This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.mft File: nxuJ5urGEf1TMtcOuvUxH61lErg.mft (raw, json) Hash identifier: UKAV8JOJFKJQJvQvPkUxqJ/3r+0rHkwdcVYT24lhOiA= Subject key identifier: B4:D7:6E:A6:80:58:72:DC:16:8E:E1:D9:D7:DC:3E:22:86:FB:44:8A Authority key identifier: 9F:1B:89:E6:EA:C6:11:FD:53:32:D7:0E:BA:F5:31:1F:AD:65:12:B8 Certificate issuer: /CN=9f1b89e6eac611fd5332d70ebaf5311fad6512b8 Certificate serial: 019B318C6B5EC7EB2105F6059A66063AD825 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nxuJ5urGEf1TMtcOuvUxH61lErg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.mft Manifest number: 10B0 Signing time: Thu 18 Dec 2025 13:00:44 +0000 Manifest this update: Thu 18 Dec 2025 13:00:44 +0000 Manifest next update: Fri 19 Dec 2025 13:00:44 +0000 Files and hashes: 1: nxuJ5urGEf1TMtcOuvUxH61lErg.crl (hash: e6DTif0j3gI1pahtbKOEJc/5pGntAXYOJR4WEUUt6qw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.crl rsync://rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.mft rsync://rpki.ripe.net/repository/DEFAULT/nxuJ5urGEf1TMtcOuvUxH61lErg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:8c:6b:5e:c7:eb:21:05:f6:05:9a:66:06:3a:d8:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f1b89e6eac611fd5332d70ebaf5311fad6512b8 Validity Not Before: Dec 18 13:00:44 2025 GMT Not After : Dec 19 13:00:44 2025 GMT Subject: CN=b4d76ea6805872dc168ee1d9d7dc3e2286fb448a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:82:53:e8:04:d7:08:b0:1b:6f:18:58:fc:ef: 3b:52:ac:40:a9:30:0a:47:19:de:39:44:8d:b0:16: e4:27:51:bc:ee:6e:ff:37:a6:28:18:35:03:63:58: 39:61:2b:31:b4:bd:68:e5:92:e9:73:06:84:ed:e2: a0:99:0f:f4:aa:b8:d9:49:09:59:cc:10:a5:55:f8: 38:05:6f:fe:00:93:7a:0a:eb:f4:d9:89:c4:22:fd: 1f:12:0a:67:75:f8:14:fe:52:6e:96:4f:e1:eb:38: 42:25:80:2d:96:34:ca:ab:1a:c4:56:e5:1b:d5:07: 4b:55:a4:95:0a:0b:67:af:72:ae:e7:10:e8:9b:96: c7:06:63:7a:33:18:5a:74:ec:dc:8e:58:98:29:37: 81:e0:7d:84:5f:65:19:c0:b9:3b:3f:f8:24:1e:66: 00:40:84:75:77:da:8f:f5:a9:b4:2b:96:ce:80:bb: 03:fb:69:16:d9:19:55:09:45:55:d7:97:b8:ad:39: b3:1e:c5:de:23:31:e1:96:b3:5a:17:f2:17:ad:f9: 54:a4:96:c8:c0:6e:bd:9a:c5:82:fc:14:2a:bf:0a: ce:a6:60:ef:22:a7:76:4a:80:41:dd:d2:d5:07:26: b1:dd:71:6b:8c:67:3e:9d:75:df:a1:a6:47:00:36: 7b:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:D7:6E:A6:80:58:72:DC:16:8E:E1:D9:D7:DC:3E:22:86:FB:44:8A X509v3 Authority Key Identifier: keyid:9F:1B:89:E6:EA:C6:11:FD:53:32:D7:0E:BA:F5:31:1F:AD:65:12:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nxuJ5urGEf1TMtcOuvUxH61lErg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:ce:01:b8:9a:02:bb:2c:13:80:f1:56:87:6b:fa:4f:82:3e: e0:7a:f8:1f:bf:c2:e4:ee:61:93:01:fd:2f:28:95:fe:5a:fa: ad:da:36:80:a3:63:61:b6:84:12:95:bf:02:6c:26:47:f3:93: f8:d8:8f:ae:06:82:69:50:03:c0:61:ca:b8:33:78:b9:b4:35: d4:77:34:b4:4d:57:fc:ed:e7:cb:d3:0c:a2:ea:3a:12:a2:79: b1:28:19:94:39:4d:31:b9:1d:f1:0a:71:27:e2:8c:ca:24:a3: 79:32:7d:68:e5:4c:2a:01:d5:ab:e1:7b:59:a0:a0:4b:f1:95: 8c:27:e7:c0:77:4b:14:1d:e1:4f:1c:96:f2:7a:8b:6d:c2:de: b5:e0:4a:84:7c:7a:63:20:d8:2e:fb:b9:49:5c:35:f9:4e:1c: 73:37:45:91:6a:2b:65:71:77:f2:ba:ec:3e:86:df:0a:ba:51: 89:23:8b:44:1f:8a:7e:73:3c:ed:9e:72:2d:f2:ec:80:5b:f3: e8:ab:dd:c7:53:97:ec:25:e0:e9:51:78:79:13:6a:bc:be:40: 5f:c4:7c:bf:94:21:11:43:36:79:b1:bb:88:e8:24:03:eb:db: 90:74:f8:8e:4a:e9:10:89:1e:8f:32:d8:8a:b0:76:9a:d7:62: 7f:f0:41:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxjGtex+shBfYFmmYGOtglMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmMWI4OWU2ZWFjNjExZmQ1MzMyZDcwZWJhZjUzMTFmYWQ2 NTEyYjgwHhcNMjUxMjE4MTMwMDQ0WhcNMjUxMjE5MTMwMDQ0WjAzMTEwLwYDVQQD EyhiNGQ3NmVhNjgwNTg3MmRjMTY4ZWUxZDlkN2RjM2UyMjg2ZmI0NDhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA74JT6ATXCLAbbxhY/O87UqxAqTAK RxneOUSNsBbkJ1G87m7/N6YoGDUDY1g5YSsxtL1o5ZLpcwaE7eKgmQ/0qrjZSQlZ zBClVfg4BW/+AJN6Cuv02YnEIv0fEgpndfgU/lJulk/h6zhCJYAtljTKqxrEVuUb 1QdLVaSVCgtnr3Ku5xDom5bHBmN6MxhadOzcjliYKTeB4H2EX2UZwLk7P/gkHmYA QIR1d9qP9am0K5bOgLsD+2kW2RlVCUVV15e4rTmzHsXeIzHhlrNaF/IXrflUpJbI wG69msWC/BQqvwrOpmDvIqd2SoBB3dLVByax3XFrjGc+nXXfoaZHADZ7EQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLTXbqaAWHLcFo7h2dfcPiKG+0SKMB8GA1UdIwQY MBaAFJ8biebqxhH9UzLXDrr1MR+tZRK4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnh1SjV1ckdFZjFUTXRjT3V2VXhINjFsRXJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9hMTg0MWUtMDEwNi00N2RlLTkyM2It NzQ0ZmIyMWI1NTk4LzEvbnh1SjV1ckdFZjFUTXRjT3V2VXhINjFsRXJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9hMTg0MWUtMDEwNi00N2RlLTkyM2ItNzQ0ZmIyMWI1NTk4 LzEvbnh1SjV1ckdFZjFUTXRjT3V2VXhINjFsRXJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALM4BuJoC uywTgPFWh2v6T4I+4Hr4H7/C5O5hkwH9LyiV/lr6rdo2gKNjYbaEEpW/AmwmR/OT +NiPrgaCaVADwGHKuDN4ubQ11Hc0tE1X/O3ny9MMouo6EqJ5sSgZlDlNMbkd8Qpx J+KMyiSjeTJ9aOVMKgHVq+F7WaCgS/GVjCfnwHdLFB3hTxyW8nqLbcLeteBKhHx6 YyDYLvu5SVw1+U4cczdFkWorZXF38rrsPobfCrpRiSOLRB+KfnM87Z5yLfLsgFvz 6Kvdx1OX7CXg6VF4eRNqvL5AX8R8v5QhEUM2ebG7iOgkA+vbkHT4jkrpEIkejzLY irB2mtdif/BB/A== -----END CERTIFICATE-----Generated at Thu Dec 18 19:11:56 2025 by rpki-client