This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/c3e3ad-51eb-4e96-98b2-0b1d09498534/1/nzmWaGPYL6i9HKOTaQX6HiSpoL8.mft File: nzmWaGPYL6i9HKOTaQX6HiSpoL8.mft (raw, json) Hash identifier: wmaSsmKPMYqiK+f/fAxO41LDtjc7icJMTkCWT44EDRU= Subject key identifier: 2A:9C:E8:8A:23:16:E0:9F:18:EF:36:D8:8E:3E:5B:9F:D4:33:91:CE Authority key identifier: 9F:39:96:68:63:D8:2F:A8:BD:1C:A3:93:69:05:FA:1E:24:A9:A0:BF Certificate issuer: /CN=9f39966863d82fa8bd1ca3936905fa1e24a9a0bf Certificate serial: 019B3F11D9DD48C25AC812F546C6DFA06A85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzmWaGPYL6i9HKOTaQX6HiSpoL8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/c3e3ad-51eb-4e96-98b2-0b1d09498534/1/nzmWaGPYL6i9HKOTaQX6HiSpoL8.mft Manifest number: 1717 Signing time: Sun 21 Dec 2025 04:01:33 +0000 Manifest this update: Sun 21 Dec 2025 04:01:33 +0000 Manifest next update: Mon 22 Dec 2025 04:01:33 +0000 Files and hashes: 1: nzmWaGPYL6i9HKOTaQX6HiSpoL8.crl (hash: JblOid10mywHBfZtXrr6DnIbA+pf4R+tvFRJTl3w3R8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/c3e3ad-51eb-4e96-98b2-0b1d09498534/1/nzmWaGPYL6i9HKOTaQX6HiSpoL8.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/c3e3ad-51eb-4e96-98b2-0b1d09498534/1/nzmWaGPYL6i9HKOTaQX6HiSpoL8.mft rsync://rpki.ripe.net/repository/DEFAULT/nzmWaGPYL6i9HKOTaQX6HiSpoL8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:d9:dd:48:c2:5a:c8:12:f5:46:c6:df:a0:6a:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f39966863d82fa8bd1ca3936905fa1e24a9a0bf Validity Not Before: Dec 21 04:01:33 2025 GMT Not After : Dec 22 04:01:33 2025 GMT Subject: CN=2a9ce88a2316e09f18ef36d88e3e5b9fd43391ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b9:94:c7:09:73:c7:f6:81:f7:c6:f0:dd:52: 5d:77:e4:7f:d8:d4:2e:ba:8f:dd:2a:44:1d:f1:eb: f0:3a:98:1c:b3:19:f1:f6:17:9e:bd:31:d9:43:54: 7e:d9:7c:92:64:c8:31:b0:d5:0a:6f:67:21:2b:37: 39:e5:1a:8f:2c:a7:ef:3f:1e:c4:08:4a:1d:3c:22: 77:31:dc:4b:7d:52:67:ef:1f:97:49:26:7d:e1:1b: cf:66:d0:92:81:0d:db:d7:18:2b:67:1c:db:97:65: a3:dd:19:cc:67:5c:33:6c:bf:20:55:48:89:b2:8d: 88:ef:b4:fc:42:35:80:c1:18:af:2e:e2:00:df:08: 8a:63:55:af:fc:3d:dc:48:ac:38:52:85:f6:f8:93: d0:3b:bb:81:95:83:ff:2c:93:66:c0:c5:e2:5d:bf: 21:e3:c7:55:b6:b2:69:3a:24:4f:20:b2:65:74:2f: 21:71:8f:70:92:15:bc:62:fb:d7:c7:b3:83:c1:9d: 0b:40:6c:db:1a:d2:42:df:a0:95:0a:9a:f2:0e:08: 45:50:7b:d7:cf:64:f9:8a:37:6f:91:25:cd:61:64: 85:a4:ff:33:5b:ec:54:32:48:8e:1f:e0:f7:e3:fd: 31:5d:82:a0:a1:ba:81:40:35:e6:3c:d0:c5:2d:52: d6:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:9C:E8:8A:23:16:E0:9F:18:EF:36:D8:8E:3E:5B:9F:D4:33:91:CE X509v3 Authority Key Identifier: keyid:9F:39:96:68:63:D8:2F:A8:BD:1C:A3:93:69:05:FA:1E:24:A9:A0:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzmWaGPYL6i9HKOTaQX6HiSpoL8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c3e3ad-51eb-4e96-98b2-0b1d09498534/1/nzmWaGPYL6i9HKOTaQX6HiSpoL8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c3e3ad-51eb-4e96-98b2-0b1d09498534/1/nzmWaGPYL6i9HKOTaQX6HiSpoL8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:0a:06:c7:f2:21:09:06:5f:b5:ba:f4:94:4d:b6:9d:2c:b6: 4e:a0:4c:e5:53:92:3e:e0:92:1b:42:87:5c:27:85:59:f9:10: 1d:ac:3c:f1:24:66:38:17:4c:59:1c:67:5c:fb:6b:91:88:17: 0a:86:97:87:3a:5b:12:78:b9:ae:d1:ba:60:0a:39:f1:b4:de: 1e:3f:e4:9c:74:88:3b:3d:29:b2:c9:3e:f4:25:25:af:fc:73: e2:6c:1f:89:58:d6:59:f6:37:cc:4b:7d:8d:ba:3f:66:47:c6: 1c:00:97:a4:1f:b7:bc:93:d3:86:5f:ce:6d:12:20:cf:54:e2: 05:01:f1:46:0d:a7:f9:1c:d6:5b:2d:0d:f3:4c:f9:db:ae:ac: 06:83:1e:e9:b2:ae:38:01:ee:fb:16:3a:4f:38:65:bf:dd:df: 4e:3c:4f:61:e7:0a:21:32:b0:3e:76:f5:ad:8f:7b:dc:d6:f4: 87:b9:6b:46:df:6a:30:e3:c6:15:82:84:bb:ad:52:00:4c:bb: 87:06:03:6b:9c:aa:52:e3:45:fc:dd:1a:2e:16:5e:22:d2:4a: 5c:87:48:f3:53:8b:3a:96:27:59:07:2c:3b:06:e1:4c:95:de: f8:da:0f:d6:c0:c2:a2:bb:24:89:cc:73:bf:81:46:34:9a:f3: 0e:06:1f:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/EdndSMJayBL1RsbfoGqFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmMzk5NjY4NjNkODJmYThiZDFjYTM5MzY5MDVmYTFlMjRh OWEwYmYwHhcNMjUxMjIxMDQwMTMzWhcNMjUxMjIyMDQwMTMzWjAzMTEwLwYDVQQD EygyYTljZTg4YTIzMTZlMDlmMThlZjM2ZDg4ZTNlNWI5ZmQ0MzM5MWNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrmUxwlzx/aB98bw3VJdd+R/2NQu uo/dKkQd8evwOpgcsxnx9heevTHZQ1R+2XySZMgxsNUKb2chKzc55RqPLKfvPx7E CEodPCJ3MdxLfVJn7x+XSSZ94RvPZtCSgQ3b1xgrZxzbl2Wj3RnMZ1wzbL8gVUiJ so2I77T8QjWAwRivLuIA3wiKY1Wv/D3cSKw4UoX2+JPQO7uBlYP/LJNmwMXiXb8h 48dVtrJpOiRPILJldC8hcY9wkhW8YvvXx7ODwZ0LQGzbGtJC36CVCpryDghFUHvX z2T5ijdvkSXNYWSFpP8zW+xUMkiOH+D34/0xXYKgobqBQDXmPNDFLVLWzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCqc6IojFuCfGO822I4+W5/UM5HOMB8GA1UdIwQY MBaAFJ85lmhj2C+ovRyjk2kF+h4kqaC/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnptV2FHUFlMNmk5SEtPVGFRWDZIaVNwb0w4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9jM2UzYWQtNTFlYi00ZTk2LTk4YjIt MGIxZDA5NDk4NTM0LzEvbnptV2FHUFlMNmk5SEtPVGFRWDZIaVNwb0w4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS9jM2UzYWQtNTFlYi00ZTk2LTk4YjItMGIxZDA5NDk4NTM0 LzEvbnptV2FHUFlMNmk5SEtPVGFRWDZIaVNwb0w4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADwoGx/Ih CQZftbr0lE22nSy2TqBM5VOSPuCSG0KHXCeFWfkQHaw88SRmOBdMWRxnXPtrkYgX CoaXhzpbEni5rtG6YAo58bTeHj/knHSIOz0pssk+9CUlr/xz4mwfiVjWWfY3zEt9 jbo/ZkfGHACXpB+3vJPThl/ObRIgz1TiBQHxRg2n+RzWWy0N80z5266sBoMe6bKu OAHu+xY6Tzhlv93fTjxPYecKITKwPnb1rY973Nb0h7lrRt9qMOPGFYKEu61SAEy7 hwYDa5yqUuNF/N0aLhZeItJKXIdI81OLOpYnWQcsOwbhTJXe+NoP1sDCorskicxz v4FGNJrzDgYfFQ== -----END CERTIFICATE-----Generated at Sun Dec 21 08:45:03 2025 by rpki-client