This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/44890f-d744-4b8f-a5f4-229a70a00384/1/Nz3Mauaq2IhZH7d75OqWDzU1__Q.mft File: Nz3Mauaq2IhZH7d75OqWDzU1__Q.mft (raw, json) Hash identifier: u75VH+IxRtFhtl7IsPTrHv7+w9h38DYwsaWRX4H0r7U= Subject key identifier: 33:1F:1C:2A:FB:C3:A8:05:6E:4B:96:14:16:BF:A6:54:D7:A9:C9:4E Authority key identifier: 37:3D:CC:6A:E6:AA:D8:88:59:1F:B7:7B:E4:EA:96:0F:35:35:FF:F4 Certificate issuer: /CN=373dcc6ae6aad888591fb77be4ea960f3535fff4 Certificate serial: 019AF12D19E27F8AF493EBDF975B3BB34616 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nz3Mauaq2IhZH7d75OqWDzU1__Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/44890f-d744-4b8f-a5f4-229a70a00384/1/Nz3Mauaq2IhZH7d75OqWDzU1__Q.mft Manifest number: 0DC5 Signing time: Sat 06 Dec 2025 01:00:55 +0000 Manifest this update: Sat 06 Dec 2025 01:00:55 +0000 Manifest next update: Sun 07 Dec 2025 01:00:55 +0000 Files and hashes: 1: Nz3Mauaq2IhZH7d75OqWDzU1__Q.crl (hash: HrU8D/eQtCYF1DEg/cPIgSICKJWT5MFtBrn34MiqibU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/44890f-d744-4b8f-a5f4-229a70a00384/1/Nz3Mauaq2IhZH7d75OqWDzU1__Q.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/44890f-d744-4b8f-a5f4-229a70a00384/1/Nz3Mauaq2IhZH7d75OqWDzU1__Q.mft rsync://rpki.ripe.net/repository/DEFAULT/Nz3Mauaq2IhZH7d75OqWDzU1__Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:19:e2:7f:8a:f4:93:eb:df:97:5b:3b:b3:46:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=373dcc6ae6aad888591fb77be4ea960f3535fff4 Validity Not Before: Dec 6 01:00:55 2025 GMT Not After : Dec 7 01:00:55 2025 GMT Subject: CN=331f1c2afbc3a8056e4b961416bfa654d7a9c94e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:ad:e4:af:62:14:5a:df:28:47:ef:4a:69:5b: 47:f7:d6:f9:41:1c:8e:63:5f:88:d1:9d:f0:f4:1e: ac:d6:8c:b4:8f:63:76:64:03:d1:61:e8:ec:9f:0f: 0e:7e:e4:bb:3f:d0:5d:89:2e:61:c1:20:d3:a1:dc: de:c3:08:f5:18:0e:49:7b:37:97:9a:f1:db:88:7e: ba:00:41:74:0f:42:fd:15:ea:f6:c3:83:86:6f:cd: dc:55:8c:e7:c4:fe:ca:77:1f:8b:47:50:c3:e5:07: 6f:1f:77:2b:31:bd:5c:fc:01:e9:73:63:d7:89:9a: 78:83:e3:9d:ea:f8:af:aa:ae:23:5d:21:41:a9:35: b9:82:f1:09:81:42:1f:ac:98:55:4b:be:63:88:49: 92:8f:5a:f4:61:cd:24:ba:81:16:41:26:98:4b:89: e1:9d:cd:f8:33:07:d3:56:c8:f3:ea:ba:39:8c:bb: 72:0d:8b:c9:19:1b:c2:6a:07:bd:66:df:9b:26:9b: 37:5a:37:81:e1:77:5a:98:75:24:31:3a:16:b6:18: 0a:3c:53:07:ba:a8:48:a5:9b:21:12:0f:08:ca:73: 65:70:f4:1f:f0:11:1e:78:85:23:11:ed:f6:52:1d: 8f:7f:95:30:48:63:a0:b3:6f:5c:f2:47:e4:db:37: eb:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:1F:1C:2A:FB:C3:A8:05:6E:4B:96:14:16:BF:A6:54:D7:A9:C9:4E X509v3 Authority Key Identifier: keyid:37:3D:CC:6A:E6:AA:D8:88:59:1F:B7:7B:E4:EA:96:0F:35:35:FF:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nz3Mauaq2IhZH7d75OqWDzU1__Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/44890f-d744-4b8f-a5f4-229a70a00384/1/Nz3Mauaq2IhZH7d75OqWDzU1__Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/44890f-d744-4b8f-a5f4-229a70a00384/1/Nz3Mauaq2IhZH7d75OqWDzU1__Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:5f:34:9b:e9:cd:ec:c3:0f:74:cc:6b:86:17:23:af:40:64: 20:06:aa:ea:75:ca:36:dc:63:d5:3e:c7:2a:28:fb:95:73:15: 53:10:d6:6a:07:9a:89:36:46:03:18:4c:18:2e:67:07:f9:9e: bc:f3:3d:6c:6b:fc:bf:b7:f3:87:04:60:89:e0:c0:6b:e7:be: ab:c1:32:cc:d4:ae:05:a6:4b:fb:6f:ea:4a:04:9b:6a:f8:5f: 31:21:d4:c6:53:96:f0:95:6b:77:79:2d:ec:0b:41:6f:92:49: 7d:1b:3d:6e:4e:d5:a2:ef:da:30:3e:f3:a7:b0:39:55:44:3e: aa:27:f5:2d:b5:3b:26:1a:c6:db:61:17:a7:63:82:c6:3a:7e: 10:8d:c3:47:46:64:0d:3b:ff:0b:ca:44:03:c4:b6:2b:ae:62: 44:29:ab:8a:21:d4:69:f1:66:d7:ba:bc:a3:58:8b:a6:35:8c: b9:3e:8e:d7:c3:06:a1:05:13:9e:b5:79:90:d3:9e:24:b2:d4: 1b:c1:fd:23:11:3c:8f:94:38:bf:91:d2:96:41:0d:22:e2:72: 1a:cc:e9:61:5b:d0:be:7f:97:4e:75:19:45:2c:69:f9:2e:03: 33:f0:1b:41:97:68:07:d6:85:fe:68:a3:23:b4:06:a7:6f:ab: 56:70:ae:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLRnif4r0k+vfl1s7s0YWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3M2RjYzZhZTZhYWQ4ODg1OTFmYjc3YmU0ZWE5NjBmMzUz NWZmZjQwHhcNMjUxMjA2MDEwMDU1WhcNMjUxMjA3MDEwMDU1WjAzMTEwLwYDVQQD EygzMzFmMWMyYWZiYzNhODA1NmU0Yjk2MTQxNmJmYTY1NGQ3YTljOTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7a3kr2IUWt8oR+9KaVtH99b5QRyO Y1+I0Z3w9B6s1oy0j2N2ZAPRYejsnw8OfuS7P9BdiS5hwSDTodzewwj1GA5JezeX mvHbiH66AEF0D0L9Fer2w4OGb83cVYznxP7Kdx+LR1DD5QdvH3crMb1c/AHpc2PX iZp4g+Od6vivqq4jXSFBqTW5gvEJgUIfrJhVS75jiEmSj1r0Yc0kuoEWQSaYS4nh nc34MwfTVsjz6ro5jLtyDYvJGRvCage9Zt+bJps3WjeB4XdamHUkMToWthgKPFMH uqhIpZshEg8IynNlcPQf8BEeeIUjEe32Uh2Pf5UwSGOgs29c8kfk2zfrMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDMfHCr7w6gFbkuWFBa/plTXqclOMB8GA1UdIwQY MBaAFDc9zGrmqtiIWR+3e+Tqlg81Nf/0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnozTWF1YXEySWhaSDdkNzVPcVdEelUxX19RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy80NDg5MGYtZDc0NC00YjhmLWE1ZjQt MjI5YTcwYTAwMzg0LzEvTnozTWF1YXEySWhaSDdkNzVPcVdEelUxX19RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy80NDg5MGYtZDc0NC00YjhmLWE1ZjQtMjI5YTcwYTAwMzg0 LzEvTnozTWF1YXEySWhaSDdkNzVPcVdEelUxX19RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN180m+nN 7MMPdMxrhhcjr0BkIAaq6nXKNtxj1T7HKij7lXMVUxDWageaiTZGAxhMGC5nB/me vPM9bGv8v7fzhwRgieDAa+e+q8EyzNSuBaZL+2/qSgSbavhfMSHUxlOW8JVrd3kt 7AtBb5JJfRs9bk7Vou/aMD7zp7A5VUQ+qif1LbU7JhrG22EXp2OCxjp+EI3DR0Zk DTv/C8pEA8S2K65iRCmriiHUafFm17q8o1iLpjWMuT6O18MGoQUTnrV5kNOeJLLU G8H9IxE8j5Q4v5HSlkENIuJyGszpYVvQvn+XTnUZRSxp+S4DM/AbQZdoB9aF/mij I7QGp2+rVnCuhg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:19:15 2025 by rpki-client