This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.mft File: nxuJ5urGEf1TMtcOuvUxH61lErg.mft (raw, json) Hash identifier: u45T/vc9+lqRqMg8vWQKfhN62b47O9uZMm5/le53r6Y= Subject key identifier: 3E:3C:DF:FD:A7:F8:DB:06:4C:8A:58:20:9F:42:72:A5:E9:9C:BF:6C Authority key identifier: 9F:1B:89:E6:EA:C6:11:FD:53:32:D7:0E:BA:F5:31:1F:AD:65:12:B8 Certificate issuer: /CN=9f1b89e6eac611fd5332d70ebaf5311fad6512b8 Certificate serial: 019B5A1AEC84683EB5160D5D854C0B2F3191 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nxuJ5urGEf1TMtcOuvUxH61lErg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.mft Manifest number: 10C5 Signing time: Fri 26 Dec 2025 10:01:12 +0000 Manifest this update: Fri 26 Dec 2025 10:01:12 +0000 Manifest next update: Sat 27 Dec 2025 10:01:12 +0000 Files and hashes: 1: nxuJ5urGEf1TMtcOuvUxH61lErg.crl (hash: O/naYP6iyxRqQ1P9QTBPahNvbZi697b5xq2GPC/d0VA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.crl rsync://rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.mft rsync://rpki.ripe.net/repository/DEFAULT/nxuJ5urGEf1TMtcOuvUxH61lErg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 10:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:ec:84:68:3e:b5:16:0d:5d:85:4c:0b:2f:31:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f1b89e6eac611fd5332d70ebaf5311fad6512b8 Validity Not Before: Dec 26 10:01:12 2025 GMT Not After : Dec 27 10:01:12 2025 GMT Subject: CN=3e3cdffda7f8db064c8a58209f4272a5e99cbf6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:3c:5a:1b:18:cc:9b:b4:b8:19:d4:94:8d:6e: a2:0a:85:f9:05:6e:72:c2:b1:7d:a4:08:a2:1c:e5: 64:c9:2b:88:fb:f2:a7:63:1e:8c:ba:db:3a:a1:b4: 7e:8c:13:ce:b0:27:1c:f3:82:a1:3d:12:d1:41:c5: 6e:6c:0d:90:af:29:95:34:c6:a9:ad:0a:c1:cc:56: a8:07:3f:28:cf:b4:0a:03:4f:f6:9b:df:a2:01:f8: 48:72:89:44:fa:67:64:ce:0d:62:b8:bd:43:34:7e: 82:f7:94:59:54:d7:a7:ac:be:ae:86:3f:d9:b0:66: e0:d1:67:0e:97:b6:c0:19:61:18:85:1c:50:ac:84: 21:6e:e9:a4:48:cb:e4:48:5a:88:2d:e7:99:47:36: 4f:33:b4:08:b6:9a:10:48:77:94:c1:24:99:67:01: 55:34:dc:4c:06:fc:1a:33:80:71:c3:6b:02:94:b7: 8f:0d:05:4c:35:ec:80:2e:74:34:15:cd:93:21:15: d2:e0:f1:26:ea:21:d5:50:fc:30:7a:21:c8:80:ca: c8:7b:36:03:b4:9e:29:cb:91:43:d4:c6:d1:ae:f1: 66:01:97:f2:81:30:cb:0e:b1:4a:b7:27:a7:73:98: b4:ca:0a:68:52:de:4d:0e:58:42:8e:55:b2:b1:d2: 3c:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:3C:DF:FD:A7:F8:DB:06:4C:8A:58:20:9F:42:72:A5:E9:9C:BF:6C X509v3 Authority Key Identifier: keyid:9F:1B:89:E6:EA:C6:11:FD:53:32:D7:0E:BA:F5:31:1F:AD:65:12:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nxuJ5urGEf1TMtcOuvUxH61lErg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:73:d3:1f:2f:ca:fe:37:e8:4a:39:ce:b4:2c:08:9e:7e:f4: 5d:e2:27:8b:08:b3:05:af:b3:03:de:ad:30:e0:4a:27:fe:b1: 3c:f9:44:32:c1:0d:ea:1a:ce:e2:d6:ed:5c:71:c6:5e:05:e3: 67:7d:ef:d6:dd:fc:89:18:6f:07:41:3f:bb:eb:53:da:33:6f: 1e:4b:a7:58:8b:d8:62:6e:63:16:f1:3c:9f:d1:7c:64:10:16: 29:d9:31:0e:bd:75:e1:c6:3d:a1:5f:82:fa:e8:52:72:75:51: 70:b6:e2:57:7a:49:1d:b6:3a:b1:df:44:51:4f:9d:91:f7:96: 00:7b:11:c8:7c:9e:6e:7c:4a:b7:14:b1:c6:f1:31:0d:2d:6c: dc:d8:6c:12:82:62:04:c7:15:33:19:4c:59:cb:2c:bb:16:70: 91:35:00:6a:66:fc:63:4b:87:64:cc:fe:e0:39:ce:78:24:ab: a4:5d:87:85:aa:23:b8:f1:fa:22:56:2e:c7:68:74:32:bf:4b: 25:fe:d1:82:64:a8:34:c9:93:76:32:54:58:83:92:87:9f:bc: 7d:6e:92:d7:99:d8:26:f7:ad:fa:83:54:2c:f0:0c:74:5b:91: 74:17:fb:9f:2b:9d:92:e4:27:bc:25:d8:88:08:31:f9:25:02: 8f:4c:97:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGuyEaD61Fg1dhUwLLzGRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmMWI4OWU2ZWFjNjExZmQ1MzMyZDcwZWJhZjUzMTFmYWQ2 NTEyYjgwHhcNMjUxMjI2MTAwMTEyWhcNMjUxMjI3MTAwMTEyWjAzMTEwLwYDVQQD EygzZTNjZGZmZGE3ZjhkYjA2NGM4YTU4MjA5ZjQyNzJhNWU5OWNiZjZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzxaGxjMm7S4GdSUjW6iCoX5BW5y wrF9pAiiHOVkySuI+/KnYx6Muts6obR+jBPOsCcc84KhPRLRQcVubA2QrymVNMap rQrBzFaoBz8oz7QKA0/2m9+iAfhIcolE+mdkzg1iuL1DNH6C95RZVNenrL6uhj/Z sGbg0WcOl7bAGWEYhRxQrIQhbumkSMvkSFqILeeZRzZPM7QItpoQSHeUwSSZZwFV NNxMBvwaM4Bxw2sClLePDQVMNeyALnQ0Fc2TIRXS4PEm6iHVUPwweiHIgMrIezYD tJ4py5FD1MbRrvFmAZfygTDLDrFKtyenc5i0ygpoUt5NDlhCjlWysdI8RwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD483/2n+NsGTIpYIJ9CcqXpnL9sMB8GA1UdIwQY MBaAFJ8biebqxhH9UzLXDrr1MR+tZRK4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnh1SjV1ckdFZjFUTXRjT3V2VXhINjFsRXJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9hMTg0MWUtMDEwNi00N2RlLTkyM2It NzQ0ZmIyMWI1NTk4LzEvbnh1SjV1ckdFZjFUTXRjT3V2VXhINjFsRXJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9hMTg0MWUtMDEwNi00N2RlLTkyM2ItNzQ0ZmIyMWI1NTk4 LzEvbnh1SjV1ckdFZjFUTXRjT3V2VXhINjFsRXJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdXPTHy/K /jfoSjnOtCwInn70XeIniwizBa+zA96tMOBKJ/6xPPlEMsEN6hrO4tbtXHHGXgXj Z33v1t38iRhvB0E/u+tT2jNvHkunWIvYYm5jFvE8n9F8ZBAWKdkxDr114cY9oV+C +uhScnVRcLbiV3pJHbY6sd9EUU+dkfeWAHsRyHyebnxKtxSxxvExDS1s3NhsEoJi BMcVMxlMWcssuxZwkTUAamb8Y0uHZMz+4DnOeCSrpF2HhaojuPH6IlYux2h0Mr9L Jf7RgmSoNMmTdjJUWIOSh5+8fW6S15nYJvet+oNULPAMdFuRdBf7nyudkuQnvCXY iAgx+SUCj0yXZg== -----END CERTIFICATE-----Generated at Fri Dec 26 17:44:39 2025 by rpki-client