This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.mft File: Nz2PVXyuGOI12Ti608-uF8kbneY.mft (raw, json) Hash identifier: GY8kwrVaYDgJC2AYbAekScYWVVJS7QpEZ3Maedg7t34= Subject key identifier: 34:49:A0:2B:D0:A0:EC:BD:04:0A:CF:1D:2B:6C:7E:2F:09:88:99:A9 Authority key identifier: 37:3D:8F:55:7C:AE:18:E2:35:D9:38:BA:D3:CF:AE:17:C9:1B:9D:E6 Certificate issuer: /CN=373d8f557cae18e235d938bad3cfae17c91b9de6 Certificate serial: 019B34FB2B20563E0646DD12D473DAE5A036 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nz2PVXyuGOI12Ti608-uF8kbneY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.mft Manifest number: 0E45 Signing time: Fri 19 Dec 2025 05:00:34 +0000 Manifest this update: Fri 19 Dec 2025 05:00:34 +0000 Manifest next update: Sat 20 Dec 2025 05:00:34 +0000 Files and hashes: 1: Nz2PVXyuGOI12Ti608-uF8kbneY.crl (hash: PIFg1eZH8gtETuz8uYQ9/B94BTgn8f5dAaHPS/Kri8Q=) 2: ozI4hI8kFkEQxCSmEwvkBXoCapM.roa (hash: nsuE7KYFnBTkOwSYDCdNStBanVXhSb5SsJb22tB9rcI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.mft rsync://rpki.ripe.net/repository/DEFAULT/Nz2PVXyuGOI12Ti608-uF8kbneY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 05:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:fb:2b:20:56:3e:06:46:dd:12:d4:73:da:e5:a0:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=373d8f557cae18e235d938bad3cfae17c91b9de6 Validity Not Before: Dec 19 05:00:34 2025 GMT Not After : Dec 20 05:00:34 2025 GMT Subject: CN=3449a02bd0a0ecbd040acf1d2b6c7e2f098899a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:49:a8:e2:bd:07:e4:ab:38:da:28:fe:62:15: 27:09:0a:97:3c:0d:fc:96:41:35:26:b0:ed:cd:65: 8f:bf:9b:e2:f6:bb:26:a0:a3:6d:8b:4e:72:25:84: 73:e4:77:7f:53:51:f2:6c:05:0d:eb:d0:5a:80:20: 18:67:47:82:cb:8f:fc:64:bb:88:1b:f4:ef:da:94: f7:ec:71:4d:54:06:e1:f8:27:28:aa:e4:c3:0e:66: 6f:b9:b8:66:8f:d7:70:43:d9:a2:77:b4:fe:82:71: 97:a9:2d:ff:be:95:2b:f9:aa:5a:ce:3a:43:fd:f5: ed:31:d7:95:ac:ce:92:e0:d4:95:9b:49:5f:7d:df: 84:64:33:a3:1e:b4:6c:c6:03:18:8e:6a:3f:40:d1: a3:64:90:ae:b4:bd:99:a8:9f:56:83:0b:ed:81:70: 9a:77:58:60:9c:60:90:99:48:f9:e2:1e:28:e5:36: 56:ee:9c:a0:d2:8d:35:97:0d:0a:21:01:44:37:52: dc:e5:59:dd:ff:76:60:13:4b:42:02:63:15:44:a4: 20:1d:c1:54:25:3f:7c:24:15:c6:20:2d:3e:3a:fa: 60:8d:ac:58:ff:07:a3:f1:bf:9d:9c:1c:90:8a:e8: a7:60:e0:40:6b:00:21:af:8b:06:df:dd:09:ab:72: 75:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:49:A0:2B:D0:A0:EC:BD:04:0A:CF:1D:2B:6C:7E:2F:09:88:99:A9 X509v3 Authority Key Identifier: keyid:37:3D:8F:55:7C:AE:18:E2:35:D9:38:BA:D3:CF:AE:17:C9:1B:9D:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nz2PVXyuGOI12Ti608-uF8kbneY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:3f:74:4a:41:87:f1:6a:c4:60:4e:8d:14:4b:6a:9b:a3:4e: 99:b9:11:30:79:e1:50:18:b0:e6:95:27:fd:ad:79:d6:8e:5d: 84:c9:c3:3f:20:b9:9d:41:ad:15:46:8b:60:56:be:24:1f:1d: 56:93:ec:ec:d5:e2:3b:b7:b3:58:f5:67:45:46:c9:f4:ac:42: 39:97:fa:c6:e5:a1:8b:1d:6b:13:39:9e:50:71:ec:5f:ee:4a: 8f:28:f5:d5:e9:cb:87:26:79:97:40:b0:e5:46:ce:58:95:b1: 88:5a:7d:d3:61:a1:90:fa:0e:dd:4b:f0:a7:f7:b6:b8:dc:67: 9f:9f:79:00:af:31:86:1e:fd:3a:d8:98:40:e3:5c:d0:82:e5: 20:ec:84:05:0e:93:ba:12:49:07:dc:57:73:23:83:74:be:5a: 49:61:9f:cd:20:3e:c9:f8:9a:2b:0b:d7:3c:7a:e2:b0:67:5b: 5f:ff:e9:93:60:7a:d1:8e:35:8f:42:ac:03:ad:c5:ae:0f:0a: 02:4b:55:2e:62:f6:ad:45:45:5a:50:0a:f4:38:5c:39:26:02: 29:a4:87:e4:54:01:58:8d:3a:71:94:11:6a:ec:00:cb:4e:32: e8:e9:66:14:36:d0:52:7a:db:1f:94:3b:91:b4:86:2a:da:a6: f9:44:ce:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0+ysgVj4GRt0S1HPa5aA2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3M2Q4ZjU1N2NhZTE4ZTIzNWQ5MzhiYWQzY2ZhZTE3Yzkx YjlkZTYwHhcNMjUxMjE5MDUwMDM0WhcNMjUxMjIwMDUwMDM0WjAzMTEwLwYDVQQD EygzNDQ5YTAyYmQwYTBlY2JkMDQwYWNmMWQyYjZjN2UyZjA5ODg5OWE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Emo4r0H5Ks42ij+YhUnCQqXPA38 lkE1JrDtzWWPv5vi9rsmoKNti05yJYRz5Hd/U1HybAUN69BagCAYZ0eCy4/8ZLuI G/Tv2pT37HFNVAbh+CcoquTDDmZvubhmj9dwQ9mid7T+gnGXqS3/vpUr+apazjpD /fXtMdeVrM6S4NSVm0lffd+EZDOjHrRsxgMYjmo/QNGjZJCutL2ZqJ9WgwvtgXCa d1hgnGCQmUj54h4o5TZW7pyg0o01lw0KIQFEN1Lc5Vnd/3ZgE0tCAmMVRKQgHcFU JT98JBXGIC0+OvpgjaxY/wej8b+dnByQiuinYOBAawAhr4sG390Jq3J1qQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDRJoCvQoOy9BArPHStsfi8JiJmpMB8GA1UdIwQY MBaAFDc9j1V8rhjiNdk4utPPrhfJG53mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnoyUFZYeXVHT0kxMlRpNjA4LXVGOGtibmVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy81MTc0MTEtMGM0Mi00ZDE4LTkwMzkt Yzk5ZGQzOTBhN2Q2LzEvTnoyUFZYeXVHT0kxMlRpNjA4LXVGOGtibmVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy81MTc0MTEtMGM0Mi00ZDE4LTkwMzktYzk5ZGQzOTBhN2Q2 LzEvTnoyUFZYeXVHT0kxMlRpNjA4LXVGOGtibmVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjj90SkGH 8WrEYE6NFEtqm6NOmbkRMHnhUBiw5pUn/a151o5dhMnDPyC5nUGtFUaLYFa+JB8d VpPs7NXiO7ezWPVnRUbJ9KxCOZf6xuWhix1rEzmeUHHsX+5Kjyj11enLhyZ5l0Cw 5UbOWJWxiFp902GhkPoO3Uvwp/e2uNxnn595AK8xhh79OtiYQONc0ILlIOyEBQ6T uhJJB9xXcyODdL5aSWGfzSA+yfiaKwvXPHrisGdbX//pk2B60Y41j0KsA63Frg8K AktVLmL2rUVFWlAK9DhcOSYCKaSH5FQBWI06cZQRauwAy04y6OlmFDbQUnrbH5Q7 kbSGKtqm+UTOOA== -----END CERTIFICATE-----Generated at Fri Dec 19 10:26:42 2025 by rpki-client