This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/022af5-862c-428e-bee8-28a4681c37d6/1/Nia55ERl8L1xPAoeBQED05EdzWc.mft File: Nia55ERl8L1xPAoeBQED05EdzWc.mft (raw, json) Hash identifier: XbxSYtwk1P9CFqx8TzysbuFl3aP2KbcSPE5xTxTSS3E= Subject key identifier: B1:7E:EF:C6:39:54:38:62:FE:4A:2B:55:06:51:B1:DE:CB:E0:13:74 Authority key identifier: 36:26:B9:E4:44:65:F0:BD:71:3C:0A:1E:05:01:03:D3:91:1D:CD:67 Certificate issuer: /CN=3626b9e44465f0bd713c0a1e050103d3911dcd67 Certificate serial: 019B51BC8B6540E619BFB4CC5AF974F4E7D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nia55ERl8L1xPAoeBQED05EdzWc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/022af5-862c-428e-bee8-28a4681c37d6/1/Nia55ERl8L1xPAoeBQED05EdzWc.mft Manifest number: 0D78 Signing time: Wed 24 Dec 2025 19:01:09 +0000 Manifest this update: Wed 24 Dec 2025 19:01:09 +0000 Manifest next update: Thu 25 Dec 2025 19:01:09 +0000 Files and hashes: 1: Nia55ERl8L1xPAoeBQED05EdzWc.crl (hash: rVgkfYmDNRhjumCqQ4H18BqBejlN4IBLQGd/vXtukZk=) 2: ijM-M3pW5i9OPaVJ9z7pdR0nkfo.roa (hash: BaCHQlpNW/709AUvEnmAV++DQu/RFZCpGAAySqc5kGo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/022af5-862c-428e-bee8-28a4681c37d6/1/Nia55ERl8L1xPAoeBQED05EdzWc.crl rsync://rpki.ripe.net/repository/DEFAULT/be/022af5-862c-428e-bee8-28a4681c37d6/1/Nia55ERl8L1xPAoeBQED05EdzWc.mft rsync://rpki.ripe.net/repository/DEFAULT/Nia55ERl8L1xPAoeBQED05EdzWc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:bc:8b:65:40:e6:19:bf:b4:cc:5a:f9:74:f4:e7:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3626b9e44465f0bd713c0a1e050103d3911dcd67 Validity Not Before: Dec 24 19:01:09 2025 GMT Not After : Dec 25 19:01:09 2025 GMT Subject: CN=b17eefc639543862fe4a2b550651b1decbe01374 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:2f:46:7e:32:dd:8d:81:06:95:f6:57:d8:e9: fd:e2:90:e5:22:e3:51:84:51:8c:37:a8:d8:98:c0: 29:5d:75:f0:6c:9c:0e:94:b6:62:f2:19:74:00:82: 6c:46:b9:01:5d:83:e8:c7:d5:c3:9b:3e:da:17:f0: 98:a1:6f:94:8a:74:1b:2a:aa:cb:9b:56:49:08:5c: 0a:06:49:c5:c7:1d:4b:33:16:4d:74:e3:19:cb:b8: 17:47:7c:b1:71:74:2e:e7:8b:41:90:21:b3:4d:c9: b3:51:27:b0:8a:5b:8c:ee:28:49:a6:b8:09:18:a7: 32:5e:f3:1c:fc:10:05:10:ae:db:14:2b:28:11:f8: 83:1e:6d:8c:3f:35:8d:29:07:ea:7a:65:2a:0e:0e: 55:c5:14:33:71:39:77:19:4a:da:e4:e0:c4:b8:43: 7e:52:e2:03:5f:2e:83:a4:1d:09:f8:a6:f6:8d:f3: de:59:7d:ff:b0:4a:82:46:0c:8f:b9:b9:e8:4d:cc: db:f7:97:3b:68:dc:0c:b2:bd:d3:82:1b:3f:d8:74: c7:08:8c:c7:f1:08:c9:7c:f2:e5:6b:9d:fc:5f:97: bb:cf:c7:e1:1a:29:a6:4b:ed:0e:96:26:46:7c:15: e3:f7:d0:e1:40:38:b0:d8:9a:9e:66:bb:4e:e6:fb: 0c:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:7E:EF:C6:39:54:38:62:FE:4A:2B:55:06:51:B1:DE:CB:E0:13:74 X509v3 Authority Key Identifier: keyid:36:26:B9:E4:44:65:F0:BD:71:3C:0A:1E:05:01:03:D3:91:1D:CD:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nia55ERl8L1xPAoeBQED05EdzWc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/022af5-862c-428e-bee8-28a4681c37d6/1/Nia55ERl8L1xPAoeBQED05EdzWc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/022af5-862c-428e-bee8-28a4681c37d6/1/Nia55ERl8L1xPAoeBQED05EdzWc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:4b:f1:e2:6a:21:a5:d5:1b:58:77:dc:05:4e:33:87:25:fc: ac:82:a6:ad:fb:e7:1b:2b:52:42:7f:a9:b7:d2:f8:1e:45:08: d5:96:e7:ba:74:f3:5a:b8:c5:c1:0b:bb:e0:eb:59:b8:8e:dc: 9c:45:19:e2:75:b9:b1:5f:25:e7:d3:d0:25:1d:f3:44:3a:26: b4:9d:10:98:c1:b0:9e:95:b1:5d:b5:68:83:ce:35:e2:52:6c: 07:f7:6d:08:67:62:21:90:66:f0:51:f5:3b:ef:5a:d3:8b:d9: c0:65:3c:a3:04:90:2b:cb:7f:73:1a:e8:03:f7:01:a7:ae:5b: 2f:0a:23:94:f4:bc:ee:68:92:42:68:c1:61:1f:f0:73:5f:bd: 03:27:83:ae:d2:97:16:a6:30:0a:b9:4c:e7:89:e9:ec:2b:44: eb:6e:51:7d:71:86:9d:43:00:57:ab:09:da:1c:20:00:cb:37: c2:13:44:d6:ae:ed:6b:03:72:55:bf:f0:a8:4d:47:e9:4e:d4: ba:23:00:8c:eb:7d:d2:47:4d:e0:5d:63:ff:44:4d:d9:72:9d: 5d:97:a5:70:ce:d7:6c:2e:7c:1d:9a:8b:48:ee:11:97:f0:60: 14:96:82:cb:1a:26:7c:45:8d:9a:80:fa:c2:88:5c:3b:77:d3: af:63:f8:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRvItlQOYZv7TMWvl09OfRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2MjZiOWU0NDQ2NWYwYmQ3MTNjMGExZTA1MDEwM2QzOTEx ZGNkNjcwHhcNMjUxMjI0MTkwMTA5WhcNMjUxMjI1MTkwMTA5WjAzMTEwLwYDVQQD EyhiMTdlZWZjNjM5NTQzODYyZmU0YTJiNTUwNjUxYjFkZWNiZTAxMzc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArC9GfjLdjYEGlfZX2On94pDlIuNR hFGMN6jYmMApXXXwbJwOlLZi8hl0AIJsRrkBXYPox9XDmz7aF/CYoW+UinQbKqrL m1ZJCFwKBknFxx1LMxZNdOMZy7gXR3yxcXQu54tBkCGzTcmzUSewiluM7ihJprgJ GKcyXvMc/BAFEK7bFCsoEfiDHm2MPzWNKQfqemUqDg5VxRQzcTl3GUra5ODEuEN+ UuIDXy6DpB0J+Kb2jfPeWX3/sEqCRgyPubnoTczb95c7aNwMsr3Tghs/2HTHCIzH 8QjJfPLla538X5e7z8fhGimmS+0OliZGfBXj99DhQDiw2JqeZrtO5vsMEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLF+78Y5VDhi/korVQZRsd7L4BN0MB8GA1UdIwQY MBaAFDYmueREZfC9cTwKHgUBA9ORHc1nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmlhNTVFUmw4TDF4UEFvZUJRRUQwNUVkeldjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8wMjJhZjUtODYyYy00MjhlLWJlZTgt MjhhNDY4MWMzN2Q2LzEvTmlhNTVFUmw4TDF4UEFvZUJRRUQwNUVkeldjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS8wMjJhZjUtODYyYy00MjhlLWJlZTgtMjhhNDY4MWMzN2Q2 LzEvTmlhNTVFUmw4TDF4UEFvZUJRRUQwNUVkeldjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWkvx4moh pdUbWHfcBU4zhyX8rIKmrfvnGytSQn+pt9L4HkUI1ZbnunTzWrjFwQu74OtZuI7c nEUZ4nW5sV8l59PQJR3zRDomtJ0QmMGwnpWxXbVog8414lJsB/dtCGdiIZBm8FH1 O+9a04vZwGU8owSQK8t/cxroA/cBp65bLwojlPS87miSQmjBYR/wc1+9AyeDrtKX FqYwCrlM54np7CtE625RfXGGnUMAV6sJ2hwgAMs3whNE1q7tawNyVb/wqE1H6U7U uiMAjOt90kdN4F1j/0RN2XKdXZelcM7XbC58HZqLSO4Rl/BgFJaCyxomfEWNmoD6 wohcO3fTr2P4Bw== -----END CERTIFICATE-----Generated at Thu Dec 25 04:35:57 2025 by rpki-client