This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft File: nzEukpe8HSfr60dt6g7hXddWVC0.mft (raw, json) Hash identifier: gv18iKEvdC82QmxIfq+Dqp31Gp6sRXiD3+MSOtZlxn4= Subject key identifier: B7:4A:33:B0:61:A7:32:4F:E5:09:DB:B5:E4:95:04:BC:C2:C9:1A:9F Authority key identifier: 9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D Certificate issuer: /CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d Certificate serial: 019B2EC2154FFAA73A6A20B8180D43FFB963 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft Manifest number: 0E1D Signing time: Thu 18 Dec 2025 00:00:29 +0000 Manifest this update: Thu 18 Dec 2025 00:00:29 +0000 Manifest next update: Fri 19 Dec 2025 00:00:29 +0000 Files and hashes: 1: 9DNpUDfjfX1cw67GoTejssp0I60.roa (hash: waZpM47Y+Uz4d9MPb5IIUjKVJuGJ/1amyn5dhXRlaKQ=) 2: Aesp-0bkacoacCkCpfhQPmoA2Jo.roa (hash: auTmqPfhdn5WgGssEA4un4kBW/LnIC2gzs/3RcvN434=) 3: BuDcPMwCapskKDGJlWsZctPOBc4.roa (hash: 3bBve525vpAtWU3g8/6VOaPU/EQ0F7VvrXGpa6fOHFk=) 4: PxzPuUVa2hryVcFqS1RSxgTjwqA.roa (hash: +gcitwqIIi7APjhf/dnLtr2znKOxVEk4a5pTJPB9KaY=) 5: bO_WvrYP5ttqrPDJq5s463Nszpo.roa (hash: EspaZPCLRAen7G7qKwAXYq7KwKVTki6xdz4+i5S1a6Q=) 6: f0t-76IiXeLd5savEiu94YnlFko.roa (hash: XWQiN+uiCeNuRV8xmhiqHYcJeAP9QhC6mKZPlUW2ws4=) 7: nzEukpe8HSfr60dt6g7hXddWVC0.crl (hash: jowBqxYAybi4hJZH/aycewZ8ILvioeSXR4QfqFGB2FI=) 8: rb-Sc2sMQouk09qe65I3IdAX2Wg.roa (hash: oIYCzWn5Llby9+MplpHfCcN3dR2X1heBfsWvSaio7wY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:c2:15:4f:fa:a7:3a:6a:20:b8:18:0d:43:ff:b9:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d Validity Not Before: Dec 18 00:00:29 2025 GMT Not After : Dec 19 00:00:29 2025 GMT Subject: CN=b74a33b061a7324fe509dbb5e49504bcc2c91a9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:2f:92:04:9a:15:11:25:35:ff:17:26:f3:ef: 6e:b9:07:eb:df:f4:ed:a8:7a:5d:a7:ec:0f:e4:d7: f8:29:85:3f:41:19:26:fa:eb:bd:17:f3:18:8f:40: 30:f2:c7:0e:f2:30:c2:d9:df:ea:be:cb:0b:09:49: 24:02:5d:11:46:b0:95:f2:87:ad:9b:8f:e2:c2:9d: 19:a9:25:85:88:7a:5e:5e:3d:fb:06:3a:ce:19:cb: dd:cb:ca:cb:0f:e4:5e:16:5f:3b:73:54:74:f9:fe: d2:e9:f5:1f:52:3f:37:73:d8:22:41:00:a2:62:ed: bc:f9:92:af:8e:53:91:d6:a4:a1:fa:3c:07:35:8d: 38:9d:6b:68:b6:ff:7e:8a:b7:d9:46:b2:ea:55:3f: 25:91:82:35:58:3c:66:bd:31:af:64:0f:db:34:61: 3c:9c:d8:b8:b5:59:b8:9d:b5:ec:bd:21:48:43:f4: 23:96:32:3c:9a:9d:af:ca:4b:25:a4:1b:f4:1e:20: bb:26:85:2f:16:da:96:f0:63:c7:b8:4e:b0:b0:da: 5d:56:c2:8b:15:57:47:85:36:92:b0:a1:63:e3:12: c7:52:97:aa:31:59:30:01:5b:96:dd:2a:93:86:38: 8c:60:94:86:08:3f:f6:b1:7c:81:f2:7c:6f:d7:4d: 73:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:4A:33:B0:61:A7:32:4F:E5:09:DB:B5:E4:95:04:BC:C2:C9:1A:9F X509v3 Authority Key Identifier: keyid:9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:c5:ba:e5:e5:90:d4:0a:ae:9c:77:fe:92:3c:99:ff:9e:73: 3c:d8:6a:cd:0e:72:9e:78:50:7b:05:29:c3:c0:d8:2e:cf:d8: 0b:c3:d3:dc:31:0f:39:c7:a4:97:ae:61:41:6f:93:32:fc:35: 47:2a:01:8d:7f:bd:7c:08:ab:33:8b:f1:c7:f6:40:d1:96:60: 00:dc:fc:82:a1:97:d2:bf:27:47:23:cb:3b:10:ec:0f:69:31: 29:1a:6b:e7:05:c3:fc:3b:33:08:49:19:e1:7a:b9:d5:54:04: c1:ce:7d:2c:55:39:71:f3:8a:4e:ec:ad:3c:e9:4a:60:12:58: 2a:31:72:74:b9:d7:a6:37:dd:1c:a2:14:9c:64:d7:eb:fb:a2: 69:8f:3d:8e:2e:c3:67:25:96:bf:1e:cd:b2:36:f4:17:b0:f0: 84:e2:9c:6b:d3:ba:f7:1b:7c:65:b8:92:4c:d0:16:c8:14:e3: 0f:66:e2:ff:69:bc:9b:8e:6b:58:06:b3:3f:9c:d2:e1:6f:ad: 31:e9:ca:26:cb:ef:93:fe:d9:4d:cc:0c:0b:2f:98:9b:e0:4b: f4:93:1e:a6:91:35:c7:bb:69:d4:03:ce:d5:8d:67:44:9d:54: c8:37:7d:e6:b8:77:80:22:38:82:69:6f:3a:cc:69:d2:c0:16: fd:06:2e:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsuwhVP+qc6aiC4GA1D/7ljMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmMzEyZTkyOTdiYzFkMjdlYmViNDc2ZGVhMGVlMTVkZDc1 NjU0MmQwHhcNMjUxMjE4MDAwMDI5WhcNMjUxMjE5MDAwMDI5WjAzMTEwLwYDVQQD EyhiNzRhMzNiMDYxYTczMjRmZTUwOWRiYjVlNDk1MDRiY2MyYzkxYTlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5S+SBJoVESU1/xcm8+9uuQfr3/Tt qHpdp+wP5Nf4KYU/QRkm+uu9F/MYj0Aw8scO8jDC2d/qvssLCUkkAl0RRrCV8oet m4/iwp0ZqSWFiHpeXj37BjrOGcvdy8rLD+ReFl87c1R0+f7S6fUfUj83c9giQQCi Yu28+ZKvjlOR1qSh+jwHNY04nWtotv9+irfZRrLqVT8lkYI1WDxmvTGvZA/bNGE8 nNi4tVm4nbXsvSFIQ/QjljI8mp2vykslpBv0HiC7JoUvFtqW8GPHuE6wsNpdVsKL FVdHhTaSsKFj4xLHUpeqMVkwAVuW3SqThjiMYJSGCD/2sXyB8nxv101zWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLdKM7BhpzJP5QnbteSVBLzCyRqfMB8GA1UdIwQY MBaAFJ8xLpKXvB0n6+tHbeoO4V3XVlQtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnpFdWtwZThIU2ZyNjBkdDZnN2hYZGRXVkMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9kZDVhMjgtZGY5ZC00NjI3LTgwOWQt YmQ1ZDNmMDBmYmIyLzEvbnpFdWtwZThIU2ZyNjBkdDZnN2hYZGRXVkMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS9kZDVhMjgtZGY5ZC00NjI3LTgwOWQtYmQ1ZDNmMDBmYmIy LzEvbnpFdWtwZThIU2ZyNjBkdDZnN2hYZGRXVkMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAsW65eWQ 1AqunHf+kjyZ/55zPNhqzQ5ynnhQewUpw8DYLs/YC8PT3DEPOcekl65hQW+TMvw1 RyoBjX+9fAirM4vxx/ZA0ZZgANz8gqGX0r8nRyPLOxDsD2kxKRpr5wXD/DszCEkZ 4Xq51VQEwc59LFU5cfOKTuytPOlKYBJYKjFydLnXpjfdHKIUnGTX6/uiaY89ji7D ZyWWvx7Nsjb0F7DwhOKca9O69xt8ZbiSTNAWyBTjD2bi/2m8m45rWAazP5zS4W+t MenKJsvvk/7ZTcwMCy+Ym+BL9JMeppE1x7tp1APO1Y1nRJ1UyDd95rh3gCI4gmlv Osxp0sAW/QYuEw== -----END CERTIFICATE-----Generated at Thu Dec 18 05:43:22 2025 by rpki-client