This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/1c000d-7604-444b-b4e0-b844ce1c6238/1/NZ5FeU8Bkp_awnLCYms-guvJxd8.mft File: NZ5FeU8Bkp_awnLCYms-guvJxd8.mft (raw, json) Hash identifier: KO0CW34tGLSWhxgqlreBaGQwxlS+fhNBB3xgpDtKsSc= Subject key identifier: E7:3E:EF:5B:15:A1:97:B3:58:AC:9F:52:3E:43:D8:6F:C0:68:06:FC Authority key identifier: 35:9E:45:79:4F:01:92:9F:DA:C2:72:C2:62:6B:3E:82:EB:C9:C5:DF Certificate issuer: /CN=359e45794f01929fdac272c2626b3e82ebc9c5df Certificate serial: 019AF12D6350528E82411D6EE52CB17B2EC7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ5FeU8Bkp_awnLCYms-guvJxd8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/1c000d-7604-444b-b4e0-b844ce1c6238/1/NZ5FeU8Bkp_awnLCYms-guvJxd8.mft Manifest number: 175D Signing time: Sat 06 Dec 2025 01:01:14 +0000 Manifest this update: Sat 06 Dec 2025 01:01:14 +0000 Manifest next update: Sun 07 Dec 2025 01:01:14 +0000 Files and hashes: 1: NZ5FeU8Bkp_awnLCYms-guvJxd8.crl (hash: BA0WCpjGFlRcaW/HM3uSfo+b6IwA8gD3j7DLeBZFcYA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/1c000d-7604-444b-b4e0-b844ce1c6238/1/NZ5FeU8Bkp_awnLCYms-guvJxd8.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/1c000d-7604-444b-b4e0-b844ce1c6238/1/NZ5FeU8Bkp_awnLCYms-guvJxd8.mft rsync://rpki.ripe.net/repository/DEFAULT/NZ5FeU8Bkp_awnLCYms-guvJxd8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:63:50:52:8e:82:41:1d:6e:e5:2c:b1:7b:2e:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=359e45794f01929fdac272c2626b3e82ebc9c5df Validity Not Before: Dec 6 01:01:14 2025 GMT Not After : Dec 7 01:01:14 2025 GMT Subject: CN=e73eef5b15a197b358ac9f523e43d86fc06806fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:9b:00:35:11:13:4c:8f:32:5a:b9:1c:3e:a4: 05:07:02:01:16:da:ac:b0:1e:f2:0a:bb:27:01:0d: 9b:63:cc:83:1e:05:34:aa:20:e2:d9:df:3f:b3:a2: ef:4c:fa:d1:ae:9b:75:80:4b:dd:29:08:8c:68:ab: 2d:fc:83:49:46:47:73:79:1a:a9:a9:28:d6:83:41: 3b:2c:45:e5:52:50:53:7e:09:5b:4c:d1:0e:79:a8: 07:23:07:b4:50:aa:b7:26:51:30:7f:de:c7:5d:6b: 8f:7b:0d:8d:7e:7d:7a:63:05:83:97:6d:12:12:5c: b4:a4:52:48:49:96:93:47:71:4f:65:8c:50:91:86: 9b:c6:f1:33:67:49:5b:e7:19:61:73:cb:b2:e4:b0: a3:0a:e8:5e:12:89:37:0f:a1:91:86:a5:15:bc:cc: 46:5c:fa:29:1e:0b:a5:60:d6:7c:ec:6e:f3:43:0c: 87:a6:34:53:7f:72:81:90:63:e3:fd:46:9b:14:f0: b5:b7:ae:22:3e:39:2d:95:5a:f2:ae:56:45:98:f3: a8:1c:80:cf:19:30:9e:38:72:57:d1:15:68:10:99: 26:78:56:4b:ec:0e:3f:6e:62:be:97:b5:88:9e:6c: b9:72:50:b1:34:e9:66:cb:3e:3e:a9:cb:75:d9:52: 0f:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:3E:EF:5B:15:A1:97:B3:58:AC:9F:52:3E:43:D8:6F:C0:68:06:FC X509v3 Authority Key Identifier: keyid:35:9E:45:79:4F:01:92:9F:DA:C2:72:C2:62:6B:3E:82:EB:C9:C5:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ5FeU8Bkp_awnLCYms-guvJxd8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/1c000d-7604-444b-b4e0-b844ce1c6238/1/NZ5FeU8Bkp_awnLCYms-guvJxd8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/1c000d-7604-444b-b4e0-b844ce1c6238/1/NZ5FeU8Bkp_awnLCYms-guvJxd8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:de:26:95:0e:e6:17:8f:bd:5c:d4:89:15:34:f0:d9:fc:13: da:56:7c:57:70:82:b2:4e:15:7e:d2:e8:82:68:6c:4b:98:a8: 4f:d4:20:2b:93:6e:b7:5d:7e:ea:be:04:10:3f:c5:00:f4:47: 02:7a:0b:cf:cd:96:ff:0a:2a:ff:27:49:c9:5b:d9:6d:10:8b: 2c:d9:54:e1:47:7b:e2:3e:e6:79:4c:08:64:f6:78:1e:bb:bc: 9a:ba:7e:ed:80:47:8f:d4:ba:f7:9e:60:18:10:96:da:86:43: 2a:aa:63:91:f2:e1:2e:4d:9f:c1:cd:ae:6d:52:5b:92:22:ad: 66:5a:5c:b5:b0:ca:f4:a0:31:0a:49:d6:03:32:49:02:5b:65: b2:9c:0c:54:48:4b:1a:51:3a:e0:d0:b0:86:38:89:d0:ba:b6: 22:9c:4a:a8:51:b2:35:98:a0:67:fb:21:3c:ee:f0:a8:47:fd: a7:69:dd:97:91:26:c7:87:99:0e:e1:40:16:11:d0:70:26:9a: f3:54:bb:34:6c:8d:bc:b7:23:b0:70:e5:c0:e7:60:f5:1c:52: 67:1e:46:c0:9f:a0:d1:c3:6f:ef:c9:8f:b6:9f:db:be:32:ff: 08:d9:b1:0c:71:fa:4e:87:e6:7e:67:ef:61:0f:ca:de:b9:7a: 71:61:7f:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLWNQUo6CQR1u5Syxey7HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1OWU0NTc5NGYwMTkyOWZkYWMyNzJjMjYyNmIzZTgyZWJj OWM1ZGYwHhcNMjUxMjA2MDEwMTE0WhcNMjUxMjA3MDEwMTE0WjAzMTEwLwYDVQQD EyhlNzNlZWY1YjE1YTE5N2IzNThhYzlmNTIzZTQzZDg2ZmMwNjgwNmZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ZsANRETTI8yWrkcPqQFBwIBFtqs sB7yCrsnAQ2bY8yDHgU0qiDi2d8/s6LvTPrRrpt1gEvdKQiMaKst/INJRkdzeRqp qSjWg0E7LEXlUlBTfglbTNEOeagHIwe0UKq3JlEwf97HXWuPew2Nfn16YwWDl20S Ely0pFJISZaTR3FPZYxQkYabxvEzZ0lb5xlhc8uy5LCjCuheEok3D6GRhqUVvMxG XPopHgulYNZ87G7zQwyHpjRTf3KBkGPj/UabFPC1t64iPjktlVryrlZFmPOoHIDP GTCeOHJX0RVoEJkmeFZL7A4/bmK+l7WInmy5clCxNOlmyz4+qct12VIPMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOc+71sVoZezWKyfUj5D2G/AaAb8MB8GA1UdIwQY MBaAFDWeRXlPAZKf2sJywmJrPoLrycXfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlo1RmVVOEJrcF9hd25MQ1ltcy1ndXZKeGQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8xYzAwMGQtNzYwNC00NDRiLWI0ZTAt Yjg0NGNlMWM2MjM4LzEvTlo1RmVVOEJrcF9hd25MQ1ltcy1ndXZKeGQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy8xYzAwMGQtNzYwNC00NDRiLWI0ZTAtYjg0NGNlMWM2MjM4 LzEvTlo1RmVVOEJrcF9hd25MQ1ltcy1ndXZKeGQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm94mlQ7m F4+9XNSJFTTw2fwT2lZ8V3CCsk4VftLogmhsS5ioT9QgK5Nut11+6r4EED/FAPRH AnoLz82W/woq/ydJyVvZbRCLLNlU4Ud74j7meUwIZPZ4Hru8mrp+7YBHj9S6955g GBCW2oZDKqpjkfLhLk2fwc2ubVJbkiKtZlpctbDK9KAxCknWAzJJAltlspwMVEhL GlE64NCwhjiJ0Lq2IpxKqFGyNZigZ/shPO7wqEf9p2ndl5Emx4eZDuFAFhHQcCaa 81S7NGyNvLcjsHDlwOdg9RxSZx5GwJ+g0cNv78mPtp/bvjL/CNmxDHH6Tofmfmfv YQ/K3rl6cWF/4g== -----END CERTIFICATE-----Generated at Sat Dec 6 11:37:09 2025 by rpki-client