This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/6bfe53-80c3-4a35-9ecb-d241f9ec5041/1/nXZQ5FO5j29N0zNjOv-ruiwMj4o.mft File: nXZQ5FO5j29N0zNjOv-ruiwMj4o.mft (raw, json) Hash identifier: GREUnDQMOQMvcY7RnI8mpNk8eUfFhfEavAFBMKOXYfE= Subject key identifier: 09:05:31:04:BD:83:F3:E8:D1:52:08:CE:63:DB:0D:0C:8B:6F:4B:A5 Authority key identifier: 9D:76:50:E4:53:B9:8F:6F:4D:D3:33:63:3A:FF:AB:BA:2C:0C:8F:8A Certificate issuer: /CN=9d7650e453b98f6f4dd333633affabba2c0c8f8a Certificate serial: 019B59771EBE65EEBDBFD54D271257CE9F2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nXZQ5FO5j29N0zNjOv-ruiwMj4o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/6bfe53-80c3-4a35-9ecb-d241f9ec5041/1/nXZQ5FO5j29N0zNjOv-ruiwMj4o.mft Manifest number: 0268 Signing time: Fri 26 Dec 2025 07:02:17 +0000 Manifest this update: Fri 26 Dec 2025 07:02:17 +0000 Manifest next update: Sat 27 Dec 2025 07:02:17 +0000 Files and hashes: 1: nXZQ5FO5j29N0zNjOv-ruiwMj4o.crl (hash: aIJAdWdQLRapOzXWgpBSFk6ob6GJshlQD5L/+QLVXLI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/6bfe53-80c3-4a35-9ecb-d241f9ec5041/1/nXZQ5FO5j29N0zNjOv-ruiwMj4o.crl rsync://rpki.ripe.net/repository/DEFAULT/88/6bfe53-80c3-4a35-9ecb-d241f9ec5041/1/nXZQ5FO5j29N0zNjOv-ruiwMj4o.mft rsync://rpki.ripe.net/repository/DEFAULT/nXZQ5FO5j29N0zNjOv-ruiwMj4o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:77:1e:be:65:ee:bd:bf:d5:4d:27:12:57:ce:9f:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d7650e453b98f6f4dd333633affabba2c0c8f8a Validity Not Before: Dec 26 07:02:17 2025 GMT Not After : Dec 27 07:02:17 2025 GMT Subject: CN=09053104bd83f3e8d15208ce63db0d0c8b6f4ba5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2a:2a:0d:cb:97:b7:a3:11:e5:c2:6e:d0:36: ae:5d:77:60:39:16:89:86:3a:53:85:b5:27:8c:b8: 0c:95:bd:8b:59:37:ae:80:f8:85:5e:1b:ad:80:cd: 1c:df:ef:52:db:f8:3e:73:fe:34:04:ca:47:84:da: f6:15:a5:98:47:8b:51:1b:c2:ed:4b:5a:10:9d:de: 20:84:02:ea:4e:3f:29:0f:72:50:6e:91:13:9e:0b: ba:78:c3:28:2e:03:90:1d:b9:97:5d:cf:98:39:09: 53:f7:cf:4a:cf:03:62:f4:63:bb:b3:fb:39:8c:52: 78:f8:52:c4:eb:ea:f7:4e:33:ea:7e:92:ab:10:83: cc:07:49:e1:58:43:2a:fc:82:95:c9:85:5c:66:9f: 24:82:4d:69:0c:dc:33:ab:44:dc:17:10:cc:c3:36: 42:fa:66:c0:a4:03:1a:6d:a6:a4:ec:7b:ed:d8:04: d0:8b:57:0f:44:23:8b:d3:31:84:49:5b:98:0a:fb: 79:c2:9d:ad:d3:48:16:81:e2:78:36:34:27:3f:30: 39:13:b4:aa:25:c7:15:70:1b:c5:82:c3:b7:c4:aa: aa:7d:fa:e7:72:79:13:6b:e1:05:27:de:84:b3:e8: 67:70:a8:17:53:b8:43:0b:13:6c:f1:36:ab:ce:a7: f0:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:05:31:04:BD:83:F3:E8:D1:52:08:CE:63:DB:0D:0C:8B:6F:4B:A5 X509v3 Authority Key Identifier: keyid:9D:76:50:E4:53:B9:8F:6F:4D:D3:33:63:3A:FF:AB:BA:2C:0C:8F:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nXZQ5FO5j29N0zNjOv-ruiwMj4o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/6bfe53-80c3-4a35-9ecb-d241f9ec5041/1/nXZQ5FO5j29N0zNjOv-ruiwMj4o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/6bfe53-80c3-4a35-9ecb-d241f9ec5041/1/nXZQ5FO5j29N0zNjOv-ruiwMj4o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:9e:8d:d1:34:ae:6f:5d:6f:3a:2b:30:42:75:83:15:5d:82: 9c:10:d8:93:63:ec:3a:82:81:81:ff:91:af:d5:29:1a:16:a0: f2:eb:90:0a:10:df:09:1a:52:59:9a:c7:12:be:8f:2b:97:83: 5d:62:76:87:be:40:02:c8:bd:bd:a0:4b:ce:88:6c:b8:85:0c: ec:ff:b8:d1:f7:8b:24:d8:59:4f:fa:50:bc:68:63:e9:03:74: 45:21:44:49:e9:41:37:7e:d8:e7:57:2e:7c:f3:0b:a1:72:98: 08:7e:68:d7:ca:26:10:05:d5:62:64:a3:30:33:e6:fd:7d:90: bd:5e:2f:be:60:bf:39:cd:f0:66:40:f2:03:5f:8c:bc:11:e6: 52:2b:f7:fe:86:a5:f2:6b:c2:9a:6b:b5:a1:b4:ff:dc:c3:1a: bf:08:4e:52:7d:9c:06:78:b4:ca:90:20:33:dc:19:bb:b5:09: 29:18:dd:cf:f5:29:08:04:33:2e:21:7d:27:92:00:ff:76:01: 50:cd:4c:60:84:0f:d6:cb:91:ac:78:cc:bb:85:47:9c:03:77: 25:35:5d:20:c9:d9:cf:8b:cc:69:4c:83:a9:d4:22:4b:83:2c: ed:22:56:a3:d7:79:1c:b7:75:61:70:f9:9d:25:3b:c3:40:09: 68:89:3c:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdx6+Ze69v9VNJxJXzp8rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkNzY1MGU0NTNiOThmNmY0ZGQzMzM2MzNhZmZhYmJhMmMw YzhmOGEwHhcNMjUxMjI2MDcwMjE3WhcNMjUxMjI3MDcwMjE3WjAzMTEwLwYDVQQD EygwOTA1MzEwNGJkODNmM2U4ZDE1MjA4Y2U2M2RiMGQwYzhiNmY0YmE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCoqDcuXt6MR5cJu0DauXXdgORaJ hjpThbUnjLgMlb2LWTeugPiFXhutgM0c3+9S2/g+c/40BMpHhNr2FaWYR4tRG8Lt S1oQnd4ghALqTj8pD3JQbpETngu6eMMoLgOQHbmXXc+YOQlT989KzwNi9GO7s/s5 jFJ4+FLE6+r3TjPqfpKrEIPMB0nhWEMq/IKVyYVcZp8kgk1pDNwzq0TcFxDMwzZC +mbApAMabaak7Hvt2ATQi1cPRCOL0zGESVuYCvt5wp2t00gWgeJ4NjQnPzA5E7Sq JccVcBvFgsO3xKqqffrncnkTa+EFJ96Es+hncKgXU7hDCxNs8Tarzqfw/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAkFMQS9g/Po0VIIzmPbDQyLb0ulMB8GA1UdIwQY MBaAFJ12UORTuY9vTdMzYzr/q7osDI+KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblhaUTVGTzVqMjlOMHpOak92LXJ1aXdNajRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC82YmZlNTMtODBjMy00YTM1LTllY2It ZDI0MWY5ZWM1MDQxLzEvblhaUTVGTzVqMjlOMHpOak92LXJ1aXdNajRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC82YmZlNTMtODBjMy00YTM1LTllY2ItZDI0MWY5ZWM1MDQx LzEvblhaUTVGTzVqMjlOMHpOak92LXJ1aXdNajRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkZ6N0TSu b11vOiswQnWDFV2CnBDYk2PsOoKBgf+Rr9UpGhag8uuQChDfCRpSWZrHEr6PK5eD XWJ2h75AAsi9vaBLzohsuIUM7P+40feLJNhZT/pQvGhj6QN0RSFESelBN37Y51cu fPMLoXKYCH5o18omEAXVYmSjMDPm/X2QvV4vvmC/Oc3wZkDyA1+MvBHmUiv3/oal 8mvCmmu1obT/3MMavwhOUn2cBni0ypAgM9wZu7UJKRjdz/UpCAQzLiF9J5IA/3YB UM1MYIQP1suRrHjMu4VHnAN3JTVdIMnZz4vMaUyDqdQiS4Ms7SJWo9d5HLd1YXD5 nSU7w0AJaIk8Ng== -----END CERTIFICATE-----Generated at Fri Dec 26 16:03:58 2025 by rpki-client