This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.mft File: nLIR1_j6Gq3epEDFASab2vHKtFI.mft (raw, json) Hash identifier: b5Zpt9C6j+niD7cinmf0w7CKv2TlFKYnNkBPGjMN1c0= Subject key identifier: 9E:1F:62:57:23:3A:3B:46:BE:3E:BA:CC:05:01:2D:23:34:EF:06:DA Authority key identifier: 9C:B2:11:D7:F8:FA:1A:AD:DE:A4:40:C5:01:26:9B:DA:F1:CA:B4:52 Certificate issuer: /CN=9cb211d7f8fa1aaddea440c501269bdaf1cab452 Certificate serial: 019B323166D1207AE4A3AAB637FAF26E4160 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLIR1_j6Gq3epEDFASab2vHKtFI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.mft Manifest number: 177F Signing time: Thu 18 Dec 2025 16:00:56 +0000 Manifest this update: Thu 18 Dec 2025 16:00:56 +0000 Manifest next update: Fri 19 Dec 2025 16:00:56 +0000 Files and hashes: 1: nLIR1_j6Gq3epEDFASab2vHKtFI.crl (hash: iZ1DuyxgEPpsTtTgeYNS40U0/Db7UWU7WAOUat6OU+M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.mft rsync://rpki.ripe.net/repository/DEFAULT/nLIR1_j6Gq3epEDFASab2vHKtFI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 16:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:31:66:d1:20:7a:e4:a3:aa:b6:37:fa:f2:6e:41:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cb211d7f8fa1aaddea440c501269bdaf1cab452 Validity Not Before: Dec 18 16:00:56 2025 GMT Not After : Dec 19 16:00:56 2025 GMT Subject: CN=9e1f6257233a3b46be3ebacc05012d2334ef06da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ae:a3:b1:aa:b0:5c:d8:50:eb:45:61:ba:81: 86:ef:91:68:26:9f:07:74:88:13:9e:f1:ab:6e:e3: 2a:73:95:41:e7:50:d7:89:30:12:b0:df:ec:44:9e: 4f:13:9c:34:dc:19:f6:f6:50:ef:c1:49:af:77:22: c3:3a:e6:58:17:07:37:8a:db:a8:aa:75:a5:94:3b: 4e:65:44:fb:64:f5:e6:72:21:da:31:44:ae:b8:8a: 2a:d0:9b:ed:22:a5:6e:2b:49:79:59:9d:9e:7e:01: d2:d2:fc:21:0b:d4:8b:74:ec:3d:d3:e2:e0:34:8f: 1b:1b:12:d6:15:6d:3a:5b:28:d4:d2:cf:ce:9a:6a: e7:96:f4:f1:b9:b9:df:96:ad:06:87:5d:11:75:60: 3a:4c:bf:94:01:50:ae:c8:39:54:13:d8:0d:3a:87: e8:92:04:90:77:bf:75:9c:da:f3:94:ee:e3:e6:3a: e7:61:1a:49:f5:d6:0c:10:5e:d5:8e:b3:64:c5:ea: 84:28:01:bf:ee:31:f5:80:7d:1f:19:f4:23:8a:25: 08:4a:86:97:fa:de:8c:fc:e1:90:5f:11:f1:46:ca: 63:21:9d:4e:c0:f1:dc:43:02:d5:fa:d6:dc:0e:ec: 9c:47:0a:85:e2:13:9b:6a:45:45:30:3a:76:ff:16: fb:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:1F:62:57:23:3A:3B:46:BE:3E:BA:CC:05:01:2D:23:34:EF:06:DA X509v3 Authority Key Identifier: keyid:9C:B2:11:D7:F8:FA:1A:AD:DE:A4:40:C5:01:26:9B:DA:F1:CA:B4:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLIR1_j6Gq3epEDFASab2vHKtFI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:5d:8e:69:c5:22:14:bf:c7:a4:86:90:2e:b8:2c:9f:fc:4a: fd:38:84:10:b0:a6:81:06:07:40:9c:6d:a2:03:c9:c0:f1:22: 6b:9b:7c:c6:ad:ca:1f:b0:f8:a2:92:0b:22:eb:07:20:5d:11: 78:bb:4b:2e:eb:4b:fc:cf:ad:0f:4f:f7:92:03:51:ae:27:07: a0:d1:c5:eb:35:ed:a1:37:dd:25:32:63:f1:d1:9c:fd:2d:2a: 20:5f:8c:f0:05:9c:2e:fd:4e:94:5d:5b:b9:ba:fd:89:7e:8f: 81:a7:03:e5:c3:bf:79:ee:4c:3e:58:79:86:81:87:a6:3e:9c: 4a:24:b8:2e:50:25:c0:c9:cf:08:9e:5e:cd:59:27:cc:a7:87: 75:75:03:7a:44:9a:eb:94:14:1b:9c:37:e4:5a:ae:84:03:81: d9:a1:f3:79:25:d2:ac:79:a4:7a:d2:84:fe:bd:f6:69:d5:65: d8:5c:02:ee:ef:56:cd:be:48:b0:e7:fc:d2:3b:4a:15:92:3f: 56:8a:b2:f9:45:2e:3c:cb:10:49:1c:55:9f:7e:5b:9b:4b:8f: 51:c6:65:21:17:41:bd:2d:9b:14:5f:36:c5:ef:38:c3:63:04: 15:73:15:b8:fb:58:c3:92:1a:7a:5e:d4:fc:bd:32:58:e5:cd: 84:2f:d6:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyMWbRIHrko6q2N/rybkFgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljYjIxMWQ3ZjhmYTFhYWRkZWE0NDBjNTAxMjY5YmRhZjFj YWI0NTIwHhcNMjUxMjE4MTYwMDU2WhcNMjUxMjE5MTYwMDU2WjAzMTEwLwYDVQQD Eyg5ZTFmNjI1NzIzM2EzYjQ2YmUzZWJhY2MwNTAxMmQyMzM0ZWYwNmRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqq6jsaqwXNhQ60VhuoGG75FoJp8H dIgTnvGrbuMqc5VB51DXiTASsN/sRJ5PE5w03Bn29lDvwUmvdyLDOuZYFwc3ituo qnWllDtOZUT7ZPXmciHaMUSuuIoq0JvtIqVuK0l5WZ2efgHS0vwhC9SLdOw90+Lg NI8bGxLWFW06WyjU0s/OmmrnlvTxubnflq0Gh10RdWA6TL+UAVCuyDlUE9gNOofo kgSQd791nNrzlO7j5jrnYRpJ9dYMEF7VjrNkxeqEKAG/7jH1gH0fGfQjiiUISoaX +t6M/OGQXxHxRspjIZ1OwPHcQwLV+tbcDuycRwqF4hObakVFMDp2/xb7gwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ4fYlcjOjtGvj66zAUBLSM07wbaMB8GA1UdIwQY MBaAFJyyEdf4+hqt3qRAxQEmm9rxyrRSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkxJUjFfajZHcTNlcEVERkFTYWIydkhLdEZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9jMzEwN2ItODE1NS00YTJhLTliNTkt MmFkZmVjODM3MTExLzEvbkxJUjFfajZHcTNlcEVERkFTYWIydkhLdEZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS9jMzEwN2ItODE1NS00YTJhLTliNTktMmFkZmVjODM3MTEx LzEvbkxJUjFfajZHcTNlcEVERkFTYWIydkhLdEZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqF2OacUi FL/HpIaQLrgsn/xK/TiEELCmgQYHQJxtogPJwPEia5t8xq3KH7D4opILIusHIF0R eLtLLutL/M+tD0/3kgNRricHoNHF6zXtoTfdJTJj8dGc/S0qIF+M8AWcLv1OlF1b ubr9iX6PgacD5cO/ee5MPlh5hoGHpj6cSiS4LlAlwMnPCJ5ezVknzKeHdXUDekSa 65QUG5w35FquhAOB2aHzeSXSrHmketKE/r32adVl2FwC7u9Wzb5IsOf80jtKFZI/ Voqy+UUuPMsQSRxVn35bm0uPUcZlIRdBvS2bFF82xe84w2MEFXMVuPtYw5Iael7U /L0yWOXNhC/WTw== -----END CERTIFICATE-----Generated at Thu Dec 18 23:46:03 2025 by rpki-client