This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/c3e3ad-51eb-4e96-98b2-0b1d09498534/1/nzmWaGPYL6i9HKOTaQX6HiSpoL8.mft File: nzmWaGPYL6i9HKOTaQX6HiSpoL8.mft (raw, json) Hash identifier: 0lL8feuQEnziahCFUvXbgf/V0fgLlzYPaYNNLyRvi1Q= Subject key identifier: 9E:1D:B3:94:46:4E:98:D4:7E:A9:B4:29:68:EA:47:23:6A:2D:B0:D0 Authority key identifier: 9F:39:96:68:63:D8:2F:A8:BD:1C:A3:93:69:05:FA:1E:24:A9:A0:BF Certificate issuer: /CN=9f39966863d82fa8bd1ca3936905fa1e24a9a0bf Certificate serial: 019AF1D1D4F719041B9EC7ECBA63A37B23D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzmWaGPYL6i9HKOTaQX6HiSpoL8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/c3e3ad-51eb-4e96-98b2-0b1d09498534/1/nzmWaGPYL6i9HKOTaQX6HiSpoL8.mft Manifest number: 16EF Signing time: Sat 06 Dec 2025 04:00:51 +0000 Manifest this update: Sat 06 Dec 2025 04:00:51 +0000 Manifest next update: Sun 07 Dec 2025 04:00:51 +0000 Files and hashes: 1: nzmWaGPYL6i9HKOTaQX6HiSpoL8.crl (hash: NdnuNdgcIex0kluxjUwllO8qo+CpKGfPm8nNdczDnv0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/c3e3ad-51eb-4e96-98b2-0b1d09498534/1/nzmWaGPYL6i9HKOTaQX6HiSpoL8.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/c3e3ad-51eb-4e96-98b2-0b1d09498534/1/nzmWaGPYL6i9HKOTaQX6HiSpoL8.mft rsync://rpki.ripe.net/repository/DEFAULT/nzmWaGPYL6i9HKOTaQX6HiSpoL8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:d4:f7:19:04:1b:9e:c7:ec:ba:63:a3:7b:23:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f39966863d82fa8bd1ca3936905fa1e24a9a0bf Validity Not Before: Dec 6 04:00:51 2025 GMT Not After : Dec 7 04:00:51 2025 GMT Subject: CN=9e1db394464e98d47ea9b42968ea47236a2db0d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:4e:e9:12:10:15:9d:05:41:8e:fd:f2:26:93: a0:98:90:b3:a6:2c:a8:c6:56:a6:88:c6:b8:22:62: 2c:28:b8:a6:1b:b9:3f:a0:c1:d3:17:f2:6e:65:dc: cd:89:ee:e5:6a:72:fe:6f:56:49:38:fd:a2:4d:6d: d6:a9:cd:39:58:cb:5f:99:16:2c:60:e5:49:e9:9d: 4a:7e:f9:d0:b4:42:8b:f0:50:c9:8b:38:08:fa:d8: f4:b1:fd:d8:68:4d:80:47:0c:5d:24:b9:34:c6:26: 58:e3:84:f5:b2:ad:99:b4:d2:06:6f:0c:31:b6:d7: 42:92:a7:e2:83:5f:0d:38:41:8b:e1:69:51:61:6b: 98:ff:c8:bd:5d:cc:81:62:a0:6e:ad:00:c6:9c:f1: 8e:81:28:d6:55:ab:51:d9:33:d2:7b:66:79:cc:3a: 6e:81:d0:13:1a:4c:ba:da:c4:76:94:ce:41:e8:c0: 9a:a9:7e:de:15:eb:a4:e5:0a:88:59:9b:9e:36:8f: ce:48:2b:5d:3e:76:eb:82:ff:b0:7e:cb:8e:52:ca: 2f:89:fb:66:70:55:4d:8d:24:32:b9:5a:65:18:44: 47:4c:60:f8:9e:fa:ca:34:37:26:3c:c3:6d:6b:a0: d6:4c:9a:ec:cb:1f:74:13:e6:70:95:f8:d6:25:16: 6a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:1D:B3:94:46:4E:98:D4:7E:A9:B4:29:68:EA:47:23:6A:2D:B0:D0 X509v3 Authority Key Identifier: keyid:9F:39:96:68:63:D8:2F:A8:BD:1C:A3:93:69:05:FA:1E:24:A9:A0:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzmWaGPYL6i9HKOTaQX6HiSpoL8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c3e3ad-51eb-4e96-98b2-0b1d09498534/1/nzmWaGPYL6i9HKOTaQX6HiSpoL8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c3e3ad-51eb-4e96-98b2-0b1d09498534/1/nzmWaGPYL6i9HKOTaQX6HiSpoL8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:e7:cb:77:88:98:d3:56:98:b4:91:a2:bd:0b:70:43:ba:e6: c9:a3:1a:8b:51:bb:f1:d4:8f:56:e6:1d:85:79:b9:aa:c2:8f: b9:d7:b8:b8:13:76:8e:0c:6a:02:75:6c:27:fd:74:ad:9d:11: 67:8d:0c:df:b5:0a:38:29:6b:de:46:b7:50:77:99:be:36:55: 51:bf:14:69:74:2d:10:59:db:aa:71:f0:bb:2d:3e:db:36:45: 66:ae:11:c5:c5:3f:9d:fe:c3:1f:14:35:48:dd:73:c3:a7:2a: b9:65:8b:72:b7:b5:e0:6e:3d:fd:01:83:d6:fd:44:b9:38:b5: 05:d1:53:8c:fd:b1:64:50:b3:0d:ee:e2:6a:3e:0f:de:fc:ab: 5e:73:77:25:06:27:cf:e3:4a:7a:7b:5b:d0:24:14:50:44:bb: a9:5d:87:9d:9b:d7:f4:fb:9c:4c:00:4c:37:c1:ab:4a:3a:33: 8b:aa:b2:f0:d8:b6:47:9c:7b:ee:92:ad:30:f1:83:48:95:a9: 92:3a:11:bb:6c:e2:64:5e:d2:3b:49:63:01:1f:8c:e0:00:e1: 6b:5c:95:2b:83:8a:6b:e8:92:73:38:4a:9c:6d:91:b8:4d:45: e0:b3:84:cf:14:00:e8:56:44:2f:0e:b2:17:ea:85:0e:69:c0: 93:0e:1e:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0dT3GQQbnsfsumOjeyPSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmMzk5NjY4NjNkODJmYThiZDFjYTM5MzY5MDVmYTFlMjRh OWEwYmYwHhcNMjUxMjA2MDQwMDUxWhcNMjUxMjA3MDQwMDUxWjAzMTEwLwYDVQQD Eyg5ZTFkYjM5NDQ2NGU5OGQ0N2VhOWI0Mjk2OGVhNDcyMzZhMmRiMGQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4E7pEhAVnQVBjv3yJpOgmJCzpiyo xlamiMa4ImIsKLimG7k/oMHTF/JuZdzNie7lanL+b1ZJOP2iTW3Wqc05WMtfmRYs YOVJ6Z1KfvnQtEKL8FDJizgI+tj0sf3YaE2ARwxdJLk0xiZY44T1sq2ZtNIGbwwx ttdCkqfig18NOEGL4WlRYWuY/8i9XcyBYqBurQDGnPGOgSjWVatR2TPSe2Z5zDpu gdATGky62sR2lM5B6MCaqX7eFeuk5QqIWZueNo/OSCtdPnbrgv+wfsuOUsoviftm cFVNjSQyuVplGERHTGD4nvrKNDcmPMNta6DWTJrsyx90E+ZwlfjWJRZqiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ4ds5RGTpjUfqm0KWjqRyNqLbDQMB8GA1UdIwQY MBaAFJ85lmhj2C+ovRyjk2kF+h4kqaC/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnptV2FHUFlMNmk5SEtPVGFRWDZIaVNwb0w4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9jM2UzYWQtNTFlYi00ZTk2LTk4YjIt MGIxZDA5NDk4NTM0LzEvbnptV2FHUFlMNmk5SEtPVGFRWDZIaVNwb0w4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS9jM2UzYWQtNTFlYi00ZTk2LTk4YjItMGIxZDA5NDk4NTM0 LzEvbnptV2FHUFlMNmk5SEtPVGFRWDZIaVNwb0w4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXefLd4iY 01aYtJGivQtwQ7rmyaMai1G78dSPVuYdhXm5qsKPude4uBN2jgxqAnVsJ/10rZ0R Z40M37UKOClr3ka3UHeZvjZVUb8UaXQtEFnbqnHwuy0+2zZFZq4RxcU/nf7DHxQ1 SN1zw6cquWWLcre14G49/QGD1v1EuTi1BdFTjP2xZFCzDe7iaj4P3vyrXnN3JQYn z+NKentb0CQUUES7qV2HnZvX9PucTABMN8GrSjozi6qy8Ni2R5x77pKtMPGDSJWp kjoRu2ziZF7SO0ljAR+M4ADha1yVK4OKa+iSczhKnG2RuE1F4LOEzxQA6FZELw6y F+qFDmnAkw4eJA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:52:15 2025 by rpki-client