This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft File: NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft (raw, json) Hash identifier: hLer0LdVrbbu6VhmxHQGXHBNT8zeQRsYo7Bog9U+eNE= Subject key identifier: 17:DC:51:B3:12:EF:86:C7:7A:6C:30:02:DB:3E:8C:5D:00:6F:E2:12 Authority key identifier: 35:9C:72:43:BE:F2:DC:77:5A:E6:76:92:88:9D:5D:26:C1:B2:D1:48 Certificate issuer: /CN=359c7243bef2dc775ae67692889d5d26c1b2d148 Certificate serial: 019AF31BE6F062C37997BF82BE4E549D965F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft Manifest number: 1489 Signing time: Sat 06 Dec 2025 10:01:23 +0000 Manifest this update: Sat 06 Dec 2025 10:01:23 +0000 Manifest next update: Sun 07 Dec 2025 10:01:23 +0000 Files and hashes: 1: NZxyQ77y3Hda5naSiJ1dJsGy0Ug.crl (hash: jaw1+kmkmYq6+u5hAgmvE5M1ilODKO0a+4gfqu2hKSA=) 2: UlJ9oB76eWY6RVDQIa5ElxGCtDY.roa (hash: a/bIJ0G7k9sAULUVW4Q26EjooAyLCFQQeertx5zrtWc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft rsync://rpki.ripe.net/repository/DEFAULT/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:e6:f0:62:c3:79:97:bf:82:be:4e:54:9d:96:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=359c7243bef2dc775ae67692889d5d26c1b2d148 Validity Not Before: Dec 6 10:01:23 2025 GMT Not After : Dec 7 10:01:23 2025 GMT Subject: CN=17dc51b312ef86c77a6c3002db3e8c5d006fe212 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ae:f0:7f:bf:0e:b1:52:39:a0:38:7c:48:06: 48:a5:ed:c4:d1:49:3d:ff:5a:25:30:a8:27:44:82: 93:72:62:bd:4f:6f:94:8f:1a:22:6e:a1:d0:2f:c2: 46:b1:61:57:a1:a4:5d:50:d8:97:e6:9d:63:11:c7: 95:6f:e4:47:56:0c:3b:04:36:4a:56:55:97:05:76: c7:86:aa:d4:e7:fb:2f:f8:3c:1b:4c:c6:44:00:e6: d4:d8:af:35:3d:de:f9:84:85:a0:92:f2:2d:67:32: e7:76:f3:47:56:74:26:1d:c9:5a:7d:28:00:83:69: 21:3e:3d:bf:fb:c5:0a:1b:79:57:e5:ce:67:92:f7: fe:40:8f:84:56:fc:7d:f7:98:46:9e:1f:fa:c5:60: af:25:e6:9a:72:bb:e1:35:13:04:af:e6:4e:c3:56: a8:16:04:e6:c2:14:7a:20:35:c1:68:de:88:4e:a2: 69:e4:f6:5c:75:93:5d:68:74:11:1a:38:95:cd:b4: 92:72:1b:b3:2e:78:9e:6f:d2:2d:31:8e:b4:8c:46: d7:15:ab:1a:18:70:d2:ce:9a:e2:de:18:77:d7:04: 85:3c:58:17:7e:d4:91:c8:41:ae:4b:fb:85:13:0b: ed:82:3b:75:42:0b:48:fc:59:b4:b4:f5:4d:30:c9: 31:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:DC:51:B3:12:EF:86:C7:7A:6C:30:02:DB:3E:8C:5D:00:6F:E2:12 X509v3 Authority Key Identifier: keyid:35:9C:72:43:BE:F2:DC:77:5A:E6:76:92:88:9D:5D:26:C1:B2:D1:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:5d:d7:62:1a:b3:86:3c:de:9f:be:dc:75:00:0d:0b:77:63: d6:13:81:87:ea:64:f5:0a:7c:13:77:ed:93:49:e9:a0:4f:ca: f2:fd:97:a9:bb:ec:ff:3e:48:8a:ed:0d:e7:12:1c:59:55:45: 6d:32:a3:fc:fd:56:60:2d:8f:56:20:5f:81:2e:9b:9e:c3:b5: 5c:12:b5:82:f8:0f:f7:65:85:43:b8:d9:5b:52:a5:ae:ac:42: 16:42:05:7d:df:1b:0c:38:b5:fb:8e:53:a7:08:f9:6e:a4:07: 14:f3:28:fb:c5:66:ab:89:62:3a:b9:69:c9:c2:f8:5c:14:9f: 69:51:bf:f2:6c:49:e0:4b:08:94:80:c6:88:82:6b:e3:83:0f: 4f:f8:a8:ff:bf:c8:06:61:c8:ec:d3:66:fb:db:b2:ce:f8:6b: 9c:2e:53:12:ee:dc:ba:5e:54:b8:26:cb:45:15:c9:ce:54:9e: f5:0a:e5:da:48:c8:f7:da:6b:6e:66:d8:02:2e:ea:47:47:b9: 99:90:ec:16:84:a2:d2:21:fb:1b:e6:a5:d6:d6:f2:3f:e2:ad: bc:cb:12:0d:e2:8a:42:b1:00:75:47:6e:00:9f:f7:3f:b4:6e: ad:47:a5:c8:60:f6:05:ce:41:f1:4a:c7:a0:95:1f:93:73:eb: d3:a8:94:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG+bwYsN5l7+Cvk5UnZZfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1OWM3MjQzYmVmMmRjNzc1YWU2NzY5Mjg4OWQ1ZDI2YzFi MmQxNDgwHhcNMjUxMjA2MTAwMTIzWhcNMjUxMjA3MTAwMTIzWjAzMTEwLwYDVQQD EygxN2RjNTFiMzEyZWY4NmM3N2E2YzMwMDJkYjNlOGM1ZDAwNmZlMjEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3a7wf78OsVI5oDh8SAZIpe3E0Uk9 /1olMKgnRIKTcmK9T2+UjxoibqHQL8JGsWFXoaRdUNiX5p1jEceVb+RHVgw7BDZK VlWXBXbHhqrU5/sv+DwbTMZEAObU2K81Pd75hIWgkvItZzLndvNHVnQmHclafSgA g2khPj2/+8UKG3lX5c5nkvf+QI+EVvx995hGnh/6xWCvJeaacrvhNRMEr+ZOw1ao FgTmwhR6IDXBaN6ITqJp5PZcdZNdaHQRGjiVzbSSchuzLnieb9ItMY60jEbXFasa GHDSzpri3hh31wSFPFgXftSRyEGuS/uFEwvtgjt1QgtI/Fm0tPVNMMkxIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBfcUbMS74bHemwwAts+jF0Ab+ISMB8GA1UdIwQY MBaAFDWcckO+8tx3WuZ2koidXSbBstFIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlp4eVE3N3kzSGRhNW5hU2lKMWRKc0d5MFVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi81NTViYzktNGUxOS00ODI4LThlYmEt NjFmZmI2NTA2NjQ0LzEvTlp4eVE3N3kzSGRhNW5hU2lKMWRKc0d5MFVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi81NTViYzktNGUxOS00ODI4LThlYmEtNjFmZmI2NTA2NjQ0 LzEvTlp4eVE3N3kzSGRhNW5hU2lKMWRKc0d5MFVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApl3XYhqz hjzen77cdQANC3dj1hOBh+pk9Qp8E3ftk0npoE/K8v2Xqbvs/z5Iiu0N5xIcWVVF bTKj/P1WYC2PViBfgS6bnsO1XBK1gvgP92WFQ7jZW1KlrqxCFkIFfd8bDDi1+45T pwj5bqQHFPMo+8Vmq4liOrlpycL4XBSfaVG/8mxJ4EsIlIDGiIJr44MPT/io/7/I BmHI7NNm+9uyzvhrnC5TEu7cul5UuCbLRRXJzlSe9Qrl2kjI99prbmbYAi7qR0e5 mZDsFoSi0iH7G+al1tbyP+KtvMsSDeKKQrEAdUduAJ/3P7RurUelyGD2Bc5B8UrH oJUfk3Pr06iUYg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:33:03 2025 by rpki-client