This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/7a9004-e4d9-4f54-9928-b9c816965a04/1/NsxJTEqTS7s89Gulgk1mZsiUei8.mft File: NsxJTEqTS7s89Gulgk1mZsiUei8.mft (raw, json) Hash identifier: mxmIIF7mcXIJWki8KE+L+f4SnHfTakdQwzXjB89dz6A= Subject key identifier: A8:79:BE:AD:1A:97:16:3D:60:9C:A3:84:CE:32:D0:63:A8:73:DD:65 Authority key identifier: 36:CC:49:4C:4A:93:4B:BB:3C:F4:6B:A5:82:4D:66:66:C8:94:7A:2F Certificate issuer: /CN=36cc494c4a934bbb3cf46ba5824d6666c8947a2f Certificate serial: 019AF20988EF3ECC63F9C9E8C90690DEA0D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsxJTEqTS7s89Gulgk1mZsiUei8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/7a9004-e4d9-4f54-9928-b9c816965a04/1/NsxJTEqTS7s89Gulgk1mZsiUei8.mft Manifest number: 071F Signing time: Sat 06 Dec 2025 05:01:42 +0000 Manifest this update: Sat 06 Dec 2025 05:01:42 +0000 Manifest next update: Sun 07 Dec 2025 05:01:42 +0000 Files and hashes: 1: NsxJTEqTS7s89Gulgk1mZsiUei8.crl (hash: YULZq8KOyFVTHgIbZQeMcfL289tPJkvr8Z/6WjZUpYQ=) 2: StdZuEMdBW7X4NXLCF7XI4ppVlw.roa (hash: iq6H8WyI/GcnhvxxJGW8O2+6IQ6zatbRbbXOnldRxIU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/7a9004-e4d9-4f54-9928-b9c816965a04/1/NsxJTEqTS7s89Gulgk1mZsiUei8.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/7a9004-e4d9-4f54-9928-b9c816965a04/1/NsxJTEqTS7s89Gulgk1mZsiUei8.mft rsync://rpki.ripe.net/repository/DEFAULT/NsxJTEqTS7s89Gulgk1mZsiUei8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:88:ef:3e:cc:63:f9:c9:e8:c9:06:90:de:a0:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36cc494c4a934bbb3cf46ba5824d6666c8947a2f Validity Not Before: Dec 6 05:01:42 2025 GMT Not After : Dec 7 05:01:42 2025 GMT Subject: CN=a879bead1a97163d609ca384ce32d063a873dd65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:2b:9a:39:be:73:2d:46:a9:21:91:86:8f:2d: 1b:c5:7b:6f:85:75:98:dc:a9:d8:7a:51:09:bd:fe: 57:d8:c5:2f:51:67:31:51:28:a7:41:6c:70:33:34: 5b:3c:99:4c:c4:08:71:c3:e6:4d:a9:8c:75:0e:8f: 23:7e:2c:17:cc:1c:c3:ea:70:55:16:de:83:df:e2: aa:0e:c6:ad:f2:6d:8f:7c:17:e9:cd:b1:f5:16:a4: 3e:20:85:a4:cc:68:e0:2f:19:37:96:70:f1:21:1e: 2c:b1:03:56:f4:bd:5e:cc:f4:46:7b:5f:36:a2:c1: 54:32:16:19:58:a4:a1:94:2c:08:5f:3a:09:bf:36: 42:b2:8f:44:fb:79:4c:c4:eb:ad:a5:49:da:7b:9e: de:26:fa:19:e7:d4:2e:a1:52:24:9a:36:06:14:ad: 7f:35:06:f8:a0:04:c9:ce:87:dc:de:80:ff:11:e2: e7:a3:46:31:db:84:8f:fe:75:31:70:f8:74:5c:7b: 52:fc:8c:3f:84:22:b6:e5:94:ca:a9:94:8c:85:66: 89:12:be:40:ce:de:44:5e:b1:14:a6:b1:30:5d:96: 95:e7:16:6f:e7:94:a4:02:c9:d9:3c:47:06:08:f7: 0d:62:64:4a:c3:d5:06:ce:b5:c1:4e:a1:91:79:2f: 1a:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:79:BE:AD:1A:97:16:3D:60:9C:A3:84:CE:32:D0:63:A8:73:DD:65 X509v3 Authority Key Identifier: keyid:36:CC:49:4C:4A:93:4B:BB:3C:F4:6B:A5:82:4D:66:66:C8:94:7A:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsxJTEqTS7s89Gulgk1mZsiUei8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/7a9004-e4d9-4f54-9928-b9c816965a04/1/NsxJTEqTS7s89Gulgk1mZsiUei8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/7a9004-e4d9-4f54-9928-b9c816965a04/1/NsxJTEqTS7s89Gulgk1mZsiUei8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:6f:fd:5a:20:5b:51:de:54:20:ea:03:93:55:42:64:93:b1: 08:eb:99:bf:56:50:80:fc:11:e5:39:b3:31:e9:de:58:7e:4a: 7a:61:33:ed:2c:c9:85:0c:b8:f4:03:21:4c:0c:ce:15:84:98: a9:5f:90:6c:ff:1b:50:0e:1b:15:32:8b:73:1b:75:4b:70:c9: 30:81:05:82:f9:3a:4a:8b:a8:b5:0c:6b:f7:22:8c:93:66:27: 1a:50:82:3d:1c:fe:e0:fe:15:e8:e5:5e:4a:36:3e:e3:aa:bf: bc:e3:0c:24:82:ad:1a:b9:d0:59:2a:5d:4b:d2:d1:cb:b5:6c: 08:e1:dc:e8:83:9f:89:a1:eb:d8:e0:7a:b6:d8:60:3f:7d:37: 11:47:a1:1e:6a:e5:46:c3:57:8e:e0:95:b2:07:be:41:0a:41: d9:66:4a:58:70:f4:32:31:39:5a:55:65:78:84:11:ba:20:c1: d9:a1:aa:5b:d7:87:c7:89:30:0b:cf:29:ba:1a:8f:10:87:ba: e4:b8:69:0e:ba:68:f9:ba:90:06:c0:63:cb:e3:2e:3e:5d:c7: d0:6f:a5:75:39:c0:8a:73:2b:b1:a4:f1:5b:d5:9b:da:60:65: cd:9f:28:3c:ea:9a:7a:42:40:03:53:33:0b:04:ff:c7:11:70: a3:c7:0e:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCYjvPsxj+cnoyQaQ3qDVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2Y2M0OTRjNGE5MzRiYmIzY2Y0NmJhNTgyNGQ2NjY2Yzg5 NDdhMmYwHhcNMjUxMjA2MDUwMTQyWhcNMjUxMjA3MDUwMTQyWjAzMTEwLwYDVQQD EyhhODc5YmVhZDFhOTcxNjNkNjA5Y2EzODRjZTMyZDA2M2E4NzNkZDY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSuaOb5zLUapIZGGjy0bxXtvhXWY 3KnYelEJvf5X2MUvUWcxUSinQWxwMzRbPJlMxAhxw+ZNqYx1Do8jfiwXzBzD6nBV Ft6D3+KqDsat8m2PfBfpzbH1FqQ+IIWkzGjgLxk3lnDxIR4ssQNW9L1ezPRGe182 osFUMhYZWKShlCwIXzoJvzZCso9E+3lMxOutpUnae57eJvoZ59QuoVIkmjYGFK1/ NQb4oATJzofc3oD/EeLno0Yx24SP/nUxcPh0XHtS/Iw/hCK25ZTKqZSMhWaJEr5A zt5EXrEUprEwXZaV5xZv55SkAsnZPEcGCPcNYmRKw9UGzrXBTqGReS8aVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKh5vq0alxY9YJyjhM4y0GOoc91lMB8GA1UdIwQY MBaAFDbMSUxKk0u7PPRrpYJNZmbIlHovMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnN4SlRFcVRTN3M4OUd1bGdrMW1ac2lVZWk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS83YTkwMDQtZTRkOS00ZjU0LTk5Mjgt YjljODE2OTY1YTA0LzEvTnN4SlRFcVRTN3M4OUd1bGdrMW1ac2lVZWk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS83YTkwMDQtZTRkOS00ZjU0LTk5MjgtYjljODE2OTY1YTA0 LzEvTnN4SlRFcVRTN3M4OUd1bGdrMW1ac2lVZWk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALG/9WiBb Ud5UIOoDk1VCZJOxCOuZv1ZQgPwR5TmzMeneWH5KemEz7SzJhQy49AMhTAzOFYSY qV+QbP8bUA4bFTKLcxt1S3DJMIEFgvk6SouotQxr9yKMk2YnGlCCPRz+4P4V6OVe SjY+46q/vOMMJIKtGrnQWSpdS9LRy7VsCOHc6IOfiaHr2OB6tthgP303EUehHmrl RsNXjuCVsge+QQpB2WZKWHD0MjE5WlVleIQRuiDB2aGqW9eHx4kwC88puhqPEIe6 5LhpDrpo+bqQBsBjy+MuPl3H0G+ldTnAinMrsaTxW9Wb2mBlzZ8oPOqaekJAA1Mz CwT/xxFwo8cOnQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:30:59 2025 by rpki-client