This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.mft File: nzcg6XD6oOB_UKY4nnrlOvpDnas.mft (raw, json) Hash identifier: F5zyRHlDuHK/LkS3JczXml0T9fyy6yN7kvSwrv9zo5g= Subject key identifier: 38:D5:B1:48:B9:CD:D8:BF:40:28:BE:0B:57:18:CB:36:76:38:C8:49 Authority key identifier: 9F:37:20:E9:70:FA:A0:E0:7F:50:A6:38:9E:7A:E5:3A:FA:43:9D:AB Certificate issuer: /CN=9f3720e970faa0e07f50a6389e7ae53afa439dab Certificate serial: 019AF9549BD241595AB4E6CA83A067B425B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzcg6XD6oOB_UKY4nnrlOvpDnas.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.mft Manifest number: 176A Signing time: Sun 07 Dec 2025 15:01:02 +0000 Manifest this update: Sun 07 Dec 2025 15:01:02 +0000 Manifest next update: Mon 08 Dec 2025 15:01:02 +0000 Files and hashes: 1: Etd-zR5nQJ_3oZWsvX_yh9qZs04.roa (hash: Va9UidVPtYR8CQHobQQrWe+S/Z2ABdjjbhF7ggqh2M0=) 2: nzcg6XD6oOB_UKY4nnrlOvpDnas.crl (hash: FGGpxmcSHHA+V6/EKg1twz/3zEEtB9jdgbzfTjxSd5U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.mft rsync://rpki.ripe.net/repository/DEFAULT/nzcg6XD6oOB_UKY4nnrlOvpDnas.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 15:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f9:54:9b:d2:41:59:5a:b4:e6:ca:83:a0:67:b4:25:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f3720e970faa0e07f50a6389e7ae53afa439dab Validity Not Before: Dec 7 15:01:02 2025 GMT Not After : Dec 8 15:01:02 2025 GMT Subject: CN=38d5b148b9cdd8bf4028be0b5718cb367638c849 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:36:be:ce:9b:29:d4:ff:9e:98:38:af:a6:ab: 13:dd:07:c7:75:bc:26:90:0a:95:06:d9:ae:60:25: 87:67:d0:6a:8e:ed:50:27:4e:75:a8:ce:0d:08:b9: 90:10:bf:b9:ac:76:7e:3f:81:e9:43:ce:e3:88:e2: 85:00:46:b8:7c:b2:c4:51:c4:77:1b:f5:87:8c:58: c0:0e:ee:3a:66:44:b0:e1:b4:37:7a:78:b2:96:be: 5e:1f:18:77:57:ae:02:a2:05:3f:dd:e7:c0:32:f3: 37:14:a7:15:a6:77:0c:3d:f8:a5:3c:40:3f:3e:aa: 67:d5:6c:d2:35:e1:01:81:06:f6:25:70:49:11:7d: 29:61:03:49:d2:44:76:18:9d:93:d3:62:9a:61:77: 15:cd:7f:bf:4b:c1:5e:8e:eb:b8:95:65:d4:d8:9b: c7:c6:52:12:5b:bb:54:67:b7:c0:38:a8:47:44:6e: 5b:74:51:98:27:81:09:f6:43:32:8d:b1:40:c9:47: a2:e7:da:6c:68:21:b3:36:9e:08:16:fc:7c:17:6e: 1d:b5:46:1a:af:dd:67:37:74:a3:6f:d0:7b:ca:5c: d6:d5:f8:5c:5b:ea:ad:54:5f:21:b9:a2:de:18:fd: 38:76:30:c2:1b:dd:8f:d1:84:17:d6:c6:f4:69:3c: dd:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:D5:B1:48:B9:CD:D8:BF:40:28:BE:0B:57:18:CB:36:76:38:C8:49 X509v3 Authority Key Identifier: keyid:9F:37:20:E9:70:FA:A0:E0:7F:50:A6:38:9E:7A:E5:3A:FA:43:9D:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzcg6XD6oOB_UKY4nnrlOvpDnas.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:20:50:92:cb:c4:43:b5:94:2b:ab:b4:a3:ad:0b:31:0a:d3: c6:8a:0d:42:af:b4:f8:67:75:f0:c1:a5:ca:3e:05:cb:b7:70: 6c:11:06:d0:ca:2d:02:72:5d:df:46:b9:e7:54:84:af:54:6d: 8f:f4:be:cf:f6:2f:76:e1:ea:61:1b:f5:a8:fe:83:4b:d1:0a: 5f:c0:0e:51:19:19:7f:83:c0:89:4e:39:13:f2:ba:1d:47:60: 39:2b:fa:f1:b3:e9:6c:89:3a:00:67:cf:26:a0:7d:5e:0d:49: 52:e0:2c:66:b4:20:83:6c:db:d3:7a:62:e2:bd:01:53:06:7c: 50:d3:ae:25:06:d9:b7:be:d0:d0:ea:c2:3a:45:b3:25:06:b3: 1c:7a:77:6b:d7:6e:96:2f:18:0e:7b:ed:79:1d:07:97:28:79: 2e:7d:29:ef:18:eb:70:c9:4d:0e:54:ba:be:ec:03:ed:67:2b: 59:3b:e3:75:f5:9a:f5:92:17:9e:03:e7:86:c0:b2:b8:35:de: de:ae:d0:61:25:71:e5:9e:52:28:8e:f5:42:00:18:3d:dd:5b: 29:54:82:1b:21:1c:34:3e:91:ab:69:da:c5:91:0f:9f:4b:ec: c2:8e:25:0e:e3:ad:a0:4b:56:6d:92:47:05:75:e2:29:4e:68: fc:a6:98:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr5VJvSQVlatObKg6BntCW4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmMzcyMGU5NzBmYWEwZTA3ZjUwYTYzODllN2FlNTNhZmE0 MzlkYWIwHhcNMjUxMjA3MTUwMTAyWhcNMjUxMjA4MTUwMTAyWjAzMTEwLwYDVQQD EygzOGQ1YjE0OGI5Y2RkOGJmNDAyOGJlMGI1NzE4Y2IzNjc2MzhjODQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4za+zpsp1P+emDivpqsT3QfHdbwm kAqVBtmuYCWHZ9Bqju1QJ051qM4NCLmQEL+5rHZ+P4HpQ87jiOKFAEa4fLLEUcR3 G/WHjFjADu46ZkSw4bQ3eniylr5eHxh3V64CogU/3efAMvM3FKcVpncMPfilPEA/ Pqpn1WzSNeEBgQb2JXBJEX0pYQNJ0kR2GJ2T02KaYXcVzX+/S8Fejuu4lWXU2JvH xlISW7tUZ7fAOKhHRG5bdFGYJ4EJ9kMyjbFAyUei59psaCGzNp4IFvx8F24dtUYa r91nN3Sjb9B7ylzW1fhcW+qtVF8huaLeGP04djDCG92P0YQX1sb0aTzdpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDjVsUi5zdi/QCi+C1cYyzZ2OMhJMB8GA1UdIwQY MBaAFJ83IOlw+qDgf1CmOJ565Tr6Q52rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnpjZzZYRDZvT0JfVUtZNG5ucmxPdnBEbmFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9iYjdjMGUtZWU2OC00YmY4LWJiMzQt MTJlNmEwZDQzMThhLzEvbnpjZzZYRDZvT0JfVUtZNG5ucmxPdnBEbmFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9iYjdjMGUtZWU2OC00YmY4LWJiMzQtMTJlNmEwZDQzMThh LzEvbnpjZzZYRDZvT0JfVUtZNG5ucmxPdnBEbmFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASCBQksvE Q7WUK6u0o60LMQrTxooNQq+0+Gd18MGlyj4Fy7dwbBEG0MotAnJd30a551SEr1Rt j/S+z/YvduHqYRv1qP6DS9EKX8AOURkZf4PAiU45E/K6HUdgOSv68bPpbIk6AGfP JqB9Xg1JUuAsZrQgg2zb03pi4r0BUwZ8UNOuJQbZt77Q0OrCOkWzJQazHHp3a9du li8YDnvteR0Hlyh5Ln0p7xjrcMlNDlS6vuwD7WcrWTvjdfWa9ZIXngPnhsCyuDXe 3q7QYSVx5Z5SKI71QgAYPd1bKVSCGyEcND6Rq2naxZEPn0vswo4lDuOtoEtWbZJH BXXiKU5o/KaYFg== -----END CERTIFICATE-----Generated at Sun Dec 7 21:35:07 2025 by rpki-client