This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.mft File: Nxi3NDSb8yfZRTuWUB5EsZLlUUI.mft (raw, json) Hash identifier: yzy9CGjlqCgOYmCNqBrYCH4hpO8w47OrPtJD5dI/vw0= Subject key identifier: 0D:4F:17:0C:74:CD:C5:4D:4D:3E:96:07:99:9E:16:A0:E4:B6:0C:A3 Authority key identifier: 37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42 Certificate issuer: /CN=3718b734349bf327d9453b96501e44b192e55142 Certificate serial: 019B2B8A4709A97114BCEE492421F1BED4FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.mft Manifest number: 17B9 Signing time: Wed 17 Dec 2025 09:00:41 +0000 Manifest this update: Wed 17 Dec 2025 09:00:41 +0000 Manifest next update: Thu 18 Dec 2025 09:00:41 +0000 Files and hashes: 1: 2pr-_P6iDqjAxA7czCmuypqm4EU.roa (hash: ej7V7a6TRJZtAHiPijn6nzDCvVHx84y+/K94PPrq0S8=) 2: 6Wce0HwyXHqQ5XvowobWiCGASj8.roa (hash: JFU8RjnJrDHjFA6pQUpW2/JnNtPldCW7iPpp3L9hrfw=) 3: 7ew9vmcgcgJuvHxbbgCDhgBggzg.roa (hash: u0wbp7PqNlKFQlgee1VKfFdKJWs/LztnZMwBMRcyX9U=) 4: GgUE_XL4Sq39Xxf8zIW_JumJGGM.roa (hash: XcS1ZuCgKYC4lujI/f/yKgFd5if0KehDM2OJ7bBb2dY=) 5: LUqfPdr5U7rGSs9qDPdgE78y3Ys.roa (hash: t6Hq8qeAuoJbps2mezodFgaH6dF91/bm/cTfH1sfuFk=) 6: LlKlcAPVFheTjo0cvnN-cwqdGUw.roa (hash: ZgPtQPgiIgQXtHf1J4jvPc8DeZKN5/J+ht3AF0Zie+E=) 7: Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl (hash: Yl3ZJZMi90wjZ7bpyScb1H1MyTn15dBike53WXSqMWg=) 8: tqu-QanjX6tyJHx__ZdrkRcFQsk.roa (hash: OLKkbSnqqo0RLnA2/zbv4ebHR3Sjd16V0KLb7Bt5pzw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.mft rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:8a:47:09:a9:71:14:bc:ee:49:24:21:f1:be:d4:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3718b734349bf327d9453b96501e44b192e55142 Validity Not Before: Dec 17 09:00:41 2025 GMT Not After : Dec 18 09:00:41 2025 GMT Subject: CN=0d4f170c74cdc54d4d3e9607999e16a0e4b60ca3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a7:e0:e5:51:69:fd:15:4a:97:9d:f7:28:78: 19:45:e7:87:e1:82:3e:f7:55:1e:b4:52:de:7a:34: 8b:d6:56:1b:9d:fd:f1:3e:bf:ca:91:1e:af:6f:13: 9c:8f:c5:69:71:8b:cd:3c:91:34:a2:c8:1f:72:24: 85:df:e4:c5:af:02:5a:dc:de:ee:1c:8f:ec:3c:08: ea:aa:56:97:c0:45:55:73:f2:38:93:09:d6:7a:4f: 24:1a:92:5f:6f:66:08:a1:cb:52:e4:c6:0b:8b:7b: a9:be:84:f4:37:4e:da:dd:c6:63:dd:c6:38:03:19: 27:6c:f9:c5:e0:3f:94:f6:97:d4:03:a9:c0:ee:d7: 3f:a9:d5:18:66:92:93:0a:6d:72:64:2e:39:63:ba: 9b:c8:9b:f2:86:d8:f0:79:ce:a3:ed:1c:9a:32:63: c9:be:41:55:b0:31:55:fd:23:e3:d7:cf:30:54:d2: c6:f2:0f:77:fe:4a:95:3b:c5:a7:e5:57:ad:77:19: 98:4f:92:6f:85:bc:72:4a:f4:fe:00:dc:b1:bd:93: 9b:72:74:d7:a9:81:b4:e6:87:5e:ce:ed:43:96:86: cf:9e:e2:b9:94:1e:89:76:e2:0c:14:15:55:d2:09: 85:fc:01:cc:4c:f2:3c:d0:78:df:c3:69:13:cb:0a: 29:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:4F:17:0C:74:CD:C5:4D:4D:3E:96:07:99:9E:16:A0:E4:B6:0C:A3 X509v3 Authority Key Identifier: keyid:37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:7f:c2:ac:17:76:25:ae:48:d8:26:f0:76:9b:56:c6:8a:87: 18:f0:06:02:10:b8:b0:cd:5d:45:d5:16:d2:5e:f8:36:e4:c9: 56:32:82:4a:56:c6:2f:02:f3:04:12:04:3c:1a:7c:c5:67:f0: 7b:da:4d:28:70:2f:f9:3c:d4:0d:8f:10:06:40:54:6a:1d:49: db:fe:1c:42:f7:cc:74:a3:f2:10:c1:95:04:a9:f9:79:76:45: 82:9b:24:21:75:56:b2:6d:c2:c3:9b:40:bc:73:18:b0:bf:72: 54:bd:15:e6:ff:a2:dc:60:7f:7b:ed:99:f3:eb:36:fe:00:9a: 31:1c:66:67:37:3a:55:c2:09:7c:c2:c2:02:ab:e5:8c:35:46: b1:d0:1f:78:98:30:d0:71:13:ab:19:7e:a7:57:4e:45:56:a6: db:ff:ac:71:c2:4a:c6:0e:18:da:e3:46:90:98:7e:56:51:e5: bf:07:f0:30:56:69:e4:7c:eb:91:e5:48:6e:9e:94:ae:70:13: c8:5f:8b:35:70:25:ce:86:b9:da:e6:e8:b3:a5:7e:bf:4f:24: 29:8f:04:4c:7a:b4:44:e4:63:26:44:fc:28:ef:2f:c9:09:69: 6b:0d:25:45:27:3a:70:e2:90:9c:31:21:61:28:0d:77:9d:ec: 9c:e3:6c:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrikcJqXEUvO5JJCHxvtT+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3MThiNzM0MzQ5YmYzMjdkOTQ1M2I5NjUwMWU0NGIxOTJl NTUxNDIwHhcNMjUxMjE3MDkwMDQxWhcNMjUxMjE4MDkwMDQxWjAzMTEwLwYDVQQD EygwZDRmMTcwYzc0Y2RjNTRkNGQzZTk2MDc5OTllMTZhMGU0YjYwY2EzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6fg5VFp/RVKl533KHgZReeH4YI+ 91UetFLeejSL1lYbnf3xPr/KkR6vbxOcj8VpcYvNPJE0osgfciSF3+TFrwJa3N7u HI/sPAjqqlaXwEVVc/I4kwnWek8kGpJfb2YIoctS5MYLi3upvoT0N07a3cZj3cY4 AxknbPnF4D+U9pfUA6nA7tc/qdUYZpKTCm1yZC45Y7qbyJvyhtjwec6j7RyaMmPJ vkFVsDFV/SPj188wVNLG8g93/kqVO8Wn5VetdxmYT5JvhbxySvT+ANyxvZObcnTX qYG05odezu1DlobPnuK5lB6JduIMFBVV0gmF/AHMTPI80Hjfw2kTywopQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA1PFwx0zcVNTT6WB5meFqDktgyjMB8GA1UdIwQY MBaAFDcYtzQ0m/Mn2UU7llAeRLGS5VFCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnhpM05EU2I4eWZaUlR1V1VCNUVzWkxsVVVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My83YmY4YTgtZTQ5Yy00MDZlLThlYjct YzgyM2NjOGYzODM3LzEvTnhpM05EU2I4eWZaUlR1V1VCNUVzWkxsVVVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My83YmY4YTgtZTQ5Yy00MDZlLThlYjctYzgyM2NjOGYzODM3 LzEvTnhpM05EU2I4eWZaUlR1V1VCNUVzWkxsVVVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU3/CrBd2 Ja5I2CbwdptWxoqHGPAGAhC4sM1dRdUW0l74NuTJVjKCSlbGLwLzBBIEPBp8xWfw e9pNKHAv+TzUDY8QBkBUah1J2/4cQvfMdKPyEMGVBKn5eXZFgpskIXVWsm3Cw5tA vHMYsL9yVL0V5v+i3GB/e+2Z8+s2/gCaMRxmZzc6VcIJfMLCAqvljDVGsdAfeJgw 0HETqxl+p1dORVam2/+sccJKxg4Y2uNGkJh+VlHlvwfwMFZp5HzrkeVIbp6UrnAT yF+LNXAlzoa52ubos6V+v08kKY8ETHq0RORjJkT8KO8vyQlpaw0lRSc6cOKQnDEh YSgNd53snONsZw== -----END CERTIFICATE-----Generated at Wed Dec 17 13:42:26 2025 by rpki-client