This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.mft File: NsPEVldDrle9KuqaNjwrPD4lD3I.mft (raw, json) Hash identifier: hM51QuwjmJgWNkiiUyLoepkdipx8IV9piTZ44+/Ql0U= Subject key identifier: 11:8E:6F:9D:A3:1E:57:32:95:DC:DC:00:DA:1E:34:A3:8B:89:06:AA Authority key identifier: 36:C3:C4:56:57:43:AE:57:BD:2A:EA:9A:36:3C:2B:3C:3E:25:0F:72 Certificate issuer: /CN=36c3c4565743ae57bd2aea9a363c2b3c3e250f72 Certificate serial: 019B3042D31BC48EB3882621D00FC0B79602 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsPEVldDrle9KuqaNjwrPD4lD3I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.mft Manifest number: 1384 Signing time: Thu 18 Dec 2025 07:00:44 +0000 Manifest this update: Thu 18 Dec 2025 07:00:44 +0000 Manifest next update: Fri 19 Dec 2025 07:00:44 +0000 Files and hashes: 1: IfdUdkM_5ScEBaPG7l3GiRIWFuU.roa (hash: R1YS3LmUUMRjG9wj9Vs3Bys5gjm8WufD0RLPEG4kcAw=) 2: NsPEVldDrle9KuqaNjwrPD4lD3I.crl (hash: TgzmZFmNVs7GSDVroukneQL/c0V77ZzKTkYgq1Km2cI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.mft rsync://rpki.ripe.net/repository/DEFAULT/NsPEVldDrle9KuqaNjwrPD4lD3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:42:d3:1b:c4:8e:b3:88:26:21:d0:0f:c0:b7:96:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36c3c4565743ae57bd2aea9a363c2b3c3e250f72 Validity Not Before: Dec 18 07:00:44 2025 GMT Not After : Dec 19 07:00:44 2025 GMT Subject: CN=118e6f9da31e573295dcdc00da1e34a38b8906aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:25:27:dd:aa:3e:1b:7d:5b:88:d4:e8:37:77: dc:7c:8d:98:34:58:f6:d8:ba:63:3a:9c:9d:77:cc: 1c:cd:e6:80:00:bb:ad:3e:0c:c4:c9:b3:ba:ea:b9: 51:38:51:69:4c:35:09:59:37:66:c2:06:10:8c:ef: 27:41:f5:b0:e4:e5:12:86:7f:b3:33:65:43:91:5a: 5e:9b:0f:a4:c3:9b:c2:a8:9d:3b:ed:a1:a1:a4:2a: f1:6a:47:15:52:e1:98:44:7e:e4:db:5c:9a:26:39: 59:18:da:14:8a:b5:9a:4b:d1:c2:99:ed:1d:b1:38: 2e:88:fb:db:d8:3c:e2:12:2c:80:c0:eb:cb:eb:dd: 07:9b:32:40:47:62:c8:6b:19:c2:29:f0:67:d8:22: bd:fa:82:1e:73:c3:a5:16:20:0c:de:f1:d1:ed:f0: 96:0f:73:79:24:89:a5:08:6b:a5:fd:de:ff:2c:70: 75:9d:87:54:72:c2:8d:4b:f7:29:3b:e9:79:20:41: de:87:24:9d:95:b5:76:36:36:cc:da:20:ec:b3:e6: 40:6a:9e:e9:a8:f0:58:ef:4c:dd:ba:14:27:10:5a: 24:98:5f:93:de:c2:fb:63:3f:a4:33:f1:d6:a8:09: 1a:4b:76:f9:8e:c3:29:12:7b:95:aa:98:5d:72:9d: 91:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:8E:6F:9D:A3:1E:57:32:95:DC:DC:00:DA:1E:34:A3:8B:89:06:AA X509v3 Authority Key Identifier: keyid:36:C3:C4:56:57:43:AE:57:BD:2A:EA:9A:36:3C:2B:3C:3E:25:0F:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsPEVldDrle9KuqaNjwrPD4lD3I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:d1:ad:84:2b:d3:37:69:6d:28:ec:dd:cc:06:90:e3:27:99: 70:2e:b6:b0:e4:da:5e:4b:f0:35:aa:b3:cc:27:41:d3:4b:0a: 71:c5:9f:6c:12:b1:b2:85:a9:b0:43:47:49:9f:68:17:d9:3d: 74:fa:48:de:f4:94:55:42:65:27:d7:c7:2a:66:f8:ab:4e:8d: 95:16:1c:d4:df:e5:80:02:65:66:d0:f7:67:ec:32:0f:82:70: 70:d5:03:32:07:b3:19:da:8b:d4:04:b8:a1:f3:54:b4:10:1d: 66:e0:e7:99:92:5d:30:6d:59:76:fc:74:6b:46:58:51:fa:eb: cf:90:a1:2d:0f:5b:33:d6:e3:12:f5:ef:ec:e1:02:4d:ac:7f: c1:62:11:f3:89:fa:3f:95:8f:26:90:5f:da:a9:68:69:65:8c: ff:af:e4:2e:8e:34:52:77:72:06:36:09:dd:3b:3c:08:49:e1: 06:88:1d:0f:9b:7b:30:47:c8:98:26:9e:24:0c:52:76:f5:9e: a8:f5:7d:4b:b1:23:e5:91:31:de:29:ab:e5:49:23:4a:c6:23: 7b:49:5f:89:21:72:ee:48:7b:a3:7f:19:3c:ce:5e:30:d4:40: 99:8a:3a:ec:94:d0:4c:7b:90:8c:42:de:8f:d0:da:39:ae:de: 6e:62:10:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZswQtMbxI6ziCYh0A/At5YCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YzNjNDU2NTc0M2FlNTdiZDJhZWE5YTM2M2MyYjNjM2Uy NTBmNzIwHhcNMjUxMjE4MDcwMDQ0WhcNMjUxMjE5MDcwMDQ0WjAzMTEwLwYDVQQD EygxMThlNmY5ZGEzMWU1NzMyOTVkY2RjMDBkYTFlMzRhMzhiODkwNmFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwiUn3ao+G31biNToN3fcfI2YNFj2 2LpjOpydd8wczeaAALutPgzEybO66rlROFFpTDUJWTdmwgYQjO8nQfWw5OUShn+z M2VDkVpemw+kw5vCqJ077aGhpCrxakcVUuGYRH7k21yaJjlZGNoUirWaS9HCme0d sTguiPvb2DziEiyAwOvL690HmzJAR2LIaxnCKfBn2CK9+oIec8OlFiAM3vHR7fCW D3N5JImlCGul/d7/LHB1nYdUcsKNS/cpO+l5IEHehySdlbV2NjbM2iDss+ZAap7p qPBY70zduhQnEFokmF+T3sL7Yz+kM/HWqAkaS3b5jsMpEnuVqphdcp2RDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBGOb52jHlcyldzcANoeNKOLiQaqMB8GA1UdIwQY MBaAFDbDxFZXQ65XvSrqmjY8Kzw+JQ9yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnNQRVZsZERybGU5S3VxYU5qd3JQRDRsRDNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8wMTYxNTYtMDkzZS00MDViLTliMmQt YTU3NDlkMjM0NmU3LzEvTnNQRVZsZERybGU5S3VxYU5qd3JQRDRsRDNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi8wMTYxNTYtMDkzZS00MDViLTliMmQtYTU3NDlkMjM0NmU3 LzEvTnNQRVZsZERybGU5S3VxYU5qd3JQRDRsRDNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKNGthCvT N2ltKOzdzAaQ4yeZcC62sOTaXkvwNaqzzCdB00sKccWfbBKxsoWpsENHSZ9oF9k9 dPpI3vSUVUJlJ9fHKmb4q06NlRYc1N/lgAJlZtD3Z+wyD4JwcNUDMgezGdqL1AS4 ofNUtBAdZuDnmZJdMG1Zdvx0a0ZYUfrrz5ChLQ9bM9bjEvXv7OECTax/wWIR84n6 P5WPJpBf2qloaWWM/6/kLo40UndyBjYJ3Ts8CEnhBogdD5t7MEfImCaeJAxSdvWe qPV9S7Ej5ZEx3imr5UkjSsYje0lfiSFy7kh7o38ZPM5eMNRAmYo67JTQTHuQjELe j9DaOa7ebmIQhg== -----END CERTIFICATE-----Generated at Thu Dec 18 12:47:59 2025 by rpki-client