This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.mft File: 1NZco0qWiw2FYauHdtuwLdt8eDM.mft (raw, json) Hash identifier: msN10N9Tw08fQszdAb3HytRl/RGGhQluUajxYEKtvMg= Subject key identifier: 7C:65:B7:14:5F:68:FD:63:4C:82:1A:97:1B:38:7E:BE:30:C2:93:29 Authority key identifier: D4:D6:5C:A3:4A:96:8B:0D:85:61:AB:87:76:DB:B0:2D:DB:7C:78:33 Certificate issuer: /CN=d4d65ca34a968b0d8561ab8776dbb02ddb7c7833 Certificate serial: 019B26646EFC382FCA0714FBB587B702C764 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1NZco0qWiw2FYauHdtuwLdt8eDM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.mft Manifest number: 075D Signing time: Tue 16 Dec 2025 09:01:14 +0000 Manifest this update: Tue 16 Dec 2025 09:01:14 +0000 Manifest next update: Wed 17 Dec 2025 09:01:14 +0000 Files and hashes: 1: 1NZco0qWiw2FYauHdtuwLdt8eDM.crl (hash: 4QEgTxtAH7amol9cdFinNE3dHdeMsSNgP/uFKwjKgSk=) 2: 7jIS7Kg3pQ0rAdPTN8-mhFQ9NMI.roa (hash: X1BBv86nq4mpZk7vS1wx5rzfijmXxCD6/5jYb3vftEE=) 3: JBZwLHOeun9xUsFliq37fa6QYAo.roa (hash: 8ByuZxbvTl/x0Sjxc//zO5GFMR7JeQh92bNKijR57Vc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.crl rsync://rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.mft rsync://rpki.ripe.net/repository/DEFAULT/1NZco0qWiw2FYauHdtuwLdt8eDM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 09:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:64:6e:fc:38:2f:ca:07:14:fb:b5:87:b7:02:c7:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4d65ca34a968b0d8561ab8776dbb02ddb7c7833 Validity Not Before: Dec 16 09:01:14 2025 GMT Not After : Dec 17 09:01:14 2025 GMT Subject: CN=7c65b7145f68fd634c821a971b387ebe30c29329 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:94:93:7a:72:fa:73:cd:da:11:8d:2e:ca:4d: 26:32:29:98:a7:e4:78:ab:8c:3f:12:0b:c4:06:40: 4a:43:ed:d5:f9:b1:70:65:c6:1c:71:79:e6:da:6b: f9:94:79:4e:5c:56:3b:fc:3f:80:aa:d9:3c:85:45: e9:51:ac:10:b6:fb:a2:93:3f:93:1d:4f:6d:a7:70: 6d:f3:ea:24:85:24:aa:16:3f:01:d1:be:3b:8f:6d: 02:82:52:41:fa:0d:cb:54:c2:8f:27:a6:9d:09:d6: 7e:4e:1d:a2:69:23:e2:b2:c7:0c:f0:7c:51:3e:c3: 44:94:9b:4f:80:50:1c:3d:cd:85:94:12:06:bf:2c: e1:59:a3:a7:7c:1f:73:cb:d9:3f:06:1e:ed:f8:76: 58:f0:4a:a8:1b:a3:7b:d1:5d:bd:07:25:8f:b1:ad: a1:c7:6b:69:08:fa:27:4a:aa:bc:5b:fe:76:07:b1: 2d:a3:ae:bc:37:39:5f:69:70:bc:af:b0:50:e0:17: ed:70:06:6b:87:7f:21:5c:a3:a6:7b:11:7a:99:9a: 33:cc:d7:a6:31:28:ab:f9:ff:8d:6f:5e:d1:84:4c: d4:21:e2:e4:77:8f:55:d1:3b:a8:b0:28:d6:aa:7b: 05:41:37:6e:73:c2:7f:b6:fc:53:d6:a3:98:49:a0: de:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:65:B7:14:5F:68:FD:63:4C:82:1A:97:1B:38:7E:BE:30:C2:93:29 X509v3 Authority Key Identifier: keyid:D4:D6:5C:A3:4A:96:8B:0D:85:61:AB:87:76:DB:B0:2D:DB:7C:78:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1NZco0qWiw2FYauHdtuwLdt8eDM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:25:8f:45:31:f7:29:f6:4f:32:e6:30:ae:6e:b4:56:ba:74: 82:86:a7:bf:71:c2:5b:6e:2e:f2:d5:bc:2c:49:38:9e:50:ac: 70:14:92:fe:3a:35:2b:46:b5:2a:76:38:75:79:30:51:a0:8f: 23:97:32:7c:11:be:5a:da:40:a9:d8:e9:75:d2:73:ee:60:33: 18:01:ae:44:b4:e4:e5:8f:82:48:b8:93:ec:a3:41:7f:22:03: 62:ca:fb:f1:c7:47:38:0a:40:55:c7:9f:fb:a4:25:26:6b:ab: 4b:5b:66:e8:e6:7f:9e:78:65:bd:91:3b:75:af:0a:50:18:89: ec:2a:e7:3b:72:bd:f6:0a:68:5a:2d:ec:af:5e:5d:7d:ca:1c: ec:0e:2e:f1:7e:38:47:d3:17:43:e5:c6:72:81:1c:10:9f:b5: 86:d7:f0:4d:5c:b5:0c:2d:bc:6e:58:86:73:52:fb:da:3c:94: d8:ab:c2:dd:6a:a7:c5:1b:60:a1:e4:84:14:92:05:ea:a8:a9: 76:71:10:dd:11:3a:57:1a:de:42:0e:56:1b:3d:89:7d:d6:35: 79:a5:58:d0:dd:15:64:e0:57:6a:0e:78:82:ad:23:50:32:e3: ef:23:8e:c4:44:28:db:a9:2e:f6:47:af:b3:1c:56:87:e4:a5: 7b:b5:72:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsmZG78OC/KBxT7tYe3AsdkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0ZDY1Y2EzNGE5NjhiMGQ4NTYxYWI4Nzc2ZGJiMDJkZGI3 Yzc4MzMwHhcNMjUxMjE2MDkwMTE0WhcNMjUxMjE3MDkwMTE0WjAzMTEwLwYDVQQD Eyg3YzY1YjcxNDVmNjhmZDYzNGM4MjFhOTcxYjM4N2ViZTMwYzI5MzI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJSTenL6c83aEY0uyk0mMimYp+R4 q4w/EgvEBkBKQ+3V+bFwZcYccXnm2mv5lHlOXFY7/D+Aqtk8hUXpUawQtvuikz+T HU9tp3Bt8+okhSSqFj8B0b47j20CglJB+g3LVMKPJ6adCdZ+Th2iaSPisscM8HxR PsNElJtPgFAcPc2FlBIGvyzhWaOnfB9zy9k/Bh7t+HZY8EqoG6N70V29ByWPsa2h x2tpCPonSqq8W/52B7Eto668NzlfaXC8r7BQ4BftcAZrh38hXKOmexF6mZozzNem MSir+f+Nb17RhEzUIeLkd49V0TuosCjWqnsFQTduc8J/tvxT1qOYSaDe9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHxltxRfaP1jTIIalxs4fr4wwpMpMB8GA1UdIwQY MBaAFNTWXKNKlosNhWGrh3bbsC3bfHgzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMU5aY28wcVdpdzJGWWF1SGR0dXdMZHQ4ZURNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8zY2MzNGQtMGYzMi00YTVkLTk4NGIt MzJlZmY5NWIzOWRjLzEvMU5aY28wcVdpdzJGWWF1SGR0dXdMZHQ4ZURNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS8zY2MzNGQtMGYzMi00YTVkLTk4NGItMzJlZmY5NWIzOWRj LzEvMU5aY28wcVdpdzJGWWF1SGR0dXdMZHQ4ZURNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFyWPRTH3 KfZPMuYwrm60Vrp0goanv3HCW24u8tW8LEk4nlCscBSS/jo1K0a1KnY4dXkwUaCP I5cyfBG+WtpAqdjpddJz7mAzGAGuRLTk5Y+CSLiT7KNBfyIDYsr78cdHOApAVcef +6QlJmurS1tm6OZ/nnhlvZE7da8KUBiJ7CrnO3K99gpoWi3sr15dfcoc7A4u8X44 R9MXQ+XGcoEcEJ+1htfwTVy1DC28bliGc1L72jyU2KvC3WqnxRtgoeSEFJIF6qip dnEQ3RE6VxreQg5WGz2JfdY1eaVY0N0VZOBXag54gq0jUDLj7yOOxEQo26ku9kev sxxWh+Sle7Vykg== -----END CERTIFICATE-----Generated at Tue Dec 16 19:46:59 2025 by rpki-client