This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.mft File: Nxi3NDSb8yfZRTuWUB5EsZLlUUI.mft (raw, json) Hash identifier: 2hqJ13zZNDSpEjxA/v2RJYuUlFVNAukgzfKw9EMBmEs= Subject key identifier: CB:DD:E9:AE:F0:1A:AD:33:39:E4:94:D6:E9:DB:2C:6F:85:AE:73:01 Authority key identifier: 37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42 Certificate issuer: /CN=3718b734349bf327d9453b96501e44b192e55142 Certificate serial: 019AF19B6CC19A1D53D597F709D2E8789739 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.mft Manifest number: 179B Signing time: Sat 06 Dec 2025 03:01:26 +0000 Manifest this update: Sat 06 Dec 2025 03:01:26 +0000 Manifest next update: Sun 07 Dec 2025 03:01:26 +0000 Files and hashes: 1: 2pr-_P6iDqjAxA7czCmuypqm4EU.roa (hash: ej7V7a6TRJZtAHiPijn6nzDCvVHx84y+/K94PPrq0S8=) 2: 6Wce0HwyXHqQ5XvowobWiCGASj8.roa (hash: JFU8RjnJrDHjFA6pQUpW2/JnNtPldCW7iPpp3L9hrfw=) 3: 7ew9vmcgcgJuvHxbbgCDhgBggzg.roa (hash: u0wbp7PqNlKFQlgee1VKfFdKJWs/LztnZMwBMRcyX9U=) 4: GgUE_XL4Sq39Xxf8zIW_JumJGGM.roa (hash: XcS1ZuCgKYC4lujI/f/yKgFd5if0KehDM2OJ7bBb2dY=) 5: LUqfPdr5U7rGSs9qDPdgE78y3Ys.roa (hash: t6Hq8qeAuoJbps2mezodFgaH6dF91/bm/cTfH1sfuFk=) 6: LlKlcAPVFheTjo0cvnN-cwqdGUw.roa (hash: ZgPtQPgiIgQXtHf1J4jvPc8DeZKN5/J+ht3AF0Zie+E=) 7: Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl (hash: Rbq+UUCdMCGuM8ePGzNAOfpqelGvvw9d5mdoB4884sc=) 8: tqu-QanjX6tyJHx__ZdrkRcFQsk.roa (hash: OLKkbSnqqo0RLnA2/zbv4ebHR3Sjd16V0KLb7Bt5pzw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.mft rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:6c:c1:9a:1d:53:d5:97:f7:09:d2:e8:78:97:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3718b734349bf327d9453b96501e44b192e55142 Validity Not Before: Dec 6 03:01:26 2025 GMT Not After : Dec 7 03:01:26 2025 GMT Subject: CN=cbdde9aef01aad3339e494d6e9db2c6f85ae7301 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0f:4e:de:94:11:db:16:0c:99:82:70:1e:c6: 5a:b4:7a:ea:79:aa:2f:ab:9d:51:3e:5a:48:f0:24: 73:fd:d5:be:fc:f2:4b:d5:f1:2d:b3:e9:c4:b8:d2: 7e:e4:b1:9c:e4:49:4b:cd:e7:83:d9:0c:27:2c:72: 80:ca:8d:1b:a8:95:3f:a9:68:8e:ce:63:b0:60:e5: 82:48:e6:4c:a2:ed:5d:e0:fb:9d:18:ed:01:ac:9d: 5f:4d:46:d6:67:1c:04:97:77:5c:dc:bb:db:25:42: 59:f6:02:d3:3f:6e:91:a1:f0:81:2f:a8:e2:da:d6: c2:c7:77:e2:ad:c0:d2:f9:f8:56:9d:30:b3:2e:7d: 43:77:4e:dc:0e:0a:6f:a2:c3:39:05:70:9c:d1:1b: 23:0f:7c:69:23:04:1a:f9:d6:32:49:e1:6f:74:01: df:8f:41:78:d5:5f:bb:a4:a5:9c:e2:ca:2b:f6:fc: f0:f8:e1:bb:f2:28:9f:7d:3d:1e:de:92:57:e5:49: 11:e5:9c:c1:0f:86:77:bb:68:60:6d:35:a3:57:2f: 3c:1d:3c:37:c5:c1:b1:12:ca:98:56:e4:ea:b5:e9: 08:ac:da:59:b6:b6:b0:8a:ca:00:c7:96:c7:46:14: 65:ba:7e:b0:07:ba:89:0e:e1:a7:2f:d8:c1:ae:00: 44:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:DD:E9:AE:F0:1A:AD:33:39:E4:94:D6:E9:DB:2C:6F:85:AE:73:01 X509v3 Authority Key Identifier: keyid:37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:24:16:44:10:c2:34:0f:52:7b:af:24:ce:19:7b:5b:98:12: c8:8a:74:f8:4c:ba:f7:03:9f:6d:78:c5:cf:dc:2f:c6:91:15: a7:9a:07:58:09:16:f5:35:20:89:79:da:50:20:c7:e4:41:dc: 0d:53:d2:13:8b:d8:48:71:ad:40:ca:b4:93:c3:5c:8b:5e:e1: 70:d4:dc:c3:1e:06:8d:df:6c:fd:2c:61:35:66:cb:94:ea:cb: 2c:e6:0f:93:46:87:6f:12:73:c3:96:74:11:32:4d:f0:88:d6: 06:a7:fe:39:49:c1:3b:40:66:9a:4a:f2:1d:8a:3e:fb:26:7b: 66:08:7f:1a:f1:41:44:04:6d:49:86:b8:dd:05:43:ab:04:0d: d9:b9:c6:53:ab:3c:07:c9:38:7e:f8:56:c7:6a:77:0c:65:24: d9:95:69:2d:87:67:0d:a3:68:ed:ee:70:4b:c3:54:91:fc:52: 7e:ed:46:9f:e3:ec:6f:ba:39:11:4e:5c:fa:3f:0e:ea:0c:40: 00:f5:1f:3e:63:0f:5c:03:5b:39:b9:a7:a1:ef:e1:a1:1c:1e: 5a:4b:a0:a4:49:1f:a9:b6:b5:79:d4:f1:71:d6:5a:a7:e6:0f: 2c:74:a0:37:2d:78:dc:81:55:14:ad:f0:e9:05:c1:dd:c3:de: d5:d5:36:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm2zBmh1T1Zf3CdLoeJc5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3MThiNzM0MzQ5YmYzMjdkOTQ1M2I5NjUwMWU0NGIxOTJl NTUxNDIwHhcNMjUxMjA2MDMwMTI2WhcNMjUxMjA3MDMwMTI2WjAzMTEwLwYDVQQD EyhjYmRkZTlhZWYwMWFhZDMzMzllNDk0ZDZlOWRiMmM2Zjg1YWU3MzAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvw9O3pQR2xYMmYJwHsZatHrqeaov q51RPlpI8CRz/dW+/PJL1fEts+nEuNJ+5LGc5ElLzeeD2QwnLHKAyo0bqJU/qWiO zmOwYOWCSOZMou1d4PudGO0BrJ1fTUbWZxwEl3dc3LvbJUJZ9gLTP26RofCBL6ji 2tbCx3fircDS+fhWnTCzLn1Dd07cDgpvosM5BXCc0RsjD3xpIwQa+dYySeFvdAHf j0F41V+7pKWc4sor9vzw+OG78iiffT0e3pJX5UkR5ZzBD4Z3u2hgbTWjVy88HTw3 xcGxEsqYVuTqtekIrNpZtrawisoAx5bHRhRlun6wB7qJDuGnL9jBrgBE1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMvd6a7wGq0zOeSU1unbLG+FrnMBMB8GA1UdIwQY MBaAFDcYtzQ0m/Mn2UU7llAeRLGS5VFCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnhpM05EU2I4eWZaUlR1V1VCNUVzWkxsVVVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My83YmY4YTgtZTQ5Yy00MDZlLThlYjct YzgyM2NjOGYzODM3LzEvTnhpM05EU2I4eWZaUlR1V1VCNUVzWkxsVVVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My83YmY4YTgtZTQ5Yy00MDZlLThlYjctYzgyM2NjOGYzODM3 LzEvTnhpM05EU2I4eWZaUlR1V1VCNUVzWkxsVVVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHiQWRBDC NA9Se68kzhl7W5gSyIp0+Ey69wOfbXjFz9wvxpEVp5oHWAkW9TUgiXnaUCDH5EHc DVPSE4vYSHGtQMq0k8Nci17hcNTcwx4Gjd9s/SxhNWbLlOrLLOYPk0aHbxJzw5Z0 ETJN8IjWBqf+OUnBO0BmmkryHYo++yZ7Zgh/GvFBRARtSYa43QVDqwQN2bnGU6s8 B8k4fvhWx2p3DGUk2ZVpLYdnDaNo7e5wS8NUkfxSfu1Gn+Psb7o5EU5c+j8O6gxA APUfPmMPXANbObmnoe/hoRweWkugpEkfqba1edTxcdZap+YPLHSgNy143IFVFK3w 6QXB3cPe1dU2kw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:07:53 2025 by rpki-client