This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.mft File: Nx-4XU-AjLFgeivk9KeYyj6tOBA.mft (raw, json) Hash identifier: qN6dZmyyFi6KBzbJx9tuN1xcZd8iTsDVSZ4luceE0fo= Subject key identifier: CE:75:D9:83:AF:19:D2:CD:64:A5:AA:7D:7C:FE:6E:02:E2:80:AF:2F Authority key identifier: 37:1F:B8:5D:4F:80:8C:B1:60:7A:2B:E4:F4:A7:98:CA:3E:AD:38:10 Certificate issuer: /CN=371fb85d4f808cb1607a2be4f4a798ca3ead3810 Certificate serial: 019AF2095954CFBA1104E2A33B25F89B1FF8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nx-4XU-AjLFgeivk9KeYyj6tOBA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 05:01:30 +0000 Manifest this update: Sat 06 Dec 2025 05:01:30 +0000 Manifest next update: Sun 07 Dec 2025 05:01:30 +0000 Files and hashes: 1: Nx-4XU-AjLFgeivk9KeYyj6tOBA.crl (hash: izGAHoIKeACaDRbOhwmGUxZs9e3UjW1JoqkO3zxZBpo=) 2: n5KP5ufURfzYm-dc-9TpGgegI9M.roa (hash: BV7R38C05Kbtl7OcfTA9iXDfsj6OteeTUI52xIrldQE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.mft rsync://rpki.ripe.net/repository/DEFAULT/Nx-4XU-AjLFgeivk9KeYyj6tOBA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:59:54:cf:ba:11:04:e2:a3:3b:25:f8:9b:1f:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=371fb85d4f808cb1607a2be4f4a798ca3ead3810 Validity Not Before: Dec 6 05:01:30 2025 GMT Not After : Dec 7 05:01:30 2025 GMT Subject: CN=ce75d983af19d2cd64a5aa7d7cfe6e02e280af2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:0d:88:49:dd:58:9b:e1:b1:dd:55:f9:80:7d: 15:62:9b:4e:23:85:2f:e4:84:bc:b1:b1:72:ac:cb: 2d:ee:d5:06:5d:e1:99:26:a2:34:d8:21:33:a5:e9: 22:34:f0:c4:8b:89:80:c7:1b:cd:4a:a1:de:0a:17: 99:cd:00:4e:a3:dd:67:b1:2a:7c:d3:68:16:1c:ba: ae:2d:fa:26:3f:c8:f9:ea:1f:4a:63:25:dc:f3:d9: 0f:e9:35:e1:fe:34:63:f3:ca:97:3e:1d:bc:4d:b2: 35:34:f6:ab:5d:b6:04:ea:b9:d2:7b:dc:45:7c:cb: b5:92:12:70:3e:81:cb:7b:31:63:60:66:05:4d:2e: 88:26:53:fd:67:46:52:3d:fc:4b:01:56:e0:d2:1f: eb:63:b2:03:f0:0c:64:c8:d3:55:77:32:4f:3a:2b: 90:94:c1:48:2b:36:c2:cb:a3:94:bf:2e:bc:58:fe: 34:94:18:4b:f0:5e:4f:0a:3d:9f:36:01:89:fc:b4: 8c:5f:66:1f:89:dc:1e:50:d5:9c:83:00:4f:b7:4e: 31:4a:6f:2a:71:b2:a9:97:ef:6d:a0:2f:d0:81:22: 22:06:03:64:ea:6a:a1:cd:b7:ba:11:42:09:a8:94: 23:79:be:5e:de:cc:4a:69:f8:09:47:1d:0e:4f:c7: 09:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:75:D9:83:AF:19:D2:CD:64:A5:AA:7D:7C:FE:6E:02:E2:80:AF:2F X509v3 Authority Key Identifier: keyid:37:1F:B8:5D:4F:80:8C:B1:60:7A:2B:E4:F4:A7:98:CA:3E:AD:38:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nx-4XU-AjLFgeivk9KeYyj6tOBA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:ec:97:28:03:c2:39:07:8d:df:2c:2e:79:23:a4:60:02:76: ee:98:51:8f:f0:e4:26:17:58:48:b3:cd:3a:4c:f3:eb:7b:b0: a4:9a:2b:68:e4:9c:22:8f:66:6e:8a:54:22:8f:ba:92:17:14: 9a:a4:7d:bb:6c:df:5c:ec:20:22:ff:ce:a8:b4:11:91:a9:17: 1d:05:18:f7:dc:51:31:60:1c:45:90:7c:d3:57:df:f8:c6:40: bd:35:58:fa:a7:78:a0:9b:9d:1b:fd:bb:c1:cc:2e:ef:fe:43: c6:32:09:67:d2:1f:88:45:68:b6:68:18:cc:cd:5b:9c:57:dc: 00:9e:03:b9:8f:c5:4a:e4:57:74:24:26:33:f3:47:83:ca:fe: 98:a3:74:09:a8:11:a5:45:b0:87:58:5a:7d:c7:7b:8a:7f:6f: 7c:82:be:85:73:54:f1:1c:55:3f:f3:22:6c:a6:0e:4a:7f:8d: c6:1c:14:e1:a1:e8:8e:d6:bd:e2:33:47:2e:dd:92:e3:e6:0f: 6c:0e:7e:8d:46:f8:93:47:8e:dc:c3:6d:9d:92:c1:33:4f:3c: 87:3a:b3:b9:7b:0e:86:dd:d2:bd:55:f9:69:39:0f:a6:98:e8: 5a:69:42:3b:62:b6:93:62:81:c5:e9:1c:42:ee:29:95:db:4c: d3:eb:76:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCVlUz7oRBOKjOyX4mx/4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3MWZiODVkNGY4MDhjYjE2MDdhMmJlNGY0YTc5OGNhM2Vh ZDM4MTAwHhcNMjUxMjA2MDUwMTMwWhcNMjUxMjA3MDUwMTMwWjAzMTEwLwYDVQQD EyhjZTc1ZDk4M2FmMTlkMmNkNjRhNWFhN2Q3Y2ZlNmUwMmUyODBhZjJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQ2ISd1Ym+Gx3VX5gH0VYptOI4Uv 5IS8sbFyrMst7tUGXeGZJqI02CEzpekiNPDEi4mAxxvNSqHeCheZzQBOo91nsSp8 02gWHLquLfomP8j56h9KYyXc89kP6TXh/jRj88qXPh28TbI1NParXbYE6rnSe9xF fMu1khJwPoHLezFjYGYFTS6IJlP9Z0ZSPfxLAVbg0h/rY7ID8AxkyNNVdzJPOiuQ lMFIKzbCy6OUvy68WP40lBhL8F5PCj2fNgGJ/LSMX2YfidweUNWcgwBPt04xSm8q cbKpl+9toC/QgSIiBgNk6mqhzbe6EUIJqJQjeb5e3sxKafgJRx0OT8cJDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM512YOvGdLNZKWqfXz+bgLigK8vMB8GA1UdIwQY MBaAFDcfuF1PgIyxYHor5PSnmMo+rTgQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTngtNFhVLUFqTEZnZWl2azlLZVl5ajZ0T0JBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9jNWE4NDgtMjYwZC00YWQwLWFlZjMt ZDdiMmM5MzQ0MmQzLzEvTngtNFhVLUFqTEZnZWl2azlLZVl5ajZ0T0JBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC9jNWE4NDgtMjYwZC00YWQwLWFlZjMtZDdiMmM5MzQ0MmQz LzEvTngtNFhVLUFqTEZnZWl2azlLZVl5ajZ0T0JBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYeyXKAPC OQeN3ywueSOkYAJ27phRj/DkJhdYSLPNOkzz63uwpJoraOScIo9mbopUIo+6khcU mqR9u2zfXOwgIv/OqLQRkakXHQUY99xRMWAcRZB801ff+MZAvTVY+qd4oJudG/27 wcwu7/5DxjIJZ9IfiEVotmgYzM1bnFfcAJ4DuY/FSuRXdCQmM/NHg8r+mKN0CagR pUWwh1hafcd7in9vfIK+hXNU8RxVP/MibKYOSn+NxhwU4aHojta94jNHLt2S4+YP bA5+jUb4k0eO3MNtnZLBM088hzqzuXsOht3SvVX5aTkPppjoWmlCO2K2k2KBxekc Qu4pldtM0+t2pg== -----END CERTIFICATE-----Generated at Sat Dec 6 14:43:07 2025 by rpki-client