This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.mft File: 1NZco0qWiw2FYauHdtuwLdt8eDM.mft (raw, json) Hash identifier: MqDeiRkmWaZe7Upqlq3LIfybVF39EIgleXIJwVllE9A= Subject key identifier: 85:13:92:27:9D:1D:4E:B2:1B:6E:C6:01:16:65:CC:A4:5F:62:B2:7A Authority key identifier: D4:D6:5C:A3:4A:96:8B:0D:85:61:AB:87:76:DB:B0:2D:DB:7C:78:33 Certificate issuer: /CN=d4d65ca34a968b0d8561ab8776dbb02ddb7c7833 Certificate serial: 019B28527EEE3F0B605B0FFE30856D32E437 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1NZco0qWiw2FYauHdtuwLdt8eDM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.mft Manifest number: 075E Signing time: Tue 16 Dec 2025 18:00:53 +0000 Manifest this update: Tue 16 Dec 2025 18:00:53 +0000 Manifest next update: Wed 17 Dec 2025 18:00:53 +0000 Files and hashes: 1: 1NZco0qWiw2FYauHdtuwLdt8eDM.crl (hash: 1YPD9IntM6ihrpbDObCsxV7gTgfE4iYafybARurSy9U=) 2: 7jIS7Kg3pQ0rAdPTN8-mhFQ9NMI.roa (hash: X1BBv86nq4mpZk7vS1wx5rzfijmXxCD6/5jYb3vftEE=) 3: JBZwLHOeun9xUsFliq37fa6QYAo.roa (hash: 8ByuZxbvTl/x0Sjxc//zO5GFMR7JeQh92bNKijR57Vc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.crl rsync://rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.mft rsync://rpki.ripe.net/repository/DEFAULT/1NZco0qWiw2FYauHdtuwLdt8eDM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:52:7e:ee:3f:0b:60:5b:0f:fe:30:85:6d:32:e4:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4d65ca34a968b0d8561ab8776dbb02ddb7c7833 Validity Not Before: Dec 16 18:00:53 2025 GMT Not After : Dec 17 18:00:53 2025 GMT Subject: CN=851392279d1d4eb21b6ec6011665cca45f62b27a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:19:50:6c:4b:b0:64:53:e3:4f:15:89:a7:6f: 7e:3c:6e:f7:c5:87:8d:36:3b:7e:4a:3c:39:d1:9b: da:20:a4:de:b4:38:f0:3b:66:3e:6b:39:25:9a:d8: d3:3e:ff:23:30:ce:29:9a:d8:5a:11:53:7e:4b:d0: 7f:27:bf:b9:a4:2f:8c:04:b6:b8:93:28:22:d9:1c: d2:43:1a:fb:bb:6f:05:65:00:33:d7:c1:64:61:6e: ed:eb:ee:40:da:b1:d5:36:15:73:a8:5d:97:e9:44: de:96:63:9e:7c:f2:b7:00:3b:68:76:d6:4d:f4:e5: 16:00:4d:35:68:6c:e7:85:a4:a1:d7:23:df:a5:e3: 92:9f:d6:39:8f:15:0b:d4:63:5e:22:05:d5:71:69: e9:63:4f:4f:3a:21:3d:be:b0:75:34:29:2c:d3:0b: 60:4d:80:f1:89:e0:e8:52:66:4f:36:f0:b8:95:d2: c4:4d:c6:e0:1a:88:eb:cd:1b:82:1f:0d:99:e8:39: 2b:61:4b:b9:f4:69:d4:17:7a:92:9f:86:e3:85:60: 6b:db:90:57:88:00:29:54:1c:17:47:fb:ad:73:ad: 1a:5b:d0:e7:f7:04:49:92:50:07:35:b0:61:c1:65: 97:ce:57:be:17:72:ee:b0:5a:d6:0f:d5:33:e7:fb: e6:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:13:92:27:9D:1D:4E:B2:1B:6E:C6:01:16:65:CC:A4:5F:62:B2:7A X509v3 Authority Key Identifier: keyid:D4:D6:5C:A3:4A:96:8B:0D:85:61:AB:87:76:DB:B0:2D:DB:7C:78:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1NZco0qWiw2FYauHdtuwLdt8eDM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:6e:1a:8e:78:59:03:1b:f5:ac:dc:bb:e0:59:e6:37:c6:73: f9:a6:d8:66:c9:60:6a:ce:43:66:32:bc:9f:87:7e:c6:7c:0e: a9:1e:e6:19:09:63:4a:71:44:3e:d1:c7:28:cf:cb:73:fd:a2: bd:a2:76:80:31:fe:0a:e8:e5:d0:9f:38:6a:a0:a8:9d:5f:2f: 5b:89:3c:74:ab:27:97:1b:d1:69:be:a5:66:55:2b:a1:63:6a: de:87:cc:ae:5f:cc:67:c2:46:c6:80:24:a6:63:6f:4c:a0:88: 20:7b:5e:15:dc:5d:bf:ec:91:19:fd:77:c8:6a:4c:72:21:9d: ee:53:0e:51:10:ce:9c:bf:f7:4a:bd:f1:b1:68:be:2d:7f:48: fb:2f:d7:f5:1b:a4:23:f5:95:95:8f:65:d7:f6:ac:18:38:e6: d5:42:1c:3b:0c:f4:36:2d:f9:d4:62:9f:ce:7a:f3:73:41:f0: e0:d8:a3:75:4f:6d:2e:1a:a1:41:9f:a0:9f:e5:63:bb:08:d6: be:db:41:ac:01:b7:6d:c7:8b:de:72:c6:14:c6:68:32:2a:f9: d2:c5:39:79:fc:67:75:9c:1f:83:61:75:58:42:f3:7b:18:c3: 97:39:2d:ba:d7:9f:7a:ec:22:4a:ba:46:9e:67:35:4b:3e:52: 6b:35:d6:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsoUn7uPwtgWw/+MIVtMuQ3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0ZDY1Y2EzNGE5NjhiMGQ4NTYxYWI4Nzc2ZGJiMDJkZGI3 Yzc4MzMwHhcNMjUxMjE2MTgwMDUzWhcNMjUxMjE3MTgwMDUzWjAzMTEwLwYDVQQD Eyg4NTEzOTIyNzlkMWQ0ZWIyMWI2ZWM2MDExNjY1Y2NhNDVmNjJiMjdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxlQbEuwZFPjTxWJp29+PG73xYeN Njt+Sjw50ZvaIKTetDjwO2Y+azklmtjTPv8jMM4pmthaEVN+S9B/J7+5pC+MBLa4 kygi2RzSQxr7u28FZQAz18FkYW7t6+5A2rHVNhVzqF2X6UTelmOefPK3ADtodtZN 9OUWAE01aGznhaSh1yPfpeOSn9Y5jxUL1GNeIgXVcWnpY09POiE9vrB1NCks0wtg TYDxieDoUmZPNvC4ldLETcbgGojrzRuCHw2Z6DkrYUu59GnUF3qSn4bjhWBr25BX iAApVBwXR/utc60aW9Dn9wRJklAHNbBhwWWXzle+F3LusFrWD9Uz5/vmBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIUTkiedHU6yG27GARZlzKRfYrJ6MB8GA1UdIwQY MBaAFNTWXKNKlosNhWGrh3bbsC3bfHgzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMU5aY28wcVdpdzJGWWF1SGR0dXdMZHQ4ZURNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8zY2MzNGQtMGYzMi00YTVkLTk4NGIt MzJlZmY5NWIzOWRjLzEvMU5aY28wcVdpdzJGWWF1SGR0dXdMZHQ4ZURNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS8zY2MzNGQtMGYzMi00YTVkLTk4NGItMzJlZmY5NWIzOWRj LzEvMU5aY28wcVdpdzJGWWF1SGR0dXdMZHQ4ZURNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZm4ajnhZ Axv1rNy74FnmN8Zz+abYZslgas5DZjK8n4d+xnwOqR7mGQljSnFEPtHHKM/Lc/2i vaJ2gDH+Cujl0J84aqConV8vW4k8dKsnlxvRab6lZlUroWNq3ofMrl/MZ8JGxoAk pmNvTKCIIHteFdxdv+yRGf13yGpMciGd7lMOURDOnL/3Sr3xsWi+LX9I+y/X9Ruk I/WVlY9l1/asGDjm1UIcOwz0Ni351GKfznrzc0Hw4NijdU9tLhqhQZ+gn+VjuwjW vttBrAG3bceL3nLGFMZoMir50sU5efxndZwfg2F1WELzexjDlzktutefeuwiSrpG nmc1Sz5SazXWyw== -----END CERTIFICATE-----Generated at Tue Dec 16 21:05:54 2025 by rpki-client