This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.mft File: Nx-4XU-AjLFgeivk9KeYyj6tOBA.mft (raw, json) Hash identifier: yN+3PMcYBRCeFeT9OvpyksJYWRLTu+267IGGvecPEUE= Subject key identifier: 1C:35:C8:75:64:58:38:6C:D3:16:DD:21:A0:CD:20:E3:56:EC:55:75 Authority key identifier: 37:1F:B8:5D:4F:80:8C:B1:60:7A:2B:E4:F4:A7:98:CA:3E:AD:38:10 Certificate issuer: /CN=371fb85d4f808cb1607a2be4f4a798ca3ead3810 Certificate serial: 019B2FD57E3632C72104CE93F4A314E06E60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nx-4XU-AjLFgeivk9KeYyj6tOBA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.mft Manifest number: 1783 Signing time: Thu 18 Dec 2025 05:01:19 +0000 Manifest this update: Thu 18 Dec 2025 05:01:19 +0000 Manifest next update: Fri 19 Dec 2025 05:01:19 +0000 Files and hashes: 1: Nx-4XU-AjLFgeivk9KeYyj6tOBA.crl (hash: K+oZigrykF9pdtfR2mH5+IADTTAa6Kyu5l3sKqwzBVQ=) 2: n5KP5ufURfzYm-dc-9TpGgegI9M.roa (hash: BV7R38C05Kbtl7OcfTA9iXDfsj6OteeTUI52xIrldQE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.mft rsync://rpki.ripe.net/repository/DEFAULT/Nx-4XU-AjLFgeivk9KeYyj6tOBA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:d5:7e:36:32:c7:21:04:ce:93:f4:a3:14:e0:6e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=371fb85d4f808cb1607a2be4f4a798ca3ead3810 Validity Not Before: Dec 18 05:01:19 2025 GMT Not After : Dec 19 05:01:19 2025 GMT Subject: CN=1c35c8756458386cd316dd21a0cd20e356ec5575 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:38:e9:49:c9:cc:28:7e:c2:04:61:a9:78:55: 82:9f:4c:2f:f6:29:2c:83:9b:46:3f:f2:d1:70:14: b2:f5:44:87:9a:20:5f:4d:c5:9a:0a:91:77:52:bb: 48:50:6e:11:ac:cc:cf:67:21:df:58:a5:a3:e1:36: 60:21:a8:d2:37:0f:e6:18:21:68:91:75:e0:de:c5: d1:0c:07:46:04:fc:cc:47:06:23:2a:7b:2f:ed:26: ee:5b:ee:b2:bf:24:77:89:5c:05:74:62:ac:e5:e7: 02:07:fc:36:93:51:c4:d2:71:66:98:f9:40:dc:fe: 09:42:08:c6:1e:3b:d3:61:a8:d2:8b:bb:2d:97:c7: 91:d0:d1:e5:a8:92:04:a0:90:92:83:bc:a1:06:be: 4b:aa:ab:33:26:50:ec:11:ac:35:8f:bc:21:6c:78: 66:5b:6a:4a:5c:56:49:90:8d:d1:76:0f:15:e9:b4: b2:7a:16:7a:a2:a9:ff:e1:eb:c5:e0:ac:70:23:00: ba:49:73:c1:73:6a:01:d3:9e:17:c6:e7:c0:c6:81: b3:79:bb:52:72:61:03:54:74:29:87:33:3d:16:0e: 9e:a4:da:36:69:92:26:22:ad:31:8b:9e:a9:25:60: 6e:17:d8:89:2f:ae:55:f2:85:67:f9:c5:82:4b:6f: d8:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:35:C8:75:64:58:38:6C:D3:16:DD:21:A0:CD:20:E3:56:EC:55:75 X509v3 Authority Key Identifier: keyid:37:1F:B8:5D:4F:80:8C:B1:60:7A:2B:E4:F4:A7:98:CA:3E:AD:38:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nx-4XU-AjLFgeivk9KeYyj6tOBA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:4e:5a:cd:bb:a5:29:4c:55:aa:5d:90:73:56:a8:40:7f:13: 0c:10:39:ec:7c:90:17:92:4c:28:66:36:ca:6e:22:a9:5e:f7: d8:a5:21:1a:97:6a:bf:93:ca:7e:fb:67:c1:87:85:44:9f:36: 3e:e9:20:0c:8d:7d:d2:b1:68:6a:f9:82:e8:71:8f:30:61:25: 06:8e:d0:91:b9:69:54:65:2a:21:34:44:97:0d:e0:20:13:b8: bf:57:12:ee:3b:b4:ac:71:a5:86:ed:9c:8a:82:73:26:14:b4: 5d:0b:06:9a:b4:18:e5:2a:71:c4:a2:25:81:1e:b0:fb:ad:14: 28:e0:df:64:b4:c9:24:f2:b3:89:40:6e:72:98:32:06:2e:22: e8:c6:16:5b:fe:d8:07:b8:ab:55:07:54:a4:bd:4a:8e:22:51: a3:ea:45:b3:05:ad:11:85:10:41:40:99:02:3f:f4:25:06:08: 2c:9a:7a:af:67:f0:21:ce:f7:fd:39:f9:7c:9a:f9:06:42:7c: 96:c4:0d:98:0a:58:de:e0:f5:16:64:e4:41:38:73:a2:b7:87: e7:c5:f5:c3:bf:ca:f5:ff:76:21:53:70:20:82:2e:62:18:78: 04:e5:a0:b4:06:dd:2f:23:ae:7a:13:ac:66:9a:e8:b6:a8:9b: e5:43:9e:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsv1X42MschBM6T9KMU4G5gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3MWZiODVkNGY4MDhjYjE2MDdhMmJlNGY0YTc5OGNhM2Vh ZDM4MTAwHhcNMjUxMjE4MDUwMTE5WhcNMjUxMjE5MDUwMTE5WjAzMTEwLwYDVQQD EygxYzM1Yzg3NTY0NTgzODZjZDMxNmRkMjFhMGNkMjBlMzU2ZWM1NTc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTjpScnMKH7CBGGpeFWCn0wv9iks g5tGP/LRcBSy9USHmiBfTcWaCpF3UrtIUG4RrMzPZyHfWKWj4TZgIajSNw/mGCFo kXXg3sXRDAdGBPzMRwYjKnsv7SbuW+6yvyR3iVwFdGKs5ecCB/w2k1HE0nFmmPlA 3P4JQgjGHjvTYajSi7stl8eR0NHlqJIEoJCSg7yhBr5LqqszJlDsEaw1j7whbHhm W2pKXFZJkI3Rdg8V6bSyehZ6oqn/4evF4KxwIwC6SXPBc2oB054XxufAxoGzebtS cmEDVHQphzM9Fg6epNo2aZImIq0xi56pJWBuF9iJL65V8oVn+cWCS2/Y9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBw1yHVkWDhs0xbdIaDNIONW7FV1MB8GA1UdIwQY MBaAFDcfuF1PgIyxYHor5PSnmMo+rTgQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTngtNFhVLUFqTEZnZWl2azlLZVl5ajZ0T0JBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9jNWE4NDgtMjYwZC00YWQwLWFlZjMt ZDdiMmM5MzQ0MmQzLzEvTngtNFhVLUFqTEZnZWl2azlLZVl5ajZ0T0JBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC9jNWE4NDgtMjYwZC00YWQwLWFlZjMtZDdiMmM5MzQ0MmQz LzEvTngtNFhVLUFqTEZnZWl2azlLZVl5ajZ0T0JBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQk5azbul KUxVql2Qc1aoQH8TDBA57HyQF5JMKGY2ym4iqV732KUhGpdqv5PKfvtnwYeFRJ82 PukgDI190rFoavmC6HGPMGElBo7QkblpVGUqITRElw3gIBO4v1cS7ju0rHGlhu2c ioJzJhS0XQsGmrQY5SpxxKIlgR6w+60UKODfZLTJJPKziUBucpgyBi4i6MYWW/7Y B7irVQdUpL1KjiJRo+pFswWtEYUQQUCZAj/0JQYILJp6r2fwIc73/Tn5fJr5BkJ8 lsQNmApY3uD1FmTkQThzoreH58X1w7/K9f92IVNwIIIuYhh4BOWgtAbdLyOuehOs Zprotqib5UOe2g== -----END CERTIFICATE-----Generated at Thu Dec 18 14:04:25 2025 by rpki-client