This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft File: U_NZCAnRh_ezYfskzUP5P2ZLILM.mft (raw, json) Hash identifier: oy6TStoXDvvvt/J0ikC5P4Ei/dWJTJwarZX6kam+OUU= Subject key identifier: 61:74:26:94:5E:E3:BD:07:3E:C7:93:E0:44:67:5C:73:D0:FF:CE:CA Authority key identifier: 53:F3:59:08:09:D1:87:F7:B3:61:FB:24:CD:43:F9:3F:66:4B:20:B3 Certificate issuer: /CN=53f3590809d187f7b361fb24cd43f93f664b20b3 Certificate serial: 019AF16432751F71C9816E5B2DFC744710E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_NZCAnRh_ezYfskzUP5P2ZLILM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 02:01:06 +0000 Manifest this update: Sat 06 Dec 2025 02:01:06 +0000 Manifest next update: Sun 07 Dec 2025 02:01:06 +0000 Files and hashes: 1: 4yhrEPquDWqMWiUEurgxgpe4Z64.roa (hash: GAPEp0iDkhSK0QKol83Ga2o50iNkeUXCz5jUqWOb9Ow=) 2: 5piZhUc6B_Q8SXnCvmVdLn755tk.roa (hash: 1kX1fTcGnU3vqt6H68WNwGSWbpk3Ul9d3oLOLIk5xOI=) 3: 8nljJg7c24IFr_Sv-LV4LOMZqPI.roa (hash: deVXwXvj6xoqe5dfSwVOJXQZSoWKbMhfJNni40tWyZY=) 4: U_NZCAnRh_ezYfskzUP5P2ZLILM.crl (hash: VeVtcx5ELcZ2a71OcohuRp3YYdHflqdj4NH0NvL+2MA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft rsync://rpki.ripe.net/repository/DEFAULT/U_NZCAnRh_ezYfskzUP5P2ZLILM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:32:75:1f:71:c9:81:6e:5b:2d:fc:74:47:10:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53f3590809d187f7b361fb24cd43f93f664b20b3 Validity Not Before: Dec 6 02:01:06 2025 GMT Not After : Dec 7 02:01:06 2025 GMT Subject: CN=617426945ee3bd073ec793e044675c73d0ffceca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:90:84:72:95:3e:55:bc:ef:e0:88:b4:35:32: 94:8b:01:de:7b:36:78:26:11:d1:f7:45:fe:6f:d9: ec:c4:f7:3b:4f:c7:b8:8e:ea:24:62:0d:d3:87:4c: e1:3f:b3:80:fb:52:b3:90:e7:cd:b9:b3:0c:a5:ae: 97:f1:f6:f1:32:00:44:31:47:82:d6:12:d7:67:91: 19:3c:6e:cf:37:14:83:14:60:0f:00:67:71:bb:ae: 0a:fc:4c:40:d5:47:5d:26:4d:f7:eb:a3:d8:7a:5e: ec:a0:63:ea:59:38:a4:a0:f9:4f:aa:7a:50:26:ee: 1f:72:13:aa:eb:1a:ad:fe:c9:75:f2:a3:35:d9:3d: 09:be:34:a5:91:f2:ac:3c:24:ce:e6:5a:5a:93:b9: c2:01:61:6f:a7:20:c2:3c:a9:af:07:40:83:b5:a8: 82:fe:c6:c7:0c:f1:c6:20:86:fe:ec:b1:6c:2b:5d: 8c:c6:e8:c9:3b:2b:f6:5b:90:d4:f8:a3:05:97:13: 8f:ec:93:f6:92:de:cb:f9:31:0c:7e:0d:cf:21:75: 17:90:47:a7:f6:fa:f4:28:c5:65:6c:56:f4:ba:00: 81:f7:76:80:dd:40:6f:41:e1:5d:c7:77:a7:5c:c6: 08:c9:d8:db:86:af:af:21:bf:a1:f6:5c:ab:90:dd: 56:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:74:26:94:5E:E3:BD:07:3E:C7:93:E0:44:67:5C:73:D0:FF:CE:CA X509v3 Authority Key Identifier: keyid:53:F3:59:08:09:D1:87:F7:B3:61:FB:24:CD:43:F9:3F:66:4B:20:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_NZCAnRh_ezYfskzUP5P2ZLILM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:9c:5f:c9:d8:94:f9:b7:6e:0b:c5:29:01:45:40:c5:7f:35: cf:d2:76:49:a0:40:6a:96:50:bf:41:ab:0b:54:61:82:c8:18: 89:d2:bd:61:78:ec:79:53:9f:a2:f4:4c:08:7a:8a:4b:ae:44: 28:a6:1f:50:33:d0:97:39:f6:67:ae:48:a4:5c:f6:cc:83:1f: 5c:19:e3:bc:11:01:87:50:b5:28:64:4b:fb:9b:39:6d:03:9c: 42:c4:74:61:1e:71:cb:f1:fc:b5:e6:ee:fa:f7:5a:ff:15:79: e5:0e:01:0b:9f:1a:2d:83:1f:0c:91:ee:cd:fc:f1:e1:7b:8e: e5:8b:d8:37:db:45:d0:e7:f1:19:8c:86:c1:32:58:9e:89:0c: a0:d1:dd:8d:88:ea:ec:63:8f:9c:00:5f:65:5a:fe:10:66:3d: 84:dd:5a:b8:a5:de:52:6c:0c:20:4c:14:23:62:a6:5a:c9:2f: 50:cf:95:7e:c0:42:ea:34:8a:0f:33:f5:41:26:44:63:07:8a: 26:63:f3:a4:bf:37:14:3a:a5:42:b3:4e:0c:77:67:26:ed:63: 49:13:e4:21:2d:6b:84:0d:aa:cc:74:06:82:4e:dd:62:f0:38: 1c:40:85:f0:7c:ff:15:b9:02:0e:17:43:de:a5:77:b7:c5:ba: dd:14:62:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZDJ1H3HJgW5bLfx0RxDnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzZjM1OTA4MDlkMTg3ZjdiMzYxZmIyNGNkNDNmOTNmNjY0 YjIwYjMwHhcNMjUxMjA2MDIwMTA2WhcNMjUxMjA3MDIwMTA2WjAzMTEwLwYDVQQD Eyg2MTc0MjY5NDVlZTNiZDA3M2VjNzkzZTA0NDY3NWM3M2QwZmZjZWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3JCEcpU+Vbzv4Ii0NTKUiwHeezZ4 JhHR90X+b9nsxPc7T8e4juokYg3Th0zhP7OA+1KzkOfNubMMpa6X8fbxMgBEMUeC 1hLXZ5EZPG7PNxSDFGAPAGdxu64K/ExA1UddJk3366PYel7soGPqWTikoPlPqnpQ Ju4fchOq6xqt/sl18qM12T0JvjSlkfKsPCTO5lpak7nCAWFvpyDCPKmvB0CDtaiC /sbHDPHGIIb+7LFsK12MxujJOyv2W5DU+KMFlxOP7JP2kt7L+TEMfg3PIXUXkEen 9vr0KMVlbFb0ugCB93aA3UBvQeFdx3enXMYIydjbhq+vIb+h9lyrkN1W2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGF0JpRe470HPseT4ERnXHPQ/87KMB8GA1UdIwQY MBaAFFPzWQgJ0Yf3s2H7JM1D+T9mSyCzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVV9OWkNBblJoX2V6WWZza3pVUDVQMlpMSUxNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9kZTYzODMtNGFkNS00NTdiLTk1M2Mt YTc3NmZlZGU5OTA1LzEvVV9OWkNBblJoX2V6WWZza3pVUDVQMlpMSUxNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9kZTYzODMtNGFkNS00NTdiLTk1M2MtYTc3NmZlZGU5OTA1 LzEvVV9OWkNBblJoX2V6WWZza3pVUDVQMlpMSUxNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYJxfydiU +bduC8UpAUVAxX81z9J2SaBAapZQv0GrC1RhgsgYidK9YXjseVOfovRMCHqKS65E KKYfUDPQlzn2Z65IpFz2zIMfXBnjvBEBh1C1KGRL+5s5bQOcQsR0YR5xy/H8tebu +vda/xV55Q4BC58aLYMfDJHuzfzx4XuO5YvYN9tF0OfxGYyGwTJYnokMoNHdjYjq 7GOPnABfZVr+EGY9hN1auKXeUmwMIEwUI2KmWskvUM+VfsBC6jSKDzP1QSZEYweK JmPzpL83FDqlQrNODHdnJu1jSRPkIS1rhA2qzHQGgk7dYvA4HECF8Hz/FbkCDhdD 3qV3t8W63RRiWw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:59:11 2025 by rpki-client