This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.mft File: nl1ITra0tWiaVEzwsTt--TJFfvE.mft (raw, json) Hash identifier: RdsR33zLGgJyPH6aabKgbfa/si3xwjB2EPyrfGJJO2U= Subject key identifier: 62:68:0D:32:8F:9B:B2:81:D3:86:06:2C:A4:FC:C3:68:6E:4E:3E:CF Authority key identifier: 9E:5D:48:4E:B6:B4:B5:68:9A:54:4C:F0:B1:3B:7E:F9:32:45:7E:F1 Certificate issuer: /CN=9e5d484eb6b4b5689a544cf0b13b7ef932457ef1 Certificate serial: 019B3B6BEA11F95CAF94AC9BE7804ECE2890 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nl1ITra0tWiaVEzwsTt--TJFfvE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.mft Manifest number: 163D Signing time: Sat 20 Dec 2025 11:01:26 +0000 Manifest this update: Sat 20 Dec 2025 11:01:26 +0000 Manifest next update: Sun 21 Dec 2025 11:01:26 +0000 Files and hashes: 1: nl1ITra0tWiaVEzwsTt--TJFfvE.crl (hash: J2FoGWTTXFu3VT2tLWJ+A0bUcwYLOw5w6E9hN4eQ2qY=) 2: z9Zyukoi2uOHQdEe-vCyq46DaFo.roa (hash: aTR5i5ZEuCcMlVNNZ8y9Ak4ulLNXmEOMB0JCISwIQQM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.mft rsync://rpki.ripe.net/repository/DEFAULT/nl1ITra0tWiaVEzwsTt--TJFfvE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:ea:11:f9:5c:af:94:ac:9b:e7:80:4e:ce:28:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e5d484eb6b4b5689a544cf0b13b7ef932457ef1 Validity Not Before: Dec 20 11:01:26 2025 GMT Not After : Dec 21 11:01:26 2025 GMT Subject: CN=62680d328f9bb281d386062ca4fcc3686e4e3ecf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:03:61:63:dd:08:53:41:15:49:23:79:f3:d4: a0:fb:5e:f8:1f:f9:68:18:68:56:a8:44:62:a3:e2: 3b:60:a6:c3:d3:16:1c:16:29:d3:f8:c5:42:53:87: ec:92:0b:cc:df:8b:f6:2d:cc:5a:34:a4:52:e7:44: 74:aa:d6:38:0a:6f:a8:03:fb:4f:b0:1f:b5:7c:34: c5:32:ac:f8:bb:7f:d7:ea:5a:29:03:e6:47:c0:2f: 9f:34:ce:0f:57:28:67:8d:00:74:d3:a5:b1:79:d1: 0b:f6:ef:08:b2:df:39:c7:f7:ec:81:9e:f5:57:a5: 72:c2:60:88:43:b1:f1:1f:89:81:4d:57:18:20:c6: ab:64:f7:4e:04:1d:4f:8d:b7:08:94:3f:19:4e:59: 3f:80:66:7f:94:23:1b:38:8c:ed:e2:b7:18:b4:cf: 1f:cf:99:4d:62:bc:88:17:60:58:8f:56:c4:e6:0e: 7b:2e:fb:f7:d0:26:73:70:e4:64:46:c4:46:c7:84: f1:a3:3d:c2:50:a7:28:87:47:0b:90:8d:09:6a:ba: 74:fb:10:8a:d9:d0:ff:5d:df:fa:f1:87:c2:91:03: 2f:1d:b9:9d:40:e6:d1:61:b4:c9:cf:17:48:b7:da: bf:d6:b8:01:7f:f8:72:f2:e2:38:22:22:cc:82:07: 62:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:68:0D:32:8F:9B:B2:81:D3:86:06:2C:A4:FC:C3:68:6E:4E:3E:CF X509v3 Authority Key Identifier: keyid:9E:5D:48:4E:B6:B4:B5:68:9A:54:4C:F0:B1:3B:7E:F9:32:45:7E:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nl1ITra0tWiaVEzwsTt--TJFfvE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:24:d4:45:24:76:74:62:7e:b4:fe:e6:c8:6f:38:2e:b5:99: e2:cf:91:dd:8c:af:bd:8c:d8:85:07:52:ba:91:a8:fe:12:3d: 7f:f7:fb:18:67:60:96:07:0e:5f:b6:ca:e3:b4:1b:ba:1f:9b: 47:31:a6:44:27:62:9e:fc:78:6a:fb:33:1d:e8:2f:5f:48:ea: ab:d7:b9:ad:a5:ac:5c:3c:56:55:a5:3f:77:b9:58:00:94:12: 60:4c:da:ca:c9:0a:9e:36:6d:68:67:fd:6f:39:d6:9f:34:47: 86:b0:f5:86:fb:4c:5e:90:95:1a:bd:3c:24:94:90:49:70:79: 47:55:80:14:31:f4:74:fa:90:71:b4:58:74:8d:45:79:2d:15: 91:97:6a:7b:37:33:d1:56:b4:0e:7e:f0:bd:f0:75:2a:7a:1c: f8:33:15:54:9d:17:6e:ed:8a:c7:dd:1d:f9:21:c7:cf:a5:1f: 3f:5f:ff:81:d0:8c:9f:ff:82:91:70:97:6b:82:da:79:8f:c0: b3:77:d5:a5:bb:3e:ee:5c:49:a8:17:99:bc:30:8f:4b:8c:e6: 3c:9c:93:b1:53:74:d1:3e:8b:be:03:8c:4c:d4:2e:9b:a1:94: 0b:bf:22:f2:09:95:fd:70:c9:39:65:a4:69:06:eb:0c:6f:f2: 72:67:7f:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7a+oR+VyvlKyb54BOziiQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNWQ0ODRlYjZiNGI1Njg5YTU0NGNmMGIxM2I3ZWY5MzI0 NTdlZjEwHhcNMjUxMjIwMTEwMTI2WhcNMjUxMjIxMTEwMTI2WjAzMTEwLwYDVQQD Eyg2MjY4MGQzMjhmOWJiMjgxZDM4NjA2MmNhNGZjYzM2ODZlNGUzZWNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgNhY90IU0EVSSN589Sg+174H/lo GGhWqERio+I7YKbD0xYcFinT+MVCU4fskgvM34v2LcxaNKRS50R0qtY4Cm+oA/tP sB+1fDTFMqz4u3/X6lopA+ZHwC+fNM4PVyhnjQB006WxedEL9u8Ist85x/fsgZ71 V6VywmCIQ7HxH4mBTVcYIMarZPdOBB1PjbcIlD8ZTlk/gGZ/lCMbOIzt4rcYtM8f z5lNYryIF2BYj1bE5g57Lvv30CZzcORkRsRGx4Txoz3CUKcoh0cLkI0Jarp0+xCK 2dD/Xd/68YfCkQMvHbmdQObRYbTJzxdIt9q/1rgBf/hy8uI4IiLMggdizQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGJoDTKPm7KB04YGLKT8w2huTj7PMB8GA1UdIwQY MBaAFJ5dSE62tLVomlRM8LE7fvkyRX7xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmwxSVRyYTB0V2lhVkV6d3NUdC0tVEpGZnZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9iNjc0YmItMDQ0Ny00ZDcyLWIzMDIt NmVjNDBhMzgxODE5LzEvbmwxSVRyYTB0V2lhVkV6d3NUdC0tVEpGZnZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9iNjc0YmItMDQ0Ny00ZDcyLWIzMDItNmVjNDBhMzgxODE5 LzEvbmwxSVRyYTB0V2lhVkV6d3NUdC0tVEpGZnZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcCTURSR2 dGJ+tP7myG84LrWZ4s+R3YyvvYzYhQdSupGo/hI9f/f7GGdglgcOX7bK47Qbuh+b RzGmRCdinvx4avszHegvX0jqq9e5raWsXDxWVaU/d7lYAJQSYEzayskKnjZtaGf9 bznWnzRHhrD1hvtMXpCVGr08JJSQSXB5R1WAFDH0dPqQcbRYdI1FeS0VkZdqezcz 0Va0Dn7wvfB1Knoc+DMVVJ0Xbu2Kx90d+SHHz6UfP1//gdCMn/+CkXCXa4LaeY/A s3fVpbs+7lxJqBeZvDCPS4zmPJyTsVN00T6LvgOMTNQum6GUC78i8gmV/XDJOWWk aQbrDG/ycmd/Uw== -----END CERTIFICATE-----Generated at Sat Dec 20 13:19:02 2025 by rpki-client