This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.mft File: Nv46kSY-LoMZwqZ45imFHQnnfw0.mft (raw, json) Hash identifier: VfGFIPsidirbuKxjgxjFHvh6ZS82mFQCAM03OpBBGwQ= Subject key identifier: 4D:69:58:63:62:EB:FA:A9:11:B1:CE:FE:17:A5:54:64:94:23:D4:84 Authority key identifier: 36:FE:3A:91:26:3E:2E:83:19:C2:A6:78:E6:29:85:1D:09:E7:7F:0D Certificate issuer: /CN=36fe3a91263e2e8319c2a678e629851d09e77f0d Certificate serial: 019B3C7EBC1168E54966C628B4F4C9B0C52F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nv46kSY-LoMZwqZ45imFHQnnfw0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.mft Manifest number: 0DBB Signing time: Sat 20 Dec 2025 16:01:37 +0000 Manifest this update: Sat 20 Dec 2025 16:01:37 +0000 Manifest next update: Sun 21 Dec 2025 16:01:37 +0000 Files and hashes: 1: Nv46kSY-LoMZwqZ45imFHQnnfw0.crl (hash: xZSPasdakaPPFwuzy8smGOySFCOajJEal2WJjrDem6k=) 2: R_dc828vlc27bxXSMzahF76dopg.roa (hash: U9Dh8EyuA2m2THZyqCUiwh3xOZkz+ZLmhUNE1mbIxTM=) 3: yzgxHb39JlWgV-6OUyl9AE4hQAQ.roa (hash: pG2NZjpFYDlbN9iuGT1kUvmnDeM4noZC3E54rEDkwXo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.mft rsync://rpki.ripe.net/repository/DEFAULT/Nv46kSY-LoMZwqZ45imFHQnnfw0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:bc:11:68:e5:49:66:c6:28:b4:f4:c9:b0:c5:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36fe3a91263e2e8319c2a678e629851d09e77f0d Validity Not Before: Dec 20 16:01:37 2025 GMT Not After : Dec 21 16:01:37 2025 GMT Subject: CN=4d69586362ebfaa911b1cefe17a554649423d484 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f3:04:11:24:3f:1b:3f:ef:2e:29:dd:d7:f5: 78:9a:43:71:90:44:eb:82:d6:e5:f8:82:c2:cb:98: 2c:35:0b:32:67:d5:d1:1a:ba:39:5f:fe:95:f8:40: c6:77:e8:5f:99:56:38:fa:76:ad:92:aa:35:3e:9b: 1a:ce:6e:cb:bd:3d:24:a4:1b:ed:49:18:64:34:6e: 0f:dc:74:21:46:93:bc:a8:42:31:48:67:e3:ae:1c: 68:42:3e:4c:42:e5:52:b8:5d:34:63:b3:b6:9b:6c: 4c:6e:4f:ad:b1:22:de:f2:ea:72:0e:f4:10:b5:fa: 74:74:f9:e6:42:44:e0:a5:8d:50:5d:e9:1c:2d:b1: aa:3c:66:7f:5c:1f:f5:50:11:f9:aa:95:0b:9e:e7: ef:c0:c4:74:43:73:8d:77:50:1b:e5:66:d7:22:de: 2d:75:10:4c:4b:9a:3e:85:07:a7:57:bf:30:c9:a3: a5:c9:c0:0f:99:af:2d:82:5a:5b:88:80:6a:5c:ba: ca:38:7a:eb:3c:6c:f5:d1:a5:4e:dc:0f:8e:be:8e: 71:82:5f:6d:84:e6:ea:f2:1b:59:f9:68:85:77:9e: 28:e2:0c:4b:48:a5:66:b1:15:bf:a9:51:88:d0:41: 98:ed:e0:2e:d1:61:cf:06:45:1e:15:ad:19:64:97: be:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:69:58:63:62:EB:FA:A9:11:B1:CE:FE:17:A5:54:64:94:23:D4:84 X509v3 Authority Key Identifier: keyid:36:FE:3A:91:26:3E:2E:83:19:C2:A6:78:E6:29:85:1D:09:E7:7F:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nv46kSY-LoMZwqZ45imFHQnnfw0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:75:ab:04:c3:71:9e:2e:51:c2:04:52:5d:06:a0:2d:1f:7d: fc:b5:e1:d0:76:0d:53:69:16:ff:10:eb:88:42:59:d3:38:7d: 34:dd:77:95:27:0a:9a:29:c6:18:15:85:32:be:cd:b8:d8:5d: dd:a7:0a:f1:d9:e5:00:69:cf:39:5c:94:59:37:fc:1b:68:63: 51:4e:97:74:93:87:64:e3:d3:0e:e2:d0:cf:c1:cd:26:dd:ca: 7c:86:60:80:48:8c:63:6f:08:10:68:e7:fe:a0:7b:49:73:98: 03:05:61:08:8b:45:23:82:af:cb:88:e8:ef:7b:65:a4:2f:5e: 07:90:db:83:4a:a4:51:59:ed:78:f4:74:8e:cf:38:18:df:8b: 44:3e:8c:2e:a3:4d:f2:be:09:05:0e:66:2a:38:20:01:9b:64: f5:bb:71:91:34:ae:dd:09:21:99:c6:62:67:c0:dd:63:e5:bd: 90:c2:53:9e:14:1f:e5:4e:80:00:07:ab:32:f4:3d:61:b1:fc: d9:70:cc:47:fc:12:48:72:29:01:08:cb:4a:c1:c5:3e:fc:c7: 7b:62:97:d3:c2:b3:40:89:fb:fd:e8:a1:8b:76:dd:46:f8:a5: 39:7e:98:00:c2:d9:6b:dc:e5:53:d4:f8:d9:03:60:bd:95:2c: b0:db:15:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8frwRaOVJZsYotPTJsMUvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2ZmUzYTkxMjYzZTJlODMxOWMyYTY3OGU2Mjk4NTFkMDll NzdmMGQwHhcNMjUxMjIwMTYwMTM3WhcNMjUxMjIxMTYwMTM3WjAzMTEwLwYDVQQD Eyg0ZDY5NTg2MzYyZWJmYWE5MTFiMWNlZmUxN2E1NTQ2NDk0MjNkNDg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/MEESQ/Gz/vLind1/V4mkNxkETr gtbl+ILCy5gsNQsyZ9XRGro5X/6V+EDGd+hfmVY4+natkqo1Ppsazm7LvT0kpBvt SRhkNG4P3HQhRpO8qEIxSGfjrhxoQj5MQuVSuF00Y7O2m2xMbk+tsSLe8upyDvQQ tfp0dPnmQkTgpY1QXekcLbGqPGZ/XB/1UBH5qpULnufvwMR0Q3ONd1Ab5WbXIt4t dRBMS5o+hQenV78wyaOlycAPma8tglpbiIBqXLrKOHrrPGz10aVO3A+Ovo5xgl9t hObq8htZ+WiFd54o4gxLSKVmsRW/qVGI0EGY7eAu0WHPBkUeFa0ZZJe+lwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE1pWGNi6/qpEbHO/helVGSUI9SEMB8GA1UdIwQY MBaAFDb+OpEmPi6DGcKmeOYphR0J538NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnY0NmtTWS1Mb01ad3FaNDVpbUZIUW5uZncwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9lOTZlZjQtNGY0NS00N2MwLWJlYmYt ZmEzZTA5MDFmMjQwLzEvTnY0NmtTWS1Mb01ad3FaNDVpbUZIUW5uZncwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS9lOTZlZjQtNGY0NS00N2MwLWJlYmYtZmEzZTA5MDFmMjQw LzEvTnY0NmtTWS1Mb01ad3FaNDVpbUZIUW5uZncwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAXWrBMNx ni5RwgRSXQagLR99/LXh0HYNU2kW/xDriEJZ0zh9NN13lScKminGGBWFMr7NuNhd 3acK8dnlAGnPOVyUWTf8G2hjUU6XdJOHZOPTDuLQz8HNJt3KfIZggEiMY28IEGjn /qB7SXOYAwVhCItFI4Kvy4jo73tlpC9eB5Dbg0qkUVntePR0js84GN+LRD6MLqNN 8r4JBQ5mKjggAZtk9btxkTSu3QkhmcZiZ8DdY+W9kMJTnhQf5U6AAAerMvQ9YbH8 2XDMR/wSSHIpAQjLSsHFPvzHe2KX08KzQIn7/eihi3bdRvilOX6YAMLZa9zlU9T4 2QNgvZUssNsV8w== -----END CERTIFICATE-----Generated at Sat Dec 20 20:26:08 2025 by rpki-client