This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/0df808-7473-47b1-817f-be770e1e6c13/1/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.mft File: NI_Zd8y-e7ltPA8xdMmVG_hw_rA.mft (raw, json) Hash identifier: XzSd4BhGK1iRwLd10zU3O8IbDLtGInOcCdbg3MPs1VM= Subject key identifier: 9F:16:B7:DA:17:E6:CC:AF:EF:58:46:5E:38:86:6E:B7:86:2B:F9:B8 Authority key identifier: 34:8F:D9:77:CC:BE:7B:B9:6D:3C:0F:31:74:C9:95:1B:F8:70:FE:B0 Certificate issuer: /CN=348fd977ccbe7bb96d3c0f3174c9951bf870feb0 Certificate serial: 019AF12D6652B336348AE5AD07EBC7E8276F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/0df808-7473-47b1-817f-be770e1e6c13/1/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 01:01:15 +0000 Manifest this update: Sat 06 Dec 2025 01:01:15 +0000 Manifest next update: Sun 07 Dec 2025 01:01:15 +0000 Files and hashes: 1: NI_Zd8y-e7ltPA8xdMmVG_hw_rA.crl (hash: 7ueGPbllfPrK88oxwQ0iD4DGLgx/K4xXQdFe/hNzAHc=) 2: ZxlhkpSeT22co3ElobaCavDtI1I.roa (hash: RsOVTQimQxoF2zeQAP5zv2htNZo2elUQhLdSPHG+MC0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/0df808-7473-47b1-817f-be770e1e6c13/1/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.crl rsync://rpki.ripe.net/repository/DEFAULT/27/0df808-7473-47b1-817f-be770e1e6c13/1/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.mft rsync://rpki.ripe.net/repository/DEFAULT/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:66:52:b3:36:34:8a:e5:ad:07:eb:c7:e8:27:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=348fd977ccbe7bb96d3c0f3174c9951bf870feb0 Validity Not Before: Dec 6 01:01:15 2025 GMT Not After : Dec 7 01:01:15 2025 GMT Subject: CN=9f16b7da17e6ccafef58465e38866eb7862bf9b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:18:dc:72:dc:3b:bb:8e:b5:e8:3e:19:0e:b8: 87:40:4b:31:af:dd:90:05:12:d5:5d:fa:31:72:72: a3:02:95:e3:f0:a4:02:aa:5d:dc:33:e1:c6:e3:f7: 31:22:cd:ed:1e:85:e3:ee:86:61:f8:c1:7a:85:e1: 12:79:8c:f6:3e:3e:d4:80:10:80:58:0c:a9:a9:d8: 37:b8:a7:ac:e5:12:62:73:17:30:d0:cf:60:ac:b5: ce:e8:27:ef:64:90:c0:5d:75:4f:9a:db:b9:73:74: e1:b1:5f:21:81:3b:af:71:34:0b:b2:84:24:dc:b2: 55:fa:27:34:bf:c8:8a:30:7b:cb:a0:14:52:8b:ae: 28:ee:d1:19:f2:77:54:e3:09:db:fb:fb:d7:98:da: 04:92:9c:66:ab:f7:57:92:5c:4f:9a:b2:c6:9a:b2: fd:2e:39:00:4d:3f:3a:9e:90:83:56:49:47:46:c2: 29:1e:94:42:90:f0:9d:e9:e4:c6:6c:48:62:b3:1c: fc:c5:f7:c7:be:06:b1:21:e7:d9:1f:67:a9:7b:84: ef:fc:38:73:b1:db:25:66:3a:2a:fe:26:47:76:fe: 49:c9:ec:1c:eb:6d:6a:cf:cf:02:cc:1f:65:bf:8e: db:6e:69:77:4e:e5:bc:e7:0a:8a:53:a5:8b:f5:49: 9e:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:16:B7:DA:17:E6:CC:AF:EF:58:46:5E:38:86:6E:B7:86:2B:F9:B8 X509v3 Authority Key Identifier: keyid:34:8F:D9:77:CC:BE:7B:B9:6D:3C:0F:31:74:C9:95:1B:F8:70:FE:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/0df808-7473-47b1-817f-be770e1e6c13/1/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/0df808-7473-47b1-817f-be770e1e6c13/1/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:0b:aa:74:d7:8a:e6:bf:b2:89:2d:ca:71:40:f4:f4:0e:5c: e4:9a:50:88:d1:15:31:c0:0c:80:06:d8:20:90:ca:ba:63:92: 13:b2:b9:19:fc:50:81:eb:b1:9b:f1:1c:76:90:29:e8:d3:2b: fa:80:e0:3d:6d:54:55:17:6f:fe:36:fc:2c:11:42:7a:8e:24: ae:15:19:21:f9:4a:da:63:5a:6f:d3:55:7e:b4:67:a4:89:70: d9:07:66:65:b3:b9:41:59:07:97:f1:91:35:91:85:79:57:d6: 15:9f:05:57:66:7e:b2:5e:9c:ac:2f:39:8a:07:26:bf:47:69: 17:fe:40:a7:65:58:9e:5c:42:b4:c1:e2:e8:28:87:0d:33:09: c7:63:4d:98:e3:4a:4a:82:fd:7f:78:7e:fc:6c:44:75:de:00: c6:0c:11:8c:76:4a:db:94:ba:43:bb:b0:bc:59:f1:19:2e:a8: 7d:ba:06:63:30:03:49:74:34:e1:57:13:3c:93:43:1e:96:63: 01:74:95:1a:a7:23:77:98:f7:c2:98:12:d6:cc:7e:12:3d:28: ba:0b:33:97:f1:a7:af:a6:ee:5a:dc:b0:46:63:8d:76:a2:22: c3:11:2d:89:e4:6b:e8:46:ef:cc:a7:1e:9c:42:cf:c5:aa:3d: 17:8a:9c:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLWZSszY0iuWtB+vH6CdvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0OGZkOTc3Y2NiZTdiYjk2ZDNjMGYzMTc0Yzk5NTFiZjg3 MGZlYjAwHhcNMjUxMjA2MDEwMTE1WhcNMjUxMjA3MDEwMTE1WjAzMTEwLwYDVQQD Eyg5ZjE2YjdkYTE3ZTZjY2FmZWY1ODQ2NWUzODg2NmViNzg2MmJmOWI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRjcctw7u4616D4ZDriHQEsxr92Q BRLVXfoxcnKjApXj8KQCql3cM+HG4/cxIs3tHoXj7oZh+MF6heESeYz2Pj7UgBCA WAypqdg3uKes5RJicxcw0M9grLXO6CfvZJDAXXVPmtu5c3ThsV8hgTuvcTQLsoQk 3LJV+ic0v8iKMHvLoBRSi64o7tEZ8ndU4wnb+/vXmNoEkpxmq/dXklxPmrLGmrL9 LjkATT86npCDVklHRsIpHpRCkPCd6eTGbEhisxz8xffHvgaxIefZH2epe4Tv/Dhz sdslZjoq/iZHdv5Jyewc621qz88CzB9lv47bbml3TuW85wqKU6WL9UmeuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ8Wt9oX5syv71hGXjiGbreGK/m4MB8GA1UdIwQY MBaAFDSP2XfMvnu5bTwPMXTJlRv4cP6wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTklfWmQ4eS1lN2x0UEE4eGRNbVZHX2h3X3JBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8wZGY4MDgtNzQ3My00N2IxLTgxN2Yt YmU3NzBlMWU2YzEzLzEvTklfWmQ4eS1lN2x0UEE4eGRNbVZHX2h3X3JBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy8wZGY4MDgtNzQ3My00N2IxLTgxN2YtYmU3NzBlMWU2YzEz LzEvTklfWmQ4eS1lN2x0UEE4eGRNbVZHX2h3X3JBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGwuqdNeK 5r+yiS3KcUD09A5c5JpQiNEVMcAMgAbYIJDKumOSE7K5GfxQgeuxm/EcdpAp6NMr +oDgPW1UVRdv/jb8LBFCeo4krhUZIflK2mNab9NVfrRnpIlw2QdmZbO5QVkHl/GR NZGFeVfWFZ8FV2Z+sl6crC85igcmv0dpF/5Ap2VYnlxCtMHi6CiHDTMJx2NNmONK SoL9f3h+/GxEdd4AxgwRjHZK25S6Q7uwvFnxGS6ofboGYzADSXQ04VcTPJNDHpZj AXSVGqcjd5j3wpgS1sx+Ej0ougszl/Gnr6buWtywRmONdqIiwxEtieRr6EbvzKce nELPxao9F4qcTA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:13:52 2025 by rpki-client