This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/115cd0-08dd-47ac-9848-cddcd1835516/1/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.mft File: Nfx0tXmMcFswvQ6vqY_9PVvUIrA.mft (raw, json) Hash identifier: YK2gCOMEFv0RwOMkWt7SO2/z/Ip5gujgmTfKFqtFVIA= Subject key identifier: 91:13:75:51:5A:E5:C0:CB:31:8F:45:BB:1F:ED:3A:93:21:99:0A:5B Authority key identifier: 35:FC:74:B5:79:8C:70:5B:30:BD:0E:AF:A9:8F:FD:3D:5B:D4:22:B0 Certificate issuer: /CN=35fc74b5798c705b30bd0eafa98ffd3d5bd422b0 Certificate serial: 019AF19B29713020A6A919A62294566BEB8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/115cd0-08dd-47ac-9848-cddcd1835516/1/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.mft Manifest number: 052C Signing time: Sat 06 Dec 2025 03:01:08 +0000 Manifest this update: Sat 06 Dec 2025 03:01:08 +0000 Manifest next update: Sun 07 Dec 2025 03:01:08 +0000 Files and hashes: 1: Nfx0tXmMcFswvQ6vqY_9PVvUIrA.crl (hash: Dr9nuCNMUs+/Nt0q0tGCyifqAekszjTl9XVuPPIkBu0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/115cd0-08dd-47ac-9848-cddcd1835516/1/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/115cd0-08dd-47ac-9848-cddcd1835516/1/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.mft rsync://rpki.ripe.net/repository/DEFAULT/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:29:71:30:20:a6:a9:19:a6:22:94:56:6b:eb:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35fc74b5798c705b30bd0eafa98ffd3d5bd422b0 Validity Not Before: Dec 6 03:01:08 2025 GMT Not After : Dec 7 03:01:08 2025 GMT Subject: CN=911375515ae5c0cb318f45bb1fed3a9321990a5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ca:14:93:9f:27:32:e4:4c:75:6a:83:5b:64: a5:eb:25:00:76:82:b8:e2:a1:34:ca:ec:2c:85:4c: e4:07:f6:b0:8c:96:76:60:e2:b3:35:43:36:52:2f: ed:e8:ef:94:74:73:60:07:95:c4:90:b2:2b:37:7b: 7c:ca:da:9d:c9:74:ba:e3:8f:5d:55:5f:9e:9f:c6: 24:8b:02:f2:93:ca:ce:37:8a:c4:de:8f:37:70:b2: fb:34:0a:ac:ad:40:3e:7f:40:c7:72:f2:65:22:ce: 7b:eb:1c:85:37:bc:1f:18:e0:2d:a8:3a:38:63:23: 25:3f:7a:48:5f:2a:18:13:99:a3:f2:67:2f:25:16: cb:0c:3a:31:34:00:d3:08:0e:d4:d8:1a:dc:b6:78: 55:2e:83:e7:60:1a:fe:ff:ff:4c:61:8e:a8:30:93: 21:a3:03:71:8d:9a:7d:84:50:70:5f:4a:46:3f:b1: bc:d9:c9:3f:8d:c9:4d:ed:d7:0f:ee:3b:37:0f:c9: b9:b0:22:32:a4:0a:36:82:ca:59:a7:22:35:c5:02: 69:aa:e0:fd:d8:7a:4d:c2:d6:08:62:c0:1c:72:f9: d7:4a:84:48:10:5a:fb:d0:0f:eb:d4:40:8e:37:1f: c9:86:f4:ca:0f:14:28:92:66:d2:c4:88:aa:74:41: f3:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:13:75:51:5A:E5:C0:CB:31:8F:45:BB:1F:ED:3A:93:21:99:0A:5B X509v3 Authority Key Identifier: keyid:35:FC:74:B5:79:8C:70:5B:30:BD:0E:AF:A9:8F:FD:3D:5B:D4:22:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/115cd0-08dd-47ac-9848-cddcd1835516/1/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/115cd0-08dd-47ac-9848-cddcd1835516/1/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:58:bb:a6:44:80:a3:70:b2:af:77:c1:89:26:21:ef:df:45: df:e6:ee:0f:9e:9b:05:77:c6:64:27:33:cd:12:26:df:b5:33: 2f:a3:a6:bf:cc:50:1f:17:9d:47:41:f6:e1:f3:bf:b1:24:0d: e8:1a:da:ec:ed:b3:ef:19:86:04:88:a2:a5:57:b3:9d:5e:52: eb:f4:ca:5e:c9:27:ad:db:38:dd:c8:ff:61:61:72:17:08:d7: 9f:d4:3a:1f:72:ba:8e:b2:bc:7e:b4:d7:96:f9:1f:26:17:aa: cb:bf:a7:99:72:37:2a:39:7f:6a:32:3e:22:8a:83:3e:74:e1: 9d:08:cb:de:bc:ae:78:bc:85:7f:cb:21:93:48:fe:0b:c5:13: 30:3f:97:d4:80:dc:7b:f5:bf:93:13:dc:3f:d5:a2:b9:c7:96: 65:dc:97:76:e1:07:4d:b0:a7:9d:31:32:1b:61:55:5c:00:c0: 66:55:2e:44:00:a4:41:1d:e7:a9:24:c0:da:4a:3e:db:33:d1: ec:0b:fe:bb:4d:cc:99:bb:2b:68:f8:1f:db:28:8e:19:e2:b5: d7:96:96:2a:80:9c:14:a9:fe:a6:e8:02:b4:cb:f6:00:88:2d: f1:ea:e7:5e:35:47:4a:f0:21:3c:9b:d8:3c:e6:39:70:a7:05: 49:7e:39:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmylxMCCmqRmmIpRWa+uNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1ZmM3NGI1Nzk4YzcwNWIzMGJkMGVhZmE5OGZmZDNkNWJk NDIyYjAwHhcNMjUxMjA2MDMwMTA4WhcNMjUxMjA3MDMwMTA4WjAzMTEwLwYDVQQD Eyg5MTEzNzU1MTVhZTVjMGNiMzE4ZjQ1YmIxZmVkM2E5MzIxOTkwYTViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcoUk58nMuRMdWqDW2Sl6yUAdoK4 4qE0yuwshUzkB/awjJZ2YOKzNUM2Ui/t6O+UdHNgB5XEkLIrN3t8ytqdyXS6449d VV+en8YkiwLyk8rON4rE3o83cLL7NAqsrUA+f0DHcvJlIs576xyFN7wfGOAtqDo4 YyMlP3pIXyoYE5mj8mcvJRbLDDoxNADTCA7U2BrctnhVLoPnYBr+//9MYY6oMJMh owNxjZp9hFBwX0pGP7G82ck/jclN7dcP7js3D8m5sCIypAo2gspZpyI1xQJpquD9 2HpNwtYIYsAccvnXSoRIEFr70A/r1ECONx/JhvTKDxQokmbSxIiqdEHzAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJETdVFa5cDLMY9Fux/tOpMhmQpbMB8GA1UdIwQY MBaAFDX8dLV5jHBbML0Or6mP/T1b1CKwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmZ4MHRYbU1jRnN3dlE2dnFZXzlQVnZVSXJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8xMTVjZDAtMDhkZC00N2FjLTk4NDgt Y2RkY2QxODM1NTE2LzEvTmZ4MHRYbU1jRnN3dlE2dnFZXzlQVnZVSXJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi8xMTVjZDAtMDhkZC00N2FjLTk4NDgtY2RkY2QxODM1NTE2 LzEvTmZ4MHRYbU1jRnN3dlE2dnFZXzlQVnZVSXJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkli7pkSA o3Cyr3fBiSYh799F3+buD56bBXfGZCczzRIm37UzL6Omv8xQHxedR0H24fO/sSQN 6Bra7O2z7xmGBIiipVeznV5S6/TKXsknrds43cj/YWFyFwjXn9Q6H3K6jrK8frTX lvkfJheqy7+nmXI3Kjl/ajI+IoqDPnThnQjL3ryueLyFf8shk0j+C8UTMD+X1IDc e/W/kxPcP9WiuceWZdyXduEHTbCnnTEyG2FVXADAZlUuRACkQR3nqSTA2ko+2zPR 7Av+u03MmbsraPgf2yiOGeK115aWKoCcFKn+pugCtMv2AIgt8ernXjVHSvAhPJvY POY5cKcFSX45pQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:32:47 2025 by rpki-client