This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/f54f3a-6b8a-48c3-b2de-77a9c529777c/1/NxnxmwrdjQwod8i6f-CliTCbsUQ.mft File: NxnxmwrdjQwod8i6f-CliTCbsUQ.mft (raw, json) Hash identifier: B1BQ6EiVUBgEWAF3Z+FAYZup0iHDgqkiDWDRQLKiakI= Subject key identifier: B4:5A:86:14:75:93:C4:C9:2C:EA:48:5E:82:5B:CD:5B:9D:27:E3:CC Authority key identifier: 37:19:F1:9B:0A:DD:8D:0C:28:77:C8:BA:7F:E0:A5:89:30:9B:B1:44 Certificate issuer: /CN=3719f19b0add8d0c2877c8ba7fe0a589309bb144 Certificate serial: 019AF1D24596001B32C8DA89DDE50BC3E276 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NxnxmwrdjQwod8i6f-CliTCbsUQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/f54f3a-6b8a-48c3-b2de-77a9c529777c/1/NxnxmwrdjQwod8i6f-CliTCbsUQ.mft Manifest number: A1 Signing time: Sat 06 Dec 2025 04:01:20 +0000 Manifest this update: Sat 06 Dec 2025 04:01:20 +0000 Manifest next update: Sun 07 Dec 2025 04:01:20 +0000 Files and hashes: 1: 4zImklvcYAVPCVi7B7vGd1c4iRU.roa (hash: nvTLIvIJofO2R9HrAaQpvAKjEbVKJcVlnQNjC2GDKUY=) 2: NxnxmwrdjQwod8i6f-CliTCbsUQ.crl (hash: EJBYEsl9GByVJTtQZVr18IT+AjJMb32FzPKfMcGGsT0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/f54f3a-6b8a-48c3-b2de-77a9c529777c/1/NxnxmwrdjQwod8i6f-CliTCbsUQ.crl rsync://rpki.ripe.net/repository/DEFAULT/13/f54f3a-6b8a-48c3-b2de-77a9c529777c/1/NxnxmwrdjQwod8i6f-CliTCbsUQ.mft rsync://rpki.ripe.net/repository/DEFAULT/NxnxmwrdjQwod8i6f-CliTCbsUQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:45:96:00:1b:32:c8:da:89:dd:e5:0b:c3:e2:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3719f19b0add8d0c2877c8ba7fe0a589309bb144 Validity Not Before: Dec 6 04:01:20 2025 GMT Not After : Dec 7 04:01:20 2025 GMT Subject: CN=b45a86147593c4c92cea485e825bcd5b9d27e3cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:b2:58:5b:7d:88:2d:b3:e2:7c:45:a7:02:2e: de:4b:2f:fe:bd:9e:95:57:e5:33:e0:36:2f:8a:17: 78:9d:f7:83:cc:08:84:e2:86:c2:13:10:af:c6:d0: a8:3f:a3:1a:b1:61:34:89:e3:e1:95:34:6e:d6:d8: b8:1e:62:bb:17:7d:41:c0:04:6c:4f:ac:2c:01:02: 3c:10:2f:b6:57:b5:97:72:44:c4:77:f7:fe:1a:ee: b5:0e:4e:a3:2c:1d:30:65:6b:fe:33:32:f9:21:90: f6:8a:74:0c:01:ac:02:d7:e0:98:a7:e8:43:eb:c4: 0a:42:91:e3:e4:c8:7e:8f:44:5e:79:86:6f:be:57: 81:ab:e4:78:b9:6b:47:71:33:21:f6:70:af:ab:12: 90:08:34:d4:80:a7:5d:3a:8e:a4:53:9d:fb:69:90: 6d:41:10:6d:c9:2d:41:4d:71:3a:3b:8b:88:d0:d2: 92:7f:34:6d:1e:6e:ed:0f:03:27:38:03:71:33:4f: af:1c:08:79:86:85:6b:dc:3d:65:8c:85:8a:db:72: 67:cb:53:d6:25:2c:8a:f7:66:b9:a7:aa:c2:5b:24: 6c:4f:f1:1d:4b:44:e4:9a:08:f7:c6:90:98:e1:6d: 5b:b1:1a:cd:72:2e:e9:a6:a7:3a:de:4e:e0:17:cb: 76:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:5A:86:14:75:93:C4:C9:2C:EA:48:5E:82:5B:CD:5B:9D:27:E3:CC X509v3 Authority Key Identifier: keyid:37:19:F1:9B:0A:DD:8D:0C:28:77:C8:BA:7F:E0:A5:89:30:9B:B1:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NxnxmwrdjQwod8i6f-CliTCbsUQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f54f3a-6b8a-48c3-b2de-77a9c529777c/1/NxnxmwrdjQwod8i6f-CliTCbsUQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f54f3a-6b8a-48c3-b2de-77a9c529777c/1/NxnxmwrdjQwod8i6f-CliTCbsUQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:81:5c:e1:df:f1:18:0b:34:73:4d:ad:04:1b:cd:82:31:55: e7:60:59:cb:6c:9d:d4:61:df:cc:c8:d1:a0:3e:48:27:62:56: 6d:c9:e6:97:1e:f6:57:8b:c4:21:fb:3c:87:c3:e4:c6:eb:48: 52:69:98:f5:99:21:1a:28:73:8f:a9:04:41:e5:a2:4f:1b:1e: fc:7c:69:7d:b5:b4:92:e4:43:b6:0d:ae:27:cb:ff:66:03:7c: a6:96:a1:fc:97:5a:1b:99:f0:76:d1:29:6f:78:ad:0a:92:e1: 69:f1:ff:b0:d1:2f:f2:d9:92:f5:08:77:8a:fe:81:93:63:65: dc:a3:75:1e:1e:e9:98:0a:57:a9:77:6e:fd:06:8f:db:ba:06: bc:87:07:2d:a9:9f:d6:e4:1c:88:b6:40:c4:ea:b8:70:b6:a8: c4:64:7e:4c:27:66:84:54:99:f2:e7:05:18:1f:d9:01:36:ce: 5d:bf:b8:c3:0f:bb:bb:9d:f0:55:5b:84:c5:48:80:ae:42:df: 9c:a9:72:5b:c8:5e:75:b2:2a:5b:8c:82:55:5c:52:cb:9f:d7: 37:af:cf:94:9b:57:a2:d2:4c:54:78:90:f6:af:c9:a0:14:a8: 2f:4e:9d:37:34:e8:b9:48:96:f2:65:9f:00:fc:93:2c:be:f8: e5:5a:f6:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0kWWABsyyNqJ3eULw+J2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3MTlmMTliMGFkZDhkMGMyODc3YzhiYTdmZTBhNTg5MzA5 YmIxNDQwHhcNMjUxMjA2MDQwMTIwWhcNMjUxMjA3MDQwMTIwWjAzMTEwLwYDVQQD EyhiNDVhODYxNDc1OTNjNGM5MmNlYTQ4NWU4MjViY2Q1YjlkMjdlM2NjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/bJYW32ILbPifEWnAi7eSy/+vZ6V V+Uz4DYvihd4nfeDzAiE4obCExCvxtCoP6MasWE0iePhlTRu1ti4HmK7F31BwARs T6wsAQI8EC+2V7WXckTEd/f+Gu61Dk6jLB0wZWv+MzL5IZD2inQMAawC1+CYp+hD 68QKQpHj5Mh+j0ReeYZvvleBq+R4uWtHcTMh9nCvqxKQCDTUgKddOo6kU537aZBt QRBtyS1BTXE6O4uI0NKSfzRtHm7tDwMnOANxM0+vHAh5hoVr3D1ljIWK23Jny1PW JSyK92a5p6rCWyRsT/EdS0Tkmgj3xpCY4W1bsRrNci7ppqc63k7gF8t2PQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLRahhR1k8TJLOpIXoJbzVudJ+PMMB8GA1UdIwQY MBaAFDcZ8ZsK3Y0MKHfIun/gpYkwm7FEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnhueG13cmRqUXdvZDhpNmYtQ2xpVENic1VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9mNTRmM2EtNmI4YS00OGMzLWIyZGUt NzdhOWM1Mjk3NzdjLzEvTnhueG13cmRqUXdvZDhpNmYtQ2xpVENic1VRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9mNTRmM2EtNmI4YS00OGMzLWIyZGUtNzdhOWM1Mjk3Nzdj LzEvTnhueG13cmRqUXdvZDhpNmYtQ2xpVENic1VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG4Fc4d/x GAs0c02tBBvNgjFV52BZy2yd1GHfzMjRoD5IJ2JWbcnmlx72V4vEIfs8h8PkxutI UmmY9ZkhGihzj6kEQeWiTxse/HxpfbW0kuRDtg2uJ8v/ZgN8ppah/JdaG5nwdtEp b3itCpLhafH/sNEv8tmS9Qh3iv6Bk2Nl3KN1Hh7pmApXqXdu/QaP27oGvIcHLamf 1uQciLZAxOq4cLaoxGR+TCdmhFSZ8ucFGB/ZATbOXb+4ww+7u53wVVuExUiArkLf nKlyW8hedbIqW4yCVVxSy5/XN6/PlJtXotJMVHiQ9q/JoBSoL06dNzTouUiW8mWf APyTLL745Vr2AA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:56:21 2025 by rpki-client