This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/8f658c-3fac-498d-b95e-f4219beddb37/1/nxFouFcXoUZmABtbL2yQgBmX3gY.mft File: nxFouFcXoUZmABtbL2yQgBmX3gY.mft (raw, json) Hash identifier: +WBvfvws4QC9jJwMP2xSvWN7uXs2dnAauAkhIfXymtY= Subject key identifier: E1:40:89:0E:62:33:33:95:5D:1B:05:5D:B5:80:92:7B:37:B0:EC:23 Authority key identifier: 9F:11:68:B8:57:17:A1:46:66:00:1B:5B:2F:6C:90:80:19:97:DE:06 Certificate issuer: /CN=9f1168b85717a14666001b5b2f6c90801997de06 Certificate serial: 019B31564A1D61D510CB9E584DAC591E3E77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nxFouFcXoUZmABtbL2yQgBmX3gY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/8f658c-3fac-498d-b95e-f4219beddb37/1/nxFouFcXoUZmABtbL2yQgBmX3gY.mft Manifest number: 0534 Signing time: Thu 18 Dec 2025 12:01:37 +0000 Manifest this update: Thu 18 Dec 2025 12:01:37 +0000 Manifest next update: Fri 19 Dec 2025 12:01:37 +0000 Files and hashes: 1: 3aRtdaLoPOZF10CX_CZEh4-VCqI.roa (hash: OscvtFvqL/u9a9yzvKDIzZQyXS+BuqyG+0F0KwScDL8=) 2: nxFouFcXoUZmABtbL2yQgBmX3gY.crl (hash: sRGCXxEoO/+8/xllC/YNG5/ImFedq+1Kdz3nGHV9mao=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/8f658c-3fac-498d-b95e-f4219beddb37/1/nxFouFcXoUZmABtbL2yQgBmX3gY.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/8f658c-3fac-498d-b95e-f4219beddb37/1/nxFouFcXoUZmABtbL2yQgBmX3gY.mft rsync://rpki.ripe.net/repository/DEFAULT/nxFouFcXoUZmABtbL2yQgBmX3gY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:56:4a:1d:61:d5:10:cb:9e:58:4d:ac:59:1e:3e:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f1168b85717a14666001b5b2f6c90801997de06 Validity Not Before: Dec 18 12:01:37 2025 GMT Not After : Dec 19 12:01:37 2025 GMT Subject: CN=e140890e623333955d1b055db580927b37b0ec23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:0a:1e:2f:6c:2f:c1:c3:4e:fd:07:59:da:72: a0:11:0d:b4:89:b6:7d:c2:73:f0:f7:05:86:d6:60: 57:5f:03:eb:84:ab:c2:9f:42:88:e6:3e:b0:ac:47: 2c:21:09:f9:b0:92:f8:eb:73:d9:73:81:90:1b:88: b8:7d:18:32:b3:ef:49:c5:0e:39:39:64:34:33:8f: c8:37:dc:ae:e8:86:3b:42:ac:a2:0c:2b:b6:ef:14: 09:66:1b:81:cc:ac:f6:8b:d6:f9:21:6e:07:b9:8a: 78:dd:d0:0f:d7:1b:ca:bc:e8:56:62:ac:d6:0b:4d: 1d:73:5a:98:e7:75:52:44:66:59:91:01:47:73:86: b7:4f:ce:71:a0:eb:61:99:37:bf:48:42:17:94:08: 5e:bd:33:f7:2f:47:61:06:61:3c:04:e1:08:91:ce: 4a:60:5c:3c:dd:66:d5:53:42:4c:49:e8:15:a7:0f: 44:2a:25:e3:c8:9f:70:b5:3f:25:a1:2f:57:4a:a5: cc:d4:c0:49:4b:05:70:de:bd:49:31:c6:9f:53:12: 32:6f:13:85:03:d1:56:3a:76:32:ac:0e:1c:60:fc: 44:48:46:8c:2a:56:b0:37:43:eb:ae:4f:dd:bf:a8: e3:70:57:f6:43:49:44:81:ae:d8:f8:d2:a6:57:f7: 13:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:40:89:0E:62:33:33:95:5D:1B:05:5D:B5:80:92:7B:37:B0:EC:23 X509v3 Authority Key Identifier: keyid:9F:11:68:B8:57:17:A1:46:66:00:1B:5B:2F:6C:90:80:19:97:DE:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nxFouFcXoUZmABtbL2yQgBmX3gY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/8f658c-3fac-498d-b95e-f4219beddb37/1/nxFouFcXoUZmABtbL2yQgBmX3gY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/8f658c-3fac-498d-b95e-f4219beddb37/1/nxFouFcXoUZmABtbL2yQgBmX3gY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:bd:78:23:07:fd:74:75:64:e5:50:2e:ba:76:c9:5d:02:90: e4:b7:90:64:67:5f:b7:3c:6a:79:ec:66:e6:af:9f:bd:21:db: 4b:98:98:b4:36:33:c8:73:66:1b:e4:73:55:57:c1:0a:01:a7: 7c:88:6d:f1:44:a4:28:8a:48:7b:54:f1:16:81:5f:6f:a6:42: c9:ed:bd:3b:5b:c5:0a:fd:9b:35:71:23:81:8b:bb:1e:66:de: 8a:e4:45:3b:12:7b:e1:01:ee:d5:82:37:fb:19:b5:02:ba:87: 0d:66:0e:f0:b7:9a:87:30:b3:b1:d9:24:b0:31:96:6e:b8:27: 2f:83:87:4c:e1:fc:da:2a:42:0a:26:8a:13:c9:b8:db:f7:6f: ee:0b:72:5f:64:eb:40:b6:83:67:9e:5d:5a:a1:5f:33:08:ee: 3c:8d:29:d7:70:f8:54:15:e3:fc:c6:04:29:ec:01:6f:a6:08: bb:7b:0a:d1:78:c1:c8:59:91:89:c8:a4:55:c5:c7:b7:59:80: 3b:30:ec:5c:81:e6:61:60:f0:91:8c:38:b5:50:45:da:86:b2: 50:8e:8f:a7:5b:bb:2d:79:f3:cc:89:8d:51:24:b7:a3:dd:93: 2b:11:dd:70:07:a8:f2:dd:bb:30:ea:72:41:de:e7:70:d7:a3: ce:88:6f:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxVkodYdUQy55YTaxZHj53MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmMTE2OGI4NTcxN2ExNDY2NjAwMWI1YjJmNmM5MDgwMTk5 N2RlMDYwHhcNMjUxMjE4MTIwMTM3WhcNMjUxMjE5MTIwMTM3WjAzMTEwLwYDVQQD EyhlMTQwODkwZTYyMzMzMzk1NWQxYjA1NWRiNTgwOTI3YjM3YjBlYzIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngoeL2wvwcNO/QdZ2nKgEQ20ibZ9 wnPw9wWG1mBXXwPrhKvCn0KI5j6wrEcsIQn5sJL463PZc4GQG4i4fRgys+9JxQ45 OWQ0M4/IN9yu6IY7QqyiDCu27xQJZhuBzKz2i9b5IW4HuYp43dAP1xvKvOhWYqzW C00dc1qY53VSRGZZkQFHc4a3T85xoOthmTe/SEIXlAhevTP3L0dhBmE8BOEIkc5K YFw83WbVU0JMSegVpw9EKiXjyJ9wtT8loS9XSqXM1MBJSwVw3r1JMcafUxIybxOF A9FWOnYyrA4cYPxESEaMKlawN0Prrk/dv6jjcFf2Q0lEga7Y+NKmV/cT9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOFAiQ5iMzOVXRsFXbWAkns3sOwjMB8GA1UdIwQY MBaAFJ8RaLhXF6FGZgAbWy9skIAZl94GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnhGb3VGY1hvVVptQUJ0YkwyeVFnQm1YM2dZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC84ZjY1OGMtM2ZhYy00OThkLWI5NWUt ZjQyMTliZWRkYjM3LzEvbnhGb3VGY1hvVVptQUJ0YkwyeVFnQm1YM2dZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC84ZjY1OGMtM2ZhYy00OThkLWI5NWUtZjQyMTliZWRkYjM3 LzEvbnhGb3VGY1hvVVptQUJ0YkwyeVFnQm1YM2dZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB714Iwf9 dHVk5VAuunbJXQKQ5LeQZGdftzxqeexm5q+fvSHbS5iYtDYzyHNmG+RzVVfBCgGn fIht8USkKIpIe1TxFoFfb6ZCye29O1vFCv2bNXEjgYu7HmbeiuRFOxJ74QHu1YI3 +xm1ArqHDWYO8LeahzCzsdkksDGWbrgnL4OHTOH82ipCCiaKE8m42/dv7gtyX2Tr QLaDZ55dWqFfMwjuPI0p13D4VBXj/MYEKewBb6YIu3sK0XjByFmRicikVcXHt1mA OzDsXIHmYWDwkYw4tVBF2oayUI6Pp1u7LXnzzImNUSS3o92TKxHdcAeo8t27MOpy Qd7ncNejzohvNA== -----END CERTIFICATE-----Generated at Thu Dec 18 13:51:49 2025 by rpki-client