This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/5c5138-aee4-482c-913c-3a4dff8e8ded/1/NXMLuLJiPn9lphY2BNHIX5EGKI8.mft File: NXMLuLJiPn9lphY2BNHIX5EGKI8.mft (raw, json) Hash identifier: 1mu+/ZbfRw/aQAmahYKb1Os/0nYUrgHir0S/MVsbV5Y= Subject key identifier: F2:ED:60:65:04:A2:1E:E9:20:2A:71:37:0A:54:04:19:D7:DA:17:6E Authority key identifier: 35:73:0B:B8:B2:62:3E:7F:65:A6:16:36:04:D1:C8:5F:91:06:28:8F Certificate issuer: /CN=35730bb8b2623e7f65a6163604d1c85f9106288f Certificate serial: 019AF42DED0A1A0EBA2797222ADF60057D4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NXMLuLJiPn9lphY2BNHIX5EGKI8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/5c5138-aee4-482c-913c-3a4dff8e8ded/1/NXMLuLJiPn9lphY2BNHIX5EGKI8.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 15:00:41 +0000 Manifest this update: Sat 06 Dec 2025 15:00:41 +0000 Manifest next update: Sun 07 Dec 2025 15:00:41 +0000 Files and hashes: 1: 3u_UTWM5MnsnNlqUobIqKDYLwKo.roa (hash: veRRLy9ZMKOvJkYp1WIUbOdpjqnYEIFrYe5fkHyfQnc=) 2: NXMLuLJiPn9lphY2BNHIX5EGKI8.crl (hash: HseudxOVWDL5GR4wCs2kSk+wOEkkvDNaPuUEUAB6Uf8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/5c5138-aee4-482c-913c-3a4dff8e8ded/1/NXMLuLJiPn9lphY2BNHIX5EGKI8.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/5c5138-aee4-482c-913c-3a4dff8e8ded/1/NXMLuLJiPn9lphY2BNHIX5EGKI8.mft rsync://rpki.ripe.net/repository/DEFAULT/NXMLuLJiPn9lphY2BNHIX5EGKI8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2d:ed:0a:1a:0e:ba:27:97:22:2a:df:60:05:7d:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35730bb8b2623e7f65a6163604d1c85f9106288f Validity Not Before: Dec 6 15:00:41 2025 GMT Not After : Dec 7 15:00:41 2025 GMT Subject: CN=f2ed606504a21ee9202a71370a540419d7da176e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:bd:60:60:50:2f:fb:9e:0e:ff:99:4d:8e:b9: 70:51:45:02:ec:6d:11:5a:57:7e:af:f6:54:b9:45: 22:f9:e3:81:79:1b:0d:9e:aa:7c:6c:7f:20:51:11: 09:23:02:c0:ae:82:91:a1:7b:19:35:fa:30:2b:a7: ad:ac:19:34:eb:36:67:3a:8b:c9:e8:ea:db:05:de: 9e:5a:75:ff:7b:e4:e9:2e:32:43:c4:4f:ac:9f:6d: 84:a7:ab:9c:a3:2e:01:50:88:b8:63:8e:64:84:e9: 9d:3c:44:a1:21:77:08:a8:df:f2:83:ba:9d:1e:93: 33:f6:92:47:a0:cf:b2:88:49:98:38:97:67:b2:11: 73:31:81:1c:9f:9b:81:c9:13:41:0a:63:e6:4f:a8: af:0b:7b:c1:ae:bb:70:ec:43:66:ca:ca:46:e6:cf: 06:a3:da:65:74:26:8b:8f:50:97:e6:21:0d:59:20: bb:0b:43:21:4e:ca:12:ec:42:96:52:b5:e3:4c:74: 5c:0f:ea:66:c2:62:55:fd:f5:12:ea:48:e8:03:83: b9:f7:17:42:51:2f:22:db:ec:0a:b0:ec:10:90:a3: d7:a0:3b:d0:7e:0e:e3:31:9a:aa:f0:1e:ef:2e:e0: 32:23:c8:be:31:21:bb:75:9e:1f:ef:13:ef:2f:7e: 6d:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:ED:60:65:04:A2:1E:E9:20:2A:71:37:0A:54:04:19:D7:DA:17:6E X509v3 Authority Key Identifier: keyid:35:73:0B:B8:B2:62:3E:7F:65:A6:16:36:04:D1:C8:5F:91:06:28:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NXMLuLJiPn9lphY2BNHIX5EGKI8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/5c5138-aee4-482c-913c-3a4dff8e8ded/1/NXMLuLJiPn9lphY2BNHIX5EGKI8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/5c5138-aee4-482c-913c-3a4dff8e8ded/1/NXMLuLJiPn9lphY2BNHIX5EGKI8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:30:08:7f:0c:72:7f:13:df:f4:01:5d:35:d8:f4:0f:5a:b8: 73:d7:2b:55:54:19:59:08:cf:3c:7d:cf:c3:2d:01:f4:89:29: 31:57:d4:c8:b3:3f:9d:6c:16:dc:ec:a1:f1:9e:5c:61:02:0f: 55:8b:0d:b0:86:fa:71:40:54:77:9b:5c:45:66:f1:b0:e8:72: 8a:ee:53:7f:8c:45:b6:18:b6:34:1f:e6:13:d1:66:95:0c:65: 2a:f1:12:81:94:48:00:3a:ad:5e:37:f1:d7:c7:5c:0f:38:ad: a3:6a:d7:c8:d3:42:43:d9:85:ce:04:a6:70:68:82:0c:e2:b7: 7f:72:92:53:a9:ed:60:29:80:e4:79:75:96:87:a7:97:ba:34: f0:c2:5e:ae:ba:9c:82:a7:b9:04:54:2a:5e:c5:72:70:82:77: ea:9d:41:79:16:b1:ed:77:59:a0:ee:fe:23:7e:c4:20:20:7b: b1:83:d9:e7:3f:d8:8c:35:d2:63:bf:6b:b4:70:2b:9d:5d:0f: a6:c4:d6:ee:06:91:f8:20:6e:4c:7c:b6:0b:ae:67:03:67:60: 69:c7:f0:53:92:40:76:2d:31:73:59:d1:f8:c0:66:73:69:9d: 9a:b3:1a:1f:34:ff:da:b7:38:3b:c2:8e:af:82:e8:47:7c:cc: e3:e9:5d:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0Le0KGg66J5ciKt9gBX1PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NzMwYmI4YjI2MjNlN2Y2NWE2MTYzNjA0ZDFjODVmOTEw NjI4OGYwHhcNMjUxMjA2MTUwMDQxWhcNMjUxMjA3MTUwMDQxWjAzMTEwLwYDVQQD EyhmMmVkNjA2NTA0YTIxZWU5MjAyYTcxMzcwYTU0MDQxOWQ3ZGExNzZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxr1gYFAv+54O/5lNjrlwUUUC7G0R Wld+r/ZUuUUi+eOBeRsNnqp8bH8gUREJIwLAroKRoXsZNfowK6etrBk06zZnOovJ 6OrbBd6eWnX/e+TpLjJDxE+sn22Ep6ucoy4BUIi4Y45khOmdPEShIXcIqN/yg7qd HpMz9pJHoM+yiEmYOJdnshFzMYEcn5uByRNBCmPmT6ivC3vBrrtw7ENmyspG5s8G o9pldCaLj1CX5iENWSC7C0MhTsoS7EKWUrXjTHRcD+pmwmJV/fUS6kjoA4O59xdC US8i2+wKsOwQkKPXoDvQfg7jMZqq8B7vLuAyI8i+MSG7dZ4f7xPvL35thQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPLtYGUEoh7pICpxNwpUBBnX2hduMB8GA1UdIwQY MBaAFDVzC7iyYj5/ZaYWNgTRyF+RBiiPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlhNTHVMSmlQbjlscGhZMkJOSElYNUVHS0k4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC81YzUxMzgtYWVlNC00ODJjLTkxM2Mt M2E0ZGZmOGU4ZGVkLzEvTlhNTHVMSmlQbjlscGhZMkJOSElYNUVHS0k4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC81YzUxMzgtYWVlNC00ODJjLTkxM2MtM2E0ZGZmOGU4ZGVk LzEvTlhNTHVMSmlQbjlscGhZMkJOSElYNUVHS0k4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABjAIfwxy fxPf9AFdNdj0D1q4c9crVVQZWQjPPH3Pwy0B9IkpMVfUyLM/nWwW3Oyh8Z5cYQIP VYsNsIb6cUBUd5tcRWbxsOhyiu5Tf4xFthi2NB/mE9FmlQxlKvESgZRIADqtXjfx 18dcDzito2rXyNNCQ9mFzgSmcGiCDOK3f3KSU6ntYCmA5Hl1loenl7o08MJerrqc gqe5BFQqXsVycIJ36p1BeRax7XdZoO7+I37EICB7sYPZ5z/YjDXSY79rtHArnV0P psTW7gaR+CBuTHy2C65nA2dgacfwU5JAdi0xc1nR+MBmc2mdmrMaHzT/2rc4O8KO r4LoR3zM4+ldrQ== -----END CERTIFICATE-----Generated at Sat Dec 6 18:34:35 2025 by rpki-client