This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft File: NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft (raw, json) Hash identifier: RfoNbo26LVlXI8ocF2G/MT483zmCkgpXN90A5UMjCQ0= Subject key identifier: 34:3C:DA:D7:9F:02:CA:36:02:34:B1:4D:8A:4B:99:52:AE:16:F2:D1 Authority key identifier: 35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4 Certificate issuer: /CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4 Certificate serial: 019B42121AAF1293615609EC91678C871069 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft Manifest number: 17B1 Signing time: Sun 21 Dec 2025 18:00:41 +0000 Manifest this update: Sun 21 Dec 2025 18:00:41 +0000 Manifest next update: Mon 22 Dec 2025 18:00:41 +0000 Files and hashes: 1: 0tzBINqIR5UARhUC_SN4dqUsHbs.roa (hash: dkpQVlm2NilQ3sBxk5jABsHQoOKhZ/gA5zaornlR6rQ=) 2: 4Kndf8f0K38NeByF4eDeojFEkWc.roa (hash: z9ZWxvxCc7vC5TAiLfa7y9gNN02jk+BIQEMSzkn78Bk=) 3: 8sgH-ZOMo18VOXKP7ZiwbPqCqiQ.roa (hash: eGf/pzyBqq1cxIFxS42rOeSUvmat4xHxNvblptUlpg4=) 4: CSQPKu-qpPTqg1yhCPEmsJhRnzI.roa (hash: auSoLSfduR8C0x2bAUZMvWJdtjGO1f6pjFPhEJiTFRA=) 5: Fm18RFfmtw-ty_MOYt1iAF-NS08.roa (hash: pq2vFSrbuWCHpjKgD2s5D798cXhhJkM/C70Aaa/iCuA=) 6: GPRtp5xOkeL5cFbOcLZLwwHI9s8.roa (hash: qEFXixGocvZk8lkNUHp2R4rSCKUt6DKkNZt4rBzX0SY=) 7: HiKOjaGmDxpi59kezYj2Aw_UxJE.roa (hash: IDFiNaoIwOJrP6SVw5rUJ9NDJDF8ucwCpy8kzd1Ucqk=) 8: Lr0nKbirlPmBX-3lvJsCJOROKJM.roa (hash: TqdXd4s2N+H906Qbg6lObKToYZQaynILZEigcrAh59E=) 9: NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl (hash: N6DhX4agdFqCPYYn8aHwkFN4chbRICayn7mU9WgGl1c=) 10: NRsmmESxlwOZ9E_FA7G05km4PzY.roa (hash: gj7FhRBAZvoKHYNfOr+mSSSV4JbsWKf5GeUgXwnq8h4=) 11: VWhVpICVoAdzB9EQIkXWDcCWifs.roa (hash: QRblW0tqls+p82T8xFTpIjMYlVKizBoeE6qJKM11/3k=) 12: ZilTqGeKBQ2tryG8q3trVBCr-kw.roa (hash: PwgBz8bW1BvrcChPP0zRLTeusRgOrK5lGOMisutfo94=) 13: e-v0jP0Yr1s-j_LETXIOOzdyLGk.roa (hash: xcWMYa3OgNb5AY/zol6hl7sqGF74VxIwNPjPwmEIM7U=) 14: fKVs2lzJco8yky1RgsvfRpsERwg.roa (hash: RSt0/ulmpZFZg4SLAM6kZKlm2sOebMgPJyz/oV0nMGg=) 15: hKtl6YrzcFs2c5akQ4QGQkOqaqs.roa (hash: zejLevyjCi1eBLeaN7L1PcRyE8TcqoV2q3GNhHozY7Q=) 16: i9SX3nWo4NzvcKgFdy_Fb9U00JU.roa (hash: 1YuxocoriVhQ/l4n2Sas0LfPCL7SyxG7duq+UXS6TBU=) 17: lYSlQ-4feryLZZTaUJ-AJBOZotM.roa (hash: Z1Weo02vp6uD0aD+NKaCNak3b37ID56s/v4nECqj3gE=) 18: m0n-EeeEBvd94sdHj2oT-Qvcf9M.roa (hash: thErL0hsxuW8JBkWuUQgnCtldZunPMy1NfMos+CWV7s=) 19: mrA5cb-6XNKXA6shM0taqYUQYA0.roa (hash: cuTtxcWCbnIrKZ9sDiv8cAUpJWdrJ+DCwm6h65W47E0=) 20: p_T_usfdv8xlZZdYjAIfsVouVbk.roa (hash: 6jbjq1+jiWQ0ooeWaGdPlb/s9JUI9tUJMn1ZAmNsUm8=) 21: rOy5uy_NTIjdgXXxIju3UL-TKY4.roa (hash: ShPP3cFWgf+p1Ts/WZ7cZBJeKVFu0VhveaoD9AjxE14=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:12:1a:af:12:93:61:56:09:ec:91:67:8c:87:10:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4 Validity Not Before: Dec 21 18:00:41 2025 GMT Not After : Dec 22 18:00:41 2025 GMT Subject: CN=343cdad79f02ca360234b14d8a4b9952ae16f2d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9b:da:e8:14:23:82:a2:06:ca:cb:da:64:5a: c0:06:f5:e7:a7:1d:9f:09:f2:90:d2:dd:36:cc:c0: 4a:fa:63:5f:ef:74:93:de:cb:cd:7e:81:eb:2f:2a: 35:8d:b1:45:00:31:b9:6a:bd:49:85:75:42:0f:a4: ac:a1:42:24:7b:2e:1c:9f:dc:80:41:65:20:f6:fb: 8d:82:02:42:db:24:ea:b3:be:cc:ee:dd:c4:89:c8: 0a:82:bf:48:ec:38:13:77:f2:51:f2:bf:6c:17:87: f9:d2:2a:2d:e4:4e:e9:20:18:3a:7a:1e:d2:fa:54: 50:35:2d:5b:dc:e2:92:7b:0d:07:ad:1b:37:07:0b: 40:57:2e:8a:81:83:fd:49:c0:07:ef:81:64:ec:45: 59:d8:3a:bf:00:57:fe:a2:d3:09:d3:c8:30:b5:73: 5c:05:84:30:c7:de:af:73:d6:f5:6d:9d:0a:f9:0e: e4:8e:fb:fd:50:b9:15:0f:48:9a:6e:b6:80:46:9c: c9:ee:0b:65:f3:e9:63:d8:22:9f:60:1b:0a:d0:d2: be:de:e8:c1:1d:2b:ae:d9:7e:2c:43:38:b5:06:21: c1:ab:b3:a0:93:be:06:03:0c:5f:67:c4:23:a0:4e: e3:49:b5:b5:44:06:e9:c5:57:cd:3b:d7:41:37:94: c5:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:3C:DA:D7:9F:02:CA:36:02:34:B1:4D:8A:4B:99:52:AE:16:F2:D1 X509v3 Authority Key Identifier: keyid:35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:fd:77:e6:52:87:11:cc:7a:d5:04:0e:04:a9:2c:f1:65:cb: a3:df:17:06:e4:4f:78:6c:a8:7a:7c:77:e3:f1:8e:ea:ac:7b: 44:15:aa:79:a7:eb:21:3e:08:3e:ee:50:12:08:6c:ab:fb:22: 4b:db:28:b3:89:c9:3a:c2:6f:5c:30:af:4e:4a:9c:15:3e:fe: fc:66:74:2b:fe:33:65:b1:fc:c5:30:eb:74:a7:d2:53:c8:49: 48:0d:2f:a1:2b:55:78:14:35:cf:fc:17:da:1f:d5:83:ef:36: 19:b8:d1:1c:d3:3f:0a:87:53:d9:93:f5:22:e6:e6:bc:51:a5: 5f:3a:08:39:70:d7:b3:93:49:50:c2:34:77:6a:21:cb:d2:62: 70:ff:0b:ab:40:db:8f:c7:5c:95:ad:15:33:98:b3:5f:de:3a: 73:7b:aa:0a:78:a3:c2:ed:aa:19:5d:ca:cd:8c:e7:77:7c:d1: 4f:9a:a7:c0:8d:ec:fb:6b:4f:49:04:05:b2:f0:1c:dd:47:9f: a7:6d:5f:05:29:a8:76:0b:7c:7c:a2:00:51:d0:a9:bb:f5:3a: 2c:83:26:0e:ef:94:23:c9:c6:23:db:77:94:0f:b7:97:f7:ff: 36:7e:9d:60:13:60:74:a4:b5:65:3d:68:be:50:22:b4:b0:cc: 2e:f0:db:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCEhqvEpNhVgnskWeMhxBpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MWEyZmQ2ZjVlNWFmODdkNWNlYTA5NTA2NmZiY2MzZDNl NTQ2YTQwHhcNMjUxMjIxMTgwMDQxWhcNMjUxMjIyMTgwMDQxWjAzMTEwLwYDVQQD EygzNDNjZGFkNzlmMDJjYTM2MDIzNGIxNGQ4YTRiOTk1MmFlMTZmMmQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpva6BQjgqIGysvaZFrABvXnpx2f CfKQ0t02zMBK+mNf73ST3svNfoHrLyo1jbFFADG5ar1JhXVCD6SsoUIkey4cn9yA QWUg9vuNggJC2yTqs77M7t3EicgKgr9I7DgTd/JR8r9sF4f50iot5E7pIBg6eh7S +lRQNS1b3OKSew0HrRs3BwtAVy6KgYP9ScAH74Fk7EVZ2Dq/AFf+otMJ08gwtXNc BYQwx96vc9b1bZ0K+Q7kjvv9ULkVD0iabraARpzJ7gtl8+lj2CKfYBsK0NK+3ujB HSuu2X4sQzi1BiHBq7Ogk74GAwxfZ8QjoE7jSbW1RAbpxVfNO9dBN5TF5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDQ82tefAso2AjSxTYpLmVKuFvLRMB8GA1UdIwQY MBaAFDUaL9b15a+H1c6glQZvvMPT5UakMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9jZGRkZDUtODE3YS00MTEzLThiODIt MjMwNDllNGQyZjEyLzEvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9jZGRkZDUtODE3YS00MTEzLThiODItMjMwNDllNGQyZjEy LzEvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlv135lKH Ecx61QQOBKks8WXLo98XBuRPeGyoenx34/GO6qx7RBWqeafrIT4IPu5QEghsq/si S9sos4nJOsJvXDCvTkqcFT7+/GZ0K/4zZbH8xTDrdKfSU8hJSA0voStVeBQ1z/wX 2h/Vg+82GbjRHNM/CodT2ZP1IubmvFGlXzoIOXDXs5NJUMI0d2ohy9JicP8Lq0Db j8dcla0VM5izX946c3uqCnijwu2qGV3KzYznd3zRT5qnwI3s+2tPSQQFsvAc3Uef p21fBSmodgt8fKIAUdCpu/U6LIMmDu+UI8nGI9t3lA+3l/f/Nn6dYBNgdKS1ZT1o vlAitLDMLvDb0g== -----END CERTIFICATE-----Generated at Mon Dec 22 00:47:58 2025 by rpki-client