This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/b2e3d3-32ed-4bb2-acf6-204148c5a017/1/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.mft File: NZ3cc3aEzgQXVKlbVrWgdtiFEEg.mft (raw, json) Hash identifier: BeBUb4AMrrWGN4xmwZ6JofZCtoICc309VXi3VtP4y7Q= Subject key identifier: A3:2B:46:B5:4B:0A:7D:37:06:66:0D:06:72:B1:D1:F2:5C:95:BD:EF Authority key identifier: 35:9D:DC:73:76:84:CE:04:17:54:A9:5B:56:B5:A0:76:D8:85:10:48 Certificate issuer: /CN=359ddc737684ce041754a95b56b5a076d8851048 Certificate serial: 019AF5AEDE302DDD7D1ECC67BD7B8C324473 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/b2e3d3-32ed-4bb2-acf6-204148c5a017/1/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.mft Manifest number: 1738 Signing time: Sat 06 Dec 2025 22:01:09 +0000 Manifest this update: Sat 06 Dec 2025 22:01:09 +0000 Manifest next update: Sun 07 Dec 2025 22:01:09 +0000 Files and hashes: 1: NZ3cc3aEzgQXVKlbVrWgdtiFEEg.crl (hash: MxTwsio6trpG9K6VTBcZ2nw21U8A36gHAeE1EZdT/3M=) 2: OwN_u8-wXQUeHGlWNCeV2-9Zw1E.roa (hash: GL8HC8nKjSwa4mRugn3DqDIjF1e/NuFqUhL9j08TswI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/b2e3d3-32ed-4bb2-acf6-204148c5a017/1/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.crl rsync://rpki.ripe.net/repository/DEFAULT/89/b2e3d3-32ed-4bb2-acf6-204148c5a017/1/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.mft rsync://rpki.ripe.net/repository/DEFAULT/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:de:30:2d:dd:7d:1e:cc:67:bd:7b:8c:32:44:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=359ddc737684ce041754a95b56b5a076d8851048 Validity Not Before: Dec 6 22:01:09 2025 GMT Not After : Dec 7 22:01:09 2025 GMT Subject: CN=a32b46b54b0a7d3706660d0672b1d1f25c95bdef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:05:b1:08:b0:87:0e:b7:5b:cd:53:f6:8c:d4: 1a:90:4d:2d:97:b1:a9:3a:84:09:dc:5a:1a:04:e4: ae:11:57:5f:6a:bf:1f:a3:b1:a0:6f:40:13:36:82: 08:e7:a1:e7:bc:9a:7e:8b:22:7c:c8:cc:85:2e:e6: 72:25:52:9b:ed:22:77:50:40:02:d3:44:d6:fb:7c: 92:98:c1:79:b4:90:01:5e:f8:1e:e2:45:b7:fb:11: 77:6c:10:66:38:8d:9e:0d:f4:4d:1e:2a:20:74:68: f8:be:0f:92:46:e9:87:3b:29:64:5d:f3:1d:91:60: e8:6c:ab:1d:92:1e:2e:53:8c:fe:8f:ec:fc:f9:5d: fc:20:d6:68:09:dc:fc:87:f8:fa:55:25:f6:d9:6b: 3d:62:26:02:5f:4e:ba:2a:ca:ea:d6:6d:e6:c2:63: 0c:3b:d4:af:be:f9:e0:65:b2:a6:97:57:b0:7f:70: fa:34:51:6b:c1:c7:d5:e5:33:a1:09:e8:12:5d:1f: bb:0f:ae:ba:4c:5a:94:22:a5:be:4f:9a:58:5d:34: e7:d4:5c:2f:50:b7:dc:ec:fe:07:76:71:6b:9b:c7: dc:50:90:11:59:24:3b:fd:d5:9e:5d:35:53:e3:f5: a8:54:42:6f:50:c4:20:ef:0f:5f:84:bc:58:ce:2d: 8c:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:2B:46:B5:4B:0A:7D:37:06:66:0D:06:72:B1:D1:F2:5C:95:BD:EF X509v3 Authority Key Identifier: keyid:35:9D:DC:73:76:84:CE:04:17:54:A9:5B:56:B5:A0:76:D8:85:10:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b2e3d3-32ed-4bb2-acf6-204148c5a017/1/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b2e3d3-32ed-4bb2-acf6-204148c5a017/1/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:e7:d4:77:62:fd:10:18:bf:d7:b4:e4:82:ff:53:2d:fc:81: 52:e2:72:a2:a4:31:7f:f6:e4:b3:3c:e1:ce:2f:4f:96:02:c5: 82:8e:44:1f:ff:3d:74:3a:a5:14:cb:61:a3:2e:d1:21:4c:46: 7a:89:bb:c6:0b:ef:dc:96:1e:68:03:c6:95:20:9a:d4:c4:27: 23:a6:12:20:76:c0:a3:81:a9:bc:e9:17:99:ee:b3:20:4f:69: a8:9c:83:12:d9:89:c1:b9:40:46:16:f3:72:c1:9b:50:13:22: a3:69:3a:a4:16:b7:a7:fb:d0:10:74:08:82:15:5c:76:9e:3d: ac:dd:90:95:3e:93:8c:df:03:02:75:82:aa:60:1c:f2:89:40: e4:51:fb:67:52:88:2b:aa:6c:cc:69:9c:c5:3d:8a:05:ee:5c: e5:f0:67:50:b3:70:f7:77:51:91:1f:5b:73:51:f5:34:ac:3a: 59:8a:53:7b:2f:4e:28:4b:0f:7f:23:1d:50:1e:f7:94:f7:e3: af:46:1c:64:1b:d8:02:33:bb:ac:b8:34:73:a3:dd:2c:14:cd: 09:e2:fe:16:c7:7d:a4:7e:02:a5:84:46:8c:9e:30:e4:87:ed: 3b:f3:25:cf:97:07:a2:66:c8:c1:d5:8c:e6:2e:41:d8:50:29: 2a:3a:93:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rt4wLd19HsxnvXuMMkRzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1OWRkYzczNzY4NGNlMDQxNzU0YTk1YjU2YjVhMDc2ZDg4 NTEwNDgwHhcNMjUxMjA2MjIwMTA5WhcNMjUxMjA3MjIwMTA5WjAzMTEwLwYDVQQD EyhhMzJiNDZiNTRiMGE3ZDM3MDY2NjBkMDY3MmIxZDFmMjVjOTViZGVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAWxCLCHDrdbzVP2jNQakE0tl7Gp OoQJ3FoaBOSuEVdfar8fo7Ggb0ATNoII56HnvJp+iyJ8yMyFLuZyJVKb7SJ3UEAC 00TW+3ySmMF5tJABXvge4kW3+xF3bBBmOI2eDfRNHiogdGj4vg+SRumHOylkXfMd kWDobKsdkh4uU4z+j+z8+V38INZoCdz8h/j6VSX22Ws9YiYCX066Ksrq1m3mwmMM O9SvvvngZbKml1ewf3D6NFFrwcfV5TOhCegSXR+7D666TFqUIqW+T5pYXTTn1Fwv ULfc7P4HdnFrm8fcUJARWSQ7/dWeXTVT4/WoVEJvUMQg7w9fhLxYzi2MNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKMrRrVLCn03BmYNBnKx0fJclb3vMB8GA1UdIwQY MBaAFDWd3HN2hM4EF1SpW1a1oHbYhRBIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlozY2MzYUV6Z1FYVktsYlZyV2dkdGlGRUVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9iMmUzZDMtMzJlZC00YmIyLWFjZjYt MjA0MTQ4YzVhMDE3LzEvTlozY2MzYUV6Z1FYVktsYlZyV2dkdGlGRUVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS9iMmUzZDMtMzJlZC00YmIyLWFjZjYtMjA0MTQ4YzVhMDE3 LzEvTlozY2MzYUV6Z1FYVktsYlZyV2dkdGlGRUVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd+fUd2L9 EBi/17Tkgv9TLfyBUuJyoqQxf/bkszzhzi9PlgLFgo5EH/89dDqlFMthoy7RIUxG eom7xgvv3JYeaAPGlSCa1MQnI6YSIHbAo4GpvOkXme6zIE9pqJyDEtmJwblARhbz csGbUBMio2k6pBa3p/vQEHQIghVcdp49rN2QlT6TjN8DAnWCqmAc8olA5FH7Z1KI K6pszGmcxT2KBe5c5fBnULNw93dRkR9bc1H1NKw6WYpTey9OKEsPfyMdUB73lPfj r0YcZBvYAjO7rLg0c6PdLBTNCeL+Fsd9pH4CpYRGjJ4w5IftO/Mlz5cHombIwdWM 5i5B2FApKjqTEQ== -----END CERTIFICATE-----Generated at Sun Dec 7 01:33:43 2025 by rpki-client