This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/6bfe53-80c3-4a35-9ecb-d241f9ec5041/1/nXZQ5FO5j29N0zNjOv-ruiwMj4o.mft File: nXZQ5FO5j29N0zNjOv-ruiwMj4o.mft (raw, json) Hash identifier: bVr8OdGLi7h1es0meZJsxqV5xwxjILTvu4T1RN8rH7Q= Subject key identifier: B8:68:C8:A2:60:9A:69:95:77:98:79:91:4A:71:16:C7:0E:E3:98:60 Authority key identifier: 9D:76:50:E4:53:B9:8F:6F:4D:D3:33:63:3A:FF:AB:BA:2C:0C:8F:8A Certificate issuer: /CN=9d7650e453b98f6f4dd333633affabba2c0c8f8a Certificate serial: 019B70A3B779E7A7D3B0B21A5B56C9A2D3A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nXZQ5FO5j29N0zNjOv-ruiwMj4o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/6bfe53-80c3-4a35-9ecb-d241f9ec5041/1/nXZQ5FO5j29N0zNjOv-ruiwMj4o.mft Manifest number: 0274 Signing time: Tue 30 Dec 2025 19:02:16 +0000 Manifest this update: Tue 30 Dec 2025 19:02:16 +0000 Manifest next update: Wed 31 Dec 2025 19:02:16 +0000 Files and hashes: 1: nXZQ5FO5j29N0zNjOv-ruiwMj4o.crl (hash: 5p5O7O2eHItYLc+tn43j/4VGakZqj4K+p4VHGqE/b5A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/6bfe53-80c3-4a35-9ecb-d241f9ec5041/1/nXZQ5FO5j29N0zNjOv-ruiwMj4o.crl rsync://rpki.ripe.net/repository/DEFAULT/88/6bfe53-80c3-4a35-9ecb-d241f9ec5041/1/nXZQ5FO5j29N0zNjOv-ruiwMj4o.mft rsync://rpki.ripe.net/repository/DEFAULT/nXZQ5FO5j29N0zNjOv-ruiwMj4o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 19:02:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:70:a3:b7:79:e7:a7:d3:b0:b2:1a:5b:56:c9:a2:d3:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d7650e453b98f6f4dd333633affabba2c0c8f8a Validity Not Before: Dec 30 19:02:16 2025 GMT Not After : Dec 31 19:02:16 2025 GMT Subject: CN=b868c8a2609a6995779879914a7116c70ee39860 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:0c:ef:5a:a8:5a:a4:01:3e:09:31:1f:d2:1b: 3f:e4:8b:34:12:52:51:ea:f7:25:54:13:49:59:c1: 6f:b9:3d:67:57:6c:2b:2b:0f:ae:f8:db:f2:aa:ee: 2b:63:56:47:d6:75:15:11:43:4e:a2:00:aa:ff:26: 97:e1:00:4c:39:64:20:0d:c4:f6:ef:f3:09:45:9c: 12:7b:93:17:90:7f:51:8c:9c:e7:dd:2c:2b:bc:a9: 4c:e6:d4:40:cf:b2:e0:bf:c4:62:29:a9:a8:3f:65: ac:25:1f:51:36:5e:7f:03:d9:62:fb:a2:01:00:17: 26:39:f6:3d:f1:40:6b:3d:0d:65:be:03:09:1d:79: f4:ea:09:be:76:35:71:c4:4b:26:87:49:e0:e7:da: 53:4d:7a:e8:38:0e:67:9b:c7:7c:75:ee:dc:7f:f0: 80:bd:6d:1f:23:cf:56:f0:ae:76:65:8e:0f:bd:33: 9c:0f:94:6c:fa:b8:57:50:7a:83:a9:86:15:b9:b9: a2:e6:38:de:42:38:5e:60:b2:7c:34:3b:6f:dd:91: 3b:20:c8:c7:1f:f4:b7:b3:65:a9:66:16:6d:33:27: 7d:59:da:f4:c1:98:27:05:6d:8b:ed:ee:db:62:f1: 00:10:25:9e:19:3e:0a:45:c3:20:21:0e:75:91:2b: ac:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:68:C8:A2:60:9A:69:95:77:98:79:91:4A:71:16:C7:0E:E3:98:60 X509v3 Authority Key Identifier: keyid:9D:76:50:E4:53:B9:8F:6F:4D:D3:33:63:3A:FF:AB:BA:2C:0C:8F:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nXZQ5FO5j29N0zNjOv-ruiwMj4o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/6bfe53-80c3-4a35-9ecb-d241f9ec5041/1/nXZQ5FO5j29N0zNjOv-ruiwMj4o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/6bfe53-80c3-4a35-9ecb-d241f9ec5041/1/nXZQ5FO5j29N0zNjOv-ruiwMj4o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:1c:b8:cd:9d:19:6d:48:ad:e0:0f:59:c4:cc:3a:80:c8:38: 25:7d:59:eb:c2:91:b2:ae:c8:87:e3:17:7c:d7:c6:3d:02:64: 79:84:f4:20:c0:7c:85:f1:00:03:ab:d3:46:cd:b5:55:9d:c0: e7:f3:12:af:ee:8a:15:9a:d1:c2:94:be:26:05:d9:f4:44:93: 51:6c:c6:e1:7d:32:10:9d:73:4d:9f:85:b4:1a:9c:08:40:f9: 60:4a:e0:55:43:e2:0e:df:cc:02:71:df:08:66:d5:d2:be:84: 95:ab:2c:50:f7:52:31:34:47:ce:80:df:9e:de:71:08:78:27: e2:7b:2e:23:8a:f8:45:33:37:6d:12:c2:cc:c7:2e:d0:eb:27: 5a:51:17:d0:21:4b:26:67:59:ae:6c:d1:95:51:aa:92:5f:55: 03:3e:14:1b:a2:61:f2:c8:06:72:50:0d:0a:0a:97:7c:fb:4b: 97:21:8b:7e:f2:8d:d2:6f:8e:21:bb:ee:9c:0d:10:24:41:6a: 08:4a:02:3e:7f:60:31:5e:db:d8:f9:15:fd:a1:d7:65:48:02: d9:67:8a:a2:89:3b:28:3b:cb:5d:b8:25:29:78:18:c9:21:36: b4:35:c3:97:b9:81:12:16:95:b5:e2:64:e3:ee:b4:77:f2:53: bd:a3:5f:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtwo7d556fTsLIaW1bJotOjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkNzY1MGU0NTNiOThmNmY0ZGQzMzM2MzNhZmZhYmJhMmMw YzhmOGEwHhcNMjUxMjMwMTkwMjE2WhcNMjUxMjMxMTkwMjE2WjAzMTEwLwYDVQQD EyhiODY4YzhhMjYwOWE2OTk1Nzc5ODc5OTE0YTcxMTZjNzBlZTM5ODYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAzvWqhapAE+CTEf0hs/5Is0ElJR 6vclVBNJWcFvuT1nV2wrKw+u+Nvyqu4rY1ZH1nUVEUNOogCq/yaX4QBMOWQgDcT2 7/MJRZwSe5MXkH9RjJzn3SwrvKlM5tRAz7Lgv8RiKamoP2WsJR9RNl5/A9li+6IB ABcmOfY98UBrPQ1lvgMJHXn06gm+djVxxEsmh0ng59pTTXroOA5nm8d8de7cf/CA vW0fI89W8K52ZY4PvTOcD5Rs+rhXUHqDqYYVubmi5jjeQjheYLJ8NDtv3ZE7IMjH H/S3s2WpZhZtMyd9Wdr0wZgnBW2L7e7bYvEAECWeGT4KRcMgIQ51kSuskQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLhoyKJgmmmVd5h5kUpxFscO45hgMB8GA1UdIwQY MBaAFJ12UORTuY9vTdMzYzr/q7osDI+KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblhaUTVGTzVqMjlOMHpOak92LXJ1aXdNajRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC82YmZlNTMtODBjMy00YTM1LTllY2It ZDI0MWY5ZWM1MDQxLzEvblhaUTVGTzVqMjlOMHpOak92LXJ1aXdNajRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC82YmZlNTMtODBjMy00YTM1LTllY2ItZDI0MWY5ZWM1MDQx LzEvblhaUTVGTzVqMjlOMHpOak92LXJ1aXdNajRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZRy4zZ0Z bUit4A9ZxMw6gMg4JX1Z68KRsq7Ih+MXfNfGPQJkeYT0IMB8hfEAA6vTRs21VZ3A 5/MSr+6KFZrRwpS+JgXZ9ESTUWzG4X0yEJ1zTZ+FtBqcCED5YErgVUPiDt/MAnHf CGbV0r6ElassUPdSMTRHzoDfnt5xCHgn4nsuI4r4RTM3bRLCzMcu0OsnWlEX0CFL JmdZrmzRlVGqkl9VAz4UG6Jh8sgGclANCgqXfPtLlyGLfvKN0m+OIbvunA0QJEFq CEoCPn9gMV7b2PkV/aHXZUgC2WeKook7KDvLXbglKXgYySE2tDXDl7mBEhaVteJk 4+60d/JTvaNfCw== -----END CERTIFICATE-----Generated at Wed Dec 31 03:44:05 2025 by rpki-client