This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.mft File: nxvZcy5s3W50lNeRh_yoVbUZmQk.mft (raw, json) Hash identifier: NI596JTkMOrlxVV0HMv6Eurx0HQIlPSI2c6Du+SmmGU= Subject key identifier: 54:1F:1E:5A:1F:E6:52:AB:D1:26:C5:BF:7A:A4:24:30:1C:FB:DB:2C Authority key identifier: 9F:1B:D9:73:2E:6C:DD:6E:74:94:D7:91:87:FC:A8:55:B5:19:99:09 Certificate issuer: /CN=9f1bd9732e6cdd6e7494d79187fca855b5199909 Certificate serial: 019B6BB2810722293459A4441E44541957CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nxvZcy5s3W50lNeRh_yoVbUZmQk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.mft Manifest number: 1521 Signing time: Mon 29 Dec 2025 20:00:19 +0000 Manifest this update: Mon 29 Dec 2025 20:00:19 +0000 Manifest next update: Tue 30 Dec 2025 20:00:19 +0000 Files and hashes: 1: L2MFVzLu5kpVjnsb4Kb2Ip5hD4I.roa (hash: wDHsr026DvaBiTyi7BBF/QmvI/bBUdaI/D33HJF38Y8=) 2: _JE8lnLT-86sHVAHJKlkVaAyjr4.roa (hash: UompnxxivZ8Fg0ySIbxl1tWe4K+WK1YpWsyZpIJAPwU=) 3: nxvZcy5s3W50lNeRh_yoVbUZmQk.crl (hash: SL3lUDsASoyZd+gUqcOM6ww5KzmJbLuVqGw9nvaZA90=) 4: qdHDAHiWQsmCFoNetHDwXmdq01A.roa (hash: go8toSa0Pfxl9RGM5eMA7V4+YqEI5lyucr5i8lNbh0M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.crl rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.mft rsync://rpki.ripe.net/repository/DEFAULT/nxvZcy5s3W50lNeRh_yoVbUZmQk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 20:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6b:b2:81:07:22:29:34:59:a4:44:1e:44:54:19:57:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f1bd9732e6cdd6e7494d79187fca855b5199909 Validity Not Before: Dec 29 20:00:19 2025 GMT Not After : Dec 30 20:00:19 2025 GMT Subject: CN=541f1e5a1fe652abd126c5bf7aa424301cfbdb2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f0:76:c2:05:88:85:8c:7d:23:15:90:cc:9d: c3:5e:a4:37:bc:57:33:56:5c:89:c3:45:b9:87:c4: 33:f3:f2:4e:48:d9:70:0e:d6:d7:8d:46:3a:67:90: 98:88:d7:e8:08:e0:4b:ef:d5:8f:16:34:28:2f:11: 84:5f:96:68:7f:cf:c0:58:e8:71:c0:25:de:a2:5c: cf:fe:80:c0:59:96:e3:77:ea:71:66:bb:d7:ef:76: 9f:e6:ee:9f:3f:da:58:93:4b:59:b5:bc:e0:f2:82: 82:0f:aa:a4:bf:31:16:46:16:87:aa:4c:41:1e:f0: e2:84:be:2a:51:6b:02:0c:84:10:90:a6:44:ae:7e: 02:50:a0:29:d6:79:cd:62:61:49:41:4f:b8:92:c9: b6:8c:fe:7f:2f:d7:08:20:9f:27:cd:01:3a:ad:ab: 22:31:09:8f:d3:45:1d:7f:ea:46:80:a6:c6:81:55: 8e:46:01:5c:9e:7b:db:fc:b7:a6:8b:f5:20:24:0f: 5e:e7:49:b0:6d:e6:44:37:ca:da:3b:98:07:a4:72: 3c:69:6c:3a:f2:e6:79:64:37:34:7f:4c:cc:0b:b3: 67:bd:98:23:9c:60:4b:74:e1:21:1b:eb:02:7d:49: 1a:2d:95:76:dc:14:37:6f:bb:60:f6:ae:b0:11:d7: 4b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:1F:1E:5A:1F:E6:52:AB:D1:26:C5:BF:7A:A4:24:30:1C:FB:DB:2C X509v3 Authority Key Identifier: keyid:9F:1B:D9:73:2E:6C:DD:6E:74:94:D7:91:87:FC:A8:55:B5:19:99:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nxvZcy5s3W50lNeRh_yoVbUZmQk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:f5:24:8c:5c:3d:f6:5e:1d:45:b3:ad:db:12:1f:20:44:e3: 53:f9:6c:bd:1a:3e:e4:52:e9:fa:ef:64:90:1d:24:15:c2:98: 02:ec:f9:b5:55:dd:46:38:b4:af:f4:cb:fd:1a:ac:76:de:58: ec:19:6b:96:35:d9:33:94:05:2a:b0:4b:a7:50:da:4b:fc:e6: 0d:ee:2f:ec:bd:9c:0b:33:cc:81:a8:da:0d:99:3d:54:14:89: ae:3c:38:53:44:87:cb:46:19:cf:60:84:b4:f6:36:70:60:6c: c3:d6:cb:82:4d:42:ca:50:fa:a0:68:eb:ac:fe:f3:88:c2:21: 9c:df:2c:06:bd:42:a2:f8:f8:25:a0:7d:82:bf:ac:88:56:cd: 33:4e:c8:bf:2a:cf:7c:f6:6c:de:1e:d1:7c:9c:5c:f6:ce:ea: 73:0c:38:1d:93:90:cf:2a:a8:a7:a6:45:e2:45:1b:18:3e:14: f6:d7:63:8f:a5:ad:c8:5f:8a:aa:7a:9c:48:17:c4:c2:c2:9f: 8c:08:2b:a9:ff:11:c0:19:e9:73:6e:3f:a9:cb:be:49:57:01: e1:a0:8d:81:e6:58:2e:2c:54:d2:38:37:ff:8d:25:01:d8:c1: 7d:8c:e4:d1:ff:f9:45:d6:0e:d4:22:44:89:35:27:1e:57:40: cd:2e:25:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtrsoEHIik0WaREHkRUGVfMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmMWJkOTczMmU2Y2RkNmU3NDk0ZDc5MTg3ZmNhODU1YjUx OTk5MDkwHhcNMjUxMjI5MjAwMDE5WhcNMjUxMjMwMjAwMDE5WjAzMTEwLwYDVQQD Eyg1NDFmMWU1YTFmZTY1MmFiZDEyNmM1YmY3YWE0MjQzMDFjZmJkYjJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/B2wgWIhYx9IxWQzJ3DXqQ3vFcz VlyJw0W5h8Qz8/JOSNlwDtbXjUY6Z5CYiNfoCOBL79WPFjQoLxGEX5Zof8/AWOhx wCXeolzP/oDAWZbjd+pxZrvX73af5u6fP9pYk0tZtbzg8oKCD6qkvzEWRhaHqkxB HvDihL4qUWsCDIQQkKZErn4CUKAp1nnNYmFJQU+4ksm2jP5/L9cIIJ8nzQE6rasi MQmP00Udf+pGgKbGgVWORgFcnnvb/Lemi/UgJA9e50mwbeZEN8raO5gHpHI8aWw6 8uZ5ZDc0f0zMC7NnvZgjnGBLdOEhG+sCfUkaLZV23BQ3b7tg9q6wEddLYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFQfHlof5lKr0SbFv3qkJDAc+9ssMB8GA1UdIwQY MBaAFJ8b2XMubN1udJTXkYf8qFW1GZkJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnh2WmN5NXMzVzUwbE5lUmhfeW9WYlVabVFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi8xNGVhZDktY2JiMS00NjM5LTgxYTct ZDhiODIwMmQ3Nzg2LzEvbnh2WmN5NXMzVzUwbE5lUmhfeW9WYlVabVFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi8xNGVhZDktY2JiMS00NjM5LTgxYTctZDhiODIwMmQ3Nzg2 LzEvbnh2WmN5NXMzVzUwbE5lUmhfeW9WYlVabVFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa/UkjFw9 9l4dRbOt2xIfIETjU/lsvRo+5FLp+u9kkB0kFcKYAuz5tVXdRji0r/TL/Rqsdt5Y 7BlrljXZM5QFKrBLp1DaS/zmDe4v7L2cCzPMgajaDZk9VBSJrjw4U0SHy0YZz2CE tPY2cGBsw9bLgk1CylD6oGjrrP7ziMIhnN8sBr1Covj4JaB9gr+siFbNM07IvyrP fPZs3h7RfJxc9s7qcww4HZOQzyqop6ZF4kUbGD4U9tdjj6WtyF+KqnqcSBfEwsKf jAgrqf8RwBnpc24/qcu+SVcB4aCNgeZYLixU0jg3/40lAdjBfYzk0f/5RdYO1CJE iTUnHldAzS4lOQ== -----END CERTIFICATE-----Generated at Tue Dec 30 01:43:37 2025 by rpki-client