This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/6b5b7b-f93c-4f37-8a64-6b2f526047a9/1/nzeBglGggdHMfzAVMg62NSZwm5E.mft File: nzeBglGggdHMfzAVMg62NSZwm5E.mft (raw, json) Hash identifier: h6H7eqGBAu5APcY+VToxTDbP2qRP4BhNujWt8rVRl/Y= Subject key identifier: BB:D3:40:37:18:14:1D:8A:01:03:10:02:B1:91:D1:6B:DA:F2:9D:5E Authority key identifier: 9F:37:81:82:51:A0:81:D1:CC:7F:30:15:32:0E:B6:35:26:70:9B:91 Certificate issuer: /CN=9f37818251a081d1cc7f3015320eb63526709b91 Certificate serial: 019B2EF9814CD2D64A2FF987CF0860D039E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzeBglGggdHMfzAVMg62NSZwm5E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/6b5b7b-f93c-4f37-8a64-6b2f526047a9/1/nzeBglGggdHMfzAVMg62NSZwm5E.mft Manifest number: 07EA Signing time: Thu 18 Dec 2025 01:01:01 +0000 Manifest this update: Thu 18 Dec 2025 01:01:01 +0000 Manifest next update: Fri 19 Dec 2025 01:01:01 +0000 Files and hashes: 1: nzeBglGggdHMfzAVMg62NSZwm5E.crl (hash: hcLFt36kWEP1uDqnxR0Ha+vlZcyTG9G4oI6FL/hxRxs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/6b5b7b-f93c-4f37-8a64-6b2f526047a9/1/nzeBglGggdHMfzAVMg62NSZwm5E.crl rsync://rpki.ripe.net/repository/DEFAULT/16/6b5b7b-f93c-4f37-8a64-6b2f526047a9/1/nzeBglGggdHMfzAVMg62NSZwm5E.mft rsync://rpki.ripe.net/repository/DEFAULT/nzeBglGggdHMfzAVMg62NSZwm5E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:f9:81:4c:d2:d6:4a:2f:f9:87:cf:08:60:d0:39:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f37818251a081d1cc7f3015320eb63526709b91 Validity Not Before: Dec 18 01:01:01 2025 GMT Not After : Dec 19 01:01:01 2025 GMT Subject: CN=bbd3403718141d8a01031002b191d16bdaf29d5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:07:11:44:4c:9b:a0:d6:db:11:d5:20:7c:b3: 87:03:db:b3:c3:8a:d8:b5:f8:c7:00:a8:fa:3c:89: 94:da:87:98:e7:88:77:e2:bc:42:08:ce:ce:3c:1a: b1:60:13:62:f4:c5:8d:27:d4:3c:e0:63:f0:f4:15: cc:43:72:17:69:11:07:05:56:00:72:79:5d:73:c1: 45:6d:29:14:87:65:e8:8e:ad:c9:0f:74:b7:db:68: 8d:9a:bd:f4:ce:34:62:e4:12:b5:e3:c9:9e:cd:50: 50:b4:23:80:a7:10:e7:84:0d:9a:d3:58:43:ec:05: e1:00:f6:d5:3d:dd:68:62:63:a6:88:37:d4:24:0c: 9d:ef:b8:0f:12:e6:f2:58:f6:04:c9:b0:dd:20:70: 4c:49:58:1d:77:18:55:45:d9:fd:f8:09:af:2b:94: 04:ab:9d:9a:0a:f7:99:30:d5:45:7e:14:e2:27:5f: 2e:22:1c:29:f0:07:2f:58:9c:0c:55:40:e1:26:37: a6:6a:80:e1:c7:53:d0:86:36:6f:b0:77:f1:d6:2d: bf:36:b6:81:d9:5e:81:6d:9f:aa:51:3d:9b:21:ec: 95:dc:2b:a4:71:96:83:5b:44:be:ae:31:c5:06:ab: bd:02:d9:54:88:70:07:45:95:96:f4:90:1f:35:ae: 4c:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:D3:40:37:18:14:1D:8A:01:03:10:02:B1:91:D1:6B:DA:F2:9D:5E X509v3 Authority Key Identifier: keyid:9F:37:81:82:51:A0:81:D1:CC:7F:30:15:32:0E:B6:35:26:70:9B:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzeBglGggdHMfzAVMg62NSZwm5E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6b5b7b-f93c-4f37-8a64-6b2f526047a9/1/nzeBglGggdHMfzAVMg62NSZwm5E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6b5b7b-f93c-4f37-8a64-6b2f526047a9/1/nzeBglGggdHMfzAVMg62NSZwm5E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:a9:d6:d8:3b:41:42:d5:a8:36:d0:5b:fd:0c:fa:9f:b0:34: 0f:95:c3:95:f7:39:8b:72:a2:6a:00:42:e7:42:65:d3:2a:56: 75:dd:8a:94:bd:4e:b3:95:34:ab:5c:99:c2:06:31:4e:d8:7c: c7:2a:56:30:4d:88:36:49:2f:69:c9:20:90:ea:4c:16:52:17: de:9e:0d:64:a5:30:de:aa:b8:06:59:c5:90:de:39:f5:8c:7f: 5f:9a:84:90:61:5f:e5:03:d0:76:30:45:87:4d:d5:74:25:08: 9d:59:f7:61:95:4a:45:c4:38:85:1e:25:5a:e3:8c:4a:76:27: 66:8d:05:83:8d:51:bf:79:17:bb:da:69:56:70:60:ce:67:1e: b7:25:a8:7f:a7:7d:f1:b4:e8:9b:2f:af:28:27:bb:35:21:d3: e1:d0:f3:47:d9:23:6d:bc:94:a9:71:66:9c:d5:e5:c4:2b:f4: 1e:7e:ae:36:16:e0:e5:05:44:5e:73:ba:1c:04:5b:00:83:3d: de:9e:8d:a7:9e:ed:d8:ea:04:c1:5f:00:c4:5e:81:22:46:96: 33:8c:cf:67:01:9d:a2:d4:b8:3c:0c:65:f4:e6:aa:b2:6e:05: d4:b7:8a:6c:be:71:9f:5a:ec:a7:e1:35:f6:58:2d:81:fc:b5: 4a:90:db:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+YFM0tZKL/mHzwhg0DnlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmMzc4MTgyNTFhMDgxZDFjYzdmMzAxNTMyMGViNjM1MjY3 MDliOTEwHhcNMjUxMjE4MDEwMTAxWhcNMjUxMjE5MDEwMTAxWjAzMTEwLwYDVQQD EyhiYmQzNDAzNzE4MTQxZDhhMDEwMzEwMDJiMTkxZDE2YmRhZjI5ZDVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAcRREyboNbbEdUgfLOHA9uzw4rY tfjHAKj6PImU2oeY54h34rxCCM7OPBqxYBNi9MWNJ9Q84GPw9BXMQ3IXaREHBVYA cnldc8FFbSkUh2Xojq3JD3S322iNmr30zjRi5BK148mezVBQtCOApxDnhA2a01hD 7AXhAPbVPd1oYmOmiDfUJAyd77gPEubyWPYEybDdIHBMSVgddxhVRdn9+AmvK5QE q52aCveZMNVFfhTiJ18uIhwp8AcvWJwMVUDhJjemaoDhx1PQhjZvsHfx1i2/NraB 2V6BbZ+qUT2bIeyV3CukcZaDW0S+rjHFBqu9AtlUiHAHRZWW9JAfNa5MWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLvTQDcYFB2KAQMQArGR0Wva8p1eMB8GA1UdIwQY MBaAFJ83gYJRoIHRzH8wFTIOtjUmcJuRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnplQmdsR2dnZEhNZnpBVk1nNjJOU1p3bTVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82YjViN2ItZjkzYy00ZjM3LThhNjQt NmIyZjUyNjA0N2E5LzEvbnplQmdsR2dnZEhNZnpBVk1nNjJOU1p3bTVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82YjViN2ItZjkzYy00ZjM3LThhNjQtNmIyZjUyNjA0N2E5 LzEvbnplQmdsR2dnZEhNZnpBVk1nNjJOU1p3bTVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZanW2DtB QtWoNtBb/Qz6n7A0D5XDlfc5i3KiagBC50Jl0ypWdd2KlL1Os5U0q1yZwgYxTth8 xypWME2INkkvackgkOpMFlIX3p4NZKUw3qq4BlnFkN459Yx/X5qEkGFf5QPQdjBF h03VdCUInVn3YZVKRcQ4hR4lWuOMSnYnZo0Fg41Rv3kXu9ppVnBgzmcetyWof6d9 8bTomy+vKCe7NSHT4dDzR9kjbbyUqXFmnNXlxCv0Hn6uNhbg5QVEXnO6HARbAIM9 3p6Np57t2OoEwV8AxF6BIkaWM4zPZwGdotS4PAxl9Oaqsm4F1LeKbL5xn1rsp+E1 9lgtgfy1SpDbMw== -----END CERTIFICATE-----Generated at Thu Dec 18 07:10:43 2025 by rpki-client