This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/NXAXpX-ccN-vZpOjJLumhne4ePM.mft File: NXAXpX-ccN-vZpOjJLumhne4ePM.mft (raw, json) Hash identifier: kaEf8qQXof7CtR+R2XyaP5DqZ3GkT3p0aNvXkOna1Fg= Subject key identifier: 89:EE:B2:0B:A1:12:88:84:91:02:AD:55:74:8E:B9:3C:1D:3F:67:60 Authority key identifier: 35:70:17:A5:7F:9C:70:DF:AF:66:93:A3:24:BB:A6:86:77:B8:78:F3 Certificate issuer: /CN=357017a57f9c70dfaf6693a324bba68677b878f3 Certificate serial: 019AF12E77455D9C4245AE7B58FE2B175DC0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NXAXpX-ccN-vZpOjJLumhne4ePM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/NXAXpX-ccN-vZpOjJLumhne4ePM.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 01:02:25 +0000 Manifest this update: Sat 06 Dec 2025 01:02:25 +0000 Manifest next update: Sun 07 Dec 2025 01:02:25 +0000 Files and hashes: 1: NXAXpX-ccN-vZpOjJLumhne4ePM.crl (hash: /7smF9Ddm3Ok5oskwSg6/fZ88ncqBVtXxVL6xeUqkxs=) 2: fw5w9jTTZNnVRi6ltsbrZFMjlng.roa (hash: Spp2bK6sMfFLneeWMwidps5PTWRtnPxGOntgwXViU3Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/NXAXpX-ccN-vZpOjJLumhne4ePM.crl rsync://rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/NXAXpX-ccN-vZpOjJLumhne4ePM.mft rsync://rpki.ripe.net/repository/DEFAULT/NXAXpX-ccN-vZpOjJLumhne4ePM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:77:45:5d:9c:42:45:ae:7b:58:fe:2b:17:5d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=357017a57f9c70dfaf6693a324bba68677b878f3 Validity Not Before: Dec 6 01:02:25 2025 GMT Not After : Dec 7 01:02:25 2025 GMT Subject: CN=89eeb20ba11288849102ad55748eb93c1d3f6760 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f9:f9:b7:2d:22:2a:c9:0c:e4:0d:b1:c3:bc: f6:cd:48:b3:d9:dd:b4:9c:1b:63:28:1b:58:24:61: 9d:3e:32:8d:a9:e8:bb:96:99:c4:e4:d5:cd:32:d7: 2e:6b:ba:f6:be:0b:e9:4f:75:7c:f2:32:ea:2c:8e: 86:f7:86:94:fb:9d:4d:46:d0:91:2a:0b:34:27:67: 50:e4:4b:27:40:32:6b:26:de:92:dc:d8:a4:cc:0e: 73:29:da:07:4e:0f:b7:5b:22:17:67:eb:54:41:a7: e7:a5:89:92:d0:05:f6:01:0b:ea:bf:75:f9:0f:01: 24:80:8f:55:a0:2a:d8:43:a0:60:c3:83:3d:51:2d: be:a4:7f:df:6f:86:18:e2:63:3a:10:aa:77:08:49: 28:c9:26:0a:c2:73:0f:c0:97:e2:ca:be:0d:1c:8c: 3f:06:d9:6c:ca:c2:26:d9:76:fe:f8:00:16:a6:c1: 1d:66:d7:b2:a1:f4:a1:bb:06:a1:07:2f:ca:a8:de: f0:dc:92:4e:62:72:25:dc:ca:ea:69:5b:74:7d:a2: 27:ac:20:13:1d:cb:9d:24:7f:fc:fc:c8:bc:49:56: 58:03:d8:cb:c7:5f:5c:90:71:37:5e:2e:32:c8:a0: 54:c3:77:1c:25:28:df:79:50:0a:a1:83:0d:24:2b: 7f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:EE:B2:0B:A1:12:88:84:91:02:AD:55:74:8E:B9:3C:1D:3F:67:60 X509v3 Authority Key Identifier: keyid:35:70:17:A5:7F:9C:70:DF:AF:66:93:A3:24:BB:A6:86:77:B8:78:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NXAXpX-ccN-vZpOjJLumhne4ePM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/NXAXpX-ccN-vZpOjJLumhne4ePM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/NXAXpX-ccN-vZpOjJLumhne4ePM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:fb:c5:da:dc:c4:34:8c:96:3d:9a:e2:04:98:f3:81:d8:91: 5d:bc:c9:96:66:c9:f8:2d:2b:d5:0d:de:cb:3e:11:e4:46:01: ee:00:0a:1a:44:67:75:dd:13:2f:0a:5e:e9:07:d5:83:43:c2: f1:47:94:63:99:c0:1e:b4:e3:65:e6:ce:5f:ba:64:2d:8e:8e: e0:3e:aa:f5:48:9a:35:5b:21:94:63:4e:ea:9d:e5:4d:3a:b9: 9b:6b:15:a2:44:56:42:ef:ff:36:e7:5b:c9:da:d0:46:4c:b4: a2:2a:c1:6e:fa:5f:57:5c:c9:27:f3:bb:2b:24:87:54:78:ea: 44:ec:9e:92:93:89:c6:52:89:ed:a8:06:9a:c3:4f:a8:25:77: c3:35:19:5d:3b:1f:86:5c:78:65:28:6b:5f:42:95:c6:2d:75: 4b:8d:45:62:56:b5:c0:a3:a5:a4:7c:ba:2a:96:6d:29:f3:4e: 8a:a2:3a:f3:2a:e9:9c:47:c6:74:1a:b9:c8:3a:e8:9e:84:30: 62:35:e5:31:d1:93:b8:c0:bc:99:96:ce:47:68:80:7d:4b:0f: 00:47:7b:c3:bb:72:03:bb:f9:6e:fb:8f:b6:75:1c:1e:26:34: 93:fc:83:eb:f5:0b:16:9d:21:a0:7c:d7:12:a1:c0:a7:90:a3: d7:36:f9:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLndFXZxCRa57WP4rF13AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NzAxN2E1N2Y5YzcwZGZhZjY2OTNhMzI0YmJhNjg2Nzdi ODc4ZjMwHhcNMjUxMjA2MDEwMjI1WhcNMjUxMjA3MDEwMjI1WjAzMTEwLwYDVQQD Eyg4OWVlYjIwYmExMTI4ODg0OTEwMmFkNTU3NDhlYjkzYzFkM2Y2NzYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvn5ty0iKskM5A2xw7z2zUiz2d20 nBtjKBtYJGGdPjKNqei7lpnE5NXNMtcua7r2vgvpT3V88jLqLI6G94aU+51NRtCR Kgs0J2dQ5EsnQDJrJt6S3NikzA5zKdoHTg+3WyIXZ+tUQafnpYmS0AX2AQvqv3X5 DwEkgI9VoCrYQ6Bgw4M9US2+pH/fb4YY4mM6EKp3CEkoySYKwnMPwJfiyr4NHIw/ BtlsysIm2Xb++AAWpsEdZteyofShuwahBy/KqN7w3JJOYnIl3MrqaVt0faInrCAT HcudJH/8/Mi8SVZYA9jLx19ckHE3Xi4yyKBUw3ccJSjfeVAKoYMNJCt/MQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFInusguhEoiEkQKtVXSOuTwdP2dgMB8GA1UdIwQY MBaAFDVwF6V/nHDfr2aToyS7poZ3uHjzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlhBWHBYLWNjTi12WnBPakpMdW1obmU0ZVBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8xMjgyMGUtYjk3ZS00NzFjLWJiY2Ut OTJlZDFhZjE2Yjg4LzEvTlhBWHBYLWNjTi12WnBPakpMdW1obmU0ZVBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni8xMjgyMGUtYjk3ZS00NzFjLWJiY2UtOTJlZDFhZjE2Yjg4 LzEvTlhBWHBYLWNjTi12WnBPakpMdW1obmU0ZVBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh/vF2tzE NIyWPZriBJjzgdiRXbzJlmbJ+C0r1Q3eyz4R5EYB7gAKGkRndd0TLwpe6QfVg0PC 8UeUY5nAHrTjZebOX7pkLY6O4D6q9UiaNVshlGNO6p3lTTq5m2sVokRWQu//Nudb ydrQRky0oirBbvpfV1zJJ/O7KySHVHjqROyekpOJxlKJ7agGmsNPqCV3wzUZXTsf hlx4ZShrX0KVxi11S41FYla1wKOlpHy6KpZtKfNOiqI68yrpnEfGdBq5yDronoQw YjXlMdGTuMC8mZbOR2iAfUsPAEd7w7tyA7v5bvuPtnUcHiY0k/yD6/ULFp0hoHzX EqHAp5Cj1zb5zQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:07:12 2025 by rpki-client