This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.mft File: nl1ITra0tWiaVEzwsTt--TJFfvE.mft (raw, json) Hash identifier: NlWrAfquMlabR1wKG3J+TRvRkWYAGD7rKuF2eoXvZVk= Subject key identifier: 97:3E:D3:16:45:CE:E8:17:89:FF:E8:2E:35:4F:20:FC:7A:8D:4E:FF Authority key identifier: 9E:5D:48:4E:B6:B4:B5:68:9A:54:4C:F0:B1:3B:7E:F9:32:45:7E:F1 Certificate issuer: /CN=9e5d484eb6b4b5689a544cf0b13b7ef932457ef1 Certificate serial: 019AF209B879B7C95A7F4AD66FF3FACB511F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nl1ITra0tWiaVEzwsTt--TJFfvE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.mft Manifest number: 1617 Signing time: Sat 06 Dec 2025 05:01:54 +0000 Manifest this update: Sat 06 Dec 2025 05:01:54 +0000 Manifest next update: Sun 07 Dec 2025 05:01:54 +0000 Files and hashes: 1: nl1ITra0tWiaVEzwsTt--TJFfvE.crl (hash: 296F9NZw0wHvjoTKo03boN2boSdDyr57xX/zrFyQ6Fw=) 2: z9Zyukoi2uOHQdEe-vCyq46DaFo.roa (hash: aTR5i5ZEuCcMlVNNZ8y9Ak4ulLNXmEOMB0JCISwIQQM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.mft rsync://rpki.ripe.net/repository/DEFAULT/nl1ITra0tWiaVEzwsTt--TJFfvE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:b8:79:b7:c9:5a:7f:4a:d6:6f:f3:fa:cb:51:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e5d484eb6b4b5689a544cf0b13b7ef932457ef1 Validity Not Before: Dec 6 05:01:54 2025 GMT Not After : Dec 7 05:01:54 2025 GMT Subject: CN=973ed31645cee81789ffe82e354f20fc7a8d4eff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:db:67:91:d9:2f:9c:38:bd:7c:60:c0:94:44: b0:1b:97:c2:2d:65:b2:62:f6:7c:24:23:e4:67:5d: b3:e7:4b:67:14:3c:fd:43:9c:d3:81:0c:95:88:0f: 7e:de:20:4a:8f:45:c9:05:a3:58:47:b2:89:66:5e: a2:04:1f:c0:f2:ed:17:25:13:46:99:7a:39:ce:c6: 46:90:26:39:98:d3:b9:5b:42:18:5f:fd:1d:25:36: 32:c9:29:c8:a1:bb:6f:98:cf:22:1b:48:cf:19:70: 08:91:03:97:65:b3:fa:a2:bf:d0:5b:fb:8c:54:f3: 8c:57:35:e8:3e:60:90:0f:b8:e6:fd:bf:8b:8c:65: 77:5a:1e:ea:32:54:00:60:4c:4d:a0:74:30:e4:f8: cb:d6:8d:2b:ef:a1:ed:34:9e:72:06:ba:4c:b3:a4: 08:a3:cd:77:ca:0e:4d:db:39:17:1f:d1:05:73:83: 2b:45:a5:16:98:76:8a:c9:90:c8:dd:67:19:01:05: 77:97:ec:e6:97:2c:8c:ec:1c:33:b8:68:0a:b1:f9: 6f:71:5d:3c:42:50:11:6d:5e:42:47:12:a9:41:ff: eb:b7:6b:d6:cf:1f:a6:55:cb:42:2d:ef:a9:00:a1: 22:11:89:59:56:40:d8:21:f5:ee:c6:d8:ba:6c:5f: 21:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:3E:D3:16:45:CE:E8:17:89:FF:E8:2E:35:4F:20:FC:7A:8D:4E:FF X509v3 Authority Key Identifier: keyid:9E:5D:48:4E:B6:B4:B5:68:9A:54:4C:F0:B1:3B:7E:F9:32:45:7E:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nl1ITra0tWiaVEzwsTt--TJFfvE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:e3:c7:01:f9:fe:32:c1:3b:12:a6:15:a4:75:71:73:4f:16: 87:91:bb:25:02:7b:ce:35:18:67:5e:a9:03:3b:39:b1:36:b8: 4b:b1:bf:29:24:d3:0d:3e:77:00:fa:33:cc:f1:a8:90:fd:a7: 8b:93:19:2f:3f:ed:a5:ee:2c:e9:dd:71:dd:65:0d:16:ce:fa: 8e:f5:4c:de:21:65:e5:44:a5:6f:d1:b4:66:3f:46:e8:f1:87: 3a:29:b8:c5:48:ed:ae:bb:89:25:7c:14:88:d0:d7:8c:e0:8f: 79:0f:cc:42:49:2f:a1:29:83:40:30:b3:bd:27:86:f3:c2:f5: 1c:ac:cf:5c:10:51:30:9c:1e:66:c8:b3:44:ee:71:99:ea:b4: 06:52:1a:d3:7a:b1:4b:b2:7a:ef:9a:35:e0:f4:d9:c8:95:5a: 66:c5:8b:a9:ec:0f:2e:b9:c8:a7:5c:d4:c4:e6:4f:b9:0c:1a: fd:c7:4f:f9:20:4f:f6:88:15:13:dd:b1:33:c3:ad:4c:1e:87: 14:4d:b9:4e:cb:ef:59:c7:2d:41:37:fc:d3:c7:ef:21:f3:25: 7e:64:01:cb:30:b0:b1:da:f6:7f:23:a1:1d:d4:a0:53:c4:86: 67:91:4e:be:23:9c:5e:d3:de:5a:5b:2e:74:95:cf:b0:02:13: 52:76:7d:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCbh5t8laf0rWb/P6y1EfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNWQ0ODRlYjZiNGI1Njg5YTU0NGNmMGIxM2I3ZWY5MzI0 NTdlZjEwHhcNMjUxMjA2MDUwMTU0WhcNMjUxMjA3MDUwMTU0WjAzMTEwLwYDVQQD Eyg5NzNlZDMxNjQ1Y2VlODE3ODlmZmU4MmUzNTRmMjBmYzdhOGQ0ZWZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxttnkdkvnDi9fGDAlESwG5fCLWWy YvZ8JCPkZ12z50tnFDz9Q5zTgQyViA9+3iBKj0XJBaNYR7KJZl6iBB/A8u0XJRNG mXo5zsZGkCY5mNO5W0IYX/0dJTYyySnIobtvmM8iG0jPGXAIkQOXZbP6or/QW/uM VPOMVzXoPmCQD7jm/b+LjGV3Wh7qMlQAYExNoHQw5PjL1o0r76HtNJ5yBrpMs6QI o813yg5N2zkXH9EFc4MrRaUWmHaKyZDI3WcZAQV3l+zmlyyM7BwzuGgKsflvcV08 QlARbV5CRxKpQf/rt2vWzx+mVctCLe+pAKEiEYlZVkDYIfXuxti6bF8haQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJc+0xZFzugXif/oLjVPIPx6jU7/MB8GA1UdIwQY MBaAFJ5dSE62tLVomlRM8LE7fvkyRX7xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmwxSVRyYTB0V2lhVkV6d3NUdC0tVEpGZnZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9iNjc0YmItMDQ0Ny00ZDcyLWIzMDIt NmVjNDBhMzgxODE5LzEvbmwxSVRyYTB0V2lhVkV6d3NUdC0tVEpGZnZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9iNjc0YmItMDQ0Ny00ZDcyLWIzMDItNmVjNDBhMzgxODE5 LzEvbmwxSVRyYTB0V2lhVkV6d3NUdC0tVEpGZnZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaOPHAfn+ MsE7EqYVpHVxc08Wh5G7JQJ7zjUYZ16pAzs5sTa4S7G/KSTTDT53APozzPGokP2n i5MZLz/tpe4s6d1x3WUNFs76jvVM3iFl5USlb9G0Zj9G6PGHOim4xUjtrruJJXwU iNDXjOCPeQ/MQkkvoSmDQDCzvSeG88L1HKzPXBBRMJweZsizRO5xmeq0BlIa03qx S7J675o14PTZyJVaZsWLqewPLrnIp1zUxOZPuQwa/cdP+SBP9ogVE92xM8OtTB6H FE25TsvvWcctQTf808fvIfMlfmQByzCwsdr2fyOhHdSgU8SGZ5FOviOcXtPeWlsu dJXPsAITUnZ9Hg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:33:42 2025 by rpki-client