This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.mft File: nl1ITra0tWiaVEzwsTt--TJFfvE.mft (raw, json) Hash identifier: iglaB+4gglOtoRN6nKJXomEi2qJn3/mc9Z3FJGd2wu8= Subject key identifier: 33:55:9A:12:31:F9:38:45:4A:D7:70:4C:2A:87:3C:7E:7F:C4:47:94 Authority key identifier: 9E:5D:48:4E:B6:B4:B5:68:9A:54:4C:F0:B1:3B:7E:F9:32:45:7E:F1 Certificate issuer: /CN=9e5d484eb6b4b5689a544cf0b13b7ef932457ef1 Certificate serial: 019B4136C71FD027932C5D90CE853D34FD04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nl1ITra0tWiaVEzwsTt--TJFfvE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.mft Manifest number: 1640 Signing time: Sun 21 Dec 2025 14:01:07 +0000 Manifest this update: Sun 21 Dec 2025 14:01:07 +0000 Manifest next update: Mon 22 Dec 2025 14:01:07 +0000 Files and hashes: 1: nl1ITra0tWiaVEzwsTt--TJFfvE.crl (hash: SVYJ/f/1C3IoOx65Rv3LzFCYApO3lNEJpWB3jV4NInM=) 2: z9Zyukoi2uOHQdEe-vCyq46DaFo.roa (hash: aTR5i5ZEuCcMlVNNZ8y9Ak4ulLNXmEOMB0JCISwIQQM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.mft rsync://rpki.ripe.net/repository/DEFAULT/nl1ITra0tWiaVEzwsTt--TJFfvE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:36:c7:1f:d0:27:93:2c:5d:90:ce:85:3d:34:fd:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e5d484eb6b4b5689a544cf0b13b7ef932457ef1 Validity Not Before: Dec 21 14:01:07 2025 GMT Not After : Dec 22 14:01:07 2025 GMT Subject: CN=33559a1231f938454ad7704c2a873c7e7fc44794 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f2:11:77:30:15:0b:e6:f2:3d:20:a1:be:7c: e3:03:77:95:1d:c1:cb:ed:a3:ab:66:df:c2:bd:72: 42:02:67:56:e2:9e:d6:f8:35:96:ea:e2:39:d0:98: e1:40:70:91:89:01:bb:f7:17:c8:3c:c2:c0:1e:f2: ed:28:cb:82:50:c5:86:9e:6a:ec:44:ea:5f:f5:19: 08:c4:88:e1:ef:5e:10:11:80:47:9d:e5:7c:7b:8c: 94:9e:20:98:26:a2:c9:c8:4c:b1:ab:d4:c4:7e:92: b0:57:26:c9:e0:74:92:e7:4a:ff:fb:e2:f2:01:1d: 53:cf:af:0d:58:ae:c8:e0:cc:d0:26:0a:f4:45:33: 72:38:54:f8:52:0c:65:65:b3:88:e6:af:18:cb:51: 3f:5c:c6:2b:c1:af:2c:b8:4b:61:a8:c0:d0:95:54: 33:f2:01:21:03:8f:0c:e6:33:91:23:cc:78:63:9b: d7:40:b8:d9:da:f3:5b:fd:e2:13:0a:00:a6:17:5e: 6c:32:4c:ae:6d:e5:7d:66:ee:75:57:2e:bb:db:e6: aa:4f:f8:31:08:23:0c:f1:17:6d:90:bb:b8:55:1d: 41:5e:6a:22:e7:98:1a:d4:7b:a1:5a:05:8d:b3:b8: f8:c9:0b:2e:96:af:6d:18:09:cd:fa:c4:6e:da:49: 87:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:55:9A:12:31:F9:38:45:4A:D7:70:4C:2A:87:3C:7E:7F:C4:47:94 X509v3 Authority Key Identifier: keyid:9E:5D:48:4E:B6:B4:B5:68:9A:54:4C:F0:B1:3B:7E:F9:32:45:7E:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nl1ITra0tWiaVEzwsTt--TJFfvE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:4f:0c:cf:18:a7:40:79:1a:04:18:9f:40:d5:d3:40:36:e4: 0b:32:df:e0:7e:0c:34:e2:22:84:94:8c:46:d4:d0:06:71:c0: bf:37:80:5d:22:f1:ae:d8:a0:45:ff:a2:0a:5b:59:bb:40:ef: 3e:cd:2b:a1:54:ef:67:c5:9c:b2:79:45:02:e6:31:11:8a:02: 41:5e:56:0f:4e:ae:fa:0e:47:7b:7a:db:80:9c:25:93:8e:91: 36:c7:45:73:f7:ea:fc:65:24:17:f4:5b:56:14:c8:77:c4:65: 2b:8b:6d:02:8d:90:fd:9b:ce:1c:ca:2a:86:bc:bc:49:23:56: 4b:50:e5:1b:9e:7f:f7:01:2f:d2:3f:b2:00:4c:67:ba:b9:68: 1c:32:d8:48:71:d8:99:41:db:cc:d6:e5:f1:61:3b:8f:4d:02: 31:22:8c:60:f1:9f:0d:b4:d8:4f:ea:5b:eb:82:fd:ae:e7:a1: 0a:22:d0:88:96:52:d2:de:ab:26:85:8a:b0:f5:ba:89:31:56: e7:44:46:86:aa:59:31:4e:73:f1:8b:59:ba:06:cf:d8:a0:54: 81:7b:20:f9:2c:34:d0:cd:2b:01:5d:c3:fd:a2:34:28:8e:66: f9:49:a4:86:6b:74:dd:f5:52:ca:88:31:5d:bc:f0:f8:8a:a2: 5d:60:49:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBNscf0CeTLF2QzoU9NP0EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNWQ0ODRlYjZiNGI1Njg5YTU0NGNmMGIxM2I3ZWY5MzI0 NTdlZjEwHhcNMjUxMjIxMTQwMTA3WhcNMjUxMjIyMTQwMTA3WjAzMTEwLwYDVQQD EygzMzU1OWExMjMxZjkzODQ1NGFkNzcwNGMyYTg3M2M3ZTdmYzQ0Nzk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPIRdzAVC+byPSChvnzjA3eVHcHL 7aOrZt/CvXJCAmdW4p7W+DWW6uI50JjhQHCRiQG79xfIPMLAHvLtKMuCUMWGnmrs ROpf9RkIxIjh714QEYBHneV8e4yUniCYJqLJyEyxq9TEfpKwVybJ4HSS50r/++Ly AR1Tz68NWK7I4MzQJgr0RTNyOFT4UgxlZbOI5q8Yy1E/XMYrwa8suEthqMDQlVQz 8gEhA48M5jORI8x4Y5vXQLjZ2vNb/eITCgCmF15sMkyubeV9Zu51Vy672+aqT/gx CCMM8RdtkLu4VR1BXmoi55ga1HuhWgWNs7j4yQsulq9tGAnN+sRu2kmH6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDNVmhIx+ThFStdwTCqHPH5/xEeUMB8GA1UdIwQY MBaAFJ5dSE62tLVomlRM8LE7fvkyRX7xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmwxSVRyYTB0V2lhVkV6d3NUdC0tVEpGZnZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9iNjc0YmItMDQ0Ny00ZDcyLWIzMDIt NmVjNDBhMzgxODE5LzEvbmwxSVRyYTB0V2lhVkV6d3NUdC0tVEpGZnZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9iNjc0YmItMDQ0Ny00ZDcyLWIzMDItNmVjNDBhMzgxODE5 LzEvbmwxSVRyYTB0V2lhVkV6d3NUdC0tVEpGZnZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR08Mzxin QHkaBBifQNXTQDbkCzLf4H4MNOIihJSMRtTQBnHAvzeAXSLxrtigRf+iCltZu0Dv Ps0roVTvZ8WcsnlFAuYxEYoCQV5WD06u+g5He3rbgJwlk46RNsdFc/fq/GUkF/Rb VhTId8RlK4ttAo2Q/ZvOHMoqhry8SSNWS1DlG55/9wEv0j+yAExnurloHDLYSHHY mUHbzNbl8WE7j00CMSKMYPGfDbTYT+pb64L9ruehCiLQiJZS0t6rJoWKsPW6iTFW 50RGhqpZMU5z8YtZugbP2KBUgXsg+Sw00M0rAV3D/aI0KI5m+Umkhmt03fVSyogx Xbzw+IqiXWBJLg== -----END CERTIFICATE-----Generated at Sun Dec 21 21:15:23 2025 by rpki-client