This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/a0faca-db7f-4ed8-b11a-eec46ca82a33/1/NVi7R941Tgng_CyywfoU1x2Sbug.mft File: NVi7R941Tgng_CyywfoU1x2Sbug.mft (raw, json) Hash identifier: YCMRmr5ugORv2ScPIPoYwGql9i2oGRCyVdNHH3BDzcY= Subject key identifier: A6:FF:FC:72:AF:46:32:33:2D:13:EF:0B:71:01:DC:BB:6F:0D:08:B3 Authority key identifier: 35:58:BB:47:DE:35:4E:09:E0:FC:2C:B2:C1:FA:14:D7:1D:92:6E:E8 Certificate issuer: /CN=3558bb47de354e09e0fc2cb2c1fa14d71d926ee8 Certificate serial: 019B40FF89D239417D2F0BD77626FDCC25E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NVi7R941Tgng_CyywfoU1x2Sbug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/a0faca-db7f-4ed8-b11a-eec46ca82a33/1/NVi7R941Tgng_CyywfoU1x2Sbug.mft Manifest number: 1792 Signing time: Sun 21 Dec 2025 13:00:47 +0000 Manifest this update: Sun 21 Dec 2025 13:00:47 +0000 Manifest next update: Mon 22 Dec 2025 13:00:47 +0000 Files and hashes: 1: 0iLUxeXNyLeCeJPOBWFetpkhzr8.roa (hash: GzvKjvrXUQtFRvTqnLO3SZbgmgXYnbU1huTzG2YJ5xg=) 2: NVi7R941Tgng_CyywfoU1x2Sbug.crl (hash: /eFpShM2OiNlO8ZWqJfqcTGTKhiQ6yuiUdN17QBU3I4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/a0faca-db7f-4ed8-b11a-eec46ca82a33/1/NVi7R941Tgng_CyywfoU1x2Sbug.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/a0faca-db7f-4ed8-b11a-eec46ca82a33/1/NVi7R941Tgng_CyywfoU1x2Sbug.mft rsync://rpki.ripe.net/repository/DEFAULT/NVi7R941Tgng_CyywfoU1x2Sbug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:ff:89:d2:39:41:7d:2f:0b:d7:76:26:fd:cc:25:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3558bb47de354e09e0fc2cb2c1fa14d71d926ee8 Validity Not Before: Dec 21 13:00:47 2025 GMT Not After : Dec 22 13:00:47 2025 GMT Subject: CN=a6fffc72af4632332d13ef0b7101dcbb6f0d08b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:36:38:6f:5f:60:e2:93:e2:9f:79:83:45:84: 8b:27:b2:70:f2:46:c5:ba:96:12:22:cd:69:23:b0: 31:a9:5e:b4:82:5a:1c:95:8f:ec:79:6d:d2:03:cd: 41:38:dc:80:6d:25:48:c8:0e:9b:ec:fa:b8:98:6c: 8f:7e:a3:ff:39:9d:d5:84:05:83:e3:2a:1c:4d:ab: 1d:3f:f1:f0:e4:56:ea:8b:8f:63:ad:bd:f5:29:ac: 10:47:66:a9:f7:5a:3c:02:8e:d6:1f:5e:08:ce:4a: 2a:33:d1:69:15:d3:f4:fd:7e:05:59:05:ae:e0:a1: 09:aa:a5:6e:7e:14:c4:d9:65:86:8c:0e:f8:ed:7f: 7b:11:c8:9d:46:ef:0f:c0:b4:5d:ae:d8:d4:47:57: 60:6f:0e:1e:4f:c7:fc:58:07:6a:f1:8b:65:f7:99: c4:2f:b2:f0:24:c6:1c:17:77:dd:91:36:f0:03:73: e4:7f:8b:d7:15:53:a9:39:fa:e4:78:a5:61:99:19: 24:1e:c4:5a:32:20:d8:5f:80:ac:59:9f:77:13:f5: 94:59:4e:11:39:dd:1f:62:b6:6a:06:ec:c7:f4:d2: a8:03:4d:69:cb:c6:c6:1f:06:8e:8a:d5:b2:f0:9f: 6a:f9:f4:52:4c:1c:1b:dc:ec:da:6a:65:79:4c:db: 33:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:FF:FC:72:AF:46:32:33:2D:13:EF:0B:71:01:DC:BB:6F:0D:08:B3 X509v3 Authority Key Identifier: keyid:35:58:BB:47:DE:35:4E:09:E0:FC:2C:B2:C1:FA:14:D7:1D:92:6E:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NVi7R941Tgng_CyywfoU1x2Sbug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a0faca-db7f-4ed8-b11a-eec46ca82a33/1/NVi7R941Tgng_CyywfoU1x2Sbug.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a0faca-db7f-4ed8-b11a-eec46ca82a33/1/NVi7R941Tgng_CyywfoU1x2Sbug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:41:bb:dd:c3:3c:00:63:88:6b:9e:52:88:d2:c4:bd:bf:0d: 6f:15:a5:67:cb:00:54:e5:b3:46:38:41:8f:00:fc:28:c3:09: fe:17:3b:a6:44:f9:90:40:7f:4e:3d:93:e9:40:7e:45:b5:8a: 6c:5b:51:85:ef:a2:20:c9:8c:ef:30:f5:e8:de:bd:b1:e4:d9: a6:9f:64:c9:f7:60:08:39:46:3b:08:ab:af:1c:ac:f3:c8:1f: 1c:b6:75:0f:c7:6d:d2:fd:c0:41:66:56:6c:a7:ca:4d:d7:18: 47:2a:a0:e6:a4:84:d6:1c:8c:77:9a:cb:cb:ac:9f:91:c0:06: f2:f0:e2:ea:58:c2:bd:ae:8a:64:81:69:2f:71:ae:d5:30:67: d7:33:14:04:84:15:b2:ec:b5:6f:c9:66:6e:5b:ed:f3:60:73: db:83:fb:7c:f1:93:37:24:b2:eb:21:a9:a1:4a:a1:ee:40:20: bc:54:9a:d2:c0:f8:64:bc:f0:c1:83:a5:d1:b5:ae:98:5c:98: 34:20:0c:f1:52:df:5e:25:66:b0:a1:bf:45:83:21:87:48:33: 80:bd:51:f4:38:56:d0:8e:f8:9d:4e:59:06:09:d4:48:39:a5: 33:48:ee:b9:30:4b:c7:1d:7a:bf:5a:6a:84:72:44:ae:de:9d: 88:ef:09:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtA/4nSOUF9LwvXdib9zCXkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NThiYjQ3ZGUzNTRlMDllMGZjMmNiMmMxZmExNGQ3MWQ5 MjZlZTgwHhcNMjUxMjIxMTMwMDQ3WhcNMjUxMjIyMTMwMDQ3WjAzMTEwLwYDVQQD EyhhNmZmZmM3MmFmNDYzMjMzMmQxM2VmMGI3MTAxZGNiYjZmMGQwOGIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujY4b19g4pPin3mDRYSLJ7Jw8kbF upYSIs1pI7AxqV60gloclY/seW3SA81BONyAbSVIyA6b7Pq4mGyPfqP/OZ3VhAWD 4yocTasdP/Hw5Fbqi49jrb31KawQR2ap91o8Ao7WH14IzkoqM9FpFdP0/X4FWQWu 4KEJqqVufhTE2WWGjA747X97EcidRu8PwLRdrtjUR1dgbw4eT8f8WAdq8Ytl95nE L7LwJMYcF3fdkTbwA3Pkf4vXFVOpOfrkeKVhmRkkHsRaMiDYX4CsWZ93E/WUWU4R Od0fYrZqBuzH9NKoA01py8bGHwaOitWy8J9q+fRSTBwb3OzaamV5TNsziwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKb//HKvRjIzLRPvC3EB3LtvDQizMB8GA1UdIwQY MBaAFDVYu0feNU4J4PwsssH6FNcdkm7oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlZpN1I5NDFUZ25nX0N5eXdmb1UxeDJTYnVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9hMGZhY2EtZGI3Zi00ZWQ4LWIxMWEt ZWVjNDZjYTgyYTMzLzEvTlZpN1I5NDFUZ25nX0N5eXdmb1UxeDJTYnVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9hMGZhY2EtZGI3Zi00ZWQ4LWIxMWEtZWVjNDZjYTgyYTMz LzEvTlZpN1I5NDFUZ25nX0N5eXdmb1UxeDJTYnVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVUG73cM8 AGOIa55SiNLEvb8NbxWlZ8sAVOWzRjhBjwD8KMMJ/hc7pkT5kEB/Tj2T6UB+RbWK bFtRhe+iIMmM7zD16N69seTZpp9kyfdgCDlGOwirrxys88gfHLZ1D8dt0v3AQWZW bKfKTdcYRyqg5qSE1hyMd5rLy6yfkcAG8vDi6ljCva6KZIFpL3Gu1TBn1zMUBIQV suy1b8lmblvt82Bz24P7fPGTNySy6yGpoUqh7kAgvFSa0sD4ZLzwwYOl0bWumFyY NCAM8VLfXiVmsKG/RYMhh0gzgL1R9DhW0I74nU5ZBgnUSDmlM0juuTBLxx16v1pq hHJErt6diO8J5Q== -----END CERTIFICATE-----Generated at Sun Dec 21 22:37:20 2025 by rpki-client