This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9a359f-4b70-48c3-a38f-23b7ce34ebac/1/nE-xCAvPALb912uv2dUTPF4cPTI.mft File: nE-xCAvPALb912uv2dUTPF4cPTI.mft (raw, json) Hash identifier: 41rldFADTM06Qss3MXoO74IfvNOPqBlPmf7VTQHeGhE= Subject key identifier: AF:5F:9A:7F:74:81:D8:53:72:5F:A1:7D:9C:AF:61:7B:2A:13:80:6E Authority key identifier: 9C:4F:B1:08:0B:CF:00:B6:FD:D7:6B:AF:D9:D5:13:3C:5E:1C:3D:32 Certificate issuer: /CN=9c4fb1080bcf00b6fdd76bafd9d5133c5e1c3d32 Certificate serial: 019AF2767527C76A219A5122F38EE6A6B3BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nE-xCAvPALb912uv2dUTPF4cPTI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/9a359f-4b70-48c3-a38f-23b7ce34ebac/1/nE-xCAvPALb912uv2dUTPF4cPTI.mft Manifest number: 0748 Signing time: Sat 06 Dec 2025 07:00:40 +0000 Manifest this update: Sat 06 Dec 2025 07:00:40 +0000 Manifest next update: Sun 07 Dec 2025 07:00:40 +0000 Files and hashes: 1: nE-xCAvPALb912uv2dUTPF4cPTI.crl (hash: Lja0qTrRGGcRmFpFnV2lc7VRKkplJHlE1B2kBW0DaIU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/9a359f-4b70-48c3-a38f-23b7ce34ebac/1/nE-xCAvPALb912uv2dUTPF4cPTI.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/9a359f-4b70-48c3-a38f-23b7ce34ebac/1/nE-xCAvPALb912uv2dUTPF4cPTI.mft rsync://rpki.ripe.net/repository/DEFAULT/nE-xCAvPALb912uv2dUTPF4cPTI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:75:27:c7:6a:21:9a:51:22:f3:8e:e6:a6:b3:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c4fb1080bcf00b6fdd76bafd9d5133c5e1c3d32 Validity Not Before: Dec 6 07:00:40 2025 GMT Not After : Dec 7 07:00:40 2025 GMT Subject: CN=af5f9a7f7481d853725fa17d9caf617b2a13806e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e3:45:d3:87:9d:22:01:39:a4:4a:a9:c0:6e: f7:e2:d1:73:20:d7:49:c7:60:fb:1c:28:e2:72:d8: 49:be:54:cb:1a:fe:84:94:d0:f5:db:fb:09:85:e8: 4e:39:ba:50:2d:aa:77:e8:7f:d3:1d:a2:ae:0e:09: 40:a5:54:66:e9:4a:1c:ac:cd:a3:69:97:bf:71:86: 55:c9:17:7b:4f:48:81:02:06:d7:47:e5:78:17:ad: b2:ea:da:ad:87:76:2f:f9:53:d8:a7:13:cb:3a:10: cd:24:1b:38:b6:35:24:a2:8c:bd:53:b8:04:85:cb: 87:e6:0b:69:5f:67:d2:7d:3e:d0:d4:25:9f:c2:fc: 1f:6d:d1:a3:b9:98:c9:92:62:b6:78:dd:38:25:42: 23:2c:44:05:d9:c9:65:c6:14:bf:1d:a5:52:f1:6b: 7b:44:7e:12:91:34:8d:de:70:ae:0b:17:9a:42:54: 34:d4:89:0c:a7:66:d1:59:e5:5e:e3:10:26:a3:df: 89:f0:16:07:90:db:57:9f:0f:5a:bf:61:71:9b:40: 0a:ca:cd:a6:69:6e:9e:56:52:0d:57:a8:83:fc:55: 99:eb:29:41:65:90:18:8c:55:cd:dc:88:f9:ed:27: df:63:f3:b9:b0:48:e6:31:f7:06:96:4e:67:25:1a: 69:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:5F:9A:7F:74:81:D8:53:72:5F:A1:7D:9C:AF:61:7B:2A:13:80:6E X509v3 Authority Key Identifier: keyid:9C:4F:B1:08:0B:CF:00:B6:FD:D7:6B:AF:D9:D5:13:3C:5E:1C:3D:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nE-xCAvPALb912uv2dUTPF4cPTI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9a359f-4b70-48c3-a38f-23b7ce34ebac/1/nE-xCAvPALb912uv2dUTPF4cPTI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9a359f-4b70-48c3-a38f-23b7ce34ebac/1/nE-xCAvPALb912uv2dUTPF4cPTI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:28:4a:04:c1:b9:14:a4:d1:26:c3:49:b2:85:cf:aa:b9:c7: 52:b0:c6:4e:35:9c:aa:eb:5c:6e:ff:86:2e:64:58:f4:1c:16: 63:f4:d5:68:19:5e:23:8c:63:b8:0a:44:9c:6e:f3:84:9c:56: 8b:5a:0c:7a:33:a4:fd:7d:68:f1:b6:cb:28:98:a0:00:94:5f: 10:ba:9b:ec:33:55:06:c3:9c:42:b5:c4:cd:fc:67:3d:af:c6: d5:2f:b7:5a:e2:32:b0:7f:6f:da:e5:38:84:a8:32:95:a9:ee: 83:53:84:1b:ca:85:d1:3b:32:1d:61:44:27:54:f9:9a:46:68: 8d:f8:1a:8b:eb:14:eb:93:5c:6c:9f:2a:e3:93:dd:f8:42:aa: bf:44:8f:e2:7c:54:5b:3c:26:8f:50:73:ef:7f:80:a1:85:65: c8:ff:42:31:0f:d6:c0:ce:45:8f:07:91:ac:f3:b8:88:93:3e: d9:5a:3b:bc:9c:ad:16:5b:d6:39:0c:18:e3:ef:4f:d1:73:1a: 6f:6a:73:ee:21:e6:f6:88:e2:a8:ed:87:47:0f:3e:eb:c9:0c: 23:f5:1f:9b:b0:d4:d0:8a:48:a0:7b:6d:7d:1f:9b:f5:19:30: 4f:35:62:b0:5b:f1:85:a6:7b:14:3a:fd:57:a0:0f:30:f8:2d: c2:fc:99:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydnUnx2ohmlEi847mprO+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljNGZiMTA4MGJjZjAwYjZmZGQ3NmJhZmQ5ZDUxMzNjNWUx YzNkMzIwHhcNMjUxMjA2MDcwMDQwWhcNMjUxMjA3MDcwMDQwWjAzMTEwLwYDVQQD EyhhZjVmOWE3Zjc0ODFkODUzNzI1ZmExN2Q5Y2FmNjE3YjJhMTM4MDZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+NF04edIgE5pEqpwG734tFzINdJ x2D7HCjicthJvlTLGv6ElND12/sJhehOObpQLap36H/THaKuDglApVRm6UocrM2j aZe/cYZVyRd7T0iBAgbXR+V4F62y6tqth3Yv+VPYpxPLOhDNJBs4tjUkooy9U7gE hcuH5gtpX2fSfT7Q1CWfwvwfbdGjuZjJkmK2eN04JUIjLEQF2cllxhS/HaVS8Wt7 RH4SkTSN3nCuCxeaQlQ01IkMp2bRWeVe4xAmo9+J8BYHkNtXnw9av2Fxm0AKys2m aW6eVlINV6iD/FWZ6ylBZZAYjFXN3Ij57SffY/O5sEjmMfcGlk5nJRpp/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK9fmn90gdhTcl+hfZyvYXsqE4BuMB8GA1UdIwQY MBaAFJxPsQgLzwC2/ddrr9nVEzxeHD0yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkUteENBdlBBTGI5MTJ1djJkVVRQRjRjUFRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS85YTM1OWYtNGI3MC00OGMzLWEzOGYt MjNiN2NlMzRlYmFjLzEvbkUteENBdlBBTGI5MTJ1djJkVVRQRjRjUFRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS85YTM1OWYtNGI3MC00OGMzLWEzOGYtMjNiN2NlMzRlYmFj LzEvbkUteENBdlBBTGI5MTJ1djJkVVRQRjRjUFRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHyhKBMG5 FKTRJsNJsoXPqrnHUrDGTjWcqutcbv+GLmRY9BwWY/TVaBleI4xjuApEnG7zhJxW i1oMejOk/X1o8bbLKJigAJRfELqb7DNVBsOcQrXEzfxnPa/G1S+3WuIysH9v2uU4 hKgylanug1OEG8qF0TsyHWFEJ1T5mkZojfgai+sU65NcbJ8q45Pd+EKqv0SP4nxU Wzwmj1Bz73+AoYVlyP9CMQ/WwM5FjweRrPO4iJM+2Vo7vJytFlvWOQwY4+9P0XMa b2pz7iHm9ojiqO2HRw8+68kMI/Ufm7DU0IpIoHttfR+b9RkwTzVisFvxhaZ7FDr9 V6APMPgtwvyZqQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:59:36 2025 by rpki-client