This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/b84195-cd46-49cb-85f8-6eb43b556e13/1/NVYI0HjW8xz3m-eHNr-IRgahfaQ.mft File: NVYI0HjW8xz3m-eHNr-IRgahfaQ.mft (raw, json) Hash identifier: hnpvNmrlW4lN6QtGwD4Vx1fC4gSyPXe6g01r6/MQTqI= Subject key identifier: 55:94:FC:7C:3D:55:0E:52:A0:46:6C:E9:DD:23:28:C7:85:E2:29:20 Authority key identifier: 35:56:08:D0:78:D6:F3:1C:F7:9B:E7:87:36:BF:88:46:06:A1:7D:A4 Certificate issuer: /CN=355608d078d6f31cf79be78736bf884606a17da4 Certificate serial: 019B42498271B697C05B988295AD1BC137E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NVYI0HjW8xz3m-eHNr-IRgahfaQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/b84195-cd46-49cb-85f8-6eb43b556e13/1/NVYI0HjW8xz3m-eHNr-IRgahfaQ.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 19:01:12 +0000 Manifest this update: Sun 21 Dec 2025 19:01:12 +0000 Manifest next update: Mon 22 Dec 2025 19:01:12 +0000 Files and hashes: 1: Ld3jzrrXXzWXVkMUgI6UD9IWYJw.roa (hash: +iXd1M4+bcqd1pD4b5qHzxAyt89KMtB2DGWb5orKRYY=) 2: NVYI0HjW8xz3m-eHNr-IRgahfaQ.crl (hash: 90yqvuJnbtSSILrXVuqiFo0qvOD/j8F7Lq+x8Z2s5S0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/b84195-cd46-49cb-85f8-6eb43b556e13/1/NVYI0HjW8xz3m-eHNr-IRgahfaQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/b84195-cd46-49cb-85f8-6eb43b556e13/1/NVYI0HjW8xz3m-eHNr-IRgahfaQ.mft rsync://rpki.ripe.net/repository/DEFAULT/NVYI0HjW8xz3m-eHNr-IRgahfaQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:49:82:71:b6:97:c0:5b:98:82:95:ad:1b:c1:37:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=355608d078d6f31cf79be78736bf884606a17da4 Validity Not Before: Dec 21 19:01:12 2025 GMT Not After : Dec 22 19:01:12 2025 GMT Subject: CN=5594fc7c3d550e52a0466ce9dd2328c785e22920 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:72:65:fe:b5:8f:d1:08:86:4b:7a:f7:67:38: e3:46:33:65:12:18:dc:6c:df:85:8b:c7:f1:fe:d6: a8:8a:1a:ce:24:52:bf:3b:52:7d:5e:18:3a:52:4c: 8c:7e:0b:be:58:6c:69:05:c2:8d:ff:19:64:85:d6: 3a:f1:e3:58:59:78:d6:6e:3e:1d:57:22:b6:72:87: 92:5f:33:b7:79:23:d9:c2:a8:52:06:66:05:bf:f4: 93:df:8e:8c:62:98:d0:c1:5e:2d:87:ea:2f:c2:13: 97:97:a1:94:43:9e:85:5f:08:db:c1:7f:c0:66:f1: 19:f0:bd:4b:2c:7d:17:9a:bb:c5:2a:9e:df:4e:54: 26:61:cb:24:81:e4:07:f9:15:c1:5c:54:1f:a5:e1: 96:c8:5a:3f:45:67:93:29:e8:8b:cd:c6:fc:a0:cb: 47:01:a0:9b:d4:01:66:6d:f9:78:3b:3e:05:e8:86: 89:d5:ca:33:e4:09:0d:43:e4:7d:f8:f6:31:0d:44: 4b:38:47:b4:12:56:7e:4a:0a:ba:47:74:83:9f:d9: 3d:60:43:e8:dc:6a:3a:00:20:00:bf:85:30:06:25: e0:33:ae:1b:b7:e5:6a:1a:7f:de:ce:39:8b:62:e4: 65:49:8a:df:04:4e:71:30:e9:2f:0d:fa:c0:48:38: f2:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:94:FC:7C:3D:55:0E:52:A0:46:6C:E9:DD:23:28:C7:85:E2:29:20 X509v3 Authority Key Identifier: keyid:35:56:08:D0:78:D6:F3:1C:F7:9B:E7:87:36:BF:88:46:06:A1:7D:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NVYI0HjW8xz3m-eHNr-IRgahfaQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b84195-cd46-49cb-85f8-6eb43b556e13/1/NVYI0HjW8xz3m-eHNr-IRgahfaQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b84195-cd46-49cb-85f8-6eb43b556e13/1/NVYI0HjW8xz3m-eHNr-IRgahfaQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:ad:9b:53:95:59:5c:a1:ed:e6:e6:4c:b0:9d:5c:54:79:9f: cd:57:7b:c3:61:ed:81:cd:79:1e:df:6d:76:84:80:1a:25:b0: 6e:5c:2d:4b:97:c0:2e:44:6b:3e:6a:16:bd:76:90:b5:6e:01: b8:b7:b8:08:44:e8:26:34:ea:5e:46:ad:b8:d3:9c:b1:a2:6d: 7c:60:0e:12:4c:9b:3c:0b:0f:10:49:fa:4b:52:07:d5:d0:29: b6:83:55:52:68:d6:98:af:d9:b1:c2:bd:f5:22:b7:a9:ee:e0: 15:f2:ce:ea:7f:1c:0e:c2:4d:b6:e4:b6:63:e0:b2:98:1b:3f: 95:e2:af:48:7b:26:6e:ec:ab:c3:4a:f6:7c:f2:73:97:68:87: 7e:f2:7e:8c:b1:7f:3b:e0:16:e6:af:27:df:d6:cb:37:5b:e6: a7:76:d1:4f:e3:b2:fd:9d:1b:d8:c4:73:47:7f:20:cd:56:0b: 06:7d:83:c6:fd:85:d3:93:cd:37:a1:14:09:58:97:56:30:75: 97:27:6e:f1:d3:5d:d3:6d:5b:f7:43:8b:77:4c:2c:5c:78:44: 6d:8c:d9:33:cc:c0:92:c7:8b:59:ef:89:67:49:c7:d8:a7:61: 59:0c:b8:82:09:e9:de:15:1d:7e:7b:31:58:8e:bd:bf:e5:60: 4b:0c:2a:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSYJxtpfAW5iCla0bwTfhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NTYwOGQwNzhkNmYzMWNmNzliZTc4NzM2YmY4ODQ2MDZh MTdkYTQwHhcNMjUxMjIxMTkwMTEyWhcNMjUxMjIyMTkwMTEyWjAzMTEwLwYDVQQD Eyg1NTk0ZmM3YzNkNTUwZTUyYTA0NjZjZTlkZDIzMjhjNzg1ZTIyOTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4HJl/rWP0QiGS3r3ZzjjRjNlEhjc bN+Fi8fx/taoihrOJFK/O1J9Xhg6UkyMfgu+WGxpBcKN/xlkhdY68eNYWXjWbj4d VyK2coeSXzO3eSPZwqhSBmYFv/ST346MYpjQwV4th+ovwhOXl6GUQ56FXwjbwX/A ZvEZ8L1LLH0XmrvFKp7fTlQmYcskgeQH+RXBXFQfpeGWyFo/RWeTKeiLzcb8oMtH AaCb1AFmbfl4Oz4F6IaJ1coz5AkNQ+R9+PYxDURLOEe0ElZ+Sgq6R3SDn9k9YEPo 3Go6ACAAv4UwBiXgM64bt+VqGn/ezjmLYuRlSYrfBE5xMOkvDfrASDjyyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFWU/Hw9VQ5SoEZs6d0jKMeF4ikgMB8GA1UdIwQY MBaAFDVWCNB41vMc95vnhza/iEYGoX2kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlZZSTBIalc4eHozbS1lSE5yLUlSZ2FoZmFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9iODQxOTUtY2Q0Ni00OWNiLTg1Zjgt NmViNDNiNTU2ZTEzLzEvTlZZSTBIalc4eHozbS1lSE5yLUlSZ2FoZmFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9iODQxOTUtY2Q0Ni00OWNiLTg1ZjgtNmViNDNiNTU2ZTEz LzEvTlZZSTBIalc4eHozbS1lSE5yLUlSZ2FoZmFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOK2bU5VZ XKHt5uZMsJ1cVHmfzVd7w2Htgc15Ht9tdoSAGiWwblwtS5fALkRrPmoWvXaQtW4B uLe4CEToJjTqXkatuNOcsaJtfGAOEkybPAsPEEn6S1IH1dAptoNVUmjWmK/ZscK9 9SK3qe7gFfLO6n8cDsJNtuS2Y+CymBs/leKvSHsmbuyrw0r2fPJzl2iHfvJ+jLF/ O+AW5q8n39bLN1vmp3bRT+Oy/Z0b2MRzR38gzVYLBn2Dxv2F05PNN6EUCViXVjB1 lydu8dNd021b90OLd0wsXHhEbYzZM8zAkseLWe+JZ0nH2KdhWQy4ggnp3hUdfnsx WI69v+VgSwwqow== -----END CERTIFICATE-----Generated at Sun Dec 21 20:38:21 2025 by rpki-client