This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.mft File: NvHVZ2vdcEM0sts0ypBNd83Suso.mft (raw, json) Hash identifier: yXAt/8TMW8Ve6Ci24LsD0t8xaxGWzbHsIGpQ/DVbdi8= Subject key identifier: 72:D2:36:B6:F7:97:29:58:0F:F8:35:2C:B3:2E:6B:A1:67:B8:5B:3B Authority key identifier: 36:F1:D5:67:6B:DD:70:43:34:B2:DB:34:CA:90:4D:77:CD:D2:BA:CA Certificate issuer: /CN=36f1d5676bdd704334b2db34ca904d77cdd2baca Certificate serial: 019B3C7DF4A0AF807508FB7399E5212AC93F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NvHVZ2vdcEM0sts0ypBNd83Suso.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.mft Manifest number: 02E8 Signing time: Sat 20 Dec 2025 16:00:45 +0000 Manifest this update: Sat 20 Dec 2025 16:00:45 +0000 Manifest next update: Sun 21 Dec 2025 16:00:45 +0000 Files and hashes: 1: NvHVZ2vdcEM0sts0ypBNd83Suso.crl (hash: r6RmjEwdyK4/3fW0Al3d79tfVvKtWBxA08oAVz0k5Ak=) 2: dy-p251zL98DN5HbKp4vPRlxutc.roa (hash: 4pwGuhrYIr/OJxEBN4t0YB3KYavBF0QhnyAv6oyh4DA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.crl rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.mft rsync://rpki.ripe.net/repository/DEFAULT/NvHVZ2vdcEM0sts0ypBNd83Suso.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7d:f4:a0:af:80:75:08:fb:73:99:e5:21:2a:c9:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36f1d5676bdd704334b2db34ca904d77cdd2baca Validity Not Before: Dec 20 16:00:45 2025 GMT Not After : Dec 21 16:00:45 2025 GMT Subject: CN=72d236b6f79729580ff8352cb32e6ba167b85b3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:7d:07:8c:a9:b6:ef:b3:27:cb:57:64:b0:77: 63:c4:ed:67:f4:73:4b:10:97:93:09:69:82:2e:a9: 22:bb:c6:5e:15:02:43:c2:8a:9c:96:df:7b:cc:4b: b0:5a:9b:61:8a:ed:6e:e4:34:d3:4a:ba:13:99:d1: 92:29:10:5c:94:c6:fa:2b:ae:d2:6c:8f:bd:6e:9a: 2c:c9:29:ac:e6:08:d9:19:62:51:a7:78:32:a9:ee: ab:ab:33:29:a4:71:cd:ad:92:55:98:f6:c2:e3:90: f2:6d:4c:4b:cf:da:45:3f:fc:34:37:90:2f:ad:5c: d1:66:44:95:a1:7a:60:ab:a5:21:bd:88:be:c8:de: 21:66:a1:33:b5:24:08:72:35:98:c3:cf:ef:6c:f9: f5:64:67:f1:9d:d1:2e:0e:e2:48:e0:be:fc:74:16: d7:c5:43:d6:35:d7:cb:c5:81:fc:ff:c0:b7:08:cc: 69:f2:2d:5c:98:72:20:6e:68:19:0c:df:a8:19:24: e7:15:37:b7:34:19:a4:f4:f0:8f:de:c1:91:dc:de: 92:a7:67:54:8e:6b:d0:48:8d:40:d3:7d:0a:b3:66: bf:57:39:8a:c0:ed:26:1c:5d:c4:51:99:e4:f8:bf: d9:f2:1a:ce:f7:30:42:c9:d5:cd:dc:af:82:79:af: 69:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:D2:36:B6:F7:97:29:58:0F:F8:35:2C:B3:2E:6B:A1:67:B8:5B:3B X509v3 Authority Key Identifier: keyid:36:F1:D5:67:6B:DD:70:43:34:B2:DB:34:CA:90:4D:77:CD:D2:BA:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NvHVZ2vdcEM0sts0ypBNd83Suso.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:7d:b9:2d:ab:13:b1:ff:c4:2e:0c:dc:c1:25:1f:3c:f1:c5: ed:7b:aa:9f:70:48:7c:56:c6:e4:29:51:57:d7:f0:4f:c9:b7: a3:5a:3e:48:0e:01:68:7a:7c:1c:40:ba:21:da:4e:20:c0:1b: 02:1a:43:6d:97:b2:b0:19:b7:7f:b0:ae:29:9a:59:a2:b5:b4: 1d:47:65:00:dc:7f:99:07:14:df:4a:57:2c:a3:ea:dc:92:c4: af:91:2d:bd:2d:02:50:7a:9c:f1:11:78:bb:cd:36:83:4f:66: ea:8d:94:c1:4b:12:25:41:ea:e3:af:d2:ef:a0:2d:e7:35:14: 35:15:54:9f:39:4c:82:92:9e:29:2e:eb:5b:8d:17:97:fe:f9: 58:47:d3:d6:03:a0:31:9c:d7:28:1e:45:85:50:f5:36:7e:92: cf:9d:91:1c:1c:77:09:50:11:d8:39:b0:7f:aa:c2:a1:ab:d5: fc:3c:3c:c0:38:5f:87:41:a4:5f:64:86:09:bb:54:b0:fb:50: 41:c9:8b:8c:f2:3a:90:a9:b5:8f:1a:8c:eb:ef:c1:a5:ce:b5: fe:75:c6:29:d5:b9:14:73:a4:8d:5b:00:80:f7:d7:4c:6e:ad: 65:7e:7e:a3:88:f6:80:3c:de:a9:3c:f5:47:40:48:0c:40:91: 59:97:36:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8ffSgr4B1CPtzmeUhKsk/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2ZjFkNTY3NmJkZDcwNDMzNGIyZGIzNGNhOTA0ZDc3Y2Rk MmJhY2EwHhcNMjUxMjIwMTYwMDQ1WhcNMjUxMjIxMTYwMDQ1WjAzMTEwLwYDVQQD Eyg3MmQyMzZiNmY3OTcyOTU4MGZmODM1MmNiMzJlNmJhMTY3Yjg1YjNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoH0HjKm277Mny1dksHdjxO1n9HNL EJeTCWmCLqkiu8ZeFQJDwoqclt97zEuwWpthiu1u5DTTSroTmdGSKRBclMb6K67S bI+9bposySms5gjZGWJRp3gyqe6rqzMppHHNrZJVmPbC45DybUxLz9pFP/w0N5Av rVzRZkSVoXpgq6UhvYi+yN4hZqEztSQIcjWYw8/vbPn1ZGfxndEuDuJI4L78dBbX xUPWNdfLxYH8/8C3CMxp8i1cmHIgbmgZDN+oGSTnFTe3NBmk9PCP3sGR3N6Sp2dU jmvQSI1A030Ks2a/VzmKwO0mHF3EUZnk+L/Z8hrO9zBCydXN3K+Cea9p1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHLSNrb3lylYD/g1LLMua6FnuFs7MB8GA1UdIwQY MBaAFDbx1Wdr3XBDNLLbNMqQTXfN0rrKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnZIVloydmRjRU0wc3RzMHlwQk5kODNTdXNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS80ZDg2NWMtNzBmNS00NGI5LTg4YTYt ZWE4YWZlNjc4OTcwLzEvTnZIVloydmRjRU0wc3RzMHlwQk5kODNTdXNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS80ZDg2NWMtNzBmNS00NGI5LTg4YTYtZWE4YWZlNjc4OTcw LzEvTnZIVloydmRjRU0wc3RzMHlwQk5kODNTdXNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG325LasT sf/ELgzcwSUfPPHF7Xuqn3BIfFbG5ClRV9fwT8m3o1o+SA4BaHp8HEC6IdpOIMAb AhpDbZeysBm3f7CuKZpZorW0HUdlANx/mQcU30pXLKPq3JLEr5EtvS0CUHqc8RF4 u802g09m6o2UwUsSJUHq46/S76At5zUUNRVUnzlMgpKeKS7rW40Xl/75WEfT1gOg MZzXKB5FhVD1Nn6Sz52RHBx3CVAR2Dmwf6rCoavV/Dw8wDhfh0GkX2SGCbtUsPtQ QcmLjPI6kKm1jxqM6+/Bpc61/nXGKdW5FHOkjVsAgPfXTG6tZX5+o4j2gDzeqTz1 R0BIDECRWZc2Vw== -----END CERTIFICATE-----Generated at Sat Dec 20 21:33:14 2025 by rpki-client