This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/b2e3d3-32ed-4bb2-acf6-204148c5a017/1/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.mft File: NZ3cc3aEzgQXVKlbVrWgdtiFEEg.mft (raw, json) Hash identifier: q/N+mlsEEeXV6y5riF3+78jJLsJrZrs0VvzdiIHvWRU= Subject key identifier: 2F:A9:D2:EB:9D:F2:3E:81:56:09:E5:C9:B1:10:A4:A3:2C:B1:4A:34 Authority key identifier: 35:9D:DC:73:76:84:CE:04:17:54:A9:5B:56:B5:A0:76:D8:85:10:48 Certificate issuer: /CN=359ddc737684ce041754a95b56b5a076d8851048 Certificate serial: 019B3D22E18FF6A30D28F8ADF2CE6ECB1237 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/b2e3d3-32ed-4bb2-acf6-204148c5a017/1/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.mft Manifest number: 175D Signing time: Sat 20 Dec 2025 19:00:54 +0000 Manifest this update: Sat 20 Dec 2025 19:00:54 +0000 Manifest next update: Sun 21 Dec 2025 19:00:54 +0000 Files and hashes: 1: NZ3cc3aEzgQXVKlbVrWgdtiFEEg.crl (hash: xg6sNMrPxA+32F5JYDL0MlM057G8eMmPuBXSiqRMRTg=) 2: OwN_u8-wXQUeHGlWNCeV2-9Zw1E.roa (hash: GL8HC8nKjSwa4mRugn3DqDIjF1e/NuFqUhL9j08TswI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/b2e3d3-32ed-4bb2-acf6-204148c5a017/1/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.crl rsync://rpki.ripe.net/repository/DEFAULT/89/b2e3d3-32ed-4bb2-acf6-204148c5a017/1/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.mft rsync://rpki.ripe.net/repository/DEFAULT/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:22:e1:8f:f6:a3:0d:28:f8:ad:f2:ce:6e:cb:12:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=359ddc737684ce041754a95b56b5a076d8851048 Validity Not Before: Dec 20 19:00:54 2025 GMT Not After : Dec 21 19:00:54 2025 GMT Subject: CN=2fa9d2eb9df23e815609e5c9b110a4a32cb14a34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d2:3c:ef:cd:4e:8c:fa:91:ab:f6:46:c6:01: 64:ee:15:ff:27:16:3d:11:0c:2f:93:56:86:cb:5a: e0:bb:67:63:df:ab:fc:4f:8b:2b:58:bd:fa:9f:62: 58:fa:70:3c:10:ad:cb:77:c8:ca:9b:1d:ff:92:15: f5:6a:01:f7:67:f1:3d:f3:bd:eb:d6:da:a9:28:82: 4c:fa:5e:49:a6:09:de:a9:4c:aa:e9:a8:a8:c2:c6: 42:61:ab:8f:7f:c9:ae:17:e8:f8:7f:08:86:74:27: c6:6d:ba:d3:06:9f:7c:bc:8a:b0:ae:cd:90:a7:96: b8:34:59:19:18:c2:22:6d:41:ba:69:4e:a6:33:f2: 79:31:25:b2:57:3a:f3:d8:5b:1b:67:1e:e0:02:79: 1f:fc:87:56:f4:5a:6a:4d:1c:46:58:47:64:ac:57: eb:f3:b2:8a:b3:90:9b:bf:c9:e4:b6:e9:71:db:19: 14:38:6a:02:88:ff:45:d9:bf:da:ea:5d:e5:23:c1: 7a:d6:0c:e3:52:df:dc:54:09:40:a3:e1:33:b3:d8: d9:7e:8a:ef:77:ea:0b:eb:ad:a1:8a:db:37:f9:cb: 45:90:70:f7:47:67:c5:a7:d6:8f:89:a1:5f:ca:5c: 74:c2:e4:6a:47:b2:17:72:f1:38:51:d9:36:aa:c7: 9b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:A9:D2:EB:9D:F2:3E:81:56:09:E5:C9:B1:10:A4:A3:2C:B1:4A:34 X509v3 Authority Key Identifier: keyid:35:9D:DC:73:76:84:CE:04:17:54:A9:5B:56:B5:A0:76:D8:85:10:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b2e3d3-32ed-4bb2-acf6-204148c5a017/1/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b2e3d3-32ed-4bb2-acf6-204148c5a017/1/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:77:d6:21:c0:70:f6:a2:97:59:ff:23:0f:1e:8a:85:a0:d8: 78:1b:c5:e9:01:07:a2:64:ce:f8:9b:a2:0e:72:95:30:a3:3a: 47:e2:0f:b9:51:1e:5f:b6:4a:cf:fe:cb:27:ef:cf:bc:0a:7c: 3f:62:1c:dc:27:19:8f:f1:48:8a:74:c4:76:af:0c:90:67:12: f5:67:83:f5:5e:e6:31:37:4a:84:80:cd:7d:a4:fb:b5:da:fd: b9:50:e2:50:7d:55:88:17:92:25:02:1b:56:63:55:9b:85:f8: 94:3d:51:45:65:fc:7e:8e:5f:24:8c:50:56:e2:c4:59:b1:f1: 3c:09:88:ba:31:fd:e5:d3:4c:ce:ad:f2:31:a8:cf:c6:03:4f: 59:8a:7f:c0:55:69:a5:b5:9c:54:de:21:37:14:05:3b:9c:2a: bc:d3:06:25:ff:a5:cf:c7:60:8b:3f:8b:7a:2c:21:f4:14:b3: aa:b3:5e:ac:f7:d7:c8:05:be:f6:1b:bd:b3:d4:39:b5:b7:13: e6:5a:b0:e4:3e:76:2f:96:62:97:08:54:d5:91:c9:23:ce:62: 0a:e1:4d:01:56:c5:ac:2f:d5:ee:98:e7:39:73:c6:3b:ab:8a: b5:b1:9d:c8:8f:a7:1a:ba:eb:74:48:4b:dc:29:22:c4:04:8d: bd:ae:a1:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9IuGP9qMNKPit8s5uyxI3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1OWRkYzczNzY4NGNlMDQxNzU0YTk1YjU2YjVhMDc2ZDg4 NTEwNDgwHhcNMjUxMjIwMTkwMDU0WhcNMjUxMjIxMTkwMDU0WjAzMTEwLwYDVQQD EygyZmE5ZDJlYjlkZjIzZTgxNTYwOWU1YzliMTEwYTRhMzJjYjE0YTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNI8781OjPqRq/ZGxgFk7hX/JxY9 EQwvk1aGy1rgu2dj36v8T4srWL36n2JY+nA8EK3Ld8jKmx3/khX1agH3Z/E9873r 1tqpKIJM+l5JpgneqUyq6aiowsZCYauPf8muF+j4fwiGdCfGbbrTBp98vIqwrs2Q p5a4NFkZGMIibUG6aU6mM/J5MSWyVzrz2FsbZx7gAnkf/IdW9FpqTRxGWEdkrFfr 87KKs5Cbv8nktulx2xkUOGoCiP9F2b/a6l3lI8F61gzjUt/cVAlAo+Ezs9jZforv d+oL662hits3+ctFkHD3R2fFp9aPiaFfylx0wuRqR7IXcvE4Udk2qseb5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC+p0uud8j6BVgnlybEQpKMssUo0MB8GA1UdIwQY MBaAFDWd3HN2hM4EF1SpW1a1oHbYhRBIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlozY2MzYUV6Z1FYVktsYlZyV2dkdGlGRUVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9iMmUzZDMtMzJlZC00YmIyLWFjZjYt MjA0MTQ4YzVhMDE3LzEvTlozY2MzYUV6Z1FYVktsYlZyV2dkdGlGRUVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS9iMmUzZDMtMzJlZC00YmIyLWFjZjYtMjA0MTQ4YzVhMDE3 LzEvTlozY2MzYUV6Z1FYVktsYlZyV2dkdGlGRUVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnHfWIcBw 9qKXWf8jDx6KhaDYeBvF6QEHomTO+JuiDnKVMKM6R+IPuVEeX7ZKz/7LJ+/PvAp8 P2Ic3CcZj/FIinTEdq8MkGcS9WeD9V7mMTdKhIDNfaT7tdr9uVDiUH1ViBeSJQIb VmNVm4X4lD1RRWX8fo5fJIxQVuLEWbHxPAmIujH95dNMzq3yMajPxgNPWYp/wFVp pbWcVN4hNxQFO5wqvNMGJf+lz8dgiz+Leiwh9BSzqrNerPfXyAW+9hu9s9Q5tbcT 5lqw5D52L5ZilwhU1ZHJI85iCuFNAVbFrC/V7pjnOXPGO6uKtbGdyI+nGrrrdEhL 3CkixASNva6h7Q== -----END CERTIFICATE-----Generated at Sun Dec 21 02:22:52 2025 by rpki-client