This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/af15eb-7a4d-4b0e-bebb-e9bede00c6af/1/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.mft File: nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.mft (raw, json) Hash identifier: nkXCzl8SBRIjJCSsAKd/VltWA9pdmJzH6YRhCPcj9UQ= Subject key identifier: 18:50:C7:8F:B3:7F:12:A2:88:E7:B7:1D:6B:0B:69:1C:F6:4E:16:FA Authority key identifier: 9D:7B:B0:04:20:1F:D0:5B:49:D1:22:1F:CE:47:59:EA:70:BE:C6:84 Certificate issuer: /CN=9d7bb004201fd05b49d1221fce4759ea70bec684 Certificate serial: 019AF19A8F70E9FC70D81C705E8567321CC1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/af15eb-7a4d-4b0e-bebb-e9bede00c6af/1/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 03:00:29 +0000 Manifest this update: Sat 06 Dec 2025 03:00:29 +0000 Manifest next update: Sun 07 Dec 2025 03:00:29 +0000 Files and hashes: 1: nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.crl (hash: rWRVaAMD4SQ52RJRKDSTQDyvVAgGzIdxHUWACy2Zgog=) 2: qtN5JDorwotYpcUYWZc-ptH61p4.roa (hash: fKxhmPTYMHuqQdNEmPm2wnJirNcSsOemwlg1fw0Aem0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/af15eb-7a4d-4b0e-bebb-e9bede00c6af/1/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/af15eb-7a4d-4b0e-bebb-e9bede00c6af/1/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.mft rsync://rpki.ripe.net/repository/DEFAULT/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:8f:70:e9:fc:70:d8:1c:70:5e:85:67:32:1c:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d7bb004201fd05b49d1221fce4759ea70bec684 Validity Not Before: Dec 6 03:00:29 2025 GMT Not After : Dec 7 03:00:29 2025 GMT Subject: CN=1850c78fb37f12a288e7b71d6b0b691cf64e16fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ff:a2:c0:5f:41:a2:15:81:70:d2:a7:ce:e3: 5b:0c:3c:30:d5:c7:56:58:36:b2:88:d8:dc:b4:50: 97:33:05:d4:a0:fc:45:1a:2e:83:50:bd:bc:fc:75: c0:02:8a:90:84:97:fd:39:31:d3:b8:46:b7:87:fb: 92:5a:4e:6a:62:ef:d5:dd:4c:15:af:e3:9c:4b:95: b7:a1:51:a5:48:56:8b:f8:6b:19:0a:ba:11:46:0e: b3:39:dc:65:6c:d6:18:46:50:39:b0:c8:b5:13:b6: f1:28:3a:b4:66:ec:a8:fa:41:a3:50:b1:bf:89:c6: 95:6b:c8:30:f3:5a:dc:2a:e5:6d:0b:f7:cc:b9:c4: 59:f5:ed:27:06:d9:9f:1b:77:a3:7c:af:f7:76:c1: f9:c9:b6:4f:b3:e8:dc:1a:4b:91:8f:c6:ba:0d:70: 9b:2e:19:a9:f7:db:4c:70:fc:d5:92:c3:d7:60:d8: 0e:b7:33:cf:c8:6c:9e:b7:8d:1b:20:09:7a:08:11: cb:a1:4e:23:67:84:dd:b2:44:83:d2:ed:da:b1:de: 14:81:16:00:6e:27:11:53:e4:1e:c2:e2:b4:40:bf: b6:8b:22:08:ca:ea:e5:43:a3:bd:77:93:0f:79:6b: 78:f2:c2:5b:d1:6b:a6:ea:d9:37:74:86:da:08:4d: d8:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:50:C7:8F:B3:7F:12:A2:88:E7:B7:1D:6B:0B:69:1C:F6:4E:16:FA X509v3 Authority Key Identifier: keyid:9D:7B:B0:04:20:1F:D0:5B:49:D1:22:1F:CE:47:59:EA:70:BE:C6:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/af15eb-7a4d-4b0e-bebb-e9bede00c6af/1/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/af15eb-7a4d-4b0e-bebb-e9bede00c6af/1/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:82:89:e0:e8:a7:be:18:dc:cd:9b:6e:91:9b:bf:2a:e1:ae: d6:89:0f:72:ab:c1:23:42:8f:0e:71:4f:e2:91:14:e6:d0:04: 8d:d9:1d:e6:03:4d:ca:9a:ab:8c:70:8f:9b:6a:29:cf:e1:ce: 62:20:8f:fe:f4:f5:1b:74:14:28:82:b1:25:6a:25:f4:f1:de: ab:73:ce:a0:27:f8:d8:41:a9:08:91:0a:fb:30:02:e8:c4:dd: 6e:ef:1a:07:bf:cb:ff:ae:32:2a:d7:7f:1d:55:e0:c1:40:52: ec:5a:98:d0:85:35:70:60:ad:19:f0:ec:90:f0:3c:83:8f:c7: f8:6a:71:ab:58:52:60:68:3a:a8:e5:14:15:a8:4c:34:4d:74: 87:e9:20:06:50:ff:48:aa:67:c6:b6:24:3c:2d:6d:f6:f6:2d: f8:c9:30:b0:b0:7d:ad:0d:0a:3b:20:72:29:64:9d:22:d4:67: fd:fc:5d:fe:df:4d:b6:03:1d:81:65:8b:c8:76:76:6e:d4:e4: 35:8a:83:6d:53:64:71:a3:fe:36:21:79:08:5a:2a:db:85:a1: 34:f4:1f:78:a3:02:b8:56:ef:b3:65:4d:e6:b3:04:45:40:cd: 9e:9f:d4:e2:7e:a3:99:fe:c8:2b:1f:d9:9c:d7:cb:33:ce:1e: 66:5b:87:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmo9w6fxw2BxwXoVnMhzBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkN2JiMDA0MjAxZmQwNWI0OWQxMjIxZmNlNDc1OWVhNzBi ZWM2ODQwHhcNMjUxMjA2MDMwMDI5WhcNMjUxMjA3MDMwMDI5WjAzMTEwLwYDVQQD EygxODUwYzc4ZmIzN2YxMmEyODhlN2I3MWQ2YjBiNjkxY2Y2NGUxNmZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2f+iwF9BohWBcNKnzuNbDDww1cdW WDayiNjctFCXMwXUoPxFGi6DUL28/HXAAoqQhJf9OTHTuEa3h/uSWk5qYu/V3UwV r+OcS5W3oVGlSFaL+GsZCroRRg6zOdxlbNYYRlA5sMi1E7bxKDq0Zuyo+kGjULG/ icaVa8gw81rcKuVtC/fMucRZ9e0nBtmfG3ejfK/3dsH5ybZPs+jcGkuRj8a6DXCb Lhmp99tMcPzVksPXYNgOtzPPyGyet40bIAl6CBHLoU4jZ4TdskSD0u3asd4UgRYA bicRU+QewuK0QL+2iyIIyurlQ6O9d5MPeWt48sJb0Wum6tk3dIbaCE3YxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBhQx4+zfxKiiOe3HWsLaRz2Thb6MB8GA1UdIwQY MBaAFJ17sAQgH9BbSdEiH85HWepwvsaEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblh1d0JDQWYwRnRKMFNJZnprZFo2bkMteG9RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC9hZjE1ZWItN2E0ZC00YjBlLWJlYmIt ZTliZWRlMDBjNmFmLzEvblh1d0JDQWYwRnRKMFNJZnprZFo2bkMteG9RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC9hZjE1ZWItN2E0ZC00YjBlLWJlYmItZTliZWRlMDBjNmFm LzEvblh1d0JDQWYwRnRKMFNJZnprZFo2bkMteG9RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAooKJ4Oin vhjczZtukZu/KuGu1okPcqvBI0KPDnFP4pEU5tAEjdkd5gNNypqrjHCPm2opz+HO YiCP/vT1G3QUKIKxJWol9PHeq3POoCf42EGpCJEK+zAC6MTdbu8aB7/L/64yKtd/ HVXgwUBS7FqY0IU1cGCtGfDskPA8g4/H+Gpxq1hSYGg6qOUUFahMNE10h+kgBlD/ SKpnxrYkPC1t9vYt+MkwsLB9rQ0KOyByKWSdItRn/fxd/t9NtgMdgWWLyHZ2btTk NYqDbVNkcaP+NiF5CFoq24WhNPQfeKMCuFbvs2VN5rMERUDNnp/U4n6jmf7IKx/Z nNfLM84eZluHFQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:45:07 2025 by rpki-client