This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/NXAXpX-ccN-vZpOjJLumhne4ePM.mft File: NXAXpX-ccN-vZpOjJLumhne4ePM.mft (raw, json) Hash identifier: JcR1ygyUfFd6rU0If+KvM7os/lb+omemEtCJ7MoHWAI= Subject key identifier: D3:09:AB:B7:0C:CF:8F:62:80:0A:29:64:02:1D:E2:44:5C:CA:C6:4A Authority key identifier: 35:70:17:A5:7F:9C:70:DF:AF:66:93:A3:24:BB:A6:86:77:B8:78:F3 Certificate issuer: /CN=357017a57f9c70dfaf6693a324bba68677b878f3 Certificate serial: 019B30E8EA40DABA0D3B163179F94697DB14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NXAXpX-ccN-vZpOjJLumhne4ePM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/NXAXpX-ccN-vZpOjJLumhne4ePM.mft Manifest number: 1783 Signing time: Thu 18 Dec 2025 10:02:09 +0000 Manifest this update: Thu 18 Dec 2025 10:02:09 +0000 Manifest next update: Fri 19 Dec 2025 10:02:09 +0000 Files and hashes: 1: NXAXpX-ccN-vZpOjJLumhne4ePM.crl (hash: qIQcu0bAUU6BIaeIv3/gYAYkn/e6ozcHg0F9QTRUynU=) 2: fw5w9jTTZNnVRi6ltsbrZFMjlng.roa (hash: Spp2bK6sMfFLneeWMwidps5PTWRtnPxGOntgwXViU3Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/NXAXpX-ccN-vZpOjJLumhne4ePM.crl rsync://rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/NXAXpX-ccN-vZpOjJLumhne4ePM.mft rsync://rpki.ripe.net/repository/DEFAULT/NXAXpX-ccN-vZpOjJLumhne4ePM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:e8:ea:40:da:ba:0d:3b:16:31:79:f9:46:97:db:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=357017a57f9c70dfaf6693a324bba68677b878f3 Validity Not Before: Dec 18 10:02:09 2025 GMT Not After : Dec 19 10:02:09 2025 GMT Subject: CN=d309abb70ccf8f62800a2964021de2445ccac64a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ce:2a:44:08:f3:9f:87:55:1f:5c:52:00:99: 47:95:65:8a:5b:3d:05:aa:23:99:94:b6:9a:75:3f: 90:36:8f:36:0a:84:13:b5:30:6e:79:95:fe:03:99: ee:f4:72:be:9c:d6:f7:ab:b6:fd:bf:ec:30:99:55: 4f:cf:bc:e2:a3:83:b7:d1:22:57:f2:06:88:9e:c3: 99:e9:1d:a7:38:4d:c3:a4:02:8e:3d:ab:eb:34:d3: 9c:64:ba:9c:8b:7b:35:0a:6a:d2:ed:e7:c4:47:50: 57:78:d9:09:95:31:8f:7a:01:3b:99:2f:82:c6:60: 04:5c:f8:c4:a4:73:d6:b3:c6:8f:32:39:fe:06:ef: d5:7a:d3:2d:79:1f:a5:c4:55:91:9e:b4:34:50:1a: 9d:9b:e4:07:14:fe:9d:41:08:f1:0f:0e:f7:1d:fb: bd:2d:c6:16:5f:0d:40:d5:61:ba:a4:4d:6a:7d:1d: 06:88:20:47:42:e1:41:52:4a:d2:5f:02:90:24:1f: b7:64:22:fb:b5:d4:11:67:5c:d6:d9:15:3d:8a:ba: 73:20:8c:20:06:29:23:bc:9b:6b:d0:11:ec:c4:d6: 48:da:56:bc:df:fe:36:fc:2c:09:9e:fb:2d:28:85: ad:46:a2:cc:6f:d9:74:e7:fd:50:dc:49:08:49:05: ea:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:09:AB:B7:0C:CF:8F:62:80:0A:29:64:02:1D:E2:44:5C:CA:C6:4A X509v3 Authority Key Identifier: keyid:35:70:17:A5:7F:9C:70:DF:AF:66:93:A3:24:BB:A6:86:77:B8:78:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NXAXpX-ccN-vZpOjJLumhne4ePM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/NXAXpX-ccN-vZpOjJLumhne4ePM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/NXAXpX-ccN-vZpOjJLumhne4ePM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:03:13:a4:1b:f7:f9:67:05:ee:90:06:8b:93:54:67:a9:19: 4e:a1:3f:a8:3f:40:e7:f0:9b:72:62:78:f1:44:93:ee:b9:f1: fe:f8:1e:2b:af:e4:9d:09:2c:e1:a5:91:52:d9:9a:2b:5d:60: 8a:93:40:52:2d:18:20:b4:a8:02:08:32:7e:0f:0a:ab:22:95: f5:0d:cb:fa:63:d3:e9:cc:6f:80:6d:68:f8:33:04:a3:04:a5: a9:f5:3f:c3:75:8c:e4:46:ce:3b:d9:76:cf:40:27:da:97:16: 12:df:e6:9c:8c:b9:9c:94:00:97:d0:b6:53:42:70:62:18:3d: 72:a3:fd:d3:52:d3:eb:2c:7c:62:a2:97:82:b4:76:81:43:16: a1:71:e7:0f:45:38:d5:8e:8e:65:a9:af:8d:1b:30:29:23:14: 86:58:e0:97:ae:3c:ac:4b:ea:41:3a:e3:fb:58:a2:1a:53:12: 09:6f:7b:b5:a6:c8:71:6c:f9:34:07:2e:b2:67:ca:99:e3:92: 52:0a:62:e2:28:69:40:59:48:66:de:2f:24:32:f5:4c:97:41: e2:bd:df:a3:b0:29:b3:ee:34:b9:94:ad:63:4c:bf:e2:0a:ad: 23:d9:4a:c2:43:2c:6c:3d:3b:e1:50:3d:3b:72:dc:8e:ae:5e: fb:3e:c6:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsw6OpA2roNOxYxeflGl9sUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NzAxN2E1N2Y5YzcwZGZhZjY2OTNhMzI0YmJhNjg2Nzdi ODc4ZjMwHhcNMjUxMjE4MTAwMjA5WhcNMjUxMjE5MTAwMjA5WjAzMTEwLwYDVQQD EyhkMzA5YWJiNzBjY2Y4ZjYyODAwYTI5NjQwMjFkZTI0NDVjY2FjNjRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzc4qRAjzn4dVH1xSAJlHlWWKWz0F qiOZlLaadT+QNo82CoQTtTBueZX+A5nu9HK+nNb3q7b9v+wwmVVPz7zio4O30SJX 8gaInsOZ6R2nOE3DpAKOPavrNNOcZLqci3s1CmrS7efER1BXeNkJlTGPegE7mS+C xmAEXPjEpHPWs8aPMjn+Bu/VetMteR+lxFWRnrQ0UBqdm+QHFP6dQQjxDw73Hfu9 LcYWXw1A1WG6pE1qfR0GiCBHQuFBUkrSXwKQJB+3ZCL7tdQRZ1zW2RU9irpzIIwg BikjvJtr0BHsxNZI2la83/42/CwJnvstKIWtRqLMb9l05/1Q3EkISQXqcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNMJq7cMz49igAopZAId4kRcysZKMB8GA1UdIwQY MBaAFDVwF6V/nHDfr2aToyS7poZ3uHjzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlhBWHBYLWNjTi12WnBPakpMdW1obmU0ZVBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8xMjgyMGUtYjk3ZS00NzFjLWJiY2Ut OTJlZDFhZjE2Yjg4LzEvTlhBWHBYLWNjTi12WnBPakpMdW1obmU0ZVBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni8xMjgyMGUtYjk3ZS00NzFjLWJiY2UtOTJlZDFhZjE2Yjg4 LzEvTlhBWHBYLWNjTi12WnBPakpMdW1obmU0ZVBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATAMTpBv3 +WcF7pAGi5NUZ6kZTqE/qD9A5/CbcmJ48UST7rnx/vgeK6/knQks4aWRUtmaK11g ipNAUi0YILSoAggyfg8KqyKV9Q3L+mPT6cxvgG1o+DMEowSlqfU/w3WM5EbOO9l2 z0An2pcWEt/mnIy5nJQAl9C2U0JwYhg9cqP901LT6yx8YqKXgrR2gUMWoXHnD0U4 1Y6OZamvjRswKSMUhljgl648rEvqQTrj+1iiGlMSCW97tabIcWz5NAcusmfKmeOS Ugpi4ihpQFlIZt4vJDL1TJdB4r3fo7Aps+40uZStY0y/4gqtI9lKwkMsbD074VA9 O3Lcjq5e+z7GYg== -----END CERTIFICATE-----Generated at Thu Dec 18 12:43:11 2025 by rpki-client