This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/927638-fd47-4e56-bb9e-d7920ae44920/1/_nzo-_uEec-5drRDzDx84vcDq34.mft File: _nzo-_uEec-5drRDzDx84vcDq34.mft (raw, json) Hash identifier: nPzljmlisQLa4ziZJjht1hneQaqWnXMI9z5aMoZnWN8= Subject key identifier: 06:A2:AA:AE:17:2A:7F:65:3B:16:14:5C:00:45:0E:6F:77:43:FB:60 Authority key identifier: FE:7C:E8:FB:FB:84:79:CF:B9:76:B4:43:CC:3C:7C:E2:F7:03:AB:7E Certificate issuer: /CN=fe7ce8fbfb8479cfb976b443cc3c7ce2f703ab7e Certificate serial: 019AF12EFA6C58FC61E630465E24A6064570 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_nzo-_uEec-5drRDzDx84vcDq34.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/927638-fd47-4e56-bb9e-d7920ae44920/1/_nzo-_uEec-5drRDzDx84vcDq34.mft Manifest number: 0E42 Signing time: Sat 06 Dec 2025 01:02:59 +0000 Manifest this update: Sat 06 Dec 2025 01:02:59 +0000 Manifest next update: Sun 07 Dec 2025 01:02:59 +0000 Files and hashes: 1: _nzo-_uEec-5drRDzDx84vcDq34.crl (hash: Q8XATqOm8TFFLoRkdNtwTwx3l5FlYyjhC3UyzffIMkE=) 2: beiUjzIIFq8lUZEsjU5aHKjNnJA.roa (hash: mFm580c3qaH3SmCWZbvTiuZ0e3oedku3mVQP4lTuq5I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/927638-fd47-4e56-bb9e-d7920ae44920/1/_nzo-_uEec-5drRDzDx84vcDq34.crl rsync://rpki.ripe.net/repository/DEFAULT/72/927638-fd47-4e56-bb9e-d7920ae44920/1/_nzo-_uEec-5drRDzDx84vcDq34.mft rsync://rpki.ripe.net/repository/DEFAULT/_nzo-_uEec-5drRDzDx84vcDq34.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:fa:6c:58:fc:61:e6:30:46:5e:24:a6:06:45:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe7ce8fbfb8479cfb976b443cc3c7ce2f703ab7e Validity Not Before: Dec 6 01:02:59 2025 GMT Not After : Dec 7 01:02:59 2025 GMT Subject: CN=06a2aaae172a7f653b16145c00450e6f7743fb60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f8:e4:bd:26:9c:5f:8b:43:88:ee:8f:2c:0f: 2f:e0:94:56:4c:1c:98:26:0b:68:a7:e6:1b:94:29: 0a:1a:85:95:46:2f:4e:3f:46:b5:21:f8:f1:71:7d: 38:1b:10:ee:0b:14:4b:14:30:ba:87:58:84:6b:e6: 23:2a:44:f3:fb:4d:3a:fd:59:34:83:15:fc:18:b8: 34:c2:1e:e0:0b:82:05:86:d1:5b:ef:4c:e9:a6:e3: 23:c8:47:41:d2:67:b0:2d:2a:83:ba:12:22:8d:32: 2a:65:b6:2b:fe:b7:19:ab:b6:86:8e:1e:57:4a:d5: 7d:d1:42:cf:86:f8:1d:bc:f1:34:a1:3a:32:7d:f3: 92:ba:82:e9:18:6e:be:a7:e7:8c:cc:41:f6:66:23: 55:4f:9d:b9:df:25:cd:e4:5b:15:57:1d:83:88:10: de:85:00:b6:06:5e:ab:62:51:b1:f7:5f:c4:c7:e9: 72:3b:36:b5:7a:38:ee:86:a7:89:b5:14:3b:be:e7: 92:f0:88:5f:21:5f:95:1e:44:7c:48:1f:02:6e:9d: c5:15:99:71:4f:00:35:e1:62:46:96:53:eb:ba:d8: 34:71:6e:9f:fe:12:b7:59:b8:25:15:f2:f3:b4:24: 9b:ed:15:74:5c:99:4a:44:04:14:cd:bd:8d:5d:25: b3:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:A2:AA:AE:17:2A:7F:65:3B:16:14:5C:00:45:0E:6F:77:43:FB:60 X509v3 Authority Key Identifier: keyid:FE:7C:E8:FB:FB:84:79:CF:B9:76:B4:43:CC:3C:7C:E2:F7:03:AB:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_nzo-_uEec-5drRDzDx84vcDq34.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/927638-fd47-4e56-bb9e-d7920ae44920/1/_nzo-_uEec-5drRDzDx84vcDq34.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/927638-fd47-4e56-bb9e-d7920ae44920/1/_nzo-_uEec-5drRDzDx84vcDq34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:31:23:3e:8f:c0:87:b2:31:80:57:72:ad:81:bf:fc:74:84: 4a:9c:79:53:f7:8f:8b:4c:2b:e0:6f:ee:5f:64:43:a0:b9:4b: b3:cd:98:7b:af:4a:86:e1:0f:e5:7b:0d:fb:0c:01:58:55:8f: 41:50:28:07:f8:c4:1c:b5:d0:71:4e:3d:53:50:14:dd:77:37: 15:5f:d3:de:c4:be:c7:d8:b7:f4:29:92:cb:33:97:a2:6a:0e: 20:7b:73:8f:c3:75:e7:e4:26:4e:73:c8:cd:c9:da:f5:e0:a9: fe:1f:14:19:5e:6e:33:a1:3f:69:06:b9:39:d3:c0:a7:fa:7f: 2b:bd:37:fb:6f:7e:3c:e1:02:46:b7:f5:68:4e:f8:6a:c5:24: 18:b1:60:6e:e7:0c:4d:4f:89:03:85:4a:41:5d:1c:48:2f:01: bb:5a:4a:ca:67:8a:dd:26:bd:59:1f:f0:19:f7:e6:6b:a0:23: 06:79:2b:31:4a:e8:ee:39:49:7d:d3:da:76:62:6e:1f:99:44: 28:eb:b7:15:65:41:96:21:c0:98:a7:3c:ec:ca:ff:bc:0a:12: 57:86:d3:d4:18:7d:c7:ca:e0:8e:6d:08:1b:ba:c8:92:1a:75: 87:a3:f1:38:01:65:bc:eb:f1:d7:fa:af:53:a6:16:49:39:87: 6b:b0:74:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLvpsWPxh5jBGXiSmBkVwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlN2NlOGZiZmI4NDc5Y2ZiOTc2YjQ0M2NjM2M3Y2UyZjcw M2FiN2UwHhcNMjUxMjA2MDEwMjU5WhcNMjUxMjA3MDEwMjU5WjAzMTEwLwYDVQQD EygwNmEyYWFhZTE3MmE3ZjY1M2IxNjE0NWMwMDQ1MGU2Zjc3NDNmYjYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfjkvSacX4tDiO6PLA8v4JRWTByY Jgtop+YblCkKGoWVRi9OP0a1IfjxcX04GxDuCxRLFDC6h1iEa+YjKkTz+006/Vk0 gxX8GLg0wh7gC4IFhtFb70zppuMjyEdB0mewLSqDuhIijTIqZbYr/rcZq7aGjh5X StV90ULPhvgdvPE0oToyffOSuoLpGG6+p+eMzEH2ZiNVT5253yXN5FsVVx2DiBDe hQC2Bl6rYlGx91/Ex+lyOza1ejjuhqeJtRQ7vueS8IhfIV+VHkR8SB8Cbp3FFZlx TwA14WJGllPrutg0cW6f/hK3WbglFfLztCSb7RV0XJlKRAQUzb2NXSWzzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAaiqq4XKn9lOxYUXABFDm93Q/tgMB8GA1UdIwQY MBaAFP586Pv7hHnPuXa0Q8w8fOL3A6t+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX256by1fdUVlYy01ZHJSRHpEeDg0dmNEcTM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi85Mjc2MzgtZmQ0Ny00ZTU2LWJiOWUt ZDc5MjBhZTQ0OTIwLzEvX256by1fdUVlYy01ZHJSRHpEeDg0dmNEcTM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi85Mjc2MzgtZmQ0Ny00ZTU2LWJiOWUtZDc5MjBhZTQ0OTIw LzEvX256by1fdUVlYy01ZHJSRHpEeDg0dmNEcTM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcDEjPo/A h7IxgFdyrYG//HSESpx5U/ePi0wr4G/uX2RDoLlLs82Ye69KhuEP5XsN+wwBWFWP QVAoB/jEHLXQcU49U1AU3Xc3FV/T3sS+x9i39CmSyzOXomoOIHtzj8N15+QmTnPI zcna9eCp/h8UGV5uM6E/aQa5OdPAp/p/K703+29+POECRrf1aE74asUkGLFgbucM TU+JA4VKQV0cSC8Bu1pKymeK3Sa9WR/wGffma6AjBnkrMUro7jlJfdPadmJuH5lE KOu3FWVBliHAmKc87Mr/vAoSV4bT1Bh9x8rgjm0IG7rIkhp1h6PxOAFlvOvx1/qv U6YWSTmHa7B0tw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:37:20 2025 by rpki-client