This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.mft File: NT8X9Luxk0bcWvwMI1h5--Y1fG0.mft (raw, json) Hash identifier: cCwKVMvk1EPXegdHO7ysrAqtUPpoDzMsUNRV1fs+KW8= Subject key identifier: DC:8F:0E:C8:C1:C1:0A:A4:95:36:19:4D:7B:C8:49:D1:07:5E:45:FE Authority key identifier: 35:3F:17:F4:BB:B1:93:46:DC:5A:FC:0C:23:58:79:FB:E6:35:7C:6D Certificate issuer: /CN=353f17f4bbb19346dc5afc0c235879fbe6357c6d Certificate serial: 019B52CEE3A28F45FC671E0BAC3F1F3E7D51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NT8X9Luxk0bcWvwMI1h5--Y1fG0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.mft Manifest number: 1012 Signing time: Thu 25 Dec 2025 00:00:48 +0000 Manifest this update: Thu 25 Dec 2025 00:00:48 +0000 Manifest next update: Fri 26 Dec 2025 00:00:48 +0000 Files and hashes: 1: NT8X9Luxk0bcWvwMI1h5--Y1fG0.crl (hash: bbxuB5z8aFrUGilQPIvttRm2AdjbWr6eA6p9fVYexaU=) 2: ZIEntIvRdoyNG_9f7umqM8GaOP0.roa (hash: fyIclvXxfmafIM00Oljz1bkGgUIAKrrEkFW8CDlF9q4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.mft rsync://rpki.ripe.net/repository/DEFAULT/NT8X9Luxk0bcWvwMI1h5--Y1fG0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:ce:e3:a2:8f:45:fc:67:1e:0b:ac:3f:1f:3e:7d:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=353f17f4bbb19346dc5afc0c235879fbe6357c6d Validity Not Before: Dec 25 00:00:48 2025 GMT Not After : Dec 26 00:00:48 2025 GMT Subject: CN=dc8f0ec8c1c10aa49536194d7bc849d1075e45fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:8e:5e:d4:71:31:ea:9c:69:5c:14:9e:c0:11: 68:8c:69:78:b9:65:3e:2e:44:c3:67:6f:f1:e7:cf: cc:03:00:bb:fe:cf:28:69:b8:b0:af:64:62:2e:16: dc:3e:d3:86:93:b6:8d:ee:e7:11:60:dc:40:a1:1e: 3a:e6:ce:78:97:02:c6:ac:68:3c:45:34:d7:8a:68: 71:3b:24:cd:62:7e:43:b3:10:91:40:14:5f:4c:b1: ea:13:c9:aa:c8:c8:ab:54:ed:de:22:4a:f4:da:d5: 12:c2:eb:7e:01:0d:fb:5d:d7:e9:49:ff:6c:60:75: 06:74:4e:69:67:23:81:52:13:a0:f2:4e:53:d2:9a: 07:e8:24:1d:a2:cf:8a:2b:16:ba:db:d5:6a:77:08: 82:89:3f:72:1f:98:9c:20:8d:ef:b3:72:69:bb:7a: 5c:6b:76:82:db:c4:df:07:05:32:ef:b9:75:cd:bc: 66:72:4f:dc:d1:c9:dd:a9:73:b7:92:ce:90:be:87: 15:ca:11:cb:07:e0:f6:2a:7f:7e:ec:5e:d5:d2:0f: 6b:c6:e5:12:9a:63:41:39:4b:6a:75:f9:e1:36:3a: 45:ff:a3:e9:72:2b:ef:ae:46:6d:c0:d4:b6:99:f0: 89:ee:09:f9:84:aa:1b:b0:12:93:fc:27:78:64:1f: a7:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:8F:0E:C8:C1:C1:0A:A4:95:36:19:4D:7B:C8:49:D1:07:5E:45:FE X509v3 Authority Key Identifier: keyid:35:3F:17:F4:BB:B1:93:46:DC:5A:FC:0C:23:58:79:FB:E6:35:7C:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NT8X9Luxk0bcWvwMI1h5--Y1fG0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:e9:d9:1e:15:3a:71:72:56:76:9e:1e:1b:e2:8c:df:08:22: 2b:4f:d2:51:bf:ae:ab:79:a0:52:67:d6:55:e7:d1:38:76:e5: 49:26:78:77:26:ff:b5:15:de:55:25:bb:94:2e:97:9e:a5:76: e1:8d:e7:f6:73:4a:27:e1:d3:43:72:bb:46:45:b2:ad:6c:54: 64:6b:bc:82:b1:7b:0f:58:bf:f2:b3:c4:42:5f:6e:30:de:bd: 98:db:51:07:5b:e0:11:c9:fd:14:ce:bf:bc:93:bd:9c:4e:16: b3:bf:ec:88:86:70:bb:a9:53:b0:24:77:7b:7d:38:fd:2a:01: ad:55:53:a0:2f:8d:6a:a5:56:8f:e0:16:0c:2d:82:5d:d3:c8: 5d:c9:a0:97:76:07:ba:97:d6:c7:0d:e2:d8:73:4b:48:3e:eb: 7b:41:94:81:05:7a:c7:ab:3f:5a:4e:fc:64:d3:22:55:ea:24: 95:4a:f7:d2:0a:47:36:5e:52:a5:52:d5:ea:e5:72:37:18:a5: 2d:6a:58:da:87:9e:65:dc:5b:b5:1c:e4:91:ec:c4:3e:45:f9: 2c:c7:e7:75:bd:39:13:fd:e4:35:dd:e8:b3:76:67:02:f1:ef: f8:2d:cb:59:69:87:f7:5c:bc:2d:51:23:0e:d8:95:d4:98:be: 67:cd:df:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSzuOij0X8Zx4LrD8fPn1RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1M2YxN2Y0YmJiMTkzNDZkYzVhZmMwYzIzNTg3OWZiZTYz NTdjNmQwHhcNMjUxMjI1MDAwMDQ4WhcNMjUxMjI2MDAwMDQ4WjAzMTEwLwYDVQQD EyhkYzhmMGVjOGMxYzEwYWE0OTUzNjE5NGQ3YmM4NDlkMTA3NWU0NWZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtY5e1HEx6pxpXBSewBFojGl4uWU+ LkTDZ2/x58/MAwC7/s8oabiwr2RiLhbcPtOGk7aN7ucRYNxAoR465s54lwLGrGg8 RTTXimhxOyTNYn5DsxCRQBRfTLHqE8mqyMirVO3eIkr02tUSwut+AQ37XdfpSf9s YHUGdE5pZyOBUhOg8k5T0poH6CQdos+KKxa629VqdwiCiT9yH5icII3vs3Jpu3pc a3aC28TfBwUy77l1zbxmck/c0cndqXO3ks6QvocVyhHLB+D2Kn9+7F7V0g9rxuUS mmNBOUtqdfnhNjpF/6PpcivvrkZtwNS2mfCJ7gn5hKobsBKT/Cd4ZB+nCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNyPDsjBwQqklTYZTXvISdEHXkX+MB8GA1UdIwQY MBaAFDU/F/S7sZNG3Fr8DCNYefvmNXxtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlQ4WDlMdXhrMGJjV3Z3TUkxaDUtLVkxZkcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8wYTI0YjUtYjlhZC00OGE2LWFkZjct OWZkODRjNzliMGVmLzEvTlQ4WDlMdXhrMGJjV3Z3TUkxaDUtLVkxZkcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy8wYTI0YjUtYjlhZC00OGE2LWFkZjctOWZkODRjNzliMGVm LzEvTlQ4WDlMdXhrMGJjV3Z3TUkxaDUtLVkxZkcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFunZHhU6 cXJWdp4eG+KM3wgiK0/SUb+uq3mgUmfWVefROHblSSZ4dyb/tRXeVSW7lC6XnqV2 4Y3n9nNKJ+HTQ3K7RkWyrWxUZGu8grF7D1i/8rPEQl9uMN69mNtRB1vgEcn9FM6/ vJO9nE4Ws7/siIZwu6lTsCR3e304/SoBrVVToC+NaqVWj+AWDC2CXdPIXcmgl3YH upfWxw3i2HNLSD7re0GUgQV6x6s/Wk78ZNMiVeoklUr30gpHNl5SpVLV6uVyNxil LWpY2oeeZdxbtRzkkezEPkX5LMfndb05E/3kNd3os3ZnAvHv+C3LWWmH91y8LVEj DtiV1Ji+Z83fGw== -----END CERTIFICATE-----Generated at Thu Dec 25 03:32:56 2025 by rpki-client