This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.mft File: nl1ITra0tWiaVEzwsTt--TJFfvE.mft (raw, json) Hash identifier: W2GUFAvlPFeo5/Avh7286JH93LOCLNQ/sLHMInaPw1U= Subject key identifier: AC:D2:E9:DD:1F:7E:89:82:E4:A1:78:20:EF:77:3C:21:09:22:63:D9 Authority key identifier: 9E:5D:48:4E:B6:B4:B5:68:9A:54:4C:F0:B1:3B:7E:F9:32:45:7E:F1 Certificate issuer: /CN=9e5d484eb6b4b5689a544cf0b13b7ef932457ef1 Certificate serial: 019B48F0BC68437AE1528D1E91388F45527D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nl1ITra0tWiaVEzwsTt--TJFfvE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.mft Manifest number: 1644 Signing time: Tue 23 Dec 2025 02:01:34 +0000 Manifest this update: Tue 23 Dec 2025 02:01:34 +0000 Manifest next update: Wed 24 Dec 2025 02:01:34 +0000 Files and hashes: 1: nl1ITra0tWiaVEzwsTt--TJFfvE.crl (hash: zSWeWeyMuHQ2gImnqL+IKxNfLkQ7x348uwwZ73UiW14=) 2: z9Zyukoi2uOHQdEe-vCyq46DaFo.roa (hash: aTR5i5ZEuCcMlVNNZ8y9Ak4ulLNXmEOMB0JCISwIQQM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.mft rsync://rpki.ripe.net/repository/DEFAULT/nl1ITra0tWiaVEzwsTt--TJFfvE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 02:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:f0:bc:68:43:7a:e1:52:8d:1e:91:38:8f:45:52:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e5d484eb6b4b5689a544cf0b13b7ef932457ef1 Validity Not Before: Dec 23 02:01:34 2025 GMT Not After : Dec 24 02:01:34 2025 GMT Subject: CN=acd2e9dd1f7e8982e4a17820ef773c21092263d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:87:c3:a9:29:6e:a8:32:fe:85:b8:2b:0d:e5: be:43:ee:8d:f5:96:d8:2d:b7:76:0b:21:29:6e:4a: 96:c7:d0:ab:32:57:a9:ba:3f:75:9e:f6:6a:46:10: 9e:8c:eb:96:4f:46:34:1b:b8:05:57:e5:84:24:eb: 18:3a:7b:d7:b1:e5:44:6e:13:12:e1:99:4e:c3:f7: 07:bb:36:cf:c1:42:92:7c:d4:fb:84:c7:dc:2c:bf: 98:1b:25:33:95:c3:97:fc:ad:18:3f:69:01:31:9d: 1d:1e:cd:01:9d:bf:30:9a:ed:e2:94:51:4c:f5:3a: 66:b7:85:90:a0:b8:19:d0:02:d6:34:1c:d6:b4:30: ab:75:c6:ea:a8:cd:35:20:85:53:f0:72:5a:05:31: ef:5e:51:73:61:68:72:e7:bf:26:1a:fb:38:24:e5: 6c:5d:ee:45:46:d8:ca:77:49:97:8d:ac:b2:73:65: 4d:80:72:9c:bb:b5:79:5d:5f:83:55:64:05:6f:96: 0d:18:d2:21:f7:33:1e:09:24:b4:23:d4:88:f5:60: 61:62:ca:64:57:22:b9:e6:60:57:18:66:21:a3:69: 61:0c:77:69:47:4d:82:a4:e1:8a:68:72:a2:5f:c5: 64:6b:02:af:84:4b:89:73:6f:91:57:2a:e6:5d:2d: c3:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:D2:E9:DD:1F:7E:89:82:E4:A1:78:20:EF:77:3C:21:09:22:63:D9 X509v3 Authority Key Identifier: keyid:9E:5D:48:4E:B6:B4:B5:68:9A:54:4C:F0:B1:3B:7E:F9:32:45:7E:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nl1ITra0tWiaVEzwsTt--TJFfvE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:1f:d3:5c:e0:b9:a3:9b:34:38:81:d3:4c:57:fb:99:eb:bb: ff:40:34:3d:7a:5e:88:ed:d4:a1:40:95:59:e7:91:cb:f4:c0: 5b:03:09:a0:9e:d7:84:1c:55:44:59:ab:27:b1:4f:ec:77:3b: ae:66:8d:c6:7f:49:90:20:8a:67:ee:0a:4c:01:a4:47:00:97: f4:c1:1d:6e:e3:50:fa:5c:ed:6b:3d:de:96:67:d6:86:22:a2: 34:da:84:aa:89:71:14:f1:4a:af:79:24:75:00:8a:28:a0:b4: 09:c3:01:b2:65:38:e8:27:47:4a:90:c6:89:99:83:a4:21:27: 67:08:15:9d:57:c4:8c:96:48:3e:bb:68:8f:f3:bb:5b:04:b2: ae:35:c0:b5:ad:11:3e:ae:05:ba:98:c3:0a:1b:17:85:b7:f9: 44:33:6b:f7:09:97:80:02:e1:e1:e3:33:dd:df:ad:78:97:a3: 57:a2:97:05:fc:3e:4a:7d:30:32:7b:77:14:57:b1:12:bb:b5: dc:77:9f:c8:23:8e:a6:3d:9e:d2:69:3f:24:1b:ba:9a:b9:55: 2a:11:1c:d7:0f:28:ba:34:b7:8c:74:4e:75:2a:05:54:3b:2e: 87:8b:8b:f7:35:7a:96:1b:4a:37:34:67:f7:af:6d:6c:b5:15: 38:ec:62:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtI8LxoQ3rhUo0ekTiPRVJ9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNWQ0ODRlYjZiNGI1Njg5YTU0NGNmMGIxM2I3ZWY5MzI0 NTdlZjEwHhcNMjUxMjIzMDIwMTM0WhcNMjUxMjI0MDIwMTM0WjAzMTEwLwYDVQQD EyhhY2QyZTlkZDFmN2U4OTgyZTRhMTc4MjBlZjc3M2MyMTA5MjI2M2Q5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4fDqSluqDL+hbgrDeW+Q+6N9ZbY Lbd2CyEpbkqWx9CrMlepuj91nvZqRhCejOuWT0Y0G7gFV+WEJOsYOnvXseVEbhMS 4ZlOw/cHuzbPwUKSfNT7hMfcLL+YGyUzlcOX/K0YP2kBMZ0dHs0Bnb8wmu3ilFFM 9Tpmt4WQoLgZ0ALWNBzWtDCrdcbqqM01IIVT8HJaBTHvXlFzYWhy578mGvs4JOVs Xe5FRtjKd0mXjayyc2VNgHKcu7V5XV+DVWQFb5YNGNIh9zMeCSS0I9SI9WBhYspk VyK55mBXGGYho2lhDHdpR02CpOGKaHKiX8VkawKvhEuJc2+RVyrmXS3DiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKzS6d0ffomC5KF4IO93PCEJImPZMB8GA1UdIwQY MBaAFJ5dSE62tLVomlRM8LE7fvkyRX7xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmwxSVRyYTB0V2lhVkV6d3NUdC0tVEpGZnZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9iNjc0YmItMDQ0Ny00ZDcyLWIzMDIt NmVjNDBhMzgxODE5LzEvbmwxSVRyYTB0V2lhVkV6d3NUdC0tVEpGZnZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9iNjc0YmItMDQ0Ny00ZDcyLWIzMDItNmVjNDBhMzgxODE5 LzEvbmwxSVRyYTB0V2lhVkV6d3NUdC0tVEpGZnZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABh/TXOC5 o5s0OIHTTFf7meu7/0A0PXpeiO3UoUCVWeeRy/TAWwMJoJ7XhBxVRFmrJ7FP7Hc7 rmaNxn9JkCCKZ+4KTAGkRwCX9MEdbuNQ+lztaz3elmfWhiKiNNqEqolxFPFKr3kk dQCKKKC0CcMBsmU46CdHSpDGiZmDpCEnZwgVnVfEjJZIPrtoj/O7WwSyrjXAta0R Pq4FupjDChsXhbf5RDNr9wmXgALh4eMz3d+teJejV6KXBfw+Sn0wMnt3FFexEru1 3HefyCOOpj2e0mk/JBu6mrlVKhEc1w8oujS3jHROdSoFVDsuh4uL9zV6lhtKNzRn 969tbLUVOOxiew== -----END CERTIFICATE-----Generated at Tue Dec 23 10:59:39 2025 by rpki-client