This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/f54f3a-6b8a-48c3-b2de-77a9c529777c/1/NxnxmwrdjQwod8i6f-CliTCbsUQ.mft File: NxnxmwrdjQwod8i6f-CliTCbsUQ.mft (raw, json) Hash identifier: 8h/JmXJ1e/yabkm9Hw/DTLTYhKXRbCcBonfloxhox+8= Subject key identifier: 6C:B4:7A:C0:0B:9A:E9:F4:85:74:51:63:18:8D:DE:8A:0F:43:FC:C5 Authority key identifier: 37:19:F1:9B:0A:DD:8D:0C:28:77:C8:BA:7F:E0:A5:89:30:9B:B1:44 Certificate issuer: /CN=3719f19b0add8d0c2877c8ba7fe0a589309bb144 Certificate serial: 019B771298BFF35E3F3E4F5773C08B16D637 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NxnxmwrdjQwod8i6f-CliTCbsUQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/f54f3a-6b8a-48c3-b2de-77a9c529777c/1/NxnxmwrdjQwod8i6f-CliTCbsUQ.mft Manifest number: E6 Signing time: Thu 01 Jan 2026 01:01:05 +0000 Manifest this update: Thu 01 Jan 2026 01:01:05 +0000 Manifest next update: Fri 02 Jan 2026 01:01:05 +0000 Files and hashes: 1: 4zImklvcYAVPCVi7B7vGd1c4iRU.roa (hash: nvTLIvIJofO2R9HrAaQpvAKjEbVKJcVlnQNjC2GDKUY=) 2: NxnxmwrdjQwod8i6f-CliTCbsUQ.crl (hash: LCu3vOl9B61wnQWH+AoXUuwhSIhamVDz13Eu4rZ0HCs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/f54f3a-6b8a-48c3-b2de-77a9c529777c/1/NxnxmwrdjQwod8i6f-CliTCbsUQ.crl rsync://rpki.ripe.net/repository/DEFAULT/13/f54f3a-6b8a-48c3-b2de-77a9c529777c/1/NxnxmwrdjQwod8i6f-CliTCbsUQ.mft rsync://rpki.ripe.net/repository/DEFAULT/NxnxmwrdjQwod8i6f-CliTCbsUQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 01:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:12:98:bf:f3:5e:3f:3e:4f:57:73:c0:8b:16:d6:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3719f19b0add8d0c2877c8ba7fe0a589309bb144 Validity Not Before: Jan 1 01:01:05 2026 GMT Not After : Jan 2 01:01:05 2026 GMT Subject: CN=6cb47ac00b9ae9f485745163188dde8a0f43fcc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3c:cd:b7:12:8b:9e:91:97:b3:c8:fa:f2:71: 0c:a1:1f:98:30:12:7f:67:a9:d3:dd:71:8a:a6:32: e9:9a:76:d2:5d:04:f6:f8:38:85:ac:c7:3b:34:50: b2:85:22:2a:0f:c0:39:39:3d:06:e3:91:0a:e4:3e: 81:51:5e:84:f4:d8:ae:1e:59:8f:d5:9e:f7:fe:ad: d8:8c:64:0f:90:b3:38:1b:8c:77:1a:5c:00:eb:97: 82:67:31:1e:7e:df:28:b0:bd:0c:77:b5:19:72:03: 99:9f:7f:ce:ba:4a:e3:98:88:50:3e:9d:09:7f:fc: 00:ef:4d:ba:ea:11:80:cb:57:47:8d:c9:8b:18:57: a1:66:de:69:5a:89:f7:50:3a:ab:89:b3:ad:76:cd: d2:d9:b2:ba:c0:e2:a0:1c:45:b4:e5:bc:22:78:fc: c6:14:f9:31:f5:ec:58:79:3c:82:69:1b:60:16:f7: ba:09:1e:5e:55:01:c4:13:b6:fd:98:79:93:66:0c: 9f:47:d4:6b:02:80:bc:ae:c7:3f:98:da:4b:03:01: 45:c4:8c:37:2c:61:66:9f:2d:99:71:44:06:20:41: d0:1c:d3:fe:56:34:44:71:e4:60:fc:f8:74:22:fa: 1e:0e:e6:06:4f:88:b3:78:10:fc:3a:78:ed:45:9d: e7:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:B4:7A:C0:0B:9A:E9:F4:85:74:51:63:18:8D:DE:8A:0F:43:FC:C5 X509v3 Authority Key Identifier: keyid:37:19:F1:9B:0A:DD:8D:0C:28:77:C8:BA:7F:E0:A5:89:30:9B:B1:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NxnxmwrdjQwod8i6f-CliTCbsUQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f54f3a-6b8a-48c3-b2de-77a9c529777c/1/NxnxmwrdjQwod8i6f-CliTCbsUQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f54f3a-6b8a-48c3-b2de-77a9c529777c/1/NxnxmwrdjQwod8i6f-CliTCbsUQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:2b:ac:2b:6c:91:14:62:48:2f:11:38:b7:2c:47:33:42:8b: 81:d8:62:a8:40:b8:cf:4c:8e:06:a4:d2:e9:39:f8:60:f9:16: 37:e3:b4:55:89:95:88:ac:b4:17:0f:69:1f:b1:66:12:a7:90: f6:64:c3:72:3b:75:e6:a5:3f:c5:9f:fc:9c:37:7d:66:2f:10: d8:4e:53:76:d9:d0:b9:2c:1c:7d:1a:31:65:b6:31:a0:61:fc: 61:d1:57:5b:9d:0f:cd:61:19:35:15:0c:a4:31:75:6e:41:e2: c1:69:63:2a:9e:a1:3b:0e:1b:c2:e9:43:d5:3b:59:42:25:9d: 99:a9:6e:f4:99:37:0f:1a:29:a8:58:e9:4c:e9:f2:ed:09:76: ed:15:25:e0:8a:b0:05:ee:9c:81:f3:92:63:57:ee:6b:28:c3: dd:3a:1b:71:2c:66:5a:56:4d:49:22:8b:23:46:83:1a:42:d3: f4:b0:97:c2:e8:85:6a:d1:e8:f3:48:03:b9:8b:c8:f5:34:44: eb:90:55:45:72:3f:6a:0d:39:97:96:3d:d9:48:41:e6:45:7e: 31:3b:81:a8:0a:d9:78:88:7a:81:92:3e:da:98:14:2f:bc:fc: 11:4c:e8:b6:37:81:b4:c8:9d:9e:a9:50:a0:36:aa:07:d4:a4: 07:47:c3:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt3Epi/814/Pk9Xc8CLFtY3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3MTlmMTliMGFkZDhkMGMyODc3YzhiYTdmZTBhNTg5MzA5 YmIxNDQwHhcNMjYwMTAxMDEwMTA1WhcNMjYwMTAyMDEwMTA1WjAzMTEwLwYDVQQD Eyg2Y2I0N2FjMDBiOWFlOWY0ODU3NDUxNjMxODhkZGU4YTBmNDNmY2M1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDzNtxKLnpGXs8j68nEMoR+YMBJ/ Z6nT3XGKpjLpmnbSXQT2+DiFrMc7NFCyhSIqD8A5OT0G45EK5D6BUV6E9NiuHlmP 1Z73/q3YjGQPkLM4G4x3GlwA65eCZzEeft8osL0Md7UZcgOZn3/OukrjmIhQPp0J f/wA70266hGAy1dHjcmLGFehZt5pWon3UDqribOtds3S2bK6wOKgHEW05bwiePzG FPkx9exYeTyCaRtgFve6CR5eVQHEE7b9mHmTZgyfR9RrAoC8rsc/mNpLAwFFxIw3 LGFmny2ZcUQGIEHQHNP+VjREceRg/Ph0IvoeDuYGT4izeBD8OnjtRZ3nCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGy0esALmun0hXRRYxiN3ooPQ/zFMB8GA1UdIwQY MBaAFDcZ8ZsK3Y0MKHfIun/gpYkwm7FEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnhueG13cmRqUXdvZDhpNmYtQ2xpVENic1VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9mNTRmM2EtNmI4YS00OGMzLWIyZGUt NzdhOWM1Mjk3NzdjLzEvTnhueG13cmRqUXdvZDhpNmYtQ2xpVENic1VRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9mNTRmM2EtNmI4YS00OGMzLWIyZGUtNzdhOWM1Mjk3Nzdj LzEvTnhueG13cmRqUXdvZDhpNmYtQ2xpVENic1VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYiusK2yR FGJILxE4tyxHM0KLgdhiqEC4z0yOBqTS6Tn4YPkWN+O0VYmViKy0Fw9pH7FmEqeQ 9mTDcjt15qU/xZ/8nDd9Zi8Q2E5TdtnQuSwcfRoxZbYxoGH8YdFXW50PzWEZNRUM pDF1bkHiwWljKp6hOw4bwulD1TtZQiWdmalu9Jk3DxopqFjpTOny7Ql27RUl4Iqw Be6cgfOSY1fuayjD3TobcSxmWlZNSSKLI0aDGkLT9LCXwuiFatHo80gDuYvI9TRE 65BVRXI/ag05l5Y92UhB5kV+MTuBqArZeIh6gZI+2pgUL7z8EUzotjeBtMidnqlQ oDaqB9SkB0fD/A== -----END CERTIFICATE-----Generated at Thu Jan 1 11:02:48 2026 by rpki-client