This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/nNZ9EDPKRytbuA_VlruDbRLiImE.mft File: nNZ9EDPKRytbuA_VlruDbRLiImE.mft (raw, json) Hash identifier: UaVotQw9ISnqMd3CP+LMeivCipbV5+gHdnRsi6YUrxM= Subject key identifier: 98:BD:DD:D5:0A:F6:9B:AE:34:10:6E:D2:5B:D8:9C:03:52:B8:24:9E Authority key identifier: 9C:D6:7D:10:33:CA:47:2B:5B:B8:0F:D5:96:BB:83:6D:12:E2:22:61 Certificate issuer: /CN=9cd67d1033ca472b5bb80fd596bb836d12e22261 Certificate serial: 019AF1D1A7AE1A61C928D91BE6B1992F1F9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nNZ9EDPKRytbuA_VlruDbRLiImE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/nNZ9EDPKRytbuA_VlruDbRLiImE.mft Manifest number: 0D52 Signing time: Sat 06 Dec 2025 04:00:39 +0000 Manifest this update: Sat 06 Dec 2025 04:00:39 +0000 Manifest next update: Sun 07 Dec 2025 04:00:39 +0000 Files and hashes: 1: nNZ9EDPKRytbuA_VlruDbRLiImE.crl (hash: hsEyIenGvL7Hkp7GmzwhiAzJw8HDoKySSvjufN66ebk=) 2: vJEpt2EZ5UHOHzXUt6_FIB9pq2c.roa (hash: wfxwNWs85u9qLCuI6Hzz2FjX0JN3uzdqSv3NQ+LC9RE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/nNZ9EDPKRytbuA_VlruDbRLiImE.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/nNZ9EDPKRytbuA_VlruDbRLiImE.mft rsync://rpki.ripe.net/repository/DEFAULT/nNZ9EDPKRytbuA_VlruDbRLiImE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:a7:ae:1a:61:c9:28:d9:1b:e6:b1:99:2f:1f:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cd67d1033ca472b5bb80fd596bb836d12e22261 Validity Not Before: Dec 6 04:00:39 2025 GMT Not After : Dec 7 04:00:39 2025 GMT Subject: CN=98bdddd50af69bae34106ed25bd89c0352b8249e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:40:02:69:ba:08:5f:c5:97:69:a0:da:7d:86: 7c:81:83:a5:39:a4:15:c0:69:40:b2:4a:e2:8a:e2: 1b:c1:12:e3:25:8b:22:15:65:01:64:fe:5a:4f:b8: 03:ee:89:d8:ef:b8:61:02:66:ca:e6:35:01:db:29: 7b:c2:db:2b:d6:c5:0e:60:26:fb:1d:bd:66:c8:26: 65:52:f7:53:d1:04:bd:75:91:ef:61:4b:ff:78:75: 58:1c:ce:46:0d:b7:97:50:c0:e5:1d:a8:bf:5a:d1: f9:18:97:27:2f:44:92:30:27:c0:94:07:3f:de:53: 0b:5c:0d:de:d8:d6:03:78:90:0b:9e:ff:81:4a:5f: c4:50:df:a8:c7:db:8b:13:dc:05:e0:3b:2f:26:ec: 8f:e6:5b:92:ad:5a:1b:1d:81:b4:c3:a7:68:91:f2: 55:24:b4:4f:51:80:67:14:32:49:d3:a9:88:25:40: 5b:5f:43:61:6e:a6:11:58:8b:79:79:97:98:78:b0: 62:0f:fb:7f:5b:9e:f1:55:e0:d3:ab:3b:e4:89:d5: ac:69:12:49:c6:69:b3:a6:b7:38:74:99:f6:19:60: c4:4b:59:17:ac:da:d5:a6:ca:0b:8b:34:cc:30:ef: bf:da:ea:ca:b1:fc:90:80:41:2f:cd:df:ed:26:6f: b1:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:BD:DD:D5:0A:F6:9B:AE:34:10:6E:D2:5B:D8:9C:03:52:B8:24:9E X509v3 Authority Key Identifier: keyid:9C:D6:7D:10:33:CA:47:2B:5B:B8:0F:D5:96:BB:83:6D:12:E2:22:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nNZ9EDPKRytbuA_VlruDbRLiImE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/nNZ9EDPKRytbuA_VlruDbRLiImE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/nNZ9EDPKRytbuA_VlruDbRLiImE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:10:98:9b:9f:26:83:69:34:1c:14:d2:c0:be:5f:ff:48:76: ec:14:59:53:fc:fa:ac:6c:f0:9f:6d:d2:f5:ce:a2:c9:f3:15: f5:17:4d:0d:3d:ef:8e:7c:67:02:f4:d9:bd:af:92:96:df:ea: d7:42:70:43:43:96:e2:c3:59:91:f3:17:bd:37:2a:87:8f:ab: 2c:84:ad:03:ea:92:38:41:4c:92:8f:9d:9d:91:02:65:97:33: cf:70:c0:6c:a2:38:4d:8a:fb:ad:fb:ac:88:da:04:ed:3a:24: cf:ef:a9:6b:c3:ae:13:06:8d:de:c8:2f:ba:dd:39:20:dd:f0: 98:db:6f:9e:99:61:cf:0b:cb:de:c1:a5:1c:7d:0c:59:f6:97: 79:28:5c:b4:e3:21:d4:d3:93:e6:10:93:47:8d:41:80:31:78: 2f:44:7f:71:30:53:be:f4:bb:2c:aa:b3:b7:8d:ae:68:32:cd: 38:da:21:df:77:e9:4a:a9:17:9d:f3:65:5c:45:e5:2d:61:61: 69:72:21:23:a4:6d:3d:2a:82:43:f0:96:21:1b:19:30:58:44: 37:bc:07:a5:9d:f3:01:e6:36:ee:4c:b0:fe:28:c4:02:a9:8c: 89:81:ec:fb:28:48:a5:87:88:5c:d7:cf:49:55:84:82:e7:25: 71:43:0b:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0aeuGmHJKNkb5rGZLx+eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljZDY3ZDEwMzNjYTQ3MmI1YmI4MGZkNTk2YmI4MzZkMTJl MjIyNjEwHhcNMjUxMjA2MDQwMDM5WhcNMjUxMjA3MDQwMDM5WjAzMTEwLwYDVQQD Eyg5OGJkZGRkNTBhZjY5YmFlMzQxMDZlZDI1YmQ4OWMwMzUyYjgyNDllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4UACaboIX8WXaaDafYZ8gYOlOaQV wGlAskriiuIbwRLjJYsiFWUBZP5aT7gD7onY77hhAmbK5jUB2yl7wtsr1sUOYCb7 Hb1myCZlUvdT0QS9dZHvYUv/eHVYHM5GDbeXUMDlHai/WtH5GJcnL0SSMCfAlAc/ 3lMLXA3e2NYDeJALnv+BSl/EUN+ox9uLE9wF4DsvJuyP5luSrVobHYG0w6dokfJV JLRPUYBnFDJJ06mIJUBbX0NhbqYRWIt5eZeYeLBiD/t/W57xVeDTqzvkidWsaRJJ xmmzprc4dJn2GWDES1kXrNrVpsoLizTMMO+/2urKsfyQgEEvzd/tJm+xHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJi93dUK9puuNBBu0lvYnANSuCSeMB8GA1UdIwQY MBaAFJzWfRAzykcrW7gP1Za7g20S4iJhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbk5aOUVEUEtSeXRidUFfVmxydURiUkxpSW1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9mMTc3MjItZTU4Yi00NDUyLTgxMzUt ZWFhNWFjZjM1ZmQxLzEvbk5aOUVEUEtSeXRidUFfVmxydURiUkxpSW1FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9mMTc3MjItZTU4Yi00NDUyLTgxMzUtZWFhNWFjZjM1ZmQx LzEvbk5aOUVEUEtSeXRidUFfVmxydURiUkxpSW1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZhCYm58m g2k0HBTSwL5f/0h27BRZU/z6rGzwn23S9c6iyfMV9RdNDT3vjnxnAvTZva+Slt/q 10JwQ0OW4sNZkfMXvTcqh4+rLIStA+qSOEFMko+dnZECZZczz3DAbKI4TYr7rfus iNoE7Tokz++pa8OuEwaN3sgvut05IN3wmNtvnplhzwvL3sGlHH0MWfaXeShctOMh 1NOT5hCTR41BgDF4L0R/cTBTvvS7LKqzt42uaDLNONoh33fpSqkXnfNlXEXlLWFh aXIhI6RtPSqCQ/CWIRsZMFhEN7wHpZ3zAeY27kyw/ijEAqmMiYHs+yhIpYeIXNfP SVWEguclcUMLOw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:22:42 2025 by rpki-client