This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/5c5138-aee4-482c-913c-3a4dff8e8ded/1/NXMLuLJiPn9lphY2BNHIX5EGKI8.mft File: NXMLuLJiPn9lphY2BNHIX5EGKI8.mft (raw, json) Hash identifier: n/XykpU8Nmp677KGt00vimLc+8KWz0qa3491jUnsFPk= Subject key identifier: 4B:FD:76:28:42:F8:36:38:AF:39:7C:A6:71:BD:D9:A7:40:54:31:65 Authority key identifier: 35:73:0B:B8:B2:62:3E:7F:65:A6:16:36:04:D1:C8:5F:91:06:28:8F Certificate issuer: /CN=35730bb8b2623e7f65a6163604d1c85f9106288f Certificate serial: 019B22875C4EDBF377C87EAD590C0340FB02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NXMLuLJiPn9lphY2BNHIX5EGKI8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/5c5138-aee4-482c-913c-3a4dff8e8ded/1/NXMLuLJiPn9lphY2BNHIX5EGKI8.mft Manifest number: 177E Signing time: Mon 15 Dec 2025 15:00:54 +0000 Manifest this update: Mon 15 Dec 2025 15:00:54 +0000 Manifest next update: Tue 16 Dec 2025 15:00:54 +0000 Files and hashes: 1: 3u_UTWM5MnsnNlqUobIqKDYLwKo.roa (hash: veRRLy9ZMKOvJkYp1WIUbOdpjqnYEIFrYe5fkHyfQnc=) 2: NXMLuLJiPn9lphY2BNHIX5EGKI8.crl (hash: 7NZJon3ZH//TF1USnQRGiOMGHVw4ffqXaavz+MAZ25E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/5c5138-aee4-482c-913c-3a4dff8e8ded/1/NXMLuLJiPn9lphY2BNHIX5EGKI8.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/5c5138-aee4-482c-913c-3a4dff8e8ded/1/NXMLuLJiPn9lphY2BNHIX5EGKI8.mft rsync://rpki.ripe.net/repository/DEFAULT/NXMLuLJiPn9lphY2BNHIX5EGKI8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 14:30:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:87:5c:4e:db:f3:77:c8:7e:ad:59:0c:03:40:fb:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35730bb8b2623e7f65a6163604d1c85f9106288f Validity Not Before: Dec 15 15:00:54 2025 GMT Not After : Dec 16 15:00:54 2025 GMT Subject: CN=4bfd762842f83638af397ca671bdd9a740543165 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:1f:98:ea:af:75:28:1c:4f:57:a2:e6:06:ad: 6a:28:b5:65:54:3a:9a:fe:1f:47:1f:68:e4:13:82: d8:31:3c:6d:dd:ba:e1:ec:5a:77:fc:4a:e4:ef:b4: 59:8b:75:dc:7b:60:5a:51:62:bb:95:85:c5:08:04: b2:33:37:46:20:9b:63:d0:17:99:c7:ab:e7:0e:08: eb:ff:4a:70:b5:9b:bc:e8:12:1c:94:3d:96:6a:30: 7a:2f:9b:fe:dd:a4:e3:ef:a2:b3:84:42:dd:53:40: 85:2a:62:c0:92:3d:f4:2d:dc:da:fa:b8:64:86:4e: 6a:e0:30:75:13:dd:f1:c8:27:24:fe:b7:db:a1:ba: bb:2f:ef:27:2a:8b:ab:5b:6c:f0:9d:c8:a0:6b:84: 59:87:cc:f3:e4:47:b6:16:c7:1a:ec:f4:29:e6:cb: ea:d6:3f:48:c9:ee:a0:46:24:3b:b4:79:09:74:8c: 43:88:2d:dc:6e:35:00:a3:db:35:19:ca:21:70:23: bd:40:13:40:78:9f:2f:07:2c:58:56:aa:d3:1b:da: 5a:fc:ef:99:ea:9f:15:15:58:47:e7:02:97:9f:53: e4:f4:4b:89:7e:e9:38:e6:ce:14:b2:1a:1c:ce:a6: 21:46:61:4f:b6:4b:84:57:71:d5:9b:11:58:97:eb: b6:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:FD:76:28:42:F8:36:38:AF:39:7C:A6:71:BD:D9:A7:40:54:31:65 X509v3 Authority Key Identifier: keyid:35:73:0B:B8:B2:62:3E:7F:65:A6:16:36:04:D1:C8:5F:91:06:28:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NXMLuLJiPn9lphY2BNHIX5EGKI8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/5c5138-aee4-482c-913c-3a4dff8e8ded/1/NXMLuLJiPn9lphY2BNHIX5EGKI8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/5c5138-aee4-482c-913c-3a4dff8e8ded/1/NXMLuLJiPn9lphY2BNHIX5EGKI8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:7e:77:37:bb:d9:16:b8:f6:9d:03:b0:bc:27:43:4b:17:e2: 0c:fb:ca:1e:29:2e:7a:0d:a9:c2:47:ca:2d:11:22:61:52:59: 7f:66:1f:21:be:72:d7:20:41:fb:3c:7d:11:a2:09:4d:0f:1f: 31:ee:92:0d:c1:d7:c0:3b:30:03:f9:72:d1:80:56:29:38:e8: 93:71:86:e2:a4:71:d9:01:3e:ca:18:f4:28:d5:1b:1f:94:0d: 35:97:e4:39:94:3f:0b:65:fe:4c:27:8f:2e:fb:9d:98:00:be: 4b:12:0d:2c:5c:69:32:84:1b:24:5a:dc:5f:2e:d7:81:f2:99: f9:69:79:53:72:a3:ba:65:5d:7b:bd:5c:13:4a:f6:93:4b:d4: 9b:99:74:ca:2a:89:cc:ea:ff:61:2e:20:55:0a:ac:2f:62:60: d7:8b:7d:40:b9:b5:60:80:95:23:5f:51:51:e2:c9:dc:8c:66: 4b:d4:91:c3:50:d6:c6:96:70:95:2d:d1:5b:8d:5b:eb:2d:d8: 9a:33:ee:15:48:7e:8d:38:7c:fb:12:d0:49:93:ec:42:6d:3e: 8a:d1:d3:e1:6a:65:ae:1d:2d:d0:6c:6d:3a:b5:1c:a7:61:7b: 29:31:0a:08:35:0d:b2:2a:da:68:70:03:97:70:6f:6a:c6:ec: dc:29:71:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsih1xO2/N3yH6tWQwDQPsCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NzMwYmI4YjI2MjNlN2Y2NWE2MTYzNjA0ZDFjODVmOTEw NjI4OGYwHhcNMjUxMjE1MTUwMDU0WhcNMjUxMjE2MTUwMDU0WjAzMTEwLwYDVQQD Eyg0YmZkNzYyODQyZjgzNjM4YWYzOTdjYTY3MWJkZDlhNzQwNTQzMTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApR+Y6q91KBxPV6LmBq1qKLVlVDqa /h9HH2jkE4LYMTxt3brh7Fp3/Erk77RZi3Xce2BaUWK7lYXFCASyMzdGIJtj0BeZ x6vnDgjr/0pwtZu86BIclD2WajB6L5v+3aTj76KzhELdU0CFKmLAkj30Ldza+rhk hk5q4DB1E93xyCck/rfbobq7L+8nKourW2zwnciga4RZh8zz5Ee2Fsca7PQp5svq 1j9Iye6gRiQ7tHkJdIxDiC3cbjUAo9s1GcohcCO9QBNAeJ8vByxYVqrTG9pa/O+Z 6p8VFVhH5wKXn1Pk9EuJfuk45s4UshoczqYhRmFPtkuEV3HVmxFYl+u2KQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEv9dihC+DY4rzl8pnG92adAVDFlMB8GA1UdIwQY MBaAFDVzC7iyYj5/ZaYWNgTRyF+RBiiPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlhNTHVMSmlQbjlscGhZMkJOSElYNUVHS0k4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC81YzUxMzgtYWVlNC00ODJjLTkxM2Mt M2E0ZGZmOGU4ZGVkLzEvTlhNTHVMSmlQbjlscGhZMkJOSElYNUVHS0k4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC81YzUxMzgtYWVlNC00ODJjLTkxM2MtM2E0ZGZmOGU4ZGVk LzEvTlhNTHVMSmlQbjlscGhZMkJOSElYNUVHS0k4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmH53N7vZ Frj2nQOwvCdDSxfiDPvKHikueg2pwkfKLREiYVJZf2YfIb5y1yBB+zx9EaIJTQ8f Me6SDcHXwDswA/ly0YBWKTjok3GG4qRx2QE+yhj0KNUbH5QNNZfkOZQ/C2X+TCeP LvudmAC+SxINLFxpMoQbJFrcXy7XgfKZ+Wl5U3KjumVde71cE0r2k0vUm5l0yiqJ zOr/YS4gVQqsL2Jg14t9QLm1YICVI19RUeLJ3IxmS9SRw1DWxpZwlS3RW41b6y3Y mjPuFUh+jTh8+xLQSZPsQm0+itHT4Wplrh0t0GxtOrUcp2F7KTEKCDUNsiraaHAD l3Bvasbs3Clxvw== -----END CERTIFICATE-----Generated at Mon Dec 15 17:06:28 2025 by rpki-client