This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/5e5f47-f617-4593-97cf-9a802959a248/1/nixTq2Et2DzRFrsTx1DX4rDWiQQ.mft File: nixTq2Et2DzRFrsTx1DX4rDWiQQ.mft (raw, json) Hash identifier: x8PpPMIO52gOev5n5Oh+P0b89qUxsOfuGoxohYM4BSk= Subject key identifier: 12:A1:34:10:28:A4:1C:63:DC:FA:51:F0:1A:9D:16:6C:2F:F2:F4:C2 Authority key identifier: 9E:2C:53:AB:61:2D:D8:3C:D1:16:BB:13:C7:50:D7:E2:B0:D6:89:04 Certificate issuer: /CN=9e2c53ab612dd83cd116bb13c750d7e2b0d68904 Certificate serial: 019B315615B72546A2C563068B3FDEF308F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nixTq2Et2DzRFrsTx1DX4rDWiQQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/5e5f47-f617-4593-97cf-9a802959a248/1/nixTq2Et2DzRFrsTx1DX4rDWiQQ.mft Manifest number: 177D Signing time: Thu 18 Dec 2025 12:01:23 +0000 Manifest this update: Thu 18 Dec 2025 12:01:23 +0000 Manifest next update: Fri 19 Dec 2025 12:01:23 +0000 Files and hashes: 1: nixTq2Et2DzRFrsTx1DX4rDWiQQ.crl (hash: SCDkpv6czsNQLTr3QZsjppAWBOcp9bRMBKiKjSV8v3w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/5e5f47-f617-4593-97cf-9a802959a248/1/nixTq2Et2DzRFrsTx1DX4rDWiQQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/5e5f47-f617-4593-97cf-9a802959a248/1/nixTq2Et2DzRFrsTx1DX4rDWiQQ.mft rsync://rpki.ripe.net/repository/DEFAULT/nixTq2Et2DzRFrsTx1DX4rDWiQQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 12:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:56:15:b7:25:46:a2:c5:63:06:8b:3f:de:f3:08:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e2c53ab612dd83cd116bb13c750d7e2b0d68904 Validity Not Before: Dec 18 12:01:23 2025 GMT Not After : Dec 19 12:01:23 2025 GMT Subject: CN=12a1341028a41c63dcfa51f01a9d166c2ff2f4c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:07:71:18:96:03:9c:9f:a5:25:60:0b:18:7c: 4f:8f:6c:da:1a:4a:db:56:79:af:1d:5e:95:ba:55: 47:f3:11:2e:b5:47:9b:fc:89:bb:f1:c5:a8:ad:2d: b1:4b:eb:6b:65:29:de:66:e5:6f:15:21:a8:68:3a: 78:0c:96:39:cc:ed:8e:64:96:7c:f1:48:15:d5:1d: a8:38:a9:ff:fe:2b:47:07:01:1d:38:d6:46:d1:d8: c5:9d:7b:bb:c4:f8:f3:13:54:d5:97:e0:f6:90:ac: ca:45:83:e6:c2:bd:c3:91:4f:06:4a:f5:ca:1b:4b: c0:e9:26:62:f6:c3:c2:d8:62:5f:8b:85:90:7f:62: c1:af:25:ce:3e:3b:c9:73:77:95:a6:0d:95:e4:cc: 78:cb:34:b2:f0:4c:e2:61:c8:f4:02:5a:b1:fb:5f: 99:f6:40:12:32:ae:e3:6f:2a:d7:65:06:af:8a:f6: 6f:c2:26:e3:88:1f:e5:e8:7f:d0:16:b0:62:ce:c4: 29:d5:3a:03:49:f7:24:f5:9b:e5:df:06:ee:49:33: 45:56:0d:6b:7e:0f:5a:de:ab:bd:70:65:f9:e0:9a: dd:03:46:33:bc:6a:63:e4:71:9f:66:1c:18:c7:8c: 6a:ee:46:2b:f0:9b:73:34:26:a8:c3:05:85:40:98: 2c:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:A1:34:10:28:A4:1C:63:DC:FA:51:F0:1A:9D:16:6C:2F:F2:F4:C2 X509v3 Authority Key Identifier: keyid:9E:2C:53:AB:61:2D:D8:3C:D1:16:BB:13:C7:50:D7:E2:B0:D6:89:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nixTq2Et2DzRFrsTx1DX4rDWiQQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5e5f47-f617-4593-97cf-9a802959a248/1/nixTq2Et2DzRFrsTx1DX4rDWiQQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5e5f47-f617-4593-97cf-9a802959a248/1/nixTq2Et2DzRFrsTx1DX4rDWiQQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:13:f9:f4:0d:c3:18:16:45:61:26:2c:7f:a9:e1:9e:c2:95: f5:8a:2e:16:8f:03:20:10:8a:cc:cc:e4:e9:78:ae:61:88:96: 25:43:7c:55:2d:ed:6a:ac:f0:72:5c:8a:63:cb:7c:be:fc:2a: 65:bc:ec:61:47:c2:56:32:51:fa:a8:58:16:eb:13:6e:d7:88: b6:a4:db:3d:90:47:32:e9:b1:6b:b7:90:1f:f2:a3:52:88:75: 82:0c:bc:02:6b:c6:b0:c3:74:62:ba:ed:99:aa:ee:f6:d0:0a: c5:ec:3d:34:59:63:a0:07:89:3f:d4:fc:81:3d:39:bc:30:65: 5f:ff:9f:39:87:21:d9:5a:b2:2a:97:19:a6:3b:08:47:b6:15: ef:29:9e:50:83:c7:96:79:84:e3:65:f6:b7:7a:9f:39:fc:d7: c0:23:40:00:60:a6:2d:95:61:3e:bd:1e:7b:ad:e7:40:c5:2c: e2:88:47:1e:f2:23:34:e8:a2:96:29:87:a1:02:02:71:c7:7b: 35:7e:c1:67:aa:aa:61:a4:b4:a0:f3:2d:13:ee:86:0f:d4:ad: 7f:27:5a:91:ba:da:a3:80:36:60:33:bd:c2:ab:70:9e:72:cb: 26:2f:b3:19:7b:d4:4a:45:80:d7:ed:5f:6a:61:f9:53:b4:eb: b5:11:1c:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxVhW3JUaixWMGiz/e8wjxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllMmM1M2FiNjEyZGQ4M2NkMTE2YmIxM2M3NTBkN2UyYjBk Njg5MDQwHhcNMjUxMjE4MTIwMTIzWhcNMjUxMjE5MTIwMTIzWjAzMTEwLwYDVQQD EygxMmExMzQxMDI4YTQxYzYzZGNmYTUxZjAxYTlkMTY2YzJmZjJmNGMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2AdxGJYDnJ+lJWALGHxPj2zaGkrb VnmvHV6VulVH8xEutUeb/Im78cWorS2xS+trZSneZuVvFSGoaDp4DJY5zO2OZJZ8 8UgV1R2oOKn//itHBwEdONZG0djFnXu7xPjzE1TVl+D2kKzKRYPmwr3DkU8GSvXK G0vA6SZi9sPC2GJfi4WQf2LBryXOPjvJc3eVpg2V5Mx4yzSy8EziYcj0Alqx+1+Z 9kASMq7jbyrXZQavivZvwibjiB/l6H/QFrBizsQp1ToDSfck9Zvl3wbuSTNFVg1r fg9a3qu9cGX54JrdA0YzvGpj5HGfZhwYx4xq7kYr8JtzNCaowwWFQJgseQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBKhNBAopBxj3PpR8BqdFmwv8vTCMB8GA1UdIwQY MBaAFJ4sU6thLdg80Ra7E8dQ1+Kw1okEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbml4VHEyRXQyRHpSRnJzVHgxRFg0ckRXaVFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC81ZTVmNDctZjYxNy00NTkzLTk3Y2Yt OWE4MDI5NTlhMjQ4LzEvbml4VHEyRXQyRHpSRnJzVHgxRFg0ckRXaVFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC81ZTVmNDctZjYxNy00NTkzLTk3Y2YtOWE4MDI5NTlhMjQ4 LzEvbml4VHEyRXQyRHpSRnJzVHgxRFg0ckRXaVFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkxP59A3D GBZFYSYsf6nhnsKV9YouFo8DIBCKzMzk6XiuYYiWJUN8VS3taqzwclyKY8t8vvwq ZbzsYUfCVjJR+qhYFusTbteItqTbPZBHMumxa7eQH/KjUoh1ggy8AmvGsMN0Yrrt maru9tAKxew9NFljoAeJP9T8gT05vDBlX/+fOYch2VqyKpcZpjsIR7YV7ymeUIPH lnmE42X2t3qfOfzXwCNAAGCmLZVhPr0ee63nQMUs4ohHHvIjNOiilimHoQICccd7 NX7BZ6qqYaS0oPMtE+6GD9Stfydakbrao4A2YDO9wqtwnnLLJi+zGXvUSkWA1+1f amH5U7TrtREc7A== -----END CERTIFICATE-----Generated at Thu Dec 18 16:15:06 2025 by rpki-client