This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.mft File: Nx-4XU-AjLFgeivk9KeYyj6tOBA.mft (raw, json) Hash identifier: BN5myDGAlYPwCeRVQd85iGtDMzqpTicbK4fyferH6ns= Subject key identifier: 3D:46:7E:A6:19:5D:B8:CD:BF:DD:28:1E:B7:E4:32:EB:A5:13:6C:D6 Authority key identifier: 37:1F:B8:5D:4F:80:8C:B1:60:7A:2B:E4:F4:A7:98:CA:3E:AD:38:10 Certificate issuer: /CN=371fb85d4f808cb1607a2be4f4a798ca3ead3810 Certificate serial: 019B1A97A21DA9589559F2B469FBFDD50C47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nx-4XU-AjLFgeivk9KeYyj6tOBA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.mft Manifest number: 1778 Signing time: Sun 14 Dec 2025 02:01:43 +0000 Manifest this update: Sun 14 Dec 2025 02:01:43 +0000 Manifest next update: Mon 15 Dec 2025 02:01:43 +0000 Files and hashes: 1: Nx-4XU-AjLFgeivk9KeYyj6tOBA.crl (hash: t4FK9PpHti0sAUWQJIRiMKqeOcZ264eFLTj3PVHhUBA=) 2: n5KP5ufURfzYm-dc-9TpGgegI9M.roa (hash: BV7R38C05Kbtl7OcfTA9iXDfsj6OteeTUI52xIrldQE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.mft rsync://rpki.ripe.net/repository/DEFAULT/Nx-4XU-AjLFgeivk9KeYyj6tOBA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:97:a2:1d:a9:58:95:59:f2:b4:69:fb:fd:d5:0c:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=371fb85d4f808cb1607a2be4f4a798ca3ead3810 Validity Not Before: Dec 14 02:01:43 2025 GMT Not After : Dec 15 02:01:43 2025 GMT Subject: CN=3d467ea6195db8cdbfdd281eb7e432eba5136cd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:7a:97:79:85:17:f5:d2:88:be:59:d0:94:15: 76:34:b1:87:b0:4d:52:59:bf:6c:31:e7:59:f5:5a: 60:4e:75:d7:13:1c:11:1b:98:9a:96:2a:47:98:78: 5f:7e:bb:63:f2:b1:88:f5:a5:5d:1d:40:f8:39:ea: a7:68:ca:7e:8d:6c:b8:aa:cb:19:22:20:60:9a:61: d7:56:90:10:f5:be:be:62:20:a5:f1:0a:5f:43:25: 43:5a:da:cf:ce:de:df:65:92:ea:d7:2c:e1:18:01: 03:16:49:c6:5b:27:17:cb:a3:3a:03:0b:71:06:ba: 33:16:10:57:57:95:d1:2b:96:a4:75:34:9c:12:da: 5c:6e:b9:e5:18:da:af:bc:90:a0:2d:22:e8:e9:3c: 6b:83:56:c6:9a:70:17:76:24:1a:9d:a4:95:e2:c8: 0f:b8:7c:d4:19:7b:00:72:72:3c:6f:f1:a7:36:ec: 49:d6:78:76:42:c7:03:51:2f:d4:67:de:df:cd:bd: 18:9d:3d:8d:a0:77:c3:26:09:5b:8e:10:8e:60:46: b2:b5:5f:3a:fb:f7:6a:29:b1:b9:fa:5d:2e:de:0c: e7:b5:45:78:b9:f0:70:3c:b5:70:7e:aa:f5:e2:f2: 6f:63:26:05:ac:96:2e:8f:dd:07:cd:46:99:8c:df: c2:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:46:7E:A6:19:5D:B8:CD:BF:DD:28:1E:B7:E4:32:EB:A5:13:6C:D6 X509v3 Authority Key Identifier: keyid:37:1F:B8:5D:4F:80:8C:B1:60:7A:2B:E4:F4:A7:98:CA:3E:AD:38:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nx-4XU-AjLFgeivk9KeYyj6tOBA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:88:84:2e:4b:54:c4:15:5a:2e:91:05:fd:7a:95:ef:48:22: 94:94:b4:6c:34:b1:d1:7c:c2:a8:ac:4c:52:cf:60:d1:85:b6: 37:12:55:c0:d0:52:4a:ab:71:f6:a8:c1:b0:b7:fb:80:3d:db: 5f:a3:2d:1a:cb:64:74:a0:9b:ad:07:4e:5a:da:60:16:78:78: 55:a9:16:df:ea:1f:79:8f:71:a4:f2:eb:44:fe:e3:03:70:93: fa:88:1c:a7:7b:26:bf:c1:b4:ac:63:52:a3:3d:4f:12:b4:4a: f7:ea:9f:73:79:b0:74:be:15:3e:e6:98:b8:05:bb:03:f0:4f: af:cc:2e:35:94:dd:99:21:a0:47:7b:10:86:03:b1:ff:d2:02: a6:79:ac:82:5c:94:7e:c9:cf:da:7b:69:27:ae:ed:17:7b:e4: 4a:e0:58:16:4c:72:b9:db:d4:b7:52:89:ba:92:7d:fc:5b:11: 4b:53:0b:ba:e3:84:16:8d:45:6b:8a:19:9b:0a:aa:cd:8d:2d: 80:d2:2e:da:04:0b:dd:5c:e8:1c:c8:16:f3:0c:54:bb:94:7d: 61:31:c9:f8:7e:f0:58:7b:2c:c1:0f:00:f5:91:e4:2d:c0:7b: c0:ed:d5:a7:f0:87:fe:51:4e:ca:47:51:2e:17:b7:63:2d:b6: ff:fa:00:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsal6IdqViVWfK0afv91QxHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3MWZiODVkNGY4MDhjYjE2MDdhMmJlNGY0YTc5OGNhM2Vh ZDM4MTAwHhcNMjUxMjE0MDIwMTQzWhcNMjUxMjE1MDIwMTQzWjAzMTEwLwYDVQQD EygzZDQ2N2VhNjE5NWRiOGNkYmZkZDI4MWViN2U0MzJlYmE1MTM2Y2Q2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3qXeYUX9dKIvlnQlBV2NLGHsE1S Wb9sMedZ9VpgTnXXExwRG5ialipHmHhffrtj8rGI9aVdHUD4OeqnaMp+jWy4qssZ IiBgmmHXVpAQ9b6+YiCl8QpfQyVDWtrPzt7fZZLq1yzhGAEDFknGWycXy6M6Awtx BrozFhBXV5XRK5akdTScEtpcbrnlGNqvvJCgLSLo6Txrg1bGmnAXdiQanaSV4sgP uHzUGXsAcnI8b/GnNuxJ1nh2QscDUS/UZ97fzb0YnT2NoHfDJglbjhCOYEaytV86 +/dqKbG5+l0u3gzntUV4ufBwPLVwfqr14vJvYyYFrJYuj90HzUaZjN/CRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD1GfqYZXbjNv90oHrfkMuulE2zWMB8GA1UdIwQY MBaAFDcfuF1PgIyxYHor5PSnmMo+rTgQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTngtNFhVLUFqTEZnZWl2azlLZVl5ajZ0T0JBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9jNWE4NDgtMjYwZC00YWQwLWFlZjMt ZDdiMmM5MzQ0MmQzLzEvTngtNFhVLUFqTEZnZWl2azlLZVl5ajZ0T0JBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC9jNWE4NDgtMjYwZC00YWQwLWFlZjMtZDdiMmM5MzQ0MmQz LzEvTngtNFhVLUFqTEZnZWl2azlLZVl5ajZ0T0JBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARoiELktU xBVaLpEF/XqV70gilJS0bDSx0XzCqKxMUs9g0YW2NxJVwNBSSqtx9qjBsLf7gD3b X6MtGstkdKCbrQdOWtpgFnh4VakW3+ofeY9xpPLrRP7jA3CT+ogcp3smv8G0rGNS oz1PErRK9+qfc3mwdL4VPuaYuAW7A/BPr8wuNZTdmSGgR3sQhgOx/9ICpnmsglyU fsnP2ntpJ67tF3vkSuBYFkxyudvUt1KJupJ9/FsRS1MLuuOEFo1Fa4oZmwqqzY0t gNIu2gQL3VzoHMgW8wxUu5R9YTHJ+H7wWHsswQ8A9ZHkLcB7wO3Vp/CH/lFOykdR Lhe3Yy22//oAzQ== -----END CERTIFICATE-----Generated at Sun Dec 14 07:43:46 2025 by rpki-client