This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/0c8db6-71fd-4320-a0dc-186080ed9002/1/NrzwGgmAWLhROxb9nksbI4_Nb1g.mft File: NrzwGgmAWLhROxb9nksbI4_Nb1g.mft (raw, json) Hash identifier: FiyxpVB+vVqglZhraPFP3gotesTHEzI0IG36/iz4bGE= Subject key identifier: 16:E9:69:31:E7:B4:61:FB:8D:A2:A4:2A:AB:80:04:6F:99:95:20:2C Authority key identifier: 36:BC:F0:1A:09:80:58:B8:51:3B:16:FD:9E:4B:1B:23:8F:CD:6F:58 Certificate issuer: /CN=36bcf01a098058b8513b16fd9e4b1b238fcd6f58 Certificate serial: 019B353319451DBBEDC8BD8AC31959AB2E79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NrzwGgmAWLhROxb9nksbI4_Nb1g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/0c8db6-71fd-4320-a0dc-186080ed9002/1/NrzwGgmAWLhROxb9nksbI4_Nb1g.mft Manifest number: 0331 Signing time: Fri 19 Dec 2025 06:01:39 +0000 Manifest this update: Fri 19 Dec 2025 06:01:39 +0000 Manifest next update: Sat 20 Dec 2025 06:01:39 +0000 Files and hashes: 1: AfyofESsKziO9R3ILuO1YYWUdu8.roa (hash: nUxsrIBKiuHD8xm10VmDY98apv5y2MdixCNIXLJz49Q=) 2: NrzwGgmAWLhROxb9nksbI4_Nb1g.crl (hash: ouVMqI8Rr7ZTBnRjSn0KgCng/5umjBvlenvTfR7N+f8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/0c8db6-71fd-4320-a0dc-186080ed9002/1/NrzwGgmAWLhROxb9nksbI4_Nb1g.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/0c8db6-71fd-4320-a0dc-186080ed9002/1/NrzwGgmAWLhROxb9nksbI4_Nb1g.mft rsync://rpki.ripe.net/repository/DEFAULT/NrzwGgmAWLhROxb9nksbI4_Nb1g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:33:19:45:1d:bb:ed:c8:bd:8a:c3:19:59:ab:2e:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36bcf01a098058b8513b16fd9e4b1b238fcd6f58 Validity Not Before: Dec 19 06:01:39 2025 GMT Not After : Dec 20 06:01:39 2025 GMT Subject: CN=16e96931e7b461fb8da2a42aab80046f9995202c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:09:c6:45:d4:de:ba:d2:6b:8c:74:69:30:d0: 75:f3:87:11:58:73:41:9d:13:ba:b5:f6:73:31:fc: 8b:3b:79:9b:38:e3:34:c7:70:56:61:ee:77:cb:59: 07:a8:db:2c:05:8f:f8:04:7e:c1:1e:27:dd:cd:5d: 03:74:74:4c:d1:7e:eb:02:37:3a:99:db:a9:d5:44: 90:cc:b9:55:b5:d4:43:b7:7b:4e:2b:9d:74:0c:e2: 19:da:89:b7:4b:9e:be:ff:c8:01:b3:c3:bb:38:d6: 90:dd:07:90:44:a6:9d:ff:80:ba:6c:c6:65:33:8b: 33:1d:28:a9:44:cc:7f:17:14:d2:f9:a6:8f:d1:5a: 58:91:39:a9:b6:26:e9:37:07:05:a9:e4:81:d5:74: 39:e3:23:5f:98:be:76:66:c5:91:21:7f:f8:86:f0: 49:8b:80:d0:3f:31:88:70:08:45:99:8a:93:59:0e: 6e:3c:f7:5e:8b:d4:6d:d5:e8:f1:b0:b5:be:c6:1d: 30:66:d4:7b:83:a2:89:35:b1:43:8b:4c:e2:c3:bb: 14:6d:2f:8a:52:68:45:8d:d8:08:d6:7f:39:25:d3: 49:38:18:21:88:d8:a3:ed:10:b3:0b:4b:2b:65:d9: d6:06:ad:5e:90:fe:10:2a:41:e1:c6:45:41:bb:aa: 63:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:E9:69:31:E7:B4:61:FB:8D:A2:A4:2A:AB:80:04:6F:99:95:20:2C X509v3 Authority Key Identifier: keyid:36:BC:F0:1A:09:80:58:B8:51:3B:16:FD:9E:4B:1B:23:8F:CD:6F:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NrzwGgmAWLhROxb9nksbI4_Nb1g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/0c8db6-71fd-4320-a0dc-186080ed9002/1/NrzwGgmAWLhROxb9nksbI4_Nb1g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/0c8db6-71fd-4320-a0dc-186080ed9002/1/NrzwGgmAWLhROxb9nksbI4_Nb1g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:29:d4:6d:52:bc:9d:e0:32:45:9d:20:47:2d:c0:91:be:a6: ec:83:db:9a:35:f3:68:5c:fb:73:c8:f7:b2:8d:f7:46:ee:6b: 8d:1e:ef:af:5e:fd:00:37:50:41:16:f1:9d:71:e2:1a:e8:23: 8f:94:ec:8a:ac:e9:31:e6:ba:16:39:96:04:3d:a1:3a:be:55: 45:03:73:70:af:4c:91:95:bb:92:c8:1b:45:8a:09:12:28:b1: a3:d4:35:ad:63:fe:6e:62:de:70:5d:a5:da:4b:b0:06:b0:56: 41:08:3a:e3:d0:30:ab:f4:cd:3b:2b:24:81:f7:fe:20:c9:08: 8f:17:4f:17:2b:6d:fc:34:dc:f2:af:c1:88:20:5d:7b:be:e8: a1:e0:6f:fc:c1:01:a5:ac:9d:2b:40:91:43:ec:ef:94:04:e2: 6f:e0:5c:b6:d4:7f:fb:10:28:7a:3e:06:9b:37:2c:3d:4f:f1: d9:74:56:68:c3:e0:48:fc:0e:d4:63:d6:e9:f2:61:62:75:f4: e9:da:15:bd:39:02:12:3c:d4:01:3f:39:36:6e:f4:4b:c9:17: 19:cd:66:44:ca:c2:7c:18:cd:8c:6e:21:50:8a:fd:64:88:6c: 7a:f3:c3:98:28:53:b1:09:22:f3:0e:21:04:2b:81:5b:89:f6: fe:04:b5:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1MxlFHbvtyL2KwxlZqy55MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YmNmMDFhMDk4MDU4Yjg1MTNiMTZmZDllNGIxYjIzOGZj ZDZmNTgwHhcNMjUxMjE5MDYwMTM5WhcNMjUxMjIwMDYwMTM5WjAzMTEwLwYDVQQD EygxNmU5NjkzMWU3YjQ2MWZiOGRhMmE0MmFhYjgwMDQ2Zjk5OTUyMDJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2QnGRdTeutJrjHRpMNB184cRWHNB nRO6tfZzMfyLO3mbOOM0x3BWYe53y1kHqNssBY/4BH7BHifdzV0DdHRM0X7rAjc6 mdup1USQzLlVtdRDt3tOK510DOIZ2om3S56+/8gBs8O7ONaQ3QeQRKad/4C6bMZl M4szHSipRMx/FxTS+aaP0VpYkTmptibpNwcFqeSB1XQ54yNfmL52ZsWRIX/4hvBJ i4DQPzGIcAhFmYqTWQ5uPPdei9Rt1ejxsLW+xh0wZtR7g6KJNbFDi0ziw7sUbS+K UmhFjdgI1n85JdNJOBghiNij7RCzC0srZdnWBq1ekP4QKkHhxkVBu6pjKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBbpaTHntGH7jaKkKquABG+ZlSAsMB8GA1UdIwQY MBaAFDa88BoJgFi4UTsW/Z5LGyOPzW9YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnJ6d0dnbUFXTGhST3hiOW5rc2JJNF9OYjFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8wYzhkYjYtNzFmZC00MzIwLWEwZGMt MTg2MDgwZWQ5MDAyLzEvTnJ6d0dnbUFXTGhST3hiOW5rc2JJNF9OYjFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy8wYzhkYjYtNzFmZC00MzIwLWEwZGMtMTg2MDgwZWQ5MDAy LzEvTnJ6d0dnbUFXTGhST3hiOW5rc2JJNF9OYjFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJinUbVK8 neAyRZ0gRy3Akb6m7IPbmjXzaFz7c8j3so33Ru5rjR7vr179ADdQQRbxnXHiGugj j5TsiqzpMea6FjmWBD2hOr5VRQNzcK9MkZW7ksgbRYoJEiixo9Q1rWP+bmLecF2l 2kuwBrBWQQg649Awq/TNOyskgff+IMkIjxdPFytt/DTc8q/BiCBde77ooeBv/MEB paydK0CRQ+zvlATib+BcttR/+xAoej4GmzcsPU/x2XRWaMPgSPwO1GPW6fJhYnX0 6doVvTkCEjzUAT85Nm70S8kXGc1mRMrCfBjNjG4hUIr9ZIhsevPDmChTsQki8w4h BCuBW4n2/gS1tQ== -----END CERTIFICATE-----Generated at Fri Dec 19 12:03:55 2025 by rpki-client