This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.mft File: nxuJ5urGEf1TMtcOuvUxH61lErg.mft (raw, json) Hash identifier: RPS7NJXR5Rk7/OdSXaPWTcC2auHbUaqSbvHX0UM0Dj8= Subject key identifier: 34:57:FA:2F:8F:45:70:27:FD:4C:8E:EB:39:44:22:32:2F:DA:93:C1 Authority key identifier: 9F:1B:89:E6:EA:C6:11:FD:53:32:D7:0E:BA:F5:31:1F:AD:65:12:B8 Certificate issuer: /CN=9f1b89e6eac611fd5332d70ebaf5311fad6512b8 Certificate serial: 019AF1D1AB672C9E0AAFA7689A939D092BC5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nxuJ5urGEf1TMtcOuvUxH61lErg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.mft Manifest number: 108F Signing time: Sat 06 Dec 2025 04:00:41 +0000 Manifest this update: Sat 06 Dec 2025 04:00:41 +0000 Manifest next update: Sun 07 Dec 2025 04:00:41 +0000 Files and hashes: 1: nxuJ5urGEf1TMtcOuvUxH61lErg.crl (hash: SKdNyTF4W9C7Nc4+ippdI0AUNCTKf7GNZgKA3LPioL4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.crl rsync://rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.mft rsync://rpki.ripe.net/repository/DEFAULT/nxuJ5urGEf1TMtcOuvUxH61lErg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:ab:67:2c:9e:0a:af:a7:68:9a:93:9d:09:2b:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f1b89e6eac611fd5332d70ebaf5311fad6512b8 Validity Not Before: Dec 6 04:00:41 2025 GMT Not After : Dec 7 04:00:41 2025 GMT Subject: CN=3457fa2f8f457027fd4c8eeb394422322fda93c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:14:70:79:90:04:3b:12:22:0c:c6:df:e5:f7: dc:77:a0:c2:a7:f7:87:6c:35:79:43:18:5c:13:04: 88:71:d3:e9:b9:81:62:25:89:53:54:c7:b9:b1:7c: 93:08:1a:15:a1:ef:29:21:e3:a1:e8:02:a1:95:8c: d8:94:30:53:5a:38:ae:23:d5:51:ba:9e:42:43:2b: 50:90:e1:ea:5e:b5:c4:fd:f8:bc:c9:2d:79:94:30: 99:a7:56:27:8c:61:27:14:3c:51:35:03:f5:a0:a2: fb:b7:0c:d8:ff:f8:48:93:57:28:16:b6:5e:5e:72: ac:03:4b:59:a9:57:d2:d6:45:23:f4:b5:0a:b8:16: 23:08:e0:24:de:91:0e:e1:db:bc:20:bd:ad:d0:0b: ef:f8:ce:e8:e7:ad:77:4f:09:e8:be:ed:4a:35:74: 4e:ce:f6:be:9b:7c:04:f6:3b:cd:b9:f5:51:f5:3d: 8a:63:b0:eb:b9:37:9c:71:93:ef:36:24:48:2b:d4: fb:25:97:f2:7f:d2:89:f4:62:a2:29:bb:4c:6e:7c: 17:e9:4a:6f:30:64:a1:53:cb:73:26:8a:e9:87:a9: 5c:ac:63:04:e1:ed:c6:fd:4e:d8:94:0a:ad:6a:f3: 53:6b:58:c5:cc:93:57:63:76:56:44:b2:cf:82:05: 3d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:57:FA:2F:8F:45:70:27:FD:4C:8E:EB:39:44:22:32:2F:DA:93:C1 X509v3 Authority Key Identifier: keyid:9F:1B:89:E6:EA:C6:11:FD:53:32:D7:0E:BA:F5:31:1F:AD:65:12:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nxuJ5urGEf1TMtcOuvUxH61lErg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:8f:6b:3f:7f:dd:3b:4e:82:a2:6b:78:52:23:42:72:71:79: 14:91:bf:75:c2:0a:53:ae:a6:bd:31:dd:ec:f8:28:10:56:02: a1:31:b3:79:d3:ba:0c:d0:9c:e9:82:29:7e:44:72:30:9f:d4: 92:c8:bb:ba:28:ce:a0:c8:0c:9d:5d:a3:29:7b:47:52:45:67: a3:f1:6c:ac:26:9b:e3:ec:80:41:89:bb:80:97:1e:33:68:a3: 80:2b:e3:91:3b:07:17:76:02:f1:36:c8:2f:6a:6b:d8:31:4e: fd:56:9d:31:7e:e2:47:e9:02:98:46:51:94:04:14:79:40:50: f0:5b:25:c2:a0:50:4f:67:51:7c:ce:2c:dd:a9:9c:f8:e9:8e: 03:d6:ee:b8:a9:d4:dc:ac:ce:07:f8:d7:c6:46:98:e8:13:ed: 83:aa:ac:53:dc:e6:36:22:79:b8:8a:13:69:35:73:79:17:7d: 24:f1:2e:da:df:26:37:79:da:56:9f:16:25:71:e1:e2:db:1e: a5:37:0d:47:37:21:ef:61:03:9e:81:5d:3c:43:f4:5f:71:02: e4:5c:93:d3:db:ad:8b:76:74:24:86:d1:dd:bd:69:d1:d1:8e: df:2d:5b:8d:39:8e:5d:e9:3b:86:61:75:c9:41:15:9c:89:f6: ff:4b:d7:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0atnLJ4Kr6dompOdCSvFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmMWI4OWU2ZWFjNjExZmQ1MzMyZDcwZWJhZjUzMTFmYWQ2 NTEyYjgwHhcNMjUxMjA2MDQwMDQxWhcNMjUxMjA3MDQwMDQxWjAzMTEwLwYDVQQD EygzNDU3ZmEyZjhmNDU3MDI3ZmQ0YzhlZWIzOTQ0MjIzMjJmZGE5M2MxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxRweZAEOxIiDMbf5ffcd6DCp/eH bDV5QxhcEwSIcdPpuYFiJYlTVMe5sXyTCBoVoe8pIeOh6AKhlYzYlDBTWjiuI9VR up5CQytQkOHqXrXE/fi8yS15lDCZp1YnjGEnFDxRNQP1oKL7twzY//hIk1coFrZe XnKsA0tZqVfS1kUj9LUKuBYjCOAk3pEO4du8IL2t0Avv+M7o5613Twnovu1KNXRO zva+m3wE9jvNufVR9T2KY7DruTeccZPvNiRIK9T7JZfyf9KJ9GKiKbtMbnwX6Upv MGShU8tzJorph6lcrGME4e3G/U7YlAqtavNTa1jFzJNXY3ZWRLLPggU9gwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDRX+i+PRXAn/UyO6zlEIjIv2pPBMB8GA1UdIwQY MBaAFJ8biebqxhH9UzLXDrr1MR+tZRK4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnh1SjV1ckdFZjFUTXRjT3V2VXhINjFsRXJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9hMTg0MWUtMDEwNi00N2RlLTkyM2It NzQ0ZmIyMWI1NTk4LzEvbnh1SjV1ckdFZjFUTXRjT3V2VXhINjFsRXJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9hMTg0MWUtMDEwNi00N2RlLTkyM2ItNzQ0ZmIyMWI1NTk4 LzEvbnh1SjV1ckdFZjFUTXRjT3V2VXhINjFsRXJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATo9rP3/d O06Comt4UiNCcnF5FJG/dcIKU66mvTHd7PgoEFYCoTGzedO6DNCc6YIpfkRyMJ/U ksi7uijOoMgMnV2jKXtHUkVno/FsrCab4+yAQYm7gJceM2ijgCvjkTsHF3YC8TbI L2pr2DFO/VadMX7iR+kCmEZRlAQUeUBQ8FslwqBQT2dRfM4s3amc+OmOA9buuKnU 3KzOB/jXxkaY6BPtg6qsU9zmNiJ5uIoTaTVzeRd9JPEu2t8mN3naVp8WJXHh4tse pTcNRzch72EDnoFdPEP0X3EC5FyT09uti3Z0JIbR3b1p0dGO3y1bjTmOXek7hmF1 yUEVnIn2/0vXMg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:13:31 2025 by rpki-client