This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7ba232-8929-410d-bddd-e4b6a9df9a34/1/nVK4OxL6igcTLMgIM6ED4J2L0E8.mft File: nVK4OxL6igcTLMgIM6ED4J2L0E8.mft (raw, json) Hash identifier: t8vO01zfDKF9DKIljhUBpvHBrKNSBtwf+Jx9oOuzUqs= Subject key identifier: 91:3A:42:FE:67:91:31:78:9C:AB:FB:BA:1A:87:D3:DA:95:E7:CF:0E Authority key identifier: 9D:52:B8:3B:12:FA:8A:07:13:2C:C8:08:33:A1:03:E0:9D:8B:D0:4F Certificate issuer: /CN=9d52b83b12fa8a07132cc80833a103e09d8bd04f Certificate serial: 019B3CEC6C8566946C4760B11109A8CB9A21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nVK4OxL6igcTLMgIM6ED4J2L0E8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7ba232-8929-410d-bddd-e4b6a9df9a34/1/nVK4OxL6igcTLMgIM6ED4J2L0E8.mft Manifest number: 0480 Signing time: Sat 20 Dec 2025 18:01:25 +0000 Manifest this update: Sat 20 Dec 2025 18:01:25 +0000 Manifest next update: Sun 21 Dec 2025 18:01:25 +0000 Files and hashes: 1: 38Ols_fwuqUro_09-_uv-_Ul2jA.roa (hash: QymLTZTAomDxu/BGko1S2mbZfpR+LRurtzVVTfHo8uA=) 2: nVK4OxL6igcTLMgIM6ED4J2L0E8.crl (hash: HJhUKxwqSMIVvcfxwGaecw42IPKNbyni2fDflBnTQhI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/7ba232-8929-410d-bddd-e4b6a9df9a34/1/nVK4OxL6igcTLMgIM6ED4J2L0E8.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/7ba232-8929-410d-bddd-e4b6a9df9a34/1/nVK4OxL6igcTLMgIM6ED4J2L0E8.mft rsync://rpki.ripe.net/repository/DEFAULT/nVK4OxL6igcTLMgIM6ED4J2L0E8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 18:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:6c:85:66:94:6c:47:60:b1:11:09:a8:cb:9a:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d52b83b12fa8a07132cc80833a103e09d8bd04f Validity Not Before: Dec 20 18:01:25 2025 GMT Not After : Dec 21 18:01:25 2025 GMT Subject: CN=913a42fe679131789cabfbba1a87d3da95e7cf0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:9c:71:5d:a5:56:60:c5:b9:b6:33:68:3d:ba: c0:ba:f4:ef:ca:a3:a7:18:88:d5:3d:9a:92:9e:7c: c8:e7:e3:2b:23:dc:54:75:8f:c5:45:ab:08:b9:f4: 37:f0:df:86:25:12:84:65:64:8c:9e:0b:b8:c9:2b: 4c:96:68:f3:e5:da:ff:d7:d7:54:48:3e:ac:47:66: 54:62:37:ab:9e:67:27:74:90:6d:94:ae:8c:5e:58: 39:e3:93:da:0a:5a:29:b3:a2:58:58:24:a0:a5:9f: cb:22:29:73:c5:52:88:e8:46:8e:29:52:38:50:38: 7c:8d:df:71:de:de:3e:56:1c:3f:4c:96:a8:50:fd: d4:bd:c6:54:e4:76:6b:a9:86:ed:b3:8b:43:b7:00: 94:77:5d:3b:1c:ef:e2:8e:88:42:e3:00:b3:2a:5d: 53:64:d8:37:9a:cb:4f:dd:7f:16:cd:eb:59:fc:c0: 37:ef:3d:37:ff:32:54:9f:72:d1:38:9a:f3:12:45: 10:7b:95:e0:d1:98:98:af:6b:86:bf:a2:00:fb:d5: 15:6a:54:42:b0:2e:41:10:d2:57:d7:1a:da:87:4b: a8:25:04:15:03:ab:7b:16:5b:d9:cd:f2:8a:1a:2a: f5:af:57:ce:a2:bf:42:63:e3:20:48:9f:2f:19:fc: b4:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:3A:42:FE:67:91:31:78:9C:AB:FB:BA:1A:87:D3:DA:95:E7:CF:0E X509v3 Authority Key Identifier: keyid:9D:52:B8:3B:12:FA:8A:07:13:2C:C8:08:33:A1:03:E0:9D:8B:D0:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nVK4OxL6igcTLMgIM6ED4J2L0E8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7ba232-8929-410d-bddd-e4b6a9df9a34/1/nVK4OxL6igcTLMgIM6ED4J2L0E8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7ba232-8929-410d-bddd-e4b6a9df9a34/1/nVK4OxL6igcTLMgIM6ED4J2L0E8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:36:bd:bb:02:fa:b8:8d:4e:f3:6a:d4:34:cd:b9:9c:2d:90: 5a:ce:17:55:96:d7:b8:e9:6b:ec:79:af:72:8d:40:24:6b:b6: 21:5e:a9:4a:bb:d6:6a:2b:57:0b:39:86:92:79:95:93:50:65: a7:2c:e9:b8:3e:b3:0f:35:9e:9e:85:49:0c:75:0c:ab:26:eb: a1:51:5b:dd:06:17:1b:8d:3b:e6:09:2c:c8:2f:37:9c:b8:44: 05:57:39:fc:63:0f:79:7b:d0:bc:86:b4:65:6a:74:d2:bd:aa: fa:f6:ec:3d:8c:60:40:b2:bd:bc:19:41:c8:54:06:97:92:b6: 27:15:dd:cf:67:b2:85:4c:45:83:6a:02:73:4a:b5:c7:2e:46: 15:02:fd:fb:0d:5c:4c:db:78:b4:39:3d:79:11:fb:03:6b:d1: 4c:5d:90:ac:f3:64:d9:04:bc:df:32:57:e0:b7:3c:99:f8:d1: 96:76:b5:f6:bd:1a:2e:ee:0d:9b:2e:d3:6a:0f:bb:fd:bd:49: 37:95:e1:76:6d:3c:5f:b3:bb:dc:f5:71:8e:7c:ee:05:81:c5: bb:a5:ad:de:db:56:fc:23:d3:cf:60:a1:af:ef:b8:cc:11:f3: 47:de:59:e5:c2:6a:db:48:88:4c:a1:d2:7c:7a:3a:e1:38:85: 19:8d:22:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87GyFZpRsR2CxEQmoy5ohMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkNTJiODNiMTJmYThhMDcxMzJjYzgwODMzYTEwM2UwOWQ4 YmQwNGYwHhcNMjUxMjIwMTgwMTI1WhcNMjUxMjIxMTgwMTI1WjAzMTEwLwYDVQQD Eyg5MTNhNDJmZTY3OTEzMTc4OWNhYmZiYmExYTg3ZDNkYTk1ZTdjZjBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZxxXaVWYMW5tjNoPbrAuvTvyqOn GIjVPZqSnnzI5+MrI9xUdY/FRasIufQ38N+GJRKEZWSMngu4yStMlmjz5dr/19dU SD6sR2ZUYjernmcndJBtlK6MXlg545PaClops6JYWCSgpZ/LIilzxVKI6EaOKVI4 UDh8jd9x3t4+Vhw/TJaoUP3UvcZU5HZrqYbts4tDtwCUd107HO/ijohC4wCzKl1T ZNg3mstP3X8WzetZ/MA37z03/zJUn3LROJrzEkUQe5Xg0ZiYr2uGv6IA+9UValRC sC5BENJX1xrah0uoJQQVA6t7FlvZzfKKGir1r1fOor9CY+MgSJ8vGfy0SQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJE6Qv5nkTF4nKv7uhqH09qV588OMB8GA1UdIwQY MBaAFJ1SuDsS+ooHEyzICDOhA+Cdi9BPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblZLNE94TDZpZ2NUTE1nSU02RUQ0SjJMMEU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83YmEyMzItODkyOS00MTBkLWJkZGQt ZTRiNmE5ZGY5YTM0LzEvblZLNE94TDZpZ2NUTE1nSU02RUQ0SjJMMEU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC83YmEyMzItODkyOS00MTBkLWJkZGQtZTRiNmE5ZGY5YTM0 LzEvblZLNE94TDZpZ2NUTE1nSU02RUQ0SjJMMEU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARTa9uwL6 uI1O82rUNM25nC2QWs4XVZbXuOlr7Hmvco1AJGu2IV6pSrvWaitXCzmGknmVk1Bl pyzpuD6zDzWenoVJDHUMqybroVFb3QYXG4075gksyC83nLhEBVc5/GMPeXvQvIa0 ZWp00r2q+vbsPYxgQLK9vBlByFQGl5K2JxXdz2eyhUxFg2oCc0q1xy5GFQL9+w1c TNt4tDk9eRH7A2vRTF2QrPNk2QS83zJX4Lc8mfjRlna19r0aLu4Nmy7Tag+7/b1J N5Xhdm08X7O73PVxjnzuBYHFu6Wt3ttW/CPTz2Chr++4zBHzR95Z5cJq20iITKHS fHo64TiFGY0iXQ== -----END CERTIFICATE-----Generated at Sun Dec 21 04:07:38 2025 by rpki-client