This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/c1ddeb-2e9b-42bb-9251-df491bd0374e/1/niAdSREFvoeXxfKjhatFb18K8Fs.mft File: niAdSREFvoeXxfKjhatFb18K8Fs.mft (raw, json) Hash identifier: 2jGlbEv5VBIWKhld+kApvejj9fezHRALzktsqIWe/OE= Subject key identifier: 86:F2:E6:D8:75:37:12:C8:1F:30:28:89:51:F5:ED:7F:2B:11:66:D3 Authority key identifier: 9E:20:1D:49:11:05:BE:87:97:C5:F2:A3:85:AB:45:6F:5F:0A:F0:5B Certificate issuer: /CN=9e201d491105be8797c5f2a385ab456f5f0af05b Certificate serial: 019B53063A81C09CF3CD3A1A92F4FEC46BC4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/niAdSREFvoeXxfKjhatFb18K8Fs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/c1ddeb-2e9b-42bb-9251-df491bd0374e/1/niAdSREFvoeXxfKjhatFb18K8Fs.mft Manifest number: 0868 Signing time: Thu 25 Dec 2025 01:01:15 +0000 Manifest this update: Thu 25 Dec 2025 01:01:15 +0000 Manifest next update: Fri 26 Dec 2025 01:01:15 +0000 Files and hashes: 1: niAdSREFvoeXxfKjhatFb18K8Fs.crl (hash: nV3Z3glatR26PMssUxuNGNvocWqmhRgyoH7Y01aokY0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/c1ddeb-2e9b-42bb-9251-df491bd0374e/1/niAdSREFvoeXxfKjhatFb18K8Fs.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/c1ddeb-2e9b-42bb-9251-df491bd0374e/1/niAdSREFvoeXxfKjhatFb18K8Fs.mft rsync://rpki.ripe.net/repository/DEFAULT/niAdSREFvoeXxfKjhatFb18K8Fs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:06:3a:81:c0:9c:f3:cd:3a:1a:92:f4:fe:c4:6b:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e201d491105be8797c5f2a385ab456f5f0af05b Validity Not Before: Dec 25 01:01:15 2025 GMT Not After : Dec 26 01:01:15 2025 GMT Subject: CN=86f2e6d8753712c81f30288951f5ed7f2b1166d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:54:83:68:a9:0d:8e:ec:7a:6e:02:65:f0:ed: 77:e3:e5:4a:1a:22:6f:8e:6f:d2:0d:6b:68:5d:8c: db:1d:25:1b:a5:ac:79:6e:b7:5e:40:1c:6e:c2:2f: 53:20:8c:e1:f3:31:e2:1a:92:5a:89:64:2a:15:5d: 59:b6:ce:36:3a:28:9d:6e:d9:47:38:70:e4:83:50: 70:f6:a5:2a:59:57:f6:76:18:4a:72:3b:d1:1d:72: 68:b0:ee:6f:c5:c1:4d:a1:42:82:42:65:10:45:f2: 9d:34:b8:c9:ac:05:a4:a3:50:f5:b2:5e:71:5b:8d: 4b:0e:cf:6f:64:cf:0b:79:e4:10:43:dd:8d:0c:8f: 47:f1:c5:ef:d8:8b:28:26:36:ff:ab:3d:40:72:22: 90:45:f6:29:5b:37:af:e3:ec:81:2b:d5:a3:fc:27: b6:7c:45:7a:51:57:d5:eb:55:00:86:c3:6c:31:be: 62:7b:75:96:a7:07:d8:6c:5d:6d:77:d6:38:60:77: 5b:16:30:1e:d6:e0:67:5a:9f:08:4d:69:a0:2d:6d: e5:50:eb:b9:37:a7:e9:8c:1f:f9:28:6a:5d:18:1e: 24:e4:ed:ae:21:dd:58:f1:ac:6c:56:66:45:6b:e9: 29:74:2d:e5:93:03:df:ea:6c:66:dd:1d:9c:c7:de: 5a:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:F2:E6:D8:75:37:12:C8:1F:30:28:89:51:F5:ED:7F:2B:11:66:D3 X509v3 Authority Key Identifier: keyid:9E:20:1D:49:11:05:BE:87:97:C5:F2:A3:85:AB:45:6F:5F:0A:F0:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/niAdSREFvoeXxfKjhatFb18K8Fs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c1ddeb-2e9b-42bb-9251-df491bd0374e/1/niAdSREFvoeXxfKjhatFb18K8Fs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c1ddeb-2e9b-42bb-9251-df491bd0374e/1/niAdSREFvoeXxfKjhatFb18K8Fs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:80:ff:d5:69:cb:16:c3:d2:70:4b:09:95:36:7f:c4:f8:30: a3:d3:d2:f9:d9:07:b6:32:90:f8:a9:1b:2e:39:cb:0b:e3:1c: b9:83:09:3c:c0:c4:2d:0e:55:9e:c1:4a:08:7a:f6:d5:3d:4a: d8:01:0d:41:57:a6:11:e6:66:2e:15:7b:53:8f:3c:a9:ae:e5: 80:81:18:55:ee:32:d7:3d:89:1d:c3:70:82:1c:2c:ad:ee:78: b3:bb:c7:e3:6d:86:c6:1a:5a:93:98:3f:7f:3e:18:a4:eb:d0: e5:49:ff:19:ab:c3:d3:6d:ef:b2:3b:26:4c:79:4c:9b:21:99: e5:e3:50:5f:09:81:0c:3f:ee:7f:91:47:57:f9:8f:60:2b:6d: 41:ca:23:b8:08:7e:64:bd:b6:0b:d1:48:e8:83:bb:5f:64:01: bb:98:03:2f:0d:0b:e4:eb:18:6f:14:29:67:76:59:26:12:e0: f9:6f:45:70:05:fd:a7:e0:e2:ae:a0:1b:22:d2:cc:67:fb:90: 98:cf:57:23:0a:a4:f4:7e:89:ee:50:a9:e4:45:70:3f:8d:6d: 1e:9b:6c:3a:f1:ff:30:8c:65:76:18:86:73:45:ec:c6:d4:c0: 8e:df:d9:23:2b:f2:39:03:b0:06:3e:b1:b1:b2:3b:cb:34:ae: 3d:c3:30:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTBjqBwJzzzToakvT+xGvEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllMjAxZDQ5MTEwNWJlODc5N2M1ZjJhMzg1YWI0NTZmNWYw YWYwNWIwHhcNMjUxMjI1MDEwMTE1WhcNMjUxMjI2MDEwMTE1WjAzMTEwLwYDVQQD Eyg4NmYyZTZkODc1MzcxMmM4MWYzMDI4ODk1MWY1ZWQ3ZjJiMTE2NmQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVSDaKkNjux6bgJl8O134+VKGiJv jm/SDWtoXYzbHSUbpax5brdeQBxuwi9TIIzh8zHiGpJaiWQqFV1Zts42OiidbtlH OHDkg1Bw9qUqWVf2dhhKcjvRHXJosO5vxcFNoUKCQmUQRfKdNLjJrAWko1D1sl5x W41LDs9vZM8LeeQQQ92NDI9H8cXv2IsoJjb/qz1AciKQRfYpWzev4+yBK9Wj/Ce2 fEV6UVfV61UAhsNsMb5ie3WWpwfYbF1td9Y4YHdbFjAe1uBnWp8ITWmgLW3lUOu5 N6fpjB/5KGpdGB4k5O2uId1Y8axsVmZFa+kpdC3lkwPf6mxm3R2cx95a5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIby5th1NxLIHzAoiVH17X8rEWbTMB8GA1UdIwQY MBaAFJ4gHUkRBb6Hl8Xyo4WrRW9fCvBbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmlBZFNSRUZ2b2VYeGZLamhhdEZiMThLOEZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9jMWRkZWItMmU5Yi00MmJiLTkyNTEt ZGY0OTFiZDAzNzRlLzEvbmlBZFNSRUZ2b2VYeGZLamhhdEZiMThLOEZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9jMWRkZWItMmU5Yi00MmJiLTkyNTEtZGY0OTFiZDAzNzRl LzEvbmlBZFNSRUZ2b2VYeGZLamhhdEZiMThLOEZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkoD/1WnL FsPScEsJlTZ/xPgwo9PS+dkHtjKQ+KkbLjnLC+McuYMJPMDELQ5VnsFKCHr21T1K 2AENQVemEeZmLhV7U488qa7lgIEYVe4y1z2JHcNwghwsre54s7vH422Gxhpak5g/ fz4YpOvQ5Un/GavD023vsjsmTHlMmyGZ5eNQXwmBDD/uf5FHV/mPYCttQcojuAh+ ZL22C9FI6IO7X2QBu5gDLw0L5OsYbxQpZ3ZZJhLg+W9FcAX9p+DirqAbItLMZ/uQ mM9XIwqk9H6J7lCp5EVwP41tHptsOvH/MIxldhiGc0XsxtTAjt/ZIyvyOQOwBj6x sbI7yzSuPcMwqQ== -----END CERTIFICATE-----Generated at Thu Dec 25 04:32:28 2025 by rpki-client