This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/a36dbb-6027-43c4-8194-4a0cb255d73a/1/nvGYcbF1nzI3AS5LbbtsL9K-i0s.mft
File: nvGYcbF1nzI3AS5LbbtsL9K-i0s.mft (raw, json)
Hash identifier: cbKDaa448mUCj9/L/JLSD0myOeVwcSBio3ttq/hMX2Q=
Subject key identifier: 9A:75:4E:03:CD:12:A6:4F:89:90:F3:50:50:3A:A2:77:B8:0C:A6:73
Authority key identifier: 9E:F1:98:71:B1:75:9F:32:37:01:2E:4B:6D:BB:6C:2F:D2:BE:8B:4B
Certificate issuer: /CN=9ef19871b1759f3237012e4b6dbb6c2fd2be8b4b
Certificate serial: 019B43932A178B9F55D720AAB1E8398B7CD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nvGYcbF1nzI3AS5LbbtsL9K-i0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/a36dbb-6027-43c4-8194-4a0cb255d73a/1/nvGYcbF1nzI3AS5LbbtsL9K-i0s.mft
Manifest number: 10ED
Signing time: Mon 22 Dec 2025 01:01:16 +0000
Manifest this update: Mon 22 Dec 2025 01:01:16 +0000
Manifest next update: Tue 23 Dec 2025 01:01:16 +0000
Files and hashes: 1: ZOPpffnLkzVDBFjxA2KB9nv0Bg8.roa (hash: 01ysIczyztSZJ9tJXJJ4fsGrtMUrg5BjoJCrO1jiEBE=)
2: nvGYcbF1nzI3AS5LbbtsL9K-i0s.crl (hash: 5nvil5qd5Mpm2gcf2S4yWC0QL/2+UYLsmrKKDUkk/WY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/a36dbb-6027-43c4-8194-4a0cb255d73a/1/nvGYcbF1nzI3AS5LbbtsL9K-i0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/a36dbb-6027-43c4-8194-4a0cb255d73a/1/nvGYcbF1nzI3AS5LbbtsL9K-i0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/nvGYcbF1nzI3AS5LbbtsL9K-i0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 23 Dec 2025 01:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:43:93:2a:17:8b:9f:55:d7:20:aa:b1:e8:39:8b:7c:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ef19871b1759f3237012e4b6dbb6c2fd2be8b4b
Validity
Not Before: Dec 22 01:01:16 2025 GMT
Not After : Dec 23 01:01:16 2025 GMT
Subject: CN=9a754e03cd12a64f8990f350503aa277b80ca673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0a:31:99:46:fd:45:ce:ea:37:23:e7:02:32:
3d:9d:0b:ce:2a:c4:02:f3:08:99:14:27:5c:5a:3b:
8c:35:0f:9f:5b:dd:33:9e:62:2c:6b:3c:65:27:be:
ce:09:b5:61:51:d9:a1:46:af:5b:46:7d:22:3e:90:
53:c5:56:aa:0a:bf:0d:90:15:7d:5a:a8:f2:da:d1:
e8:44:c4:0a:e2:24:d4:ad:9d:44:6d:1a:2c:f3:78:
cb:da:0b:c9:aa:c3:62:73:ce:62:a9:f3:00:a3:82:
92:27:63:cc:19:41:49:25:30:2b:6d:cc:85:12:1f:
45:33:5c:d8:f0:6f:09:d1:75:0b:0e:fd:8b:f8:10:
03:16:99:78:10:a5:9c:a4:2a:1b:c8:01:db:69:59:
2e:5f:21:29:aa:b7:ea:a6:57:02:17:2e:45:3c:1d:
21:09:96:b0:9f:d4:6c:13:13:c8:82:72:59:9e:22:
58:71:fa:a0:44:44:2c:f3:44:8f:a0:f0:e2:c1:d9:
e6:17:af:ec:4b:bf:fb:87:17:63:42:19:0b:e6:8b:
2b:24:ca:b6:a0:1f:3e:bd:c2:d3:ed:4a:a6:5d:97:
1c:2e:66:30:d3:96:c9:83:56:c1:84:a5:cc:69:22:
60:ba:0d:9f:5f:2c:ad:bf:ac:6e:e3:6a:ad:5d:b7:
d6:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:75:4E:03:CD:12:A6:4F:89:90:F3:50:50:3A:A2:77:B8:0C:A6:73
X509v3 Authority Key Identifier:
keyid:9E:F1:98:71:B1:75:9F:32:37:01:2E:4B:6D:BB:6C:2F:D2:BE:8B:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nvGYcbF1nzI3AS5LbbtsL9K-i0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a36dbb-6027-43c4-8194-4a0cb255d73a/1/nvGYcbF1nzI3AS5LbbtsL9K-i0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a36dbb-6027-43c4-8194-4a0cb255d73a/1/nvGYcbF1nzI3AS5LbbtsL9K-i0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:8e:de:cc:83:c7:e1:59:da:3a:c4:1d:af:4d:f0:a3:cb:fd:
a6:1c:43:c8:04:52:b0:63:8f:b1:a5:19:36:5e:1d:50:50:c4:
04:b6:ee:00:3d:ed:e8:3a:60:ea:9a:62:47:87:02:d4:94:08:
a8:59:1f:c9:55:d0:67:8c:c1:cc:0b:7a:02:42:4c:f9:41:96:
42:a4:2e:6f:a6:3d:27:ca:dd:9d:5b:80:20:2f:cc:c5:3d:23:
32:7d:45:b5:bd:73:46:b8:0a:74:5b:c9:6a:4b:38:bb:fd:f2:
c5:3d:9e:f9:a9:eb:be:66:d9:43:c9:7c:8b:6d:f3:2a:48:94:
6f:91:dc:8b:cd:e2:0b:0c:12:45:4c:96:ea:7f:8b:8e:7b:5b:
2d:14:1a:3f:bd:3c:3d:09:73:58:02:5c:de:7b:1d:21:33:9a:
fe:63:c4:01:6f:36:3c:c8:7c:89:a1:cc:aa:10:d9:db:fb:84:
29:25:ba:85:68:e4:ef:da:d9:06:d4:85:a5:1d:96:f2:c8:23:
1a:7e:14:bb:0c:a2:81:39:fe:cf:15:95:4c:8a:e8:03:d1:85:
41:1f:70:a5:22:52:c8:31:1e:7c:b6:be:87:a0:63:f1:b1:6d:
20:95:41:7f:f7:39:c5:4e:3b:3e:37:9d:9e:48:ac:79:f1:2f:
fa:f4:10:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 10:42:47 2025 by rpki-client