This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.mft File: nszH3a4R-I4QvSCGbhvW5ldWl-M.mft (raw, json) Hash identifier: fTIn5rqT5EAB0Dxy+q766z3y20ZvscFoG4jpvDJsvl0= Subject key identifier: E7:CD:C3:B3:FE:FA:AD:4F:C4:FC:C4:B3:54:D7:3F:F6:9B:CD:76:B0 Authority key identifier: 9E:CC:C7:DD:AE:11:F8:8E:10:BD:20:86:6E:1B:D6:E6:57:56:97:E3 Certificate issuer: /CN=9eccc7ddae11f88e10bd20866e1bd6e6575697e3 Certificate serial: 019AF3527549E193D4BB5D9C670BC01F5468 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nszH3a4R-I4QvSCGbhvW5ldWl-M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.mft Manifest number: 04DB Signing time: Sat 06 Dec 2025 11:00:58 +0000 Manifest this update: Sat 06 Dec 2025 11:00:58 +0000 Manifest next update: Sun 07 Dec 2025 11:00:58 +0000 Files and hashes: 1: nszH3a4R-I4QvSCGbhvW5ldWl-M.crl (hash: fXONzNDrVeqk6FdYjg5ixUcCnIH1M74fmYADxcRkwqU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.crl rsync://rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.mft rsync://rpki.ripe.net/repository/DEFAULT/nszH3a4R-I4QvSCGbhvW5ldWl-M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:75:49:e1:93:d4:bb:5d:9c:67:0b:c0:1f:54:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9eccc7ddae11f88e10bd20866e1bd6e6575697e3 Validity Not Before: Dec 6 11:00:58 2025 GMT Not After : Dec 7 11:00:58 2025 GMT Subject: CN=e7cdc3b3fefaad4fc4fcc4b354d73ff69bcd76b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:6e:57:3b:2a:d9:23:a5:2e:3f:10:e2:54:3a: d4:25:db:2b:2e:6a:28:8b:4d:69:1b:41:5c:cd:7b: 51:72:f2:2a:3e:45:62:3a:7f:fd:ae:a1:23:02:d8: fa:3b:dd:70:05:b0:38:43:d0:d9:4b:75:bc:94:dd: 26:2d:1a:80:cb:da:bf:8d:ad:7a:c7:85:5f:b1:23: 06:e1:9d:e6:94:b8:66:0e:5b:a4:8a:af:37:6c:22: be:7a:04:f5:cc:d2:72:e7:5a:ee:9b:99:c8:d6:d3: 8c:0f:80:7b:1b:33:12:b5:31:3e:b5:b2:b4:0f:4d: 6b:9d:34:41:d5:15:b7:10:6a:a1:a9:d3:77:fb:63: c9:00:49:c9:08:d9:e2:17:3e:16:d6:65:c9:8e:8d: 0b:ee:68:27:3d:e1:8a:04:10:35:6d:2a:99:a2:58: 89:30:ec:c9:ba:c8:a3:03:3f:64:9c:21:61:cf:2f: 1b:fd:24:2d:f2:3e:fb:f9:7f:5a:01:b3:24:5f:c7: 37:e7:2c:49:ec:bd:68:29:40:1f:a9:a3:79:21:4f: e8:4d:04:da:ae:72:ec:d2:c8:57:d1:72:2c:df:c6: 36:af:8e:b7:34:41:2f:a4:83:1c:10:6f:1d:08:b9: 18:59:e0:3c:29:c4:94:18:86:28:93:2c:8f:71:f6: 07:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:CD:C3:B3:FE:FA:AD:4F:C4:FC:C4:B3:54:D7:3F:F6:9B:CD:76:B0 X509v3 Authority Key Identifier: keyid:9E:CC:C7:DD:AE:11:F8:8E:10:BD:20:86:6E:1B:D6:E6:57:56:97:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nszH3a4R-I4QvSCGbhvW5ldWl-M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:5b:94:80:cd:58:eb:65:6a:48:ba:c7:46:84:2e:28:92:92: 2e:9d:81:38:71:48:9d:36:16:fb:8e:e8:68:58:70:8e:a2:36: 71:0e:ce:8a:f0:68:86:fa:ab:35:04:61:de:61:05:5c:56:0b: ed:cd:f3:b2:f9:b3:99:15:01:ca:bc:80:ac:d5:fa:7d:10:c2: 83:a5:79:f9:98:1d:c9:32:6a:14:87:fe:40:dd:ed:13:05:34: bf:78:ed:22:9f:56:06:4c:33:73:c9:73:12:4c:29:56:e0:00: 29:79:a5:33:e7:aa:1f:9b:f2:cf:88:a9:bb:eb:b8:1f:35:ff: b9:8d:62:39:10:22:51:96:32:48:e8:74:bf:10:16:4e:9c:fa: de:f5:af:5b:7c:0d:8c:21:ca:0d:2d:51:7f:61:e1:8a:6a:1a: 90:05:c1:45:90:e9:36:e5:9f:5e:fb:0c:f5:c3:be:37:f2:28: 84:f8:e4:c9:1d:2a:0a:94:41:2c:4a:e7:bb:54:4e:dc:5e:be: 5c:81:68:8b:68:5b:b9:15:62:75:1a:28:df:11:81:de:53:49: af:e2:11:37:e2:fd:24:75:bf:13:53:16:57:be:b9:87:ab:7f: 56:b1:95:29:4b:45:06:11:2d:79:98:15:fd:06:71:76:41:be: 7e:93:b3:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUnVJ4ZPUu12cZwvAH1RoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllY2NjN2RkYWUxMWY4OGUxMGJkMjA4NjZlMWJkNmU2NTc1 Njk3ZTMwHhcNMjUxMjA2MTEwMDU4WhcNMjUxMjA3MTEwMDU4WjAzMTEwLwYDVQQD EyhlN2NkYzNiM2ZlZmFhZDRmYzRmY2M0YjM1NGQ3M2ZmNjliY2Q3NmIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmW5XOyrZI6UuPxDiVDrUJdsrLmoo i01pG0FczXtRcvIqPkViOn/9rqEjAtj6O91wBbA4Q9DZS3W8lN0mLRqAy9q/ja16 x4VfsSMG4Z3mlLhmDlukiq83bCK+egT1zNJy51rum5nI1tOMD4B7GzMStTE+tbK0 D01rnTRB1RW3EGqhqdN3+2PJAEnJCNniFz4W1mXJjo0L7mgnPeGKBBA1bSqZoliJ MOzJusijAz9knCFhzy8b/SQt8j77+X9aAbMkX8c35yxJ7L1oKUAfqaN5IU/oTQTa rnLs0shX0XIs38Y2r463NEEvpIMcEG8dCLkYWeA8KcSUGIYokyyPcfYHXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOfNw7P++q1PxPzEs1TXP/abzXawMB8GA1UdIwQY MBaAFJ7Mx92uEfiOEL0ghm4b1uZXVpfjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnN6SDNhNFItSTRRdlNDR2Jodlc1bGRXbC1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9lYjRkZmUtMDM4NC00ODMxLWIzYWQt ZTY3MmIzMTkwNjg3LzEvbnN6SDNhNFItSTRRdlNDR2Jodlc1bGRXbC1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS9lYjRkZmUtMDM4NC00ODMxLWIzYWQtZTY3MmIzMTkwNjg3 LzEvbnN6SDNhNFItSTRRdlNDR2Jodlc1bGRXbC1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOVuUgM1Y 62VqSLrHRoQuKJKSLp2BOHFInTYW+47oaFhwjqI2cQ7OivBohvqrNQRh3mEFXFYL 7c3zsvmzmRUByryArNX6fRDCg6V5+ZgdyTJqFIf+QN3tEwU0v3jtIp9WBkwzc8lz EkwpVuAAKXmlM+eqH5vyz4ipu+u4HzX/uY1iORAiUZYySOh0vxAWTpz63vWvW3wN jCHKDS1Rf2HhimoakAXBRZDpNuWfXvsM9cO+N/IohPjkyR0qCpRBLErnu1RO3F6+ XIFoi2hbuRVidRoo3xGB3lNJr+IRN+L9JHW/E1MWV765h6t/VrGVKUtFBhEteZgV /QZxdkG+fpOzNA== -----END CERTIFICATE-----Generated at Sat Dec 6 16:44:02 2025 by rpki-client