This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/5c5138-aee4-482c-913c-3a4dff8e8ded/1/NXMLuLJiPn9lphY2BNHIX5EGKI8.mft File: NXMLuLJiPn9lphY2BNHIX5EGKI8.mft (raw, json) Hash identifier: GrPBd6tMhzMJ2OYWOMMFVBCC8MBsBxm6S6ifFuZgo2Q= Subject key identifier: F1:24:B8:B8:43:AD:8E:6E:ED:C4:07:74:EE:C7:05:4C:11:18:09:84 Authority key identifier: 35:73:0B:B8:B2:62:3E:7F:65:A6:16:36:04:D1:C8:5F:91:06:28:8F Certificate issuer: /CN=35730bb8b2623e7f65a6163604d1c85f9106288f Certificate serial: 019B28525522BDE7076DCB3D9B297EEF53D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NXMLuLJiPn9lphY2BNHIX5EGKI8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/5c5138-aee4-482c-913c-3a4dff8e8ded/1/NXMLuLJiPn9lphY2BNHIX5EGKI8.mft Manifest number: 1781 Signing time: Tue 16 Dec 2025 18:00:42 +0000 Manifest this update: Tue 16 Dec 2025 18:00:42 +0000 Manifest next update: Wed 17 Dec 2025 18:00:42 +0000 Files and hashes: 1: 3u_UTWM5MnsnNlqUobIqKDYLwKo.roa (hash: veRRLy9ZMKOvJkYp1WIUbOdpjqnYEIFrYe5fkHyfQnc=) 2: NXMLuLJiPn9lphY2BNHIX5EGKI8.crl (hash: EvRk/7hp/5+U735c5hsTk/Z2TqJcXElNQ/TSEZ3rJ3o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/5c5138-aee4-482c-913c-3a4dff8e8ded/1/NXMLuLJiPn9lphY2BNHIX5EGKI8.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/5c5138-aee4-482c-913c-3a4dff8e8ded/1/NXMLuLJiPn9lphY2BNHIX5EGKI8.mft rsync://rpki.ripe.net/repository/DEFAULT/NXMLuLJiPn9lphY2BNHIX5EGKI8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:52:55:22:bd:e7:07:6d:cb:3d:9b:29:7e:ef:53:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35730bb8b2623e7f65a6163604d1c85f9106288f Validity Not Before: Dec 16 18:00:42 2025 GMT Not After : Dec 17 18:00:42 2025 GMT Subject: CN=f124b8b843ad8e6eedc40774eec7054c11180984 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4f:f7:96:0f:73:22:bd:dc:ab:63:05:0a:86: 1d:b2:04:3f:98:a8:5e:cb:79:e5:1f:b2:46:32:d7: f5:bf:ef:7e:6f:af:ac:78:46:34:af:82:f9:0a:bf: 7f:bc:09:0e:46:8f:b9:59:24:dd:07:25:4e:e8:e5: 06:42:59:f3:f7:91:3b:2e:4b:66:22:ef:80:61:26: ca:6e:7e:71:f2:a8:34:c7:77:dc:f6:7b:0a:5e:bc: 33:d0:99:2f:c5:ea:02:d5:16:7b:28:98:61:30:87: db:38:33:7e:e4:88:30:e2:b8:ce:9e:4f:e9:dc:0c: 0a:68:ab:72:ed:30:e1:c4:9a:db:be:7c:94:55:74: 96:5f:e4:db:27:18:aa:1d:f2:2d:94:3e:a5:68:4d: 95:7d:3f:6e:a8:27:a6:52:1a:2f:8b:b3:3b:8d:38: 10:1b:e6:b9:32:a6:ad:35:01:40:3e:a1:d3:38:4a: 2b:53:d7:e2:43:38:74:76:d1:a6:a0:f2:df:d7:14: ef:b1:5d:84:70:3b:c9:aa:cb:0a:9d:1a:20:1d:a7: 00:95:3e:19:14:c8:47:bc:91:c9:83:1b:de:88:f7: 3f:79:65:64:1e:4c:b9:2b:74:e4:1b:60:0e:84:83: 59:fb:14:12:8f:99:f3:9b:c9:fa:7e:06:b4:d1:35: f3:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:24:B8:B8:43:AD:8E:6E:ED:C4:07:74:EE:C7:05:4C:11:18:09:84 X509v3 Authority Key Identifier: keyid:35:73:0B:B8:B2:62:3E:7F:65:A6:16:36:04:D1:C8:5F:91:06:28:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NXMLuLJiPn9lphY2BNHIX5EGKI8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/5c5138-aee4-482c-913c-3a4dff8e8ded/1/NXMLuLJiPn9lphY2BNHIX5EGKI8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/5c5138-aee4-482c-913c-3a4dff8e8ded/1/NXMLuLJiPn9lphY2BNHIX5EGKI8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:f1:89:a1:52:1c:39:c6:a8:dc:e4:fe:12:95:7e:8b:cc:d8: 0c:ad:a2:5c:e7:fb:4a:0e:1f:84:be:44:e8:a3:28:44:56:aa: 87:b6:7e:19:e8:16:08:e2:96:24:15:02:74:a4:d0:cd:71:87: 4f:bf:50:c1:27:e1:39:a9:19:dd:a9:da:89:d6:b8:8b:14:b5: 61:e8:67:d9:df:12:a7:7e:dc:3b:ec:02:d6:17:e6:92:f3:2c: 1d:2c:8f:03:26:b3:e9:cd:0f:55:67:c8:3b:2d:6c:ed:b1:6f: fb:07:2d:e7:6d:ef:97:3d:55:22:fe:e6:e6:93:da:9a:a3:e8: 27:73:f8:be:64:d8:e3:d4:66:6c:cb:3c:9f:e9:7b:5c:d3:c7: 4e:36:57:4d:d0:0f:3e:08:09:fc:9a:46:86:24:c6:3c:48:5d: 70:a9:01:80:a5:1d:e4:31:e4:d7:42:eb:cc:94:3f:55:6e:52: 4d:10:e1:61:34:82:ff:8d:8d:ca:d6:9c:cf:4a:af:d4:9d:2e: f1:d4:6e:fa:08:de:36:48:6d:f3:14:c9:a2:3c:05:aa:df:99: 20:2d:8c:06:da:7e:f9:cd:54:ca:9e:ee:98:20:95:62:85:70: 04:4a:38:25:9f:e6:6a:b7:a5:fc:30:c1:12:66:69:d7:7d:ec: 93:33:62:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsoUlUivecHbcs9myl+71PRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NzMwYmI4YjI2MjNlN2Y2NWE2MTYzNjA0ZDFjODVmOTEw NjI4OGYwHhcNMjUxMjE2MTgwMDQyWhcNMjUxMjE3MTgwMDQyWjAzMTEwLwYDVQQD EyhmMTI0YjhiODQzYWQ4ZTZlZWRjNDA3NzRlZWM3MDU0YzExMTgwOTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsk/3lg9zIr3cq2MFCoYdsgQ/mKhe y3nlH7JGMtf1v+9+b6+seEY0r4L5Cr9/vAkORo+5WSTdByVO6OUGQlnz95E7Lktm Iu+AYSbKbn5x8qg0x3fc9nsKXrwz0JkvxeoC1RZ7KJhhMIfbODN+5Igw4rjOnk/p 3AwKaKty7TDhxJrbvnyUVXSWX+TbJxiqHfItlD6laE2VfT9uqCemUhovi7M7jTgQ G+a5MqatNQFAPqHTOEorU9fiQzh0dtGmoPLf1xTvsV2EcDvJqssKnRogHacAlT4Z FMhHvJHJgxveiPc/eWVkHky5K3TkG2AOhINZ+xQSj5nzm8n6fga00TXztwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPEkuLhDrY5u7cQHdO7HBUwRGAmEMB8GA1UdIwQY MBaAFDVzC7iyYj5/ZaYWNgTRyF+RBiiPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlhNTHVMSmlQbjlscGhZMkJOSElYNUVHS0k4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC81YzUxMzgtYWVlNC00ODJjLTkxM2Mt M2E0ZGZmOGU4ZGVkLzEvTlhNTHVMSmlQbjlscGhZMkJOSElYNUVHS0k4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC81YzUxMzgtYWVlNC00ODJjLTkxM2MtM2E0ZGZmOGU4ZGVk LzEvTlhNTHVMSmlQbjlscGhZMkJOSElYNUVHS0k4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJfGJoVIc Ocao3OT+EpV+i8zYDK2iXOf7Sg4fhL5E6KMoRFaqh7Z+GegWCOKWJBUCdKTQzXGH T79QwSfhOakZ3anaida4ixS1Yehn2d8Sp37cO+wC1hfmkvMsHSyPAyaz6c0PVWfI Oy1s7bFv+wct523vlz1VIv7m5pPamqPoJ3P4vmTY49RmbMs8n+l7XNPHTjZXTdAP PggJ/JpGhiTGPEhdcKkBgKUd5DHk10LrzJQ/VW5STRDhYTSC/42Nytacz0qv1J0u 8dRu+gjeNkht8xTJojwFqt+ZIC2MBtp++c1Uyp7umCCVYoVwBEo4JZ/marel/DDB EmZp133skzNi8w== -----END CERTIFICATE-----Generated at Tue Dec 16 22:30:20 2025 by rpki-client