This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/ccef23-5341-41cc-9ae9-61efb6f89f0a/1/nuxqatPVR_hR05uGb7FAn6GXL78.mft File: nuxqatPVR_hR05uGb7FAn6GXL78.mft (raw, json) Hash identifier: njenSAEpUH5iloKWsI7RinSAZIkJqxhrtf3pbXFpLrQ= Subject key identifier: 26:B1:60:88:E0:EF:7E:2F:C9:73:ED:57:33:E6:32:38:51:60:28:51 Authority key identifier: 9E:EC:6A:6A:D3:D5:47:F8:51:D3:9B:86:6F:B1:40:9F:A1:97:2F:BF Certificate issuer: /CN=9eec6a6ad3d547f851d39b866fb1409fa1972fbf Certificate serial: 019B6AD83C327C828578813C935C9FB10B23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nuxqatPVR_hR05uGb7FAn6GXL78.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/ccef23-5341-41cc-9ae9-61efb6f89f0a/1/nuxqatPVR_hR05uGb7FAn6GXL78.mft Manifest number: 179B Signing time: Mon 29 Dec 2025 16:01:54 +0000 Manifest this update: Mon 29 Dec 2025 16:01:54 +0000 Manifest next update: Tue 30 Dec 2025 16:01:54 +0000 Files and hashes: 1: nuxqatPVR_hR05uGb7FAn6GXL78.crl (hash: D53z4xWf59XDX1hJehBMstDFojrGV8UCZpn9y8sRngY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/ccef23-5341-41cc-9ae9-61efb6f89f0a/1/nuxqatPVR_hR05uGb7FAn6GXL78.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/ccef23-5341-41cc-9ae9-61efb6f89f0a/1/nuxqatPVR_hR05uGb7FAn6GXL78.mft rsync://rpki.ripe.net/repository/DEFAULT/nuxqatPVR_hR05uGb7FAn6GXL78.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 16:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6a:d8:3c:32:7c:82:85:78:81:3c:93:5c:9f:b1:0b:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9eec6a6ad3d547f851d39b866fb1409fa1972fbf Validity Not Before: Dec 29 16:01:54 2025 GMT Not After : Dec 30 16:01:54 2025 GMT Subject: CN=26b16088e0ef7e2fc973ed5733e6323851602851 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:95:9d:1c:86:82:d8:cc:fc:c5:c6:ba:91:c0: 60:f2:58:17:04:95:5f:d4:75:14:7c:1b:3b:5c:95: 6f:9d:d9:c6:5e:a5:b3:97:7e:4e:4a:00:ce:ef:c3: 78:60:c5:84:aa:9c:0f:7c:8e:e4:28:52:3e:8c:ae: a7:60:4a:c7:38:53:61:de:2a:c1:46:84:ca:4c:0e: 20:6f:b0:a8:7a:f1:34:f5:0e:96:7f:40:6e:57:26: 12:ee:ec:ae:f8:21:b0:05:b8:bd:31:a9:8f:9a:d2: d5:31:fe:3d:78:8f:77:ee:22:f4:2b:35:89:b9:d2: 54:24:fb:63:c6:cd:05:be:08:c8:14:a3:82:0d:4e: 5d:b6:86:74:c6:84:9d:af:ec:76:a1:e4:c3:b1:0b: f1:04:6e:2b:6e:95:b9:32:ed:40:e6:ca:94:6d:e2: 7a:c8:ce:8f:5e:b7:d5:6e:0b:b9:50:72:15:d9:10: 93:23:1c:53:34:f1:de:b9:12:19:0b:21:f8:4c:5f: c7:1c:3c:f4:dd:68:c9:de:11:53:8c:a1:37:bf:d7: 2e:75:1c:3e:73:cb:80:c2:3a:40:3e:e4:e4:97:7a: 3a:11:fd:07:24:1b:46:78:7e:81:ad:fe:d2:78:f2: f1:b5:27:bb:9a:8c:13:05:69:6d:2f:4e:fb:cb:d2: 62:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:B1:60:88:E0:EF:7E:2F:C9:73:ED:57:33:E6:32:38:51:60:28:51 X509v3 Authority Key Identifier: keyid:9E:EC:6A:6A:D3:D5:47:F8:51:D3:9B:86:6F:B1:40:9F:A1:97:2F:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nuxqatPVR_hR05uGb7FAn6GXL78.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ccef23-5341-41cc-9ae9-61efb6f89f0a/1/nuxqatPVR_hR05uGb7FAn6GXL78.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ccef23-5341-41cc-9ae9-61efb6f89f0a/1/nuxqatPVR_hR05uGb7FAn6GXL78.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:6a:c7:f6:54:e9:61:93:2b:cd:ad:96:5f:4e:cf:b0:75:be: 14:6d:dc:a0:26:46:6f:fa:7f:b3:50:e5:11:6c:12:46:ec:43: 94:dc:b2:48:d7:5b:52:53:a5:30:34:b7:2d:79:06:c7:0c:c5: 83:7d:9e:47:95:f6:56:83:28:54:ba:14:9e:52:a6:16:de:da: 2e:6b:d9:fd:aa:44:71:18:04:db:8d:75:d0:45:5c:06:1f:3d: 65:84:a4:4a:cc:ee:23:03:30:ac:7b:bb:70:29:2a:10:80:69: ad:a3:cb:8b:cb:ee:f4:ad:19:74:58:28:8c:f0:a8:87:86:64: d0:10:8a:76:cf:b9:30:9a:ea:c0:8c:8d:01:01:a3:7b:18:5f: 4a:79:c9:3c:ec:cf:7b:39:31:16:74:a4:58:7f:62:54:c0:d1: a5:40:63:ea:1a:47:2e:3e:09:00:35:fb:bd:d0:2b:12:0a:1a: ed:60:0d:26:9a:c1:5f:0d:fd:59:91:d7:5d:5b:d8:e5:79:b8: b4:42:9c:3e:5b:32:6f:bd:ca:e1:d9:53:64:0f:a2:27:61:bb: 93:0f:93:13:62:92:23:7e:41:7b:32:87:72:12:57:e5:a9:cb: 2e:16:12:b8:d3:99:ea:63:76:37:28:96:c1:76:22:69:98:c0: b3:74:3c:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtq2DwyfIKFeIE8k1yfsQsjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllZWM2YTZhZDNkNTQ3Zjg1MWQzOWI4NjZmYjE0MDlmYTE5 NzJmYmYwHhcNMjUxMjI5MTYwMTU0WhcNMjUxMjMwMTYwMTU0WjAzMTEwLwYDVQQD EygyNmIxNjA4OGUwZWY3ZTJmYzk3M2VkNTczM2U2MzIzODUxNjAyODUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA55WdHIaC2Mz8xca6kcBg8lgXBJVf 1HUUfBs7XJVvndnGXqWzl35OSgDO78N4YMWEqpwPfI7kKFI+jK6nYErHOFNh3irB RoTKTA4gb7CoevE09Q6Wf0BuVyYS7uyu+CGwBbi9MamPmtLVMf49eI937iL0KzWJ udJUJPtjxs0FvgjIFKOCDU5dtoZ0xoSdr+x2oeTDsQvxBG4rbpW5Mu1A5sqUbeJ6 yM6PXrfVbgu5UHIV2RCTIxxTNPHeuRIZCyH4TF/HHDz03WjJ3hFTjKE3v9cudRw+ c8uAwjpAPuTkl3o6Ef0HJBtGeH6Brf7SePLxtSe7mowTBWltL077y9JiuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCaxYIjg734vyXPtVzPmMjhRYChRMB8GA1UdIwQY MBaAFJ7samrT1Uf4UdObhm+xQJ+hly+/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnV4cWF0UFZSX2hSMDV1R2I3RkFuNkdYTDc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9jY2VmMjMtNTM0MS00MWNjLTlhZTkt NjFlZmI2Zjg5ZjBhLzEvbnV4cWF0UFZSX2hSMDV1R2I3RkFuNkdYTDc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9jY2VmMjMtNTM0MS00MWNjLTlhZTktNjFlZmI2Zjg5ZjBh LzEvbnV4cWF0UFZSX2hSMDV1R2I3RkFuNkdYTDc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaGrH9lTp YZMrza2WX07PsHW+FG3coCZGb/p/s1DlEWwSRuxDlNyySNdbUlOlMDS3LXkGxwzF g32eR5X2VoMoVLoUnlKmFt7aLmvZ/apEcRgE24110EVcBh89ZYSkSszuIwMwrHu7 cCkqEIBpraPLi8vu9K0ZdFgojPCoh4Zk0BCKds+5MJrqwIyNAQGjexhfSnnJPOzP ezkxFnSkWH9iVMDRpUBj6hpHLj4JADX7vdArEgoa7WANJprBXw39WZHXXVvY5Xm4 tEKcPlsyb73K4dlTZA+iJ2G7kw+TE2KSI35BezKHchJX5anLLhYSuNOZ6mN2NyiW wXYiaZjAs3Q8Kw== -----END CERTIFICATE-----Generated at Tue Dec 30 01:31:59 2025 by rpki-client