:aa:b7:ea:a6:57:02:17:2e:45:3c:1d: 21:09:96:b0:9f:d4:6c:13:13:c8:82:72:59:9e:22: 58:71:fa:a0:44:44:2c:f3:44:8f:a0:f0:e2:c1:d9: e6:17:af:ec:4b:bf:fb:87:17:63:42:19:0b:e6:8b: 2b:24:ca:b6:a0:1f:3e:bd:c2:d3:ed:4a:a6:5d:97: 1c:2e:66:30:d3:96:c9:83:56:c1:84:a5:cc:69:22: 60:ba:0d:9f:5f:2c:ad:bf:ac:6e:e3:6a:ad:5d:b7: d6:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:75:4E:03:CD:12:A6:4F:89:90:F3:50:50:3A:A2:77:B8:0C:A6:73 X509v3 Authority Key Identifier: keyid:9E:F1:98:71:B1:75:9F:32:37:01:2E:4B:6D:BB:6C:2F:D2:BE:8B:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nvGYcbF1nzI3AS5LbbtsL9K-i0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a36dbb-6027-43c4-8194-4a0cb255d73a/1/nvGYcbF1nzI3AS5LbbtsL9K-i0s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a36dbb-6027-43c4-8194-4a0cb255d73a/1/nvGYcbF1nzI3AS5LbbtsL9K-i0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:8e:de:cc:83:c7:e1:59:da:3a:c4:1d:af:4d:f0:a3:cb:fd: a6:1c:43:c8:04:52:b0:63:8f:b1:a5:19:36:5e:1d:50:50:c4: 04:b6:ee:00:3d:ed:e8:3a:60:ea:9a:62:47:87:02:d4:94:08: a8:59:1f:c9:55:d0:67:8c:c1:cc:0b:7a:02:42:4c:f9:41:96: 42:a4:2e:6f:a6:3d:27:ca:dd:9d:5b:80:20:2f:cc:c5:3d:23: 32:7d:45:b5:bd:73:46:b8:0a:74:5b:c9:6a:4b:38:bb:fd:f2: c5:3d:9e:f9:a9:eb:be:66:d9:43:c9:7c:8b:6d:f3:2a:48:94: 6f:91:dc:8b:cd:e2:0b:0c:12:45:4c:96:ea:7f:8b:8e:7b:5b: 2d:14:1a:3f:bd:3c:3d:09:73:58:02:5c:de:7b:1d:21:33:9a: fe:63:c4:01:6f:36:3c:c8:7c:89:a1:cc:aa:10:d9:db:fb:84: 29:25:ba:85:68:e4:ef:da:d9:06:d4:85:a5:1d:96:f2:c8:23: 1a:7e:14:bb:0c:a2:81:39:fe:cf:15:95:4c:8a:e8:03:d1:85: 41:1f:70:a5:22:52:c8:31:1e:7c:b6:be:87:a0:63:f1:b1:6d: 20:95:41:7f:f7:39:c5:4e:3b:3e:37:9d:9e:48:ac:79:f1:2f: fa:f4:10:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDkyoXi59V1yCqseg5i3zUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllZjE5ODcxYjE3NTlmMzIzNzAxMmU0YjZkYmI2YzJmZDJi ZThiNGIwHhcNMjUxMjIyMDEwMTE2WhcNMjUxMjIzMDEwMTE2WjAzMTEwLwYDVQQD Eyg5YTc1NGUwM2NkMTJhNjRmODk5MGYzNTA1MDNhYTI3N2I4MGNhNjczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQoxmUb9Rc7qNyPnAjI9nQvOKsQC 8wiZFCdcWjuMNQ+fW90znmIsazxlJ77OCbVhUdmhRq9bRn0iPpBTxVaqCr8NkBV9 Wqjy2tHoRMQK4iTUrZ1EbRos83jL2gvJqsNic85iqfMAo4KSJ2PMGUFJJTArbcyF Eh9FM1zY8G8J0XULDv2L+BADFpl4EKWcpCobyAHbaVkuXyEpqrfqplcCFy5FPB0h CZawn9RsExPIgnJZniJYcfqgREQs80SPoPDiwdnmF6/sS7/7hxdjQhkL5osrJMq2 oB8+vcLT7UqmXZccLmYw05bJg1bBhKXMaSJgug2fXyytv6xu42qtXbfWiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJp1TgPNEqZPiZDzUFA6one4DKZzMB8GA1UdIwQY MBaAFJ7xmHGxdZ8yNwEuS227bC/SvotLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnZHWWNiRjFuekkzQVM1TGJidHNMOUstaTBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9hMzZkYmItNjAyNy00M2M0LTgxOTQt NGEwY2IyNTVkNzNhLzEvbnZHWWNiRjFuekkzQVM1TGJidHNMOUstaTBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi9hMzZkYmItNjAyNy00M2M0LTgxOTQtNGEwY2IyNTVkNzNh LzEvbnZHWWNiRjFuekkzQVM1TGJidHNMOUstaTBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMo7ezIPH 4VnaOsQdr03wo8v9phxDyARSsGOPsaUZNl4dUFDEBLbuAD3t6Dpg6ppiR4cC1JQI qFkfyVXQZ4zBzAt6AkJM+UGWQqQub6Y9J8rdnVuAIC/MxT0jMn1Ftb1zRrgKdFvJ aks4u/3yxT2e+anrvmbZQ8l8i23zKkiUb5Hci83iCwwSRUyW6n+LjntbLRQaP708 PQlzWAJc3nsdITOa/mPEAW82PMh8iaHMqhDZ2/uEKSW6hWjk79rZBtSFpR2W8sgj Gn4UuwyigTn+zxWVTIroA9GFQR9wpSJSyDEefLa+h6Bj8bFtIJVBf/c5xU47Pjed nkisefEv+vQQVg== -----END CERTIFICATE-----Generated at Mon Dec 22 10:42:47 2025 by rpki-client