This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.mft File: NZTKzdk15Fz3HGFngKGx1Kpox7U.mft (raw, json) Hash identifier: lhMpmqvmz7NLrMX8MMDuzTEG5O19LQCK5OuSXhZudK4= Subject key identifier: ED:D6:86:49:E4:16:66:B0:5A:CB:6C:3E:00:53:CD:1B:D2:51:6A:A4 Authority key identifier: 35:94:CA:CD:D9:35:E4:5C:F7:1C:61:67:80:A1:B1:D4:AA:68:C7:B5 Certificate issuer: /CN=3594cacdd935e45cf71c616780a1b1d4aa68c7b5 Certificate serial: 019AF19B11BC4E164AFECA7376A8AAB4A360 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZTKzdk15Fz3HGFngKGx1Kpox7U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 03:01:02 +0000 Manifest this update: Sat 06 Dec 2025 03:01:02 +0000 Manifest next update: Sun 07 Dec 2025 03:01:02 +0000 Files and hashes: 1: NZTKzdk15Fz3HGFngKGx1Kpox7U.crl (hash: GmY5KYXFtPY4wmbkyhBXaMFAdIOO3Re3Iq991XFEsnQ=) 2: ofsbRp2fd5LCZL5t0IaGNjdbGV0.roa (hash: bLNeuXUfAO52F/EGBeoEWZNzHoJs12X+xc+mr+Ggzjo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.mft rsync://rpki.ripe.net/repository/DEFAULT/NZTKzdk15Fz3HGFngKGx1Kpox7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:11:bc:4e:16:4a:fe:ca:73:76:a8:aa:b4:a3:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3594cacdd935e45cf71c616780a1b1d4aa68c7b5 Validity Not Before: Dec 6 03:01:02 2025 GMT Not After : Dec 7 03:01:02 2025 GMT Subject: CN=edd68649e41666b05acb6c3e0053cd1bd2516aa4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:9e:21:f0:ae:36:05:04:b4:d8:51:7e:c9:e0: d9:92:08:bd:63:de:9d:44:32:a3:ab:46:3e:db:ec: 94:0e:ff:7b:90:a1:40:97:83:b9:b8:11:03:b4:a7: 9c:42:a2:33:80:fa:73:c3:ac:fe:91:8d:36:a8:fa: 63:0a:f5:d6:b1:48:1c:a1:e6:4a:2d:36:9f:19:a7: fa:da:a7:eb:08:e1:b2:92:b7:74:98:de:92:2a:7b: 52:ed:95:18:28:7a:c2:44:31:b3:4d:84:8b:74:15: 77:84:44:8a:ab:51:ff:a7:a7:0f:bc:ad:94:3f:18: 26:23:f4:af:1e:aa:96:6e:af:e5:89:8c:f1:a1:32: 2b:4f:e2:31:8e:56:c7:48:9c:aa:a8:31:17:60:86: 8a:cd:47:33:b3:98:89:c7:1c:60:81:5a:ba:d9:32: 6e:2d:ce:c1:7c:6f:74:ca:74:a5:3c:4e:8d:3a:91: 70:39:c6:fe:7e:c2:24:5c:df:77:79:d4:4e:2e:8b: a8:46:54:31:34:97:00:e2:cd:94:2c:04:f0:22:3c: 57:a9:48:8c:44:b0:f2:c8:9a:0a:39:a3:40:42:78: 80:c5:d5:e0:1d:75:0d:c6:e4:a7:b2:36:eb:a9:48: 8e:bd:3b:80:ba:95:86:20:8c:f4:11:cd:7b:5d:a0: aa:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:D6:86:49:E4:16:66:B0:5A:CB:6C:3E:00:53:CD:1B:D2:51:6A:A4 X509v3 Authority Key Identifier: keyid:35:94:CA:CD:D9:35:E4:5C:F7:1C:61:67:80:A1:B1:D4:AA:68:C7:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZTKzdk15Fz3HGFngKGx1Kpox7U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:60:54:a5:cb:c5:b2:f9:10:5b:b5:49:5a:50:44:4a:d0:b4: b0:49:f3:60:8b:ad:f9:2f:0f:09:4a:ba:0c:a6:87:0b:de:8b: 52:3f:bd:21:d5:f4:95:56:a3:90:61:9a:00:1b:e2:5c:6b:36: 89:21:be:ab:40:cd:61:d4:4c:4c:79:9c:b3:3a:9d:0f:49:f4: 48:fa:a6:4c:35:54:a3:e4:fa:e4:0b:88:b1:50:33:43:b1:77: 99:5b:84:be:42:a4:7a:dd:f9:90:99:7f:56:e1:7b:50:9a:64: d4:33:fa:de:1d:a6:21:b9:33:2b:13:f7:fc:e2:0d:93:b3:25: c9:61:c0:4e:d0:6c:cf:f5:10:7a:4c:97:d3:f9:30:87:d5:2d: 16:05:76:3a:fc:13:3b:73:f2:29:2c:62:00:37:60:cb:b8:e9: 70:72:17:27:a0:83:8c:bc:a7:a3:ce:37:d4:46:03:cf:52:d2: 8f:79:c7:6d:9d:82:26:48:69:b7:c2:69:88:2f:5e:20:60:3e: c6:c4:e1:60:9f:cd:b5:5a:c7:03:fa:a4:a5:19:eb:82:85:5b: 86:b8:8a:ca:6a:e9:63:77:a5:2c:64:7d:66:56:2d:3b:a6:b8: 2a:df:d4:4e:9c:ec:1f:71:53:8e:2a:0f:ec:54:fd:cd:a8:89: 93:2c:f3:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmxG8ThZK/spzdqiqtKNgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1OTRjYWNkZDkzNWU0NWNmNzFjNjE2NzgwYTFiMWQ0YWE2 OGM3YjUwHhcNMjUxMjA2MDMwMTAyWhcNMjUxMjA3MDMwMTAyWjAzMTEwLwYDVQQD EyhlZGQ2ODY0OWU0MTY2NmIwNWFjYjZjM2UwMDUzY2QxYmQyNTE2YWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4p4h8K42BQS02FF+yeDZkgi9Y96d RDKjq0Y+2+yUDv97kKFAl4O5uBEDtKecQqIzgPpzw6z+kY02qPpjCvXWsUgcoeZK LTafGaf62qfrCOGykrd0mN6SKntS7ZUYKHrCRDGzTYSLdBV3hESKq1H/p6cPvK2U PxgmI/SvHqqWbq/liYzxoTIrT+IxjlbHSJyqqDEXYIaKzUczs5iJxxxggVq62TJu Lc7BfG90ynSlPE6NOpFwOcb+fsIkXN93edROLouoRlQxNJcA4s2ULATwIjxXqUiM RLDyyJoKOaNAQniAxdXgHXUNxuSnsjbrqUiOvTuAupWGIIz0Ec17XaCqlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO3WhknkFmawWstsPgBTzRvSUWqkMB8GA1UdIwQY MBaAFDWUys3ZNeRc9xxhZ4ChsdSqaMe1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlpUS3pkazE1RnozSEdGbmdLR3gxS3BveDdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS81Y2IyNDUtNDJhMi00OThmLWI3YjIt NGFiZGMyYmI5ZmEzLzEvTlpUS3pkazE1RnozSEdGbmdLR3gxS3BveDdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS81Y2IyNDUtNDJhMi00OThmLWI3YjItNGFiZGMyYmI5ZmEz LzEvTlpUS3pkazE1RnozSEdGbmdLR3gxS3BveDdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcWBUpcvF svkQW7VJWlBEStC0sEnzYIut+S8PCUq6DKaHC96LUj+9IdX0lVajkGGaABviXGs2 iSG+q0DNYdRMTHmcszqdD0n0SPqmTDVUo+T65AuIsVAzQ7F3mVuEvkKket35kJl/ VuF7UJpk1DP63h2mIbkzKxP3/OINk7MlyWHATtBsz/UQekyX0/kwh9UtFgV2OvwT O3PyKSxiADdgy7jpcHIXJ6CDjLyno8431EYDz1LSj3nHbZ2CJkhpt8JpiC9eIGA+ xsThYJ/NtVrHA/qkpRnrgoVbhriKymrpY3elLGR9ZlYtO6a4Kt/UTpzsH3FTjioP 7FT9zaiJkyzz7A== -----END CERTIFICATE-----Generated at Sat Dec 6 10:10:16 2025 by rpki-client