This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft File: NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft (raw, json) Hash identifier: Gny87Vwmu8kZjNM/6ed/2y/jnDAk27I2EFqlqyHFSlA= Subject key identifier: F3:05:4C:95:C5:69:B4:DE:29:57:4D:25:BE:22:DE:9F:36:81:BD:33 Authority key identifier: 35:16:52:B8:38:FF:2D:96:72:AC:8C:A6:6B:A6:60:DD:4E:45:D6:99 Certificate issuer: /CN=351652b838ff2d9672ac8ca66ba660dd4e45d699 Certificate serial: 019AF2AD64D65D4D1ACF8F89ABCD160D355F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRZSuDj_LZZyrIyma6Zg3U5F1pk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft Manifest number: 0C46 Signing time: Sat 06 Dec 2025 08:00:41 +0000 Manifest this update: Sat 06 Dec 2025 08:00:41 +0000 Manifest next update: Sun 07 Dec 2025 08:00:41 +0000 Files and hashes: 1: NRZSuDj_LZZyrIyma6Zg3U5F1pk.crl (hash: tVU6Hz+Byx9WMM33i5Mhq1/hOv2ypmWk2ue4RS3Wwls=) 2: Zk0y4tHHB8Yu3r49IrGLEovlzps.roa (hash: Z8BlFARu3PiIVKgAzCmvXp/n3Elo4eu1cJ/tXUB0sZU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft rsync://rpki.ripe.net/repository/DEFAULT/NRZSuDj_LZZyrIyma6Zg3U5F1pk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:64:d6:5d:4d:1a:cf:8f:89:ab:cd:16:0d:35:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=351652b838ff2d9672ac8ca66ba660dd4e45d699 Validity Not Before: Dec 6 08:00:41 2025 GMT Not After : Dec 7 08:00:41 2025 GMT Subject: CN=f3054c95c569b4de29574d25be22de9f3681bd33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:2e:fb:c7:bd:33:b4:22:e3:d7:c8:93:91:1c: 5b:e7:69:da:2c:ce:b1:8b:d8:23:fe:3e:0c:9f:cc: 48:a1:a9:3a:1e:31:8c:7e:cc:a8:b8:5a:b5:cc:33: 36:bf:e6:3d:96:12:ea:44:e1:92:e4:5f:47:5d:1e: fa:47:6e:ef:5d:b3:57:f6:ef:b0:7a:04:04:eb:cc: 0d:32:a8:5b:d8:b7:f8:77:65:ba:67:5d:f5:5d:07: df:68:3d:4d:27:ed:b5:12:c1:8a:62:af:b3:99:a9: b6:38:fb:46:4d:78:ca:82:6a:07:08:14:55:79:c0: 1c:4f:1c:2d:e8:54:ab:a1:2c:0b:73:90:f5:53:9e: 89:e1:a9:18:92:2e:68:64:33:cd:1b:55:dc:e8:80: 3f:4e:59:d7:bd:7c:38:94:4f:d5:80:91:f4:e5:1d: db:d0:18:8a:f8:1b:44:1b:e9:21:99:16:e1:4b:ff: 80:31:52:f5:cd:a6:5d:01:50:63:29:98:d4:d6:1a: 9a:d4:d9:d0:fd:5b:ec:13:d1:9d:cd:15:73:78:e1: 1a:37:94:7b:19:e4:d2:50:38:e8:ae:88:bc:29:46: 81:41:79:64:f4:ef:4c:28:17:3c:31:69:67:17:81: 97:a6:02:97:93:13:c7:95:16:06:25:61:31:10:88: 0b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:05:4C:95:C5:69:B4:DE:29:57:4D:25:BE:22:DE:9F:36:81:BD:33 X509v3 Authority Key Identifier: keyid:35:16:52:B8:38:FF:2D:96:72:AC:8C:A6:6B:A6:60:DD:4E:45:D6:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRZSuDj_LZZyrIyma6Zg3U5F1pk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:77:4d:ba:a4:e9:0f:ca:bd:51:42:42:c7:f4:24:33:9b:ed: 45:06:68:2b:fb:67:14:96:46:d9:9e:dc:4e:7c:d9:6a:8d:02: ee:c7:13:bf:83:b6:0a:67:2c:c3:2c:92:ca:64:c4:e5:5d:d9: f6:44:54:9b:42:ff:c5:ac:df:fe:25:e3:cb:4a:2e:8d:21:7b: 9c:d6:81:60:87:70:ea:7d:9e:83:f0:19:6e:3e:41:4b:0b:61: 63:b5:10:17:fd:76:d9:94:be:28:f7:d5:04:45:4a:94:42:a5: 95:9a:47:4f:17:04:b7:99:78:67:d7:66:9b:da:77:41:21:f3: ba:32:15:3f:61:b5:49:4e:29:b4:2f:79:53:af:ea:45:dd:c2: ae:45:fe:3e:f9:48:23:b2:35:4c:6e:d6:9b:25:12:b0:1b:eb: 24:2b:26:bb:a3:ce:bf:c7:bf:c9:8f:42:6f:6f:a0:73:f5:fa: ba:c3:f1:a5:b6:1c:3c:b8:65:85:70:89:21:92:ba:b4:57:c4: 6a:cb:42:47:ed:68:1b:0b:2f:6c:4f:b0:07:79:25:81:bf:82: b8:f8:aa:10:1c:49:ff:6b:66:d0:a1:45:11:9b:a6:c8:b7:53: c6:5b:20:1b:51:60:18:cc:11:ff:dc:86:75:24:78:0c:88:43: 6d:74:25:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrWTWXU0az4+Jq80WDTVfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MTY1MmI4MzhmZjJkOTY3MmFjOGNhNjZiYTY2MGRkNGU0 NWQ2OTkwHhcNMjUxMjA2MDgwMDQxWhcNMjUxMjA3MDgwMDQxWjAzMTEwLwYDVQQD EyhmMzA1NGM5NWM1NjliNGRlMjk1NzRkMjViZTIyZGU5ZjM2ODFiZDMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvS77x70ztCLj18iTkRxb52naLM6x i9gj/j4Mn8xIoak6HjGMfsyouFq1zDM2v+Y9lhLqROGS5F9HXR76R27vXbNX9u+w egQE68wNMqhb2Lf4d2W6Z131XQffaD1NJ+21EsGKYq+zmam2OPtGTXjKgmoHCBRV ecAcTxwt6FSroSwLc5D1U56J4akYki5oZDPNG1Xc6IA/TlnXvXw4lE/VgJH05R3b 0BiK+BtEG+khmRbhS/+AMVL1zaZdAVBjKZjU1hqa1NnQ/VvsE9GdzRVzeOEaN5R7 GeTSUDjoroi8KUaBQXlk9O9MKBc8MWlnF4GXpgKXkxPHlRYGJWExEIgLGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPMFTJXFabTeKVdNJb4i3p82gb0zMB8GA1UdIwQY MBaAFDUWUrg4/y2WcqyMpmumYN1ORdaZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlJaU3VEal9MWlp5ckl5bWE2WmczVTVGMXBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi85Y2U2MGItY2JjNC00MGQ5LTk4YWQt MWNkNTA2MDcwYmI1LzEvTlJaU3VEal9MWlp5ckl5bWE2WmczVTVGMXBrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi85Y2U2MGItY2JjNC00MGQ5LTk4YWQtMWNkNTA2MDcwYmI1 LzEvTlJaU3VEal9MWlp5ckl5bWE2WmczVTVGMXBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATndNuqTp D8q9UUJCx/QkM5vtRQZoK/tnFJZG2Z7cTnzZao0C7scTv4O2CmcswyySymTE5V3Z 9kRUm0L/xazf/iXjy0oujSF7nNaBYIdw6n2eg/AZbj5BSwthY7UQF/122ZS+KPfV BEVKlEKllZpHTxcEt5l4Z9dmm9p3QSHzujIVP2G1SU4ptC95U6/qRd3CrkX+PvlI I7I1TG7WmyUSsBvrJCsmu6POv8e/yY9Cb2+gc/X6usPxpbYcPLhlhXCJIZK6tFfE astCR+1oGwsvbE+wB3klgb+CuPiqEBxJ/2tm0KFFEZumyLdTxlsgG1FgGMwR/9yG dSR4DIhDbXQlLw== -----END CERTIFICATE-----Generated at Sat Dec 6 17:46:07 2025 by rpki-client