This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/6b5b7b-f93c-4f37-8a64-6b2f526047a9/1/nzeBglGggdHMfzAVMg62NSZwm5E.mft File: nzeBglGggdHMfzAVMg62NSZwm5E.mft (raw, json) Hash identifier: MNVUY3cMRWR8jFb8RoFQbxq0gE5Kpdn3TUkJ9g8ZitQ= Subject key identifier: 38:CA:14:17:26:F1:DC:22:94:8C:D3:EF:D2:5F:60:03:2D:8B:49:BF Authority key identifier: 9F:37:81:82:51:A0:81:D1:CC:7F:30:15:32:0E:B6:35:26:70:9B:91 Certificate issuer: /CN=9f37818251a081d1cc7f3015320eb63526709b91 Certificate serial: 019AF12D0E969D3597103DCAF3A56A4AB251 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzeBglGggdHMfzAVMg62NSZwm5E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/6b5b7b-f93c-4f37-8a64-6b2f526047a9/1/nzeBglGggdHMfzAVMg62NSZwm5E.mft Manifest number: 07CA Signing time: Sat 06 Dec 2025 01:00:53 +0000 Manifest this update: Sat 06 Dec 2025 01:00:53 +0000 Manifest next update: Sun 07 Dec 2025 01:00:53 +0000 Files and hashes: 1: nzeBglGggdHMfzAVMg62NSZwm5E.crl (hash: 1DZ84CUY2CNzq12fEMt0Dt9O2h3aeB/PEW3hFh4WZ5U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/6b5b7b-f93c-4f37-8a64-6b2f526047a9/1/nzeBglGggdHMfzAVMg62NSZwm5E.crl rsync://rpki.ripe.net/repository/DEFAULT/16/6b5b7b-f93c-4f37-8a64-6b2f526047a9/1/nzeBglGggdHMfzAVMg62NSZwm5E.mft rsync://rpki.ripe.net/repository/DEFAULT/nzeBglGggdHMfzAVMg62NSZwm5E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:0e:96:9d:35:97:10:3d:ca:f3:a5:6a:4a:b2:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f37818251a081d1cc7f3015320eb63526709b91 Validity Not Before: Dec 6 01:00:53 2025 GMT Not After : Dec 7 01:00:53 2025 GMT Subject: CN=38ca141726f1dc22948cd3efd25f60032d8b49bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:44:56:0e:f9:bc:53:79:fb:f0:b4:65:b2:05: 12:b1:ab:a1:ca:c5:a7:95:77:3b:cd:9e:16:b6:be: 2b:b6:43:bd:c0:4f:2f:5d:e6:fd:9b:48:b3:00:bd: 06:41:d6:04:c9:6a:a6:f9:7e:6b:e8:12:81:64:c5: a2:42:d4:99:83:8b:91:fd:d1:0c:91:3a:f0:1d:dc: a2:ec:16:a9:a9:da:0e:53:83:47:1f:38:6c:2a:45: 25:62:4a:53:80:6f:ff:9b:83:40:5c:73:62:95:32: 5e:97:f5:b3:dd:af:b8:16:2f:7d:c6:95:24:96:86: 4c:4a:d7:9c:12:61:c9:ed:4c:dd:e4:9a:33:d4:b1: d3:2d:1b:23:53:8a:9c:e5:43:15:17:9a:70:a5:17: 92:c6:69:ae:5c:b8:ad:e1:41:3f:c2:51:89:11:14: ba:2e:8c:54:c5:5f:f6:53:56:f9:3f:f2:ce:a8:50: 50:0a:a9:5f:3b:1c:f2:56:fe:79:29:6d:76:49:a5: 57:e0:e3:44:19:d2:47:34:c7:f6:8c:df:f5:0d:fa: 9b:a0:06:a2:46:35:c2:83:ff:2f:cd:6a:07:5a:55: cc:e3:f1:65:35:be:d7:fc:cd:fb:7d:7e:be:b2:27: 6a:5a:25:0b:32:d2:34:30:e0:21:4b:91:1d:24:9a: bb:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:CA:14:17:26:F1:DC:22:94:8C:D3:EF:D2:5F:60:03:2D:8B:49:BF X509v3 Authority Key Identifier: keyid:9F:37:81:82:51:A0:81:D1:CC:7F:30:15:32:0E:B6:35:26:70:9B:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzeBglGggdHMfzAVMg62NSZwm5E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6b5b7b-f93c-4f37-8a64-6b2f526047a9/1/nzeBglGggdHMfzAVMg62NSZwm5E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6b5b7b-f93c-4f37-8a64-6b2f526047a9/1/nzeBglGggdHMfzAVMg62NSZwm5E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:0e:73:68:3b:1e:0a:3d:98:65:64:d5:8e:bb:81:d7:31:0e: e9:2a:b7:3b:f1:6d:85:e8:7f:db:0b:6d:b0:99:30:c4:e5:a6: 63:97:1b:75:97:10:c0:af:49:83:57:5e:30:54:b9:8f:ec:f0: 95:1a:9c:d7:21:0b:16:46:9c:1f:9f:28:95:29:8c:ac:5b:1b: bc:65:3f:19:bb:f2:6d:f2:a0:8d:40:86:c3:0d:af:f7:ee:1d: a4:fe:d8:d8:48:e0:f2:19:0b:9b:90:e6:dc:38:69:aa:4f:5b: 15:1b:d9:48:26:c6:f4:ac:00:11:95:d7:42:11:11:b0:dc:8b: 87:fd:f7:b4:8f:77:c4:a5:cc:d2:76:75:9e:f2:c0:31:c0:9b: 75:c4:17:62:57:08:18:c6:6f:b0:08:34:64:f8:4a:43:63:ba: 00:c0:3e:bd:b0:46:a9:5f:70:7e:b9:99:17:20:aa:09:00:6b: a3:86:5a:e0:14:b9:a6:2a:14:bf:2d:48:33:73:87:48:6c:85: ba:f0:e5:eb:f6:1d:5e:07:c3:a1:63:2f:b9:f7:14:e5:ef:a7: 43:65:03:13:fd:9f:7a:0a:ad:e1:40:93:fc:f5:1f:e5:80:73: 98:53:c2:36:b8:42:da:8c:29:73:1b:e6:85:b6:a2:f7:27:03: 23:77:ed:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLQ6WnTWXED3K86VqSrJRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmMzc4MTgyNTFhMDgxZDFjYzdmMzAxNTMyMGViNjM1MjY3 MDliOTEwHhcNMjUxMjA2MDEwMDUzWhcNMjUxMjA3MDEwMDUzWjAzMTEwLwYDVQQD EygzOGNhMTQxNzI2ZjFkYzIyOTQ4Y2QzZWZkMjVmNjAwMzJkOGI0OWJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5kRWDvm8U3n78LRlsgUSsauhysWn lXc7zZ4Wtr4rtkO9wE8vXeb9m0izAL0GQdYEyWqm+X5r6BKBZMWiQtSZg4uR/dEM kTrwHdyi7BapqdoOU4NHHzhsKkUlYkpTgG//m4NAXHNilTJel/Wz3a+4Fi99xpUk loZMStecEmHJ7Uzd5Joz1LHTLRsjU4qc5UMVF5pwpReSxmmuXLit4UE/wlGJERS6 LoxUxV/2U1b5P/LOqFBQCqlfOxzyVv55KW12SaVX4ONEGdJHNMf2jN/1DfqboAai RjXCg/8vzWoHWlXM4/FlNb7X/M37fX6+sidqWiULMtI0MOAhS5EdJJq76wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDjKFBcm8dwilIzT79JfYAMti0m/MB8GA1UdIwQY MBaAFJ83gYJRoIHRzH8wFTIOtjUmcJuRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnplQmdsR2dnZEhNZnpBVk1nNjJOU1p3bTVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82YjViN2ItZjkzYy00ZjM3LThhNjQt NmIyZjUyNjA0N2E5LzEvbnplQmdsR2dnZEhNZnpBVk1nNjJOU1p3bTVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82YjViN2ItZjkzYy00ZjM3LThhNjQtNmIyZjUyNjA0N2E5 LzEvbnplQmdsR2dnZEhNZnpBVk1nNjJOU1p3bTVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlQ5zaDse Cj2YZWTVjruB1zEO6Sq3O/Ftheh/2wttsJkwxOWmY5cbdZcQwK9Jg1deMFS5j+zw lRqc1yELFkacH58olSmMrFsbvGU/GbvybfKgjUCGww2v9+4dpP7Y2Ejg8hkLm5Dm 3Dhpqk9bFRvZSCbG9KwAEZXXQhERsNyLh/33tI93xKXM0nZ1nvLAMcCbdcQXYlcI GMZvsAg0ZPhKQ2O6AMA+vbBGqV9wfrmZFyCqCQBro4Za4BS5pioUvy1IM3OHSGyF uvDl6/YdXgfDoWMvufcU5e+nQ2UDE/2fegqt4UCT/PUf5YBzmFPCNrhC2owpcxvm hbai9ycDI3ftvQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:40 2025 by rpki-client