This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft File: nzEukpe8HSfr60dt6g7hXddWVC0.mft (raw, json) Hash identifier: jNml44FYVP5bw33X4SLFAgLzEuLsWtVS3G7O9bLwx28= Subject key identifier: 77:EC:F7:82:9A:3B:60:DA:69:0F:46:FF:2C:02:BF:88:9F:67:C6:EC Authority key identifier: 9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D Certificate issuer: /CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d Certificate serial: 019AF2E44D4F3DD37E39FE3568F61E3B3151 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft Manifest number: 0DFE Signing time: Sat 06 Dec 2025 09:00:39 +0000 Manifest this update: Sat 06 Dec 2025 09:00:39 +0000 Manifest next update: Sun 07 Dec 2025 09:00:39 +0000 Files and hashes: 1: 9DNpUDfjfX1cw67GoTejssp0I60.roa (hash: waZpM47Y+Uz4d9MPb5IIUjKVJuGJ/1amyn5dhXRlaKQ=) 2: Aesp-0bkacoacCkCpfhQPmoA2Jo.roa (hash: auTmqPfhdn5WgGssEA4un4kBW/LnIC2gzs/3RcvN434=) 3: BuDcPMwCapskKDGJlWsZctPOBc4.roa (hash: 3bBve525vpAtWU3g8/6VOaPU/EQ0F7VvrXGpa6fOHFk=) 4: PxzPuUVa2hryVcFqS1RSxgTjwqA.roa (hash: +gcitwqIIi7APjhf/dnLtr2znKOxVEk4a5pTJPB9KaY=) 5: bO_WvrYP5ttqrPDJq5s463Nszpo.roa (hash: EspaZPCLRAen7G7qKwAXYq7KwKVTki6xdz4+i5S1a6Q=) 6: f0t-76IiXeLd5savEiu94YnlFko.roa (hash: XWQiN+uiCeNuRV8xmhiqHYcJeAP9QhC6mKZPlUW2ws4=) 7: nzEukpe8HSfr60dt6g7hXddWVC0.crl (hash: usG+7SijP/KtPYleYEfo6jrBkgMOv59UOrwkwogjHVA=) 8: rb-Sc2sMQouk09qe65I3IdAX2Wg.roa (hash: oIYCzWn5Llby9+MplpHfCcN3dR2X1heBfsWvSaio7wY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 09:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:e4:4d:4f:3d:d3:7e:39:fe:35:68:f6:1e:3b:31:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d Validity Not Before: Dec 6 09:00:39 2025 GMT Not After : Dec 7 09:00:39 2025 GMT Subject: CN=77ecf7829a3b60da690f46ff2c02bf889f67c6ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:74:13:d0:86:e0:39:33:71:cd:22:5e:46:c3: 4d:18:81:1b:89:c6:ce:d8:69:46:da:5a:28:be:ad: 46:37:1f:9d:c9:94:7f:c6:97:6e:a8:8f:35:7b:c9: d0:7d:1d:3e:1d:d0:21:3f:ac:2f:f8:12:7d:4c:90: 9a:26:da:21:5a:b9:e1:38:c8:ae:36:2a:ed:0b:8b: 88:d4:cd:bc:d3:73:a0:7a:62:31:5c:f5:c6:ae:fd: a5:9d:78:c9:29:23:11:85:d0:0e:6e:b9:c0:4b:2f: 14:68:a2:cc:4f:5a:a7:1f:de:62:69:c0:e8:1b:90: 09:d1:a1:ef:46:bf:e7:aa:80:8c:b0:88:ef:27:fb: 4f:b1:5c:e3:b6:af:c2:ec:2d:86:23:22:3f:aa:13: ec:cf:61:7b:95:dc:6b:82:7d:98:9b:3a:51:e2:d2: 1d:f4:57:80:3a:e5:db:c8:e3:51:54:a5:67:24:17: 45:39:9a:2f:f5:43:db:89:bd:e1:f8:8d:9e:e1:fc: eb:a9:5e:b5:11:20:9b:90:24:53:67:53:fd:b7:0a: 8b:0a:75:4a:a0:a6:00:bc:db:88:64:cc:d9:35:de: 41:09:a4:84:5e:c9:c2:21:e1:5a:98:f8:7b:4d:10: 4d:77:2f:84:c0:77:24:e9:56:3b:32:7e:a4:12:b2: fa:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:EC:F7:82:9A:3B:60:DA:69:0F:46:FF:2C:02:BF:88:9F:67:C6:EC X509v3 Authority Key Identifier: keyid:9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:19:de:cf:32:de:80:51:da:9e:ad:2b:7e:17:c7:99:b0:df: ef:a8:a9:56:ab:80:6a:3f:5f:18:9a:b0:af:1f:69:d0:6a:4c: 5a:52:3f:d2:ca:91:e0:3d:23:5f:22:7c:fd:79:40:f8:b3:07: 1a:a2:4d:d9:56:17:77:fe:fa:c7:86:be:9f:0f:e8:c6:58:22: fa:a3:82:74:da:6a:4a:71:02:ef:a6:c6:3c:ca:bb:93:5d:90: ca:0c:49:77:24:f4:bb:8a:69:d3:13:78:2e:4b:f8:6b:28:81: 3f:3d:c5:42:30:82:4d:dd:8c:0a:19:cd:98:60:a7:52:41:62: 27:57:12:46:1d:74:2c:a7:53:be:9b:7e:3c:12:c4:51:8d:17: 74:c7:19:86:3d:fc:27:e0:71:37:58:c0:09:18:53:0b:dc:9e: 0a:73:43:f9:00:06:f2:9b:21:05:77:fb:1d:e2:ad:11:14:4d: 11:7c:2d:95:ec:85:7d:89:57:33:4f:30:66:9d:4a:2a:9d:7e: f0:eb:2e:f4:5f:34:61:69:34:2c:05:5a:4f:78:b2:47:1f:58: ee:aa:40:cb:39:5c:c2:e1:24:43:99:a9:bf:2e:28:9b:5d:8a: ea:f8:c3:31:eb:e0:01:73:07:ea:b3:39:f5:38:24:1e:6b:fc: e2:06:b0:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZry5E1PPdN+Of41aPYeOzFRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmMzEyZTkyOTdiYzFkMjdlYmViNDc2ZGVhMGVlMTVkZDc1 NjU0MmQwHhcNMjUxMjA2MDkwMDM5WhcNMjUxMjA3MDkwMDM5WjAzMTEwLwYDVQQD Eyg3N2VjZjc4MjlhM2I2MGRhNjkwZjQ2ZmYyYzAyYmY4ODlmNjdjNmVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA83QT0IbgOTNxzSJeRsNNGIEbicbO 2GlG2loovq1GNx+dyZR/xpduqI81e8nQfR0+HdAhP6wv+BJ9TJCaJtohWrnhOMiu NirtC4uI1M2803OgemIxXPXGrv2lnXjJKSMRhdAObrnASy8UaKLMT1qnH95iacDo G5AJ0aHvRr/nqoCMsIjvJ/tPsVzjtq/C7C2GIyI/qhPsz2F7ldxrgn2YmzpR4tId 9FeAOuXbyONRVKVnJBdFOZov9UPbib3h+I2e4fzrqV61ESCbkCRTZ1P9twqLCnVK oKYAvNuIZMzZNd5BCaSEXsnCIeFamPh7TRBNdy+EwHck6VY7Mn6kErL6qwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHfs94KaO2DaaQ9G/ywCv4ifZ8bsMB8GA1UdIwQY MBaAFJ8xLpKXvB0n6+tHbeoO4V3XVlQtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnpFdWtwZThIU2ZyNjBkdDZnN2hYZGRXVkMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9kZDVhMjgtZGY5ZC00NjI3LTgwOWQt YmQ1ZDNmMDBmYmIyLzEvbnpFdWtwZThIU2ZyNjBkdDZnN2hYZGRXVkMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS9kZDVhMjgtZGY5ZC00NjI3LTgwOWQtYmQ1ZDNmMDBmYmIy LzEvbnpFdWtwZThIU2ZyNjBkdDZnN2hYZGRXVkMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACxnezzLe gFHanq0rfhfHmbDf76ipVquAaj9fGJqwrx9p0GpMWlI/0sqR4D0jXyJ8/XlA+LMH GqJN2VYXd/76x4a+nw/oxlgi+qOCdNpqSnEC76bGPMq7k12QygxJdyT0u4pp0xN4 Lkv4ayiBPz3FQjCCTd2MChnNmGCnUkFiJ1cSRh10LKdTvpt+PBLEUY0XdMcZhj38 J+BxN1jACRhTC9yeCnND+QAG8pshBXf7HeKtERRNEXwtleyFfYlXM08wZp1KKp1+ 8Osu9F80YWk0LAVaT3iyRx9Y7qpAyzlcwuEkQ5mpvy4om12K6vjDMevgAXMH6rM5 9TgkHmv84gawkQ== -----END CERTIFICATE-----Generated at Sat Dec 6 16:42:39 2025 by rpki-client