This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/f54f3a-6b8a-48c3-b2de-77a9c529777c/1/NxnxmwrdjQwod8i6f-CliTCbsUQ.mft File: NxnxmwrdjQwod8i6f-CliTCbsUQ.mft (raw, json) Hash identifier: kZc4BYNiG7cTvL5RsMqs//FHO6zKFdmCk0r6uXWhWd4= Subject key identifier: 91:8A:A2:0E:5A:16:AD:C2:86:B8:1A:12:3A:E8:6E:30:5E:C6:1B:6B Authority key identifier: 37:19:F1:9B:0A:DD:8D:0C:28:77:C8:BA:7F:E0:A5:89:30:9B:B1:44 Certificate issuer: /CN=3719f19b0add8d0c2877c8ba7fe0a589309bb144 Certificate serial: 019B5A1A565FA1F7B7AA10571BA84E8E04BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NxnxmwrdjQwod8i6f-CliTCbsUQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/f54f3a-6b8a-48c3-b2de-77a9c529777c/1/NxnxmwrdjQwod8i6f-CliTCbsUQ.mft Manifest number: D7 Signing time: Fri 26 Dec 2025 10:00:34 +0000 Manifest this update: Fri 26 Dec 2025 10:00:34 +0000 Manifest next update: Sat 27 Dec 2025 10:00:34 +0000 Files and hashes: 1: 4zImklvcYAVPCVi7B7vGd1c4iRU.roa (hash: nvTLIvIJofO2R9HrAaQpvAKjEbVKJcVlnQNjC2GDKUY=) 2: NxnxmwrdjQwod8i6f-CliTCbsUQ.crl (hash: PLkwJvkUV0gFenK/YBpUeoHqLPx1J5geLvZhMo0k3u4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/f54f3a-6b8a-48c3-b2de-77a9c529777c/1/NxnxmwrdjQwod8i6f-CliTCbsUQ.crl rsync://rpki.ripe.net/repository/DEFAULT/13/f54f3a-6b8a-48c3-b2de-77a9c529777c/1/NxnxmwrdjQwod8i6f-CliTCbsUQ.mft rsync://rpki.ripe.net/repository/DEFAULT/NxnxmwrdjQwod8i6f-CliTCbsUQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:56:5f:a1:f7:b7:aa:10:57:1b:a8:4e:8e:04:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3719f19b0add8d0c2877c8ba7fe0a589309bb144 Validity Not Before: Dec 26 10:00:34 2025 GMT Not After : Dec 27 10:00:34 2025 GMT Subject: CN=918aa20e5a16adc286b81a123ae86e305ec61b6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:28:24:a3:1a:36:ab:78:58:37:73:2b:8c:ce: 1c:ee:e5:3d:87:54:ed:14:ce:77:12:5d:93:a6:d8: 06:33:57:ae:75:f9:42:a9:0d:0b:39:f1:ac:df:f5: 51:c1:c9:60:e0:80:68:15:f6:f2:f1:a2:01:a0:6e: a9:21:d6:2d:66:f4:8f:15:7d:37:17:72:4a:3d:d6: e0:2f:97:f4:11:df:ab:45:81:06:8c:a7:27:e0:b2: 4f:31:7a:88:6b:85:a7:29:a1:08:e9:b9:e2:d6:2c: ab:a4:5d:bf:2a:6a:b4:b1:b9:a4:98:ba:4a:a0:c2: 3c:2f:9d:e6:81:80:1d:a5:ff:c1:cc:91:bb:82:b9: 34:93:7e:66:43:fe:7c:0c:2e:55:8a:c5:89:17:32: 44:ea:83:09:75:85:9d:9c:e9:33:ad:f2:47:8c:56: 50:ec:fd:30:7a:2d:a0:3c:00:10:40:c7:01:04:12: f7:22:ab:de:13:22:26:e4:03:a0:e3:dd:5c:14:e2: 2a:d4:f7:d0:45:ce:09:91:24:8a:9b:4a:6d:b5:0a: c6:b0:e9:3d:f3:68:f5:09:cc:47:07:16:fd:97:dc: 5e:36:b0:39:81:3d:ca:ec:e0:54:13:99:51:9b:58: 89:a6:c6:fa:cf:1e:d7:7d:94:71:62:ae:a6:96:5c: 6f:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:8A:A2:0E:5A:16:AD:C2:86:B8:1A:12:3A:E8:6E:30:5E:C6:1B:6B X509v3 Authority Key Identifier: keyid:37:19:F1:9B:0A:DD:8D:0C:28:77:C8:BA:7F:E0:A5:89:30:9B:B1:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NxnxmwrdjQwod8i6f-CliTCbsUQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f54f3a-6b8a-48c3-b2de-77a9c529777c/1/NxnxmwrdjQwod8i6f-CliTCbsUQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f54f3a-6b8a-48c3-b2de-77a9c529777c/1/NxnxmwrdjQwod8i6f-CliTCbsUQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:37:b5:d7:d0:31:76:58:40:77:56:a4:e5:5d:b5:4a:bc:03: aa:36:9f:82:5b:80:cf:9f:bc:c5:61:9e:cd:2b:17:56:87:ed: db:7f:3e:9a:fd:86:4e:3c:c9:d5:09:64:53:f7:c0:94:c9:87: 4c:25:d4:b5:a8:e0:14:ea:a7:b6:e9:cd:d3:bd:6f:96:79:4b: cf:5c:6d:78:45:ad:7e:39:c8:8e:69:1e:2a:5a:5b:86:51:28: fa:2a:9c:0f:0b:39:62:b6:b9:75:7d:5a:f2:9d:c7:aa:49:6f: 3f:11:b6:df:6f:30:b7:00:4a:f5:04:95:7e:8a:71:38:bc:51: fd:5e:e2:90:3c:11:77:6e:d5:3f:10:a1:84:c1:eb:1d:03:86: dc:db:3f:27:62:d8:93:65:4f:5c:1c:d5:29:71:4e:e6:94:dd: 43:da:98:c0:d7:48:fc:ed:4c:4a:83:22:54:7b:4e:99:d5:09: b9:5e:3a:7d:1c:3f:11:b8:0d:f9:6b:ff:5f:f9:05:8d:83:b1: 53:bf:e4:f3:73:69:86:47:ed:d2:53:d0:51:6d:28:30:7a:e9: 2c:bf:e4:43:a1:5d:e7:2f:ed:4b:02:73:11:f3:3a:2f:c1:b1: 18:ed:99:88:d7:d7:28:fc:47:50:b0:3f:e6:c7:79:f7:a3:eb: 4e:de:6b:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGlZfofe3qhBXG6hOjgS9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3MTlmMTliMGFkZDhkMGMyODc3YzhiYTdmZTBhNTg5MzA5 YmIxNDQwHhcNMjUxMjI2MTAwMDM0WhcNMjUxMjI3MTAwMDM0WjAzMTEwLwYDVQQD Eyg5MThhYTIwZTVhMTZhZGMyODZiODFhMTIzYWU4NmUzMDVlYzYxYjZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhigkoxo2q3hYN3MrjM4c7uU9h1Tt FM53El2TptgGM1eudflCqQ0LOfGs3/VRwclg4IBoFfby8aIBoG6pIdYtZvSPFX03 F3JKPdbgL5f0Ed+rRYEGjKcn4LJPMXqIa4WnKaEI6bni1iyrpF2/Kmq0sbmkmLpK oMI8L53mgYAdpf/BzJG7grk0k35mQ/58DC5VisWJFzJE6oMJdYWdnOkzrfJHjFZQ 7P0wei2gPAAQQMcBBBL3IqveEyIm5AOg491cFOIq1PfQRc4JkSSKm0pttQrGsOk9 82j1CcxHBxb9l9xeNrA5gT3K7OBUE5lRm1iJpsb6zx7XfZRxYq6mllxvRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJGKog5aFq3ChrgaEjrobjBexhtrMB8GA1UdIwQY MBaAFDcZ8ZsK3Y0MKHfIun/gpYkwm7FEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnhueG13cmRqUXdvZDhpNmYtQ2xpVENic1VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9mNTRmM2EtNmI4YS00OGMzLWIyZGUt NzdhOWM1Mjk3NzdjLzEvTnhueG13cmRqUXdvZDhpNmYtQ2xpVENic1VRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9mNTRmM2EtNmI4YS00OGMzLWIyZGUtNzdhOWM1Mjk3Nzdj LzEvTnhueG13cmRqUXdvZDhpNmYtQ2xpVENic1VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUDe119Ax dlhAd1ak5V21SrwDqjafgluAz5+8xWGezSsXVoft238+mv2GTjzJ1QlkU/fAlMmH TCXUtajgFOqntunN071vlnlLz1xteEWtfjnIjmkeKlpbhlEo+iqcDws5Yra5dX1a 8p3HqklvPxG2328wtwBK9QSVfopxOLxR/V7ikDwRd27VPxChhMHrHQOG3Ns/J2LY k2VPXBzVKXFO5pTdQ9qYwNdI/O1MSoMiVHtOmdUJuV46fRw/EbgN+Wv/X/kFjYOx U7/k83Nphkft0lPQUW0oMHrpLL/kQ6Fd5y/tSwJzEfM6L8GxGO2ZiNfXKPxHULA/ 5sd596PrTt5rGw== -----END CERTIFICATE-----Generated at Fri Dec 26 16:06:20 2025 by rpki-client