This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/ec592f-2434-4d1c-b775-99b9f33de3b0/1/NuFTPD_5SxjDCPGxyVukTrHw7Hc.mft
File:                     NuFTPD_5SxjDCPGxyVukTrHw7Hc.mft (raw, json)
Hash identifier:          2W2VEZkJ5Lr5emK3yevgcjkLckzI+pgYh85dHWULz4Q=
Subject key identifier:   38:93:85:19:88:D3:2C:63:48:92:2B:1D:73:E5:A6:DC:41:B7:F5:5F
Authority key identifier: 36:E1:53:3C:3F:F9:4B:18:C3:08:F1:B1:C9:5B:A4:4E:B1:F0:EC:77
Certificate issuer:       /CN=36e1533c3ff94b18c308f1b1c95ba44eb1f0ec77
Certificate serial:       019B405B53529F5C8E2676A8AF9D063970FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NuFTPD_5SxjDCPGxyVukTrHw7Hc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/ec592f-2434-4d1c-b775-99b9f33de3b0/1/NuFTPD_5SxjDCPGxyVukTrHw7Hc.mft
Manifest number:          16DD
Signing time:             Sun 21 Dec 2025 10:01:25 +0000
Manifest this update:     Sun 21 Dec 2025 10:01:25 +0000
Manifest next update:     Mon 22 Dec 2025 10:01:25 +0000
Files and hashes:         1: 1lVPkkjQFhK0hASM76LaKqMw8Zs.roa (hash: XOFVSZleZP5fsRci6+Onq4xznm5gGBHazy8lj9Vtasc=)
                          2: NuFTPD_5SxjDCPGxyVukTrHw7Hc.crl (hash: deRoBKrZE/ohHfbWTlp/n/uvBeyjeE5vqXDyJRf8YvA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/ec592f-2434-4d1c-b775-99b9f33de3b0/1/NuFTPD_5SxjDCPGxyVukTrHw7Hc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/ec592f-2434-4d1c-b775-99b9f33de3b0/1/NuFTPD_5SxjDCPGxyVukTrHw7Hc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NuFTPD_5SxjDCPGxyVukTrHw7Hc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 04:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:40:5b:53:52:9f:5c:8e:26:76:a8:af:9d:06:39:70:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36e1533c3ff94b18c308f1b1c95ba44eb1f0ec77
        Validity
            Not Before: Dec 21 10:01:25 2025 GMT
            Not After : Dec 22 10:01:25 2025 GMT
        Subject: CN=3893851988d32c6348922b1d73e5a6dc41b7f55f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:60:c4:dd:63:91:fe:9f:d7:f7:67:e9:83:0e:
                    33:1d:42:a5:c5:75:46:3e:e8:c9:33:3e:93:47:6b:
                    5c:13:32:6f:16:0b:46:05:ea:2f:4e:7d:30:72:89:
                    3f:5d:48:0a:cb:83:51:2f:f8:38:e3:fc:9b:b9:23:
                    c7:44:c8:bc:b5:0a:a2:8d:29:1a:93:3f:ee:9b:ff:
                    5b:54:58:6c:29:40:bc:f4:e9:9d:a5:ad:41:8b:b9:
                    f2:f3:95:e2:67:2a:80:b0:3a:05:81:fc:f6:a6:4c:
                    98:0f:8b:d5:9f:16:41:ff:2f:d3:a4:6f:c5:c1:03:
                    d7:50:7f:ed:76:35:34:46:58:b5:6c:9b:ea:86:68:
                    2e:9e:48:84:e3:36:36:4f:51:53:b8:d6:ad:dc:bd:
                    5f:21:62:9c:35:c5:f2:2d:aa:12:7d:92:43:73:3f:
                    f6:5b:61:41:2c:62:58:f2:b5:53:55:3e:07:31:1a:
                    a3:09:e0:70:54:96:c4:b7:49:b4:3f:0d:33:53:24:
                    db:4d:d9:fa:00:8b:bb:89:eb:ca:09:32:af:42:29:
                    20:ce:8c:3e:30:47:3a:3d:31:17:6e:39:db:52:45:
                    7d:ab:b9:73:11:48:47:02:b3:04:9e:b2:41:f6:bd:
                    5d:55:27:17:b0:b8:11:e8:f4:48:ce:f2:01:78:bd:
                    1b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:93:85:19:88:D3:2C:63:48:92:2B:1D:73:E5:A6:DC:41:B7:F5:5F
            X509v3 Authority Key Identifier:
                keyid:36:E1:53:3C:3F:F9:4B:18:C3:08:F1:B1:C9:5B:A4:4E:B1:F0:EC:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NuFTPD_5SxjDCPGxyVukTrHw7Hc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ec592f-2434-4d1c-b775-99b9f33de3b0/1/NuFTPD_5SxjDCPGxyVukTrHw7Hc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ec592f-2434-4d1c-b775-99b9f33de3b0/1/NuFTPD_5SxjDCPGxyVukTrHw7Hc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:72:8c:40:4e:02:76:93:37:9e:8d:02:7e:e0:38:bb:a0:bd:
         5c:6c:bd:6e:33:b4:f3:34:1a:1c:75:04:f8:cb:6e:dd:29:df:
         3e:67:a3:a7:e0:87:80:51:27:f9:98:d0:fe:1d:fe:a2:cf:59:
         30:ca:1d:e9:7f:a8:e7:a7:3d:63:d0:64:24:13:82:dc:51:a9:
         2a:5c:c5:e1:06:b8:8d:76:09:eb:73:5e:5b:3d:a1:00:06:83:
         d9:86:6f:84:6d:27:57:cb:d4:96:c7:02:4c:d4:db:4d:87:9d:
         70:2f:00:15:ca:96:3f:8b:54:21:b2:d2:83:bc:b5:6e:94:79:
         b8:b6:c1:68:f8:eb:07:25:80:d0:ad:df:94:ea:94:53:18:5d:
         2b:1b:fb:32:11:c5:4e:02:d4:24:74:6f:d3:3e:c1:4d:d9:3e:
         6a:d1:34:9a:47:03:99:9b:5f:84:1f:9b:67:5f:1e:43:25:08:
         a9:eb:03:b7:30:8e:7f:38:51:fa:1c:43:5c:27:e3:79:45:11:
         c6:33:31:97:9e:06:57:ea:e2:a0:9a:2a:b8:e8:a9:b1:56:3a:
         c0:f8:b5:1f:ec:17:bd:9d:fe:ee:49:92:0b:3c:92:73:2c:c9:
         0f:84:32:e0:ed:79:e9:c1:2f:d0:57:1a:55:c3:1f:f6:78:2f:
         4d:93:6d:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZtAW1NSn1yOJnaor50GOXD/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2ZTE1MzNjM2ZmOTRiMThjMzA4ZjFiMWM5NWJhNDRlYjFm
MGVjNzcwHhcNMjUxMjIxMTAwMTI1WhcNMjUxMjIyMTAwMTI1WjAzMTEwLwYDVQQD
EygzODkzODUxOTg4ZDMyYzYzNDg5MjJiMWQ3M2U1YTZkYzQxYjdmNTVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA62DE3WOR/p/X92fpgw4zHUKlxXVG
PujJMz6TR2tcEzJvFgtGBeovTn0wcok/XUgKy4NRL/g44/ybuSPHRMi8tQqijSka
kz/um/9bVFhsKUC89Omdpa1Bi7ny85XiZyqAsDoFgfz2pkyYD4vVnxZB/y/TpG/F
wQPXUH/tdjU0Rli1bJvqhmgunkiE4zY2T1FTuNat3L1fIWKcNcXyLaoSfZJDcz/2
W2FBLGJY8rVTVT4HMRqjCeBwVJbEt0m0Pw0zUyTbTdn6AIu7ievKCTKvQikgzow+
MEc6PTEXbjnbUkV9q7lzEUhHArMEnrJB9r1dVScXsLgR6PRIzvIBeL0bJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDiThRmI0yxjSJIrHXPlptxBt/VfMB8GA1UdIwQY
MBaAFDbhUzw/+UsYwwjxsclbpE6x8Ox3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnVGVFBEXzVTeGpEQ1BHeHlWdWtUckh3N0hjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9lYzU5MmYtMjQzNC00ZDFjLWI3NzUt
OTliOWYzM2RlM2IwLzEvTnVGVFBEXzVTeGpEQ1BHeHlWdWtUckh3N0hjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My9lYzU5MmYtMjQzNC00ZDFjLWI3NzUtOTliOWYzM2RlM2Iw
LzEvTnVGVFBEXzVTeGpEQ1BHeHlWdWtUckh3N0hjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ3KMQE4C
dpM3no0CfuA4u6C9XGy9bjO08zQaHHUE+Mtu3SnfPmejp+CHgFEn+ZjQ/h3+os9Z
MMod6X+o56c9Y9BkJBOC3FGpKlzF4Qa4jXYJ63NeWz2hAAaD2YZvhG0nV8vUlscC
TNTbTYedcC8AFcqWP4tUIbLSg7y1bpR5uLbBaPjrByWA0K3flOqUUxhdKxv7MhHF
TgLUJHRv0z7BTdk+atE0mkcDmZtfhB+bZ18eQyUIqesDtzCOfzhR+hxDXCfjeUUR
xjMxl54GV+rioJoquOipsVY6wPi1H+wXvZ3+7kmSCzyScyzJD4Qy4O156cEv0Fca
VcMf9ngvTZNtDw==
-----END CERTIFICATE-----
Generated at Sun Dec 21 13:58:07 2025 by rpki-client