This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/da5c0d-5944-4963-adec-fb66742045ed/1/nLxTKkq1Xwb3wbZwGSJPjczaZTQ.mft File: nLxTKkq1Xwb3wbZwGSJPjczaZTQ.mft (raw, json) Hash identifier: 5qUFOh8uWZmPh4pry8zrENoXgYa4fn4LrvRGTQiUw5g= Subject key identifier: 60:18:16:EE:D4:07:2A:F9:A8:01:24:9C:A4:6E:EB:18:7F:B8:0E:44 Authority key identifier: 9C:BC:53:2A:4A:B5:5F:06:F7:C1:B6:70:19:22:4F:8D:CC:DA:65:34 Certificate issuer: /CN=9cbc532a4ab55f06f7c1b67019224f8dccda6534 Certificate serial: 019AF3F7071348E21F5C4323F6D8E9FB8DCF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLxTKkq1Xwb3wbZwGSJPjczaZTQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/da5c0d-5944-4963-adec-fb66742045ed/1/nLxTKkq1Xwb3wbZwGSJPjczaZTQ.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 14:00:43 +0000 Manifest this update: Sat 06 Dec 2025 14:00:43 +0000 Manifest next update: Sun 07 Dec 2025 14:00:43 +0000 Files and hashes: 1: nLxTKkq1Xwb3wbZwGSJPjczaZTQ.crl (hash: w6eeRyiIsKjcgIc6AYJMy/lJl9jCLVvK0K3cR7xImOo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/da5c0d-5944-4963-adec-fb66742045ed/1/nLxTKkq1Xwb3wbZwGSJPjczaZTQ.crl rsync://rpki.ripe.net/repository/DEFAULT/81/da5c0d-5944-4963-adec-fb66742045ed/1/nLxTKkq1Xwb3wbZwGSJPjczaZTQ.mft rsync://rpki.ripe.net/repository/DEFAULT/nLxTKkq1Xwb3wbZwGSJPjczaZTQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:07:13:48:e2:1f:5c:43:23:f6:d8:e9:fb:8d:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cbc532a4ab55f06f7c1b67019224f8dccda6534 Validity Not Before: Dec 6 14:00:43 2025 GMT Not After : Dec 7 14:00:43 2025 GMT Subject: CN=601816eed4072af9a801249ca46eeb187fb80e44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f0:0f:7b:1d:7b:45:2d:64:79:62:07:54:f4: ad:ef:95:39:ba:86:8d:cd:73:38:9c:7b:bf:45:fc: b3:29:9b:d9:52:86:bb:5f:96:4b:4e:27:27:ad:09: 37:4e:ca:05:d5:87:fe:dd:19:f4:fe:e7:f3:1a:3b: 43:9f:05:e5:0b:b9:c1:f5:64:02:99:8a:62:4a:21: ce:b6:fa:c1:11:88:a5:44:5a:4e:e3:52:6d:be:6e: 6d:a8:ba:b0:18:3e:ff:67:e6:e7:cd:c3:02:cf:33: d2:38:ab:a7:ec:6d:b0:28:e0:62:0c:09:f9:60:1b: e2:61:04:1f:93:11:ee:85:ca:8d:6c:d0:c5:0c:d2: 7a:2f:cd:13:71:01:8e:0f:b2:28:3b:97:23:58:43: 69:f1:c9:18:0e:5f:2f:58:78:8f:c9:a6:6c:a6:f2: 43:a7:12:94:d2:1d:ab:d9:cd:69:69:fc:3a:72:62: 44:a8:90:77:55:71:c7:d2:58:cf:51:02:2f:45:8e: 41:d8:28:49:28:3c:5d:6b:e4:bc:f5:a0:73:26:e8: 9f:13:0a:55:6b:77:5f:df:17:44:a2:90:2c:3b:54: be:f6:4d:cc:aa:8e:7e:30:3f:7d:ef:25:db:30:24: 37:40:28:f2:07:e5:bb:6a:87:6b:10:8e:01:e7:ef: c9:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:18:16:EE:D4:07:2A:F9:A8:01:24:9C:A4:6E:EB:18:7F:B8:0E:44 X509v3 Authority Key Identifier: keyid:9C:BC:53:2A:4A:B5:5F:06:F7:C1:B6:70:19:22:4F:8D:CC:DA:65:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLxTKkq1Xwb3wbZwGSJPjczaZTQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/da5c0d-5944-4963-adec-fb66742045ed/1/nLxTKkq1Xwb3wbZwGSJPjczaZTQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/da5c0d-5944-4963-adec-fb66742045ed/1/nLxTKkq1Xwb3wbZwGSJPjczaZTQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:0b:a6:8b:81:d1:e1:a8:89:ea:36:0d:5c:b3:52:c6:b5:65: 50:5a:a5:af:6d:e0:98:fb:1b:22:99:a1:7d:36:8e:0a:46:6a: 31:71:af:6f:81:a2:dc:eb:f2:e1:22:bc:b1:2c:27:ae:94:61: d0:34:d2:3a:8d:29:14:dc:24:c1:16:03:7e:c9:a9:22:ea:ee: 24:b5:06:d6:12:98:25:14:ca:81:12:f2:59:5e:05:ea:38:44: f4:58:c9:73:27:69:c7:1b:af:95:85:f5:74:c9:a9:25:38:f6: ed:03:3d:1a:54:ef:4d:20:cf:d2:73:ba:ea:90:dc:b3:35:f0: c3:21:38:f2:45:9d:a5:2f:71:95:1c:f8:2f:f2:95:93:20:23: fb:e2:06:9d:67:b1:46:9f:e2:2f:d0:ad:44:a4:f2:f6:2c:d2: 13:21:9b:50:31:dd:ee:78:18:8e:6e:ce:08:4b:02:22:07:9d: 5c:4e:22:60:3a:08:08:58:02:0e:47:b5:31:30:db:25:b0:49: 13:cb:e4:77:52:57:af:78:28:c4:44:0c:86:4c:da:34:bb:9e: be:2d:91:a4:a0:3c:e5:4a:a9:0c:e6:52:0d:62:99:46:af:92: a5:ac:e3:b6:a8:d7:7a:4c:e1:65:f8:69:a4:52:b3:f8:b1:2f: fa:1c:01:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz9wcTSOIfXEMj9tjp+43PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljYmM1MzJhNGFiNTVmMDZmN2MxYjY3MDE5MjI0ZjhkY2Nk YTY1MzQwHhcNMjUxMjA2MTQwMDQzWhcNMjUxMjA3MTQwMDQzWjAzMTEwLwYDVQQD Eyg2MDE4MTZlZWQ0MDcyYWY5YTgwMTI0OWNhNDZlZWIxODdmYjgwZTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovAPex17RS1keWIHVPSt75U5uoaN zXM4nHu/RfyzKZvZUoa7X5ZLTicnrQk3TsoF1Yf+3Rn0/ufzGjtDnwXlC7nB9WQC mYpiSiHOtvrBEYilRFpO41Jtvm5tqLqwGD7/Z+bnzcMCzzPSOKun7G2wKOBiDAn5 YBviYQQfkxHuhcqNbNDFDNJ6L80TcQGOD7IoO5cjWENp8ckYDl8vWHiPyaZspvJD pxKU0h2r2c1pafw6cmJEqJB3VXHH0ljPUQIvRY5B2ChJKDxda+S89aBzJuifEwpV a3df3xdEopAsO1S+9k3Mqo5+MD997yXbMCQ3QCjyB+W7aodrEI4B5+/JawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGAYFu7UByr5qAEknKRu6xh/uA5EMB8GA1UdIwQY MBaAFJy8UypKtV8G98G2cBkiT43M2mU0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkx4VEtrcTFYd2Izd2Jad0dTSlBqY3phWlRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9kYTVjMGQtNTk0NC00OTYzLWFkZWMt ZmI2Njc0MjA0NWVkLzEvbkx4VEtrcTFYd2Izd2Jad0dTSlBqY3phWlRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS9kYTVjMGQtNTk0NC00OTYzLWFkZWMtZmI2Njc0MjA0NWVk LzEvbkx4VEtrcTFYd2Izd2Jad0dTSlBqY3phWlRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnwumi4HR 4aiJ6jYNXLNSxrVlUFqlr23gmPsbIpmhfTaOCkZqMXGvb4Gi3Ovy4SK8sSwnrpRh 0DTSOo0pFNwkwRYDfsmpIuruJLUG1hKYJRTKgRLyWV4F6jhE9FjJcydpxxuvlYX1 dMmpJTj27QM9GlTvTSDP0nO66pDcszXwwyE48kWdpS9xlRz4L/KVkyAj++IGnWex Rp/iL9CtRKTy9izSEyGbUDHd7ngYjm7OCEsCIgedXE4iYDoICFgCDke1MTDbJbBJ E8vkd1JXr3goxEQMhkzaNLuevi2RpKA85UqpDOZSDWKZRq+SpazjtqjXekzhZfhp pFKz+LEv+hwBqw== -----END CERTIFICATE-----Generated at Sat Dec 6 20:07:35 2025 by rpki-client