This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/5324bd-7926-4513-bd1f-68ef3238a72e/1/Nv7S1etbPFJmq6phfJYHA8VdB4U.mft File: Nv7S1etbPFJmq6phfJYHA8VdB4U.mft (raw, json) Hash identifier: z0lEp4LQlioar4L89uTGzU+1F5x30n2ZC3jajz4Bi8U= Subject key identifier: F4:FA:86:92:BB:35:51:39:4D:57:7F:F3:5B:AE:0E:1E:90:DD:90:CA Authority key identifier: 36:FE:D2:D5:EB:5B:3C:52:66:AB:AA:61:7C:96:07:03:C5:5D:07:85 Certificate issuer: /CN=36fed2d5eb5b3c5266abaa617c960703c55d0785 Certificate serial: 019B3F4899A7E4F1F0607EADB523C9DFEB02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nv7S1etbPFJmq6phfJYHA8VdB4U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/5324bd-7926-4513-bd1f-68ef3238a72e/1/Nv7S1etbPFJmq6phfJYHA8VdB4U.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 05:01:21 +0000 Manifest this update: Sun 21 Dec 2025 05:01:21 +0000 Manifest next update: Mon 22 Dec 2025 05:01:21 +0000 Files and hashes: 1: 8_VDYxYfQ3xVlWP15Ma3Tw9vIZY.roa (hash: p9ujQLih3FUP7R7lN/a7zNvyvlVnBJRzQXMR2O0trWo=) 2: Nv7S1etbPFJmq6phfJYHA8VdB4U.crl (hash: q8K2ceWICj7PcBeNyCsJoj9D6QvflwgZXrMJdpuax04=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/5324bd-7926-4513-bd1f-68ef3238a72e/1/Nv7S1etbPFJmq6phfJYHA8VdB4U.crl rsync://rpki.ripe.net/repository/DEFAULT/de/5324bd-7926-4513-bd1f-68ef3238a72e/1/Nv7S1etbPFJmq6phfJYHA8VdB4U.mft rsync://rpki.ripe.net/repository/DEFAULT/Nv7S1etbPFJmq6phfJYHA8VdB4U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:99:a7:e4:f1:f0:60:7e:ad:b5:23:c9:df:eb:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36fed2d5eb5b3c5266abaa617c960703c55d0785 Validity Not Before: Dec 21 05:01:21 2025 GMT Not After : Dec 22 05:01:21 2025 GMT Subject: CN=f4fa8692bb3551394d577ff35bae0e1e90dd90ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:6d:0f:29:12:fa:ca:bd:d0:24:61:8a:39:8f: d3:88:a3:57:d9:bd:e2:46:d9:ac:ab:a7:bb:39:7e: c1:90:b6:65:2a:81:60:ca:57:a8:c6:80:2e:29:79: 2c:60:39:b2:aa:f4:81:dd:7e:2c:4b:88:6d:68:1a: 65:b0:ae:74:16:e1:a6:bf:b2:d5:ff:35:d3:c8:af: 6b:15:51:a5:d5:0d:7a:1e:b5:eb:fb:b1:49:9d:ae: 83:4b:fd:3d:35:79:32:11:bd:ed:04:79:52:13:b7: 9f:d6:14:e9:16:d6:39:ec:64:2a:7b:f0:05:c2:de: f3:7e:48:c1:f0:e3:fa:75:4c:6e:08:b9:d3:b3:83: 5f:f0:ef:1b:cf:97:9f:80:19:64:9b:15:2d:bf:e4: 0e:64:e7:03:5e:f0:28:dc:77:32:f2:1a:6f:64:1b: 70:85:e0:c2:f9:76:01:5d:47:d9:52:66:00:8e:a8: cf:85:e2:ae:17:d5:bc:49:51:d2:7b:cb:e3:81:cf: 92:2b:04:b4:da:59:7c:72:90:6c:17:89:2d:35:7d: a0:2f:30:40:3b:72:e2:96:4c:4e:e0:15:d6:9c:dd: 86:9f:34:5c:bd:45:b3:3c:7a:ef:65:43:5e:91:4b: 33:18:09:e8:9a:f3:cf:8a:f3:f8:2b:eb:76:12:a7: 44:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:FA:86:92:BB:35:51:39:4D:57:7F:F3:5B:AE:0E:1E:90:DD:90:CA X509v3 Authority Key Identifier: keyid:36:FE:D2:D5:EB:5B:3C:52:66:AB:AA:61:7C:96:07:03:C5:5D:07:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nv7S1etbPFJmq6phfJYHA8VdB4U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5324bd-7926-4513-bd1f-68ef3238a72e/1/Nv7S1etbPFJmq6phfJYHA8VdB4U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5324bd-7926-4513-bd1f-68ef3238a72e/1/Nv7S1etbPFJmq6phfJYHA8VdB4U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:69:f6:57:77:45:a7:ff:a0:fe:11:50:02:20:32:87:50:ca: ea:ba:69:49:fd:62:58:bb:22:d2:cf:59:2c:24:5e:95:d6:2a: d3:24:44:1a:c8:9e:87:4d:ae:25:f8:2d:9b:e5:10:ad:ce:b7: 2b:c8:18:89:e9:01:64:9e:ee:55:c1:19:05:5c:4a:a0:de:b4: 04:af:a8:19:e0:f8:c5:05:b8:da:92:47:81:ac:dc:a6:9a:1f: 94:71:f8:8e:91:45:58:01:49:e9:06:4d:49:45:af:93:83:7e: 14:a8:7a:5b:11:8e:43:6c:ec:19:d7:6c:fe:ff:8f:66:25:0f: 42:cb:17:43:78:26:71:2a:4c:9f:40:41:d6:64:ef:45:f1:4f: ac:d3:67:85:b0:63:a2:94:82:47:27:d7:7f:4b:01:9e:39:92: 2d:70:99:f9:93:f0:fb:f1:9b:fe:50:51:85:97:fa:7a:64:64: d2:f3:c4:f5:97:b5:b7:19:97:be:d9:65:7f:07:b6:8c:79:cf: 64:e7:f3:1d:56:ed:5d:56:05:a8:e6:e2:54:fb:0c:aa:71:46: 8a:c3:69:3c:30:a4:7a:10:ff:aa:1c:3c:7a:65:7e:2a:19:7d: 8a:a8:0d:4f:84:fb:90:ff:40:6f:81:e0:2c:51:ca:71:3f:b9: 1f:dd:65:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SJmn5PHwYH6ttSPJ3+sCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2ZmVkMmQ1ZWI1YjNjNTI2NmFiYWE2MTdjOTYwNzAzYzU1 ZDA3ODUwHhcNMjUxMjIxMDUwMTIxWhcNMjUxMjIyMDUwMTIxWjAzMTEwLwYDVQQD EyhmNGZhODY5MmJiMzU1MTM5NGQ1NzdmZjM1YmFlMGUxZTkwZGQ5MGNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtW0PKRL6yr3QJGGKOY/TiKNX2b3i Rtmsq6e7OX7BkLZlKoFgyleoxoAuKXksYDmyqvSB3X4sS4htaBplsK50FuGmv7LV /zXTyK9rFVGl1Q16HrXr+7FJna6DS/09NXkyEb3tBHlSE7ef1hTpFtY57GQqe/AF wt7zfkjB8OP6dUxuCLnTs4Nf8O8bz5efgBlkmxUtv+QOZOcDXvAo3Hcy8hpvZBtw heDC+XYBXUfZUmYAjqjPheKuF9W8SVHSe8vjgc+SKwS02ll8cpBsF4ktNX2gLzBA O3LilkxO4BXWnN2GnzRcvUWzPHrvZUNekUszGAnomvPPivP4K+t2EqdE9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPT6hpK7NVE5TVd/81uuDh6Q3ZDKMB8GA1UdIwQY MBaAFDb+0tXrWzxSZquqYXyWBwPFXQeFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnY3UzFldGJQRkptcTZwaGZKWUhBOFZkQjRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS81MzI0YmQtNzkyNi00NTEzLWJkMWYt NjhlZjMyMzhhNzJlLzEvTnY3UzFldGJQRkptcTZwaGZKWUhBOFZkQjRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS81MzI0YmQtNzkyNi00NTEzLWJkMWYtNjhlZjMyMzhhNzJl LzEvTnY3UzFldGJQRkptcTZwaGZKWUhBOFZkQjRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACWn2V3dF p/+g/hFQAiAyh1DK6rppSf1iWLsi0s9ZLCReldYq0yREGsieh02uJfgtm+UQrc63 K8gYiekBZJ7uVcEZBVxKoN60BK+oGeD4xQW42pJHgazcppoflHH4jpFFWAFJ6QZN SUWvk4N+FKh6WxGOQ2zsGdds/v+PZiUPQssXQ3gmcSpMn0BB1mTvRfFPrNNnhbBj opSCRyfXf0sBnjmSLXCZ+ZPw+/Gb/lBRhZf6emRk0vPE9Ze1txmXvtllfwe2jHnP ZOfzHVbtXVYFqObiVPsMqnFGisNpPDCkehD/qhw8emV+Khl9iqgNT4T7kP9Ab4Hg LFHKcT+5H91ljQ== -----END CERTIFICATE-----Generated at Sun Dec 21 09:46:34 2025 by rpki-client