This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f96baf-41f3-4986-b93a-417b4fa564ea/1/NZAsm2QPxtV8I3cU7STaF_LT5HQ.mft File: NZAsm2QPxtV8I3cU7STaF_LT5HQ.mft (raw, json) Hash identifier: iMFOsaeAGy/ySVDDM9cUBm/zNYTOLlwQ4/Daj0i4d5U= Subject key identifier: 3B:8F:C5:9C:18:A0:E5:EA:6C:45:70:1D:D0:D6:9A:6D:92:44:68:8C Authority key identifier: 35:90:2C:9B:64:0F:C6:D5:7C:23:77:14:ED:24:DA:17:F2:D3:E4:74 Certificate issuer: /CN=35902c9b640fc6d57c237714ed24da17f2d3e474 Certificate serial: 019AF12D6332A05B5A713E5E476899ACE1F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZAsm2QPxtV8I3cU7STaF_LT5HQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/f96baf-41f3-4986-b93a-417b4fa564ea/1/NZAsm2QPxtV8I3cU7STaF_LT5HQ.mft Manifest number: 149B Signing time: Sat 06 Dec 2025 01:01:14 +0000 Manifest this update: Sat 06 Dec 2025 01:01:14 +0000 Manifest next update: Sun 07 Dec 2025 01:01:14 +0000 Files and hashes: 1: NZAsm2QPxtV8I3cU7STaF_LT5HQ.crl (hash: QaW/kfhgUga9OKZyck7q6XQl95INdsP/tvdRycIQfrU=) 2: PI3Xutx0lBlZBeuZQlV0XuCJsGo.roa (hash: blvqW+4kvuy1OSWZbcSuvZwm2naQgc2Xk5GnN0G+YPg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/f96baf-41f3-4986-b93a-417b4fa564ea/1/NZAsm2QPxtV8I3cU7STaF_LT5HQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/f96baf-41f3-4986-b93a-417b4fa564ea/1/NZAsm2QPxtV8I3cU7STaF_LT5HQ.mft rsync://rpki.ripe.net/repository/DEFAULT/NZAsm2QPxtV8I3cU7STaF_LT5HQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:63:32:a0:5b:5a:71:3e:5e:47:68:99:ac:e1:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35902c9b640fc6d57c237714ed24da17f2d3e474 Validity Not Before: Dec 6 01:01:14 2025 GMT Not After : Dec 7 01:01:14 2025 GMT Subject: CN=3b8fc59c18a0e5ea6c45701dd0d69a6d9244688c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:7f:4b:71:93:10:e1:8d:c0:01:01:6b:cd:a1: 93:ff:c3:56:25:f9:00:94:75:1e:1b:0a:a6:3c:ba: 4b:a2:e2:90:dd:9e:0a:21:69:8b:b0:a7:3d:dd:ef: 42:22:2c:ae:04:7d:f6:40:78:2b:a0:ad:66:95:05: 46:10:84:e1:db:42:5b:22:65:11:59:9a:2a:cf:4d: 6a:c3:d1:8b:24:1b:cd:59:e1:01:43:57:2f:58:4b: 39:72:11:9b:28:d9:e9:9f:dd:c9:e6:e9:e9:26:de: 56:3f:af:7b:d8:c2:61:eb:2f:c5:eb:da:38:fe:ee: 79:b1:25:2e:3c:97:41:a6:e2:24:86:21:9e:7b:d6: 53:3e:ad:7a:74:45:cc:84:d8:8f:30:36:b0:4e:a8: ab:c6:9b:d7:89:1a:16:e3:95:58:54:81:b0:e7:26: d4:31:77:53:09:b4:67:d7:56:fd:5a:d7:62:86:8f: 75:71:b8:55:20:78:39:21:be:9e:29:23:c7:f1:01: 33:48:6c:6c:44:a1:f7:4e:af:00:1b:81:e3:cb:c1: ef:e1:6e:4f:e3:25:2a:de:8b:42:8b:1a:4c:b3:5a: 0d:ed:d7:da:51:b7:ac:60:85:04:a9:02:09:15:ae: 19:f5:46:69:ef:ac:14:f6:55:c1:f4:25:18:50:96: 70:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:8F:C5:9C:18:A0:E5:EA:6C:45:70:1D:D0:D6:9A:6D:92:44:68:8C X509v3 Authority Key Identifier: keyid:35:90:2C:9B:64:0F:C6:D5:7C:23:77:14:ED:24:DA:17:F2:D3:E4:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZAsm2QPxtV8I3cU7STaF_LT5HQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f96baf-41f3-4986-b93a-417b4fa564ea/1/NZAsm2QPxtV8I3cU7STaF_LT5HQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f96baf-41f3-4986-b93a-417b4fa564ea/1/NZAsm2QPxtV8I3cU7STaF_LT5HQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:bd:90:49:20:8a:d7:b7:0e:a2:d1:65:84:b3:45:db:02:89: 36:8c:27:18:d2:c0:da:63:86:5e:c2:25:e9:0f:55:99:38:0c: 38:09:32:e2:af:94:40:9c:c4:5e:55:84:3c:25:a5:8d:e1:e3: 91:ff:d4:57:7f:1f:1a:0b:68:d9:02:39:ed:6f:fb:01:4b:ca: f9:7c:b9:05:6b:e8:3a:c6:f8:fb:73:bd:50:4b:41:8a:3d:19: d0:11:39:2a:05:22:2e:1c:04:bd:7c:b4:63:b7:f3:c5:db:a4: 46:39:da:fa:2a:47:f7:f9:00:ea:80:63:68:c4:d5:7e:9d:41: 3b:d9:46:83:91:1f:a8:5a:33:c4:a4:4c:3d:16:33:17:63:ff: 6e:a7:10:c1:c4:7b:ca:83:3a:f2:62:72:84:5b:1a:ba:2c:48: 71:33:1a:40:a6:10:41:3d:73:a9:1b:20:9b:7f:ac:3e:ce:28: 06:17:34:9e:0b:f1:04:3c:bd:0b:c2:cd:5a:ed:17:4d:82:1b: f2:ab:1f:6e:3c:18:d5:77:fb:71:75:30:2b:36:32:97:72:52: e8:74:28:c9:a9:bd:98:55:dc:3a:73:63:a4:a4:6f:37:69:91: af:4f:71:02:7e:7d:a1:66:b7:f9:e2:51:d2:63:98:27:9b:de: b8:0a:1b:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLWMyoFtacT5eR2iZrOHzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1OTAyYzliNjQwZmM2ZDU3YzIzNzcxNGVkMjRkYTE3ZjJk M2U0NzQwHhcNMjUxMjA2MDEwMTE0WhcNMjUxMjA3MDEwMTE0WjAzMTEwLwYDVQQD EygzYjhmYzU5YzE4YTBlNWVhNmM0NTcwMWRkMGQ2OWE2ZDkyNDQ2ODhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA739LcZMQ4Y3AAQFrzaGT/8NWJfkA lHUeGwqmPLpLouKQ3Z4KIWmLsKc93e9CIiyuBH32QHgroK1mlQVGEITh20JbImUR WZoqz01qw9GLJBvNWeEBQ1cvWEs5chGbKNnpn93J5unpJt5WP6972MJh6y/F69o4 /u55sSUuPJdBpuIkhiGee9ZTPq16dEXMhNiPMDawTqirxpvXiRoW45VYVIGw5ybU MXdTCbRn11b9Wtdiho91cbhVIHg5Ib6eKSPH8QEzSGxsRKH3Tq8AG4Hjy8Hv4W5P 4yUq3otCixpMs1oN7dfaUbesYIUEqQIJFa4Z9UZp76wU9lXB9CUYUJZwRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDuPxZwYoOXqbEVwHdDWmm2SRGiMMB8GA1UdIwQY MBaAFDWQLJtkD8bVfCN3FO0k2hfy0+R0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlpBc20yUVB4dFY4STNjVTdTVGFGX0xUNUhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9mOTZiYWYtNDFmMy00OTg2LWI5M2Et NDE3YjRmYTU2NGVhLzEvTlpBc20yUVB4dFY4STNjVTdTVGFGX0xUNUhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi9mOTZiYWYtNDFmMy00OTg2LWI5M2EtNDE3YjRmYTU2NGVh LzEvTlpBc20yUVB4dFY4STNjVTdTVGFGX0xUNUhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX72QSSCK 17cOotFlhLNF2wKJNownGNLA2mOGXsIl6Q9VmTgMOAky4q+UQJzEXlWEPCWljeHj kf/UV38fGgto2QI57W/7AUvK+Xy5BWvoOsb4+3O9UEtBij0Z0BE5KgUiLhwEvXy0 Y7fzxdukRjna+ipH9/kA6oBjaMTVfp1BO9lGg5EfqFozxKRMPRYzF2P/bqcQwcR7 yoM68mJyhFsauixIcTMaQKYQQT1zqRsgm3+sPs4oBhc0ngvxBDy9C8LNWu0XTYIb 8qsfbjwY1Xf7cXUwKzYyl3JS6HQoyam9mFXcOnNjpKRvN2mRr09xAn59oWa3+eJR 0mOYJ5veuAobcQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:17:04 2025 by rpki-client