This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/115cd0-08dd-47ac-9848-cddcd1835516/1/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.mft File: Nfx0tXmMcFswvQ6vqY_9PVvUIrA.mft (raw, json) Hash identifier: Mh4M8BzCuPNwlC0xQJt2tWhnJE+K1iY1tH+bjb+wpxk= Subject key identifier: 5C:0E:E8:62:0A:AF:01:65:43:5F:32:3E:EE:E6:22:71:98:AC:A5:45 Authority key identifier: 35:FC:74:B5:79:8C:70:5B:30:BD:0E:AF:A9:8F:FD:3D:5B:D4:22:B0 Certificate issuer: /CN=35fc74b5798c705b30bd0eafa98ffd3d5bd422b0 Certificate serial: 019B711090E3172B5E894E01A8EA1FF96E53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/115cd0-08dd-47ac-9848-cddcd1835516/1/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.mft Manifest number: 056E Signing time: Tue 30 Dec 2025 21:01:09 +0000 Manifest this update: Tue 30 Dec 2025 21:01:09 +0000 Manifest next update: Wed 31 Dec 2025 21:01:09 +0000 Files and hashes: 1: Nfx0tXmMcFswvQ6vqY_9PVvUIrA.crl (hash: vonjjkHsNe0VU7Mefwn1Z5+dFGbomB9C5s5wfKU4jhI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/115cd0-08dd-47ac-9848-cddcd1835516/1/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/115cd0-08dd-47ac-9848-cddcd1835516/1/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.mft rsync://rpki.ripe.net/repository/DEFAULT/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 21:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:71:10:90:e3:17:2b:5e:89:4e:01:a8:ea:1f:f9:6e:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35fc74b5798c705b30bd0eafa98ffd3d5bd422b0 Validity Not Before: Dec 30 21:01:09 2025 GMT Not After : Dec 31 21:01:09 2025 GMT Subject: CN=5c0ee8620aaf0165435f323eeee6227198aca545 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:34:dd:a3:24:07:2a:34:0e:94:e3:b1:4a:d1: 29:f4:20:77:d7:87:f5:e2:8f:ad:2e:77:ae:dd:93: 40:4b:6f:1e:1e:9b:7d:73:17:ea:32:34:26:3b:71: ad:9b:f2:bf:07:e0:9c:f6:02:d8:42:b1:3f:40:52: 45:2a:d1:9d:d1:39:6f:48:34:a3:a6:b1:7b:ff:f6: f8:55:87:b2:37:fd:74:a0:c0:74:cd:89:8e:00:72: 75:47:53:fc:af:ed:1c:b6:f2:ab:03:1a:66:6f:5a: 9b:d1:55:50:a5:5e:a1:1e:e4:fe:e3:5e:5e:07:62: 1f:8b:37:0e:28:d9:c5:0d:8b:32:17:e7:56:a8:8c: c9:a3:00:cc:a4:25:39:7c:63:b9:d3:51:98:f6:74: f9:78:68:c1:33:22:c7:13:11:c1:43:e6:06:da:40: b0:39:73:6e:34:c4:7e:5d:85:1a:bf:80:ea:6d:e3: ee:ef:49:26:4f:16:71:7f:01:ab:ee:38:6c:39:09: 35:da:4d:6a:5e:2f:f3:d9:78:4f:87:8f:a0:39:b8: 30:ca:34:9a:36:20:ee:4b:d5:68:92:00:77:1a:0b: d7:b7:59:c6:a2:e4:0c:6d:91:1e:5d:c5:a5:b1:19: 3d:36:61:91:a8:43:af:e8:d8:5c:5e:17:45:43:86: b2:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:0E:E8:62:0A:AF:01:65:43:5F:32:3E:EE:E6:22:71:98:AC:A5:45 X509v3 Authority Key Identifier: keyid:35:FC:74:B5:79:8C:70:5B:30:BD:0E:AF:A9:8F:FD:3D:5B:D4:22:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/115cd0-08dd-47ac-9848-cddcd1835516/1/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/115cd0-08dd-47ac-9848-cddcd1835516/1/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:c2:a1:fe:65:62:94:9e:f5:7f:6f:2f:91:3c:9c:5f:c5:7b: 4a:c0:53:62:f5:ea:97:12:0a:8f:4c:22:c1:98:1b:0b:0b:33: de:cf:9b:ae:1f:91:4f:e9:b7:57:f5:9c:ff:5e:e1:6e:2c:00: 04:4a:cb:bc:ad:4b:19:1b:4d:87:ae:3b:80:4d:34:ab:b6:da: dd:f4:cf:1e:90:af:58:f7:f2:bf:87:e3:d3:fc:8d:2b:83:46: c3:ba:45:f0:46:2d:b6:94:6f:d1:83:89:5d:13:21:76:5d:60: f6:3a:fc:93:9f:ea:b3:46:bb:8c:32:1e:48:0d:f7:1a:99:e8: 4b:c0:5c:9b:38:29:a3:f7:f0:9e:91:a2:00:45:10:ac:6e:1a: d4:e9:cf:54:7b:8c:9e:02:d3:9f:6d:05:16:48:d1:79:63:ab: 00:9e:2e:f8:bf:65:7e:b8:3c:a9:5b:ef:f4:f6:be:06:c4:9c: 34:8a:bf:73:49:e1:49:70:69:0b:7c:90:75:1c:65:8b:0d:44: 9e:e2:38:c6:f3:54:e7:2e:ed:ea:68:35:f7:87:90:5f:a7:32: ca:cb:cf:4a:9a:65:04:fa:4b:3c:9c:ba:01:56:1f:16:b2:20: de:96:fc:11:58:bd:87:5a:8f:54:0e:d0:8e:da:6b:f7:96:e6: e9:8f:d3:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtxEJDjFyteiU4BqOof+W5TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1ZmM3NGI1Nzk4YzcwNWIzMGJkMGVhZmE5OGZmZDNkNWJk NDIyYjAwHhcNMjUxMjMwMjEwMTA5WhcNMjUxMjMxMjEwMTA5WjAzMTEwLwYDVQQD Eyg1YzBlZTg2MjBhYWYwMTY1NDM1ZjMyM2VlZWU2MjI3MTk4YWNhNTQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2TTdoyQHKjQOlOOxStEp9CB314f1 4o+tLneu3ZNAS28eHpt9cxfqMjQmO3Gtm/K/B+Cc9gLYQrE/QFJFKtGd0TlvSDSj prF7//b4VYeyN/10oMB0zYmOAHJ1R1P8r+0ctvKrAxpmb1qb0VVQpV6hHuT+415e B2IfizcOKNnFDYsyF+dWqIzJowDMpCU5fGO501GY9nT5eGjBMyLHExHBQ+YG2kCw OXNuNMR+XYUav4DqbePu70kmTxZxfwGr7jhsOQk12k1qXi/z2XhPh4+gObgwyjSa NiDuS9VokgB3GgvXt1nGouQMbZEeXcWlsRk9NmGRqEOv6NhcXhdFQ4ayvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFwO6GIKrwFlQ18yPu7mInGYrKVFMB8GA1UdIwQY MBaAFDX8dLV5jHBbML0Or6mP/T1b1CKwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmZ4MHRYbU1jRnN3dlE2dnFZXzlQVnZVSXJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8xMTVjZDAtMDhkZC00N2FjLTk4NDgt Y2RkY2QxODM1NTE2LzEvTmZ4MHRYbU1jRnN3dlE2dnFZXzlQVnZVSXJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi8xMTVjZDAtMDhkZC00N2FjLTk4NDgtY2RkY2QxODM1NTE2 LzEvTmZ4MHRYbU1jRnN3dlE2dnFZXzlQVnZVSXJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlcKh/mVi lJ71f28vkTycX8V7SsBTYvXqlxIKj0wiwZgbCwsz3s+brh+RT+m3V/Wc/17hbiwA BErLvK1LGRtNh647gE00q7ba3fTPHpCvWPfyv4fj0/yNK4NGw7pF8EYttpRv0YOJ XRMhdl1g9jr8k5/qs0a7jDIeSA33GpnoS8Bcmzgpo/fwnpGiAEUQrG4a1OnPVHuM ngLTn20FFkjReWOrAJ4u+L9lfrg8qVvv9Pa+BsScNIq/c0nhSXBpC3yQdRxliw1E nuI4xvNU5y7t6mg194eQX6cyysvPSpplBPpLPJy6AVYfFrIg3pb8EVi9h1qPVA7Q jtpr95bm6Y/TtQ== -----END CERTIFICATE-----Generated at Wed Dec 31 03:46:56 2025 by rpki-client