This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.mft File: 1NZco0qWiw2FYauHdtuwLdt8eDM.mft (raw, json) Hash identifier: MmhOMIhphS1PNP1oSMSxWA19PvbWwbx4vxHz4Cu0wLo= Subject key identifier: D4:15:42:E9:B8:14:8E:74:00:6B:C6:F7:2E:24:BC:3D:0C:AB:F4:66 Authority key identifier: D4:D6:5C:A3:4A:96:8B:0D:85:61:AB:87:76:DB:B0:2D:DB:7C:78:33 Certificate issuer: /CN=d4d65ca34a968b0d8561ab8776dbb02ddb7c7833 Certificate serial: 019AF23F7601D6DD63F45A4D239A3379BE18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1NZco0qWiw2FYauHdtuwLdt8eDM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.mft Manifest number: 0742 Signing time: Sat 06 Dec 2025 06:00:36 +0000 Manifest this update: Sat 06 Dec 2025 06:00:36 +0000 Manifest next update: Sun 07 Dec 2025 06:00:36 +0000 Files and hashes: 1: 1NZco0qWiw2FYauHdtuwLdt8eDM.crl (hash: 6RLjqzrK5LXHLHmGlOadaSO8T3nE0TlxtXO+lfbpCes=) 2: 7jIS7Kg3pQ0rAdPTN8-mhFQ9NMI.roa (hash: X1BBv86nq4mpZk7vS1wx5rzfijmXxCD6/5jYb3vftEE=) 3: JBZwLHOeun9xUsFliq37fa6QYAo.roa (hash: 8ByuZxbvTl/x0Sjxc//zO5GFMR7JeQh92bNKijR57Vc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.crl rsync://rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.mft rsync://rpki.ripe.net/repository/DEFAULT/1NZco0qWiw2FYauHdtuwLdt8eDM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:76:01:d6:dd:63:f4:5a:4d:23:9a:33:79:be:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4d65ca34a968b0d8561ab8776dbb02ddb7c7833 Validity Not Before: Dec 6 06:00:36 2025 GMT Not After : Dec 7 06:00:36 2025 GMT Subject: CN=d41542e9b8148e74006bc6f72e24bc3d0cabf466 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:93:5d:18:cd:00:d4:0d:a1:cc:ab:dd:2e:7c: 92:61:02:23:86:12:57:e2:4c:4b:e8:8f:a9:39:c8: cd:68:b2:2b:1c:34:f6:81:f8:84:7e:c2:d4:39:58: 08:42:d5:cc:b9:36:dd:eb:c4:b7:f9:45:84:83:dc: 5c:d9:32:04:c4:c0:e1:f8:0e:77:a2:5e:21:67:94: 04:c4:60:a2:92:88:77:a7:18:9c:ae:3b:c2:b9:b7: dc:c1:b7:7e:4c:62:db:6e:23:7b:2c:ad:b5:19:ff: be:c3:40:b8:0b:b9:20:5a:fc:9f:16:86:4a:0d:da: 53:3e:e0:ac:73:f1:2e:14:fa:c4:a6:14:2c:3c:6b: 24:40:cc:fe:5d:1b:9e:e9:7c:a6:2f:21:c4:06:63: 06:1b:cb:23:15:1f:14:65:df:2d:fb:81:f8:06:98: b2:a1:2f:73:10:e7:5b:52:af:4c:e0:bf:e1:fb:07: bc:9a:c6:c2:67:c4:a3:07:11:42:58:df:6d:22:a4: 07:03:d4:da:1d:e9:02:07:a6:99:b1:8b:46:01:ed: d7:aa:5c:18:1f:a5:22:4e:eb:2c:8e:ec:09:10:15: 64:51:6a:a4:1f:68:60:6c:7b:a2:dc:28:d1:59:f3: ba:ae:0b:22:26:cf:e0:c9:c0:41:70:11:02:b9:96: 69:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:15:42:E9:B8:14:8E:74:00:6B:C6:F7:2E:24:BC:3D:0C:AB:F4:66 X509v3 Authority Key Identifier: keyid:D4:D6:5C:A3:4A:96:8B:0D:85:61:AB:87:76:DB:B0:2D:DB:7C:78:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1NZco0qWiw2FYauHdtuwLdt8eDM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:b9:55:61:9a:ec:31:75:17:ab:0d:41:aa:a5:5d:cb:79:0a: 6f:88:28:e8:ff:04:e0:ee:0c:27:f3:e0:eb:c6:39:e2:44:ef: 23:02:30:dc:96:0f:de:75:c1:ea:5a:a9:25:8e:5d:98:7f:9c: a1:f4:23:f9:b1:a2:f8:e8:d4:aa:d2:8e:c3:2c:64:3e:a9:ac: 96:3c:fa:d0:a1:2a:26:60:e9:4c:38:96:ac:2a:b9:d0:4b:61: 84:0f:32:a6:f6:a7:62:4f:25:e1:6f:97:8d:b3:ab:c2:1d:9e: 2f:a8:5e:4f:50:09:bd:28:be:f2:f8:ae:91:54:0f:8e:e3:08: 36:4f:0d:4d:41:0e:de:eb:27:a8:38:f5:f3:da:e8:d4:26:51: 9d:fd:da:4f:15:28:e3:1c:e3:34:a9:4e:b2:6d:77:fc:84:9c: 61:dd:25:b2:9f:97:3d:a2:73:2e:f0:93:97:e5:1f:02:13:fd: 3d:d5:1a:4c:6d:ee:60:d0:1b:ad:72:fb:b4:38:0a:a1:1a:cd: 56:07:10:37:d3:36:73:05:95:c8:63:43:e6:0c:0b:46:de:4c: e3:e3:e5:bd:b8:07:90:04:66:24:47:a7:17:56:1e:a8:80:2c: 42:d9:fe:1a:bd:90:86:c9:c1:4d:16:d5:4d:7d:02:86:97:6c: d8:9c:94:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP3YB1t1j9FpNI5ozeb4YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0ZDY1Y2EzNGE5NjhiMGQ4NTYxYWI4Nzc2ZGJiMDJkZGI3 Yzc4MzMwHhcNMjUxMjA2MDYwMDM2WhcNMjUxMjA3MDYwMDM2WjAzMTEwLwYDVQQD EyhkNDE1NDJlOWI4MTQ4ZTc0MDA2YmM2ZjcyZTI0YmMzZDBjYWJmNDY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpNdGM0A1A2hzKvdLnySYQIjhhJX 4kxL6I+pOcjNaLIrHDT2gfiEfsLUOVgIQtXMuTbd68S3+UWEg9xc2TIExMDh+A53 ol4hZ5QExGCikoh3pxicrjvCubfcwbd+TGLbbiN7LK21Gf++w0C4C7kgWvyfFoZK DdpTPuCsc/EuFPrEphQsPGskQMz+XRue6XymLyHEBmMGG8sjFR8UZd8t+4H4Bpiy oS9zEOdbUq9M4L/h+we8msbCZ8SjBxFCWN9tIqQHA9TaHekCB6aZsYtGAe3XqlwY H6UiTussjuwJEBVkUWqkH2hgbHui3CjRWfO6rgsiJs/gycBBcBECuZZp0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNQVQum4FI50AGvG9y4kvD0Mq/RmMB8GA1UdIwQY MBaAFNTWXKNKlosNhWGrh3bbsC3bfHgzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMU5aY28wcVdpdzJGWWF1SGR0dXdMZHQ4ZURNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8zY2MzNGQtMGYzMi00YTVkLTk4NGIt MzJlZmY5NWIzOWRjLzEvMU5aY28wcVdpdzJGWWF1SGR0dXdMZHQ4ZURNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS8zY2MzNGQtMGYzMi00YTVkLTk4NGItMzJlZmY5NWIzOWRj LzEvMU5aY28wcVdpdzJGWWF1SGR0dXdMZHQ4ZURNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACblVYZrs MXUXqw1BqqVdy3kKb4go6P8E4O4MJ/Pg68Y54kTvIwIw3JYP3nXB6lqpJY5dmH+c ofQj+bGi+OjUqtKOwyxkPqmsljz60KEqJmDpTDiWrCq50EthhA8ypvanYk8l4W+X jbOrwh2eL6heT1AJvSi+8viukVQPjuMINk8NTUEO3usnqDj189ro1CZRnf3aTxUo 4xzjNKlOsm13/IScYd0lsp+XPaJzLvCTl+UfAhP9PdUaTG3uYNAbrXL7tDgKoRrN VgcQN9M2cwWVyGND5gwLRt5M4+PlvbgHkARmJEenF1YeqIAsQtn+Gr2QhsnBTRbV TX0Chpds2JyU5g== -----END CERTIFICATE-----Generated at Sat Dec 6 12:49:30 2025 by rpki-client