This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.mft File: nZoMhLMHIPTUzkvboB3QVE0Cjs0.mft (raw, json) Hash identifier: qR65NZxqkHkhsmQT7HkvxNT7gQsnTypat2NA6yzCoWs= Subject key identifier: FE:9C:20:88:CF:FE:8B:AE:C8:63:96:7A:E3:EF:46:CC:36:07:D4:32 Authority key identifier: 9D:9A:0C:84:B3:07:20:F4:D4:CE:4B:DB:A0:1D:D0:54:4D:02:8E:CD Certificate issuer: /CN=9d9a0c84b30720f4d4ce4bdba01dd0544d028ecd Certificate serial: 019AF5AEDE80414512F0673F9F78655214E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nZoMhLMHIPTUzkvboB3QVE0Cjs0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 22:01:09 +0000 Manifest this update: Sat 06 Dec 2025 22:01:09 +0000 Manifest next update: Sun 07 Dec 2025 22:01:09 +0000 Files and hashes: 1: 8vJ7ABj3xVyEwXenD9W0ncMrU1A.roa (hash: 5gnWjjNTmQRrWBLMz2vS6KZph20DEPN6rQfmfIVo1TE=) 2: 95tOWT20XUkoFBLGQGdVcwDGE0s.roa (hash: Qa6N16B2kLdBJuSQoLOln9hPwf+0/JSY++MAPTIofBc=) 3: D2QorAtAGpZ4DSilBt-gZlYU1WU.roa (hash: vpJGRRZzUNjxMRhoSrLA2Ov0y70mAO/SHEjk1etazfE=) 4: nZoMhLMHIPTUzkvboB3QVE0Cjs0.crl (hash: tRt7Q1y9+z58rs8u8e9YTxPlXUR3JXu1S+ah/w/WW7w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.mft rsync://rpki.ripe.net/repository/DEFAULT/nZoMhLMHIPTUzkvboB3QVE0Cjs0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:de:80:41:45:12:f0:67:3f:9f:78:65:52:14:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d9a0c84b30720f4d4ce4bdba01dd0544d028ecd Validity Not Before: Dec 6 22:01:09 2025 GMT Not After : Dec 7 22:01:09 2025 GMT Subject: CN=fe9c2088cffe8baec863967ae3ef46cc3607d432 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:23:e8:cd:77:96:f4:9d:83:de:7c:57:d0:97: 90:b4:c7:3a:7c:91:67:19:e7:70:1b:83:2a:a5:7c: 7f:b2:d0:5a:f9:b7:c6:f5:82:03:7f:fd:10:b3:fa: 0c:19:3f:db:60:0c:ed:36:62:b2:31:2d:80:54:69: 84:7a:cb:6e:0e:38:03:b1:62:c8:ec:a5:fe:70:e9: de:8a:be:a4:5d:42:8f:81:9e:b2:3d:d6:f7:a2:0d: e6:c3:2f:07:36:4c:27:fa:9d:94:b3:84:a9:ce:53: 64:31:37:75:8b:4c:44:bb:c6:a4:88:9b:d8:b3:00: 13:f8:34:17:bd:d0:72:cd:f7:15:fa:db:19:0c:ec: 03:0e:19:bc:09:6c:47:d4:76:44:22:2b:5b:d1:7a: 4d:cf:b0:de:55:0c:34:c2:1a:94:97:66:6e:c7:3d: 0c:55:cb:57:8c:7b:29:0c:83:4e:af:f6:26:cf:44: cb:6e:d3:21:fc:38:51:5f:a2:18:71:4b:42:32:17: 6f:12:55:db:43:23:b7:d5:68:23:45:0b:4a:17:d2: a7:c7:f6:f8:8f:93:5a:ee:80:18:8c:91:69:93:03: 53:86:ac:51:0a:97:17:6b:70:fa:bb:62:3e:4d:13: 65:fc:98:e4:be:bc:2b:05:43:b8:8e:cb:6d:13:64: 3c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:9C:20:88:CF:FE:8B:AE:C8:63:96:7A:E3:EF:46:CC:36:07:D4:32 X509v3 Authority Key Identifier: keyid:9D:9A:0C:84:B3:07:20:F4:D4:CE:4B:DB:A0:1D:D0:54:4D:02:8E:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nZoMhLMHIPTUzkvboB3QVE0Cjs0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:3c:9b:a1:6f:30:f0:0e:36:38:d7:bd:96:74:96:00:4f:39: 84:29:06:22:12:b9:58:6d:80:0b:b2:92:1d:0f:46:72:6b:09: 09:f0:b7:01:3d:e1:41:57:df:eb:95:55:e4:7b:5a:20:10:03: 10:00:78:86:46:c1:9c:8b:63:56:ba:8b:fd:7f:de:16:f0:a4: 68:89:fe:a2:bf:c1:32:1a:82:21:4a:fe:f8:7c:21:c8:68:2d: 75:9f:1e:d4:34:a0:a7:fb:c7:13:cf:79:93:86:c3:e3:4a:30: dc:7f:f4:b7:58:d3:b0:d4:14:13:5f:46:03:d9:58:56:d7:08: 34:69:e2:f6:b6:b0:30:6d:4f:cd:f2:49:bc:80:a5:03:fc:a8: fe:b8:ed:4b:53:87:be:f6:19:1e:b1:b6:df:c7:b3:e8:69:f5: 0c:73:6e:32:4d:b1:bb:5b:c3:97:19:d1:b0:cf:a1:e5:00:46: b7:99:d4:2d:da:12:fc:8b:af:9a:4e:b6:7f:2f:8c:bb:29:5e: 90:4a:06:1e:7a:e4:7b:a7:dc:52:4f:a3:9c:78:0d:b6:f2:97: a7:87:69:b0:44:ca:cb:a1:be:c6:36:5e:dc:4f:a3:d6:e3:a4: f6:14:74:a2:e5:50:06:92:9a:4b:6c:5f:e1:c4:1f:34:fd:61: 72:c2:27:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rt6AQUUS8Gc/n3hlUhToMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkOWEwYzg0YjMwNzIwZjRkNGNlNGJkYmEwMWRkMDU0NGQw MjhlY2QwHhcNMjUxMjA2MjIwMTA5WhcNMjUxMjA3MjIwMTA5WjAzMTEwLwYDVQQD EyhmZTljMjA4OGNmZmU4YmFlYzg2Mzk2N2FlM2VmNDZjYzM2MDdkNDMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyPozXeW9J2D3nxX0JeQtMc6fJFn GedwG4MqpXx/stBa+bfG9YIDf/0Qs/oMGT/bYAztNmKyMS2AVGmEestuDjgDsWLI 7KX+cOneir6kXUKPgZ6yPdb3og3mwy8HNkwn+p2Us4SpzlNkMTd1i0xEu8akiJvY swAT+DQXvdByzfcV+tsZDOwDDhm8CWxH1HZEIitb0XpNz7DeVQw0whqUl2Zuxz0M VctXjHspDINOr/Ymz0TLbtMh/DhRX6IYcUtCMhdvElXbQyO31WgjRQtKF9Knx/b4 j5Na7oAYjJFpkwNThqxRCpcXa3D6u2I+TRNl/JjkvrwrBUO4jsttE2Q8bQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP6cIIjP/ouuyGOWeuPvRsw2B9QyMB8GA1UdIwQY MBaAFJ2aDISzByD01M5L26Ad0FRNAo7NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblpvTWhMTUhJUFRVemt2Ym9CM1FWRTBDanMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8xZThkNGQtNTNiZi00YWNiLWJjMGMt NTJjYWQ2Njc1ZmM2LzEvblpvTWhMTUhJUFRVemt2Ym9CM1FWRTBDanMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS8xZThkNGQtNTNiZi00YWNiLWJjMGMtNTJjYWQ2Njc1ZmM2 LzEvblpvTWhMTUhJUFRVemt2Ym9CM1FWRTBDanMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVDyboW8w 8A42ONe9lnSWAE85hCkGIhK5WG2AC7KSHQ9GcmsJCfC3AT3hQVff65VV5HtaIBAD EAB4hkbBnItjVrqL/X/eFvCkaIn+or/BMhqCIUr++HwhyGgtdZ8e1DSgp/vHE895 k4bD40ow3H/0t1jTsNQUE19GA9lYVtcINGni9rawMG1PzfJJvIClA/yo/rjtS1OH vvYZHrG238ez6Gn1DHNuMk2xu1vDlxnRsM+h5QBGt5nULdoS/Iuvmk62fy+Muyle kEoGHnrke6fcUk+jnHgNtvKXp4dpsETKy6G+xjZe3E+j1uOk9hR0ouVQBpKaS2xf 4cQfNP1hcsInfA== -----END CERTIFICATE-----Generated at Sun Dec 7 02:16:47 2025 by rpki-client