This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/6b5b7b-f93c-4f37-8a64-6b2f526047a9/1/nzeBglGggdHMfzAVMg62NSZwm5E.mft File: nzeBglGggdHMfzAVMg62NSZwm5E.mft (raw, json) Hash identifier: hqNB1XejNiNonl44BsNBghi/NkRHFLBBGj4k9Qt9zJg= Subject key identifier: 43:06:ED:45:20:2B:A3:C7:EC:FB:08:AB:96:36:15:F5:FF:98:D6:A1 Authority key identifier: 9F:37:81:82:51:A0:81:D1:CC:7F:30:15:32:0E:B6:35:26:70:9B:91 Certificate issuer: /CN=9f37818251a081d1cc7f3015320eb63526709b91 Certificate serial: 019B424964D726100A778FC665498F1B6D3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzeBglGggdHMfzAVMg62NSZwm5E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/6b5b7b-f93c-4f37-8a64-6b2f526047a9/1/nzeBglGggdHMfzAVMg62NSZwm5E.mft Manifest number: 07F4 Signing time: Sun 21 Dec 2025 19:01:04 +0000 Manifest this update: Sun 21 Dec 2025 19:01:04 +0000 Manifest next update: Mon 22 Dec 2025 19:01:04 +0000 Files and hashes: 1: nzeBglGggdHMfzAVMg62NSZwm5E.crl (hash: ckIf4HqOrz3NSq5kPNtws2Zxo3I+smtQDBKoq61je+E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/6b5b7b-f93c-4f37-8a64-6b2f526047a9/1/nzeBglGggdHMfzAVMg62NSZwm5E.crl rsync://rpki.ripe.net/repository/DEFAULT/16/6b5b7b-f93c-4f37-8a64-6b2f526047a9/1/nzeBglGggdHMfzAVMg62NSZwm5E.mft rsync://rpki.ripe.net/repository/DEFAULT/nzeBglGggdHMfzAVMg62NSZwm5E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:49:64:d7:26:10:0a:77:8f:c6:65:49:8f:1b:6d:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f37818251a081d1cc7f3015320eb63526709b91 Validity Not Before: Dec 21 19:01:04 2025 GMT Not After : Dec 22 19:01:04 2025 GMT Subject: CN=4306ed45202ba3c7ecfb08ab963615f5ff98d6a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:07:a8:48:21:79:0e:41:55:dd:f2:f7:33:d1: 1d:fc:0f:73:fe:1e:61:95:b4:7d:7d:e3:fd:57:40: 36:43:6b:a6:9e:9c:a4:22:76:34:74:84:7a:70:87: e7:26:c5:c0:9a:78:4a:e8:3f:cd:45:3b:de:a6:59: b5:ff:e5:3e:ba:d6:8e:47:c1:66:8e:54:21:a2:c5: 89:24:11:9d:21:36:8b:5f:4c:88:96:63:2b:8c:f0: f1:fe:86:cb:5b:9d:f1:00:07:5a:73:e0:e8:3b:a5: 25:d9:85:cc:10:a9:06:7d:7a:e8:d0:bc:a7:aa:8b: bb:11:3f:a9:fc:4e:61:c2:6f:f9:ee:0d:87:aa:dc: cb:ed:f4:f2:dd:a6:4c:f9:7f:e5:e7:f5:bf:6d:d9: 9d:03:18:2b:5b:c5:aa:fc:f2:66:18:49:e3:92:12: db:fa:fc:a0:f6:f3:af:7c:d6:e9:04:83:c5:56:d4: c9:3a:3f:04:ba:d9:45:2f:05:51:ab:5a:4d:47:9f: 69:35:aa:48:ea:f4:d8:3d:39:88:8e:8e:d2:89:bb: d3:96:dd:8f:a0:9c:e1:9d:18:71:b8:d3:cb:0d:4a: 6a:f0:3c:c1:1e:c8:c2:42:2a:a4:d0:37:4d:e4:92: 67:9f:f5:00:a6:82:c0:0c:b2:a3:5c:57:42:4f:08: 25:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:06:ED:45:20:2B:A3:C7:EC:FB:08:AB:96:36:15:F5:FF:98:D6:A1 X509v3 Authority Key Identifier: keyid:9F:37:81:82:51:A0:81:D1:CC:7F:30:15:32:0E:B6:35:26:70:9B:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzeBglGggdHMfzAVMg62NSZwm5E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6b5b7b-f93c-4f37-8a64-6b2f526047a9/1/nzeBglGggdHMfzAVMg62NSZwm5E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6b5b7b-f93c-4f37-8a64-6b2f526047a9/1/nzeBglGggdHMfzAVMg62NSZwm5E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:25:4f:49:d4:f3:60:cf:8f:ff:ae:43:f6:1a:52:74:12:89: 61:88:2a:76:db:f1:8f:70:db:36:a5:3e:84:44:79:3e:04:61: 6a:a8:ed:4c:b7:ab:3e:ca:79:b6:58:95:8c:ba:f6:40:5c:4c: a5:76:02:34:01:08:f1:59:e0:45:c8:8e:c2:ff:ec:aa:1f:9f: b0:4f:3c:ab:12:16:c8:62:3a:23:10:4b:c0:1a:a5:f2:db:c1: 64:bf:83:e2:22:4e:c1:8d:20:5b:dc:2a:9e:7c:16:f5:61:34: f2:12:d2:63:6e:7c:ed:ee:67:e2:ce:22:fa:f5:98:38:fe:df: 11:b3:bb:e1:a6:61:79:e6:71:77:ee:9f:52:18:ea:58:cd:66: 6e:3f:ef:d8:f8:f7:4c:6f:7e:25:b6:c9:ad:b1:c9:3b:12:55: 1c:65:62:58:ad:e6:72:08:a2:93:54:f4:92:04:53:66:5a:99: 19:be:5e:5a:0f:e3:63:bc:9b:d0:1f:60:c8:07:71:23:6c:2a: 7e:4d:50:1a:bf:78:e1:09:6d:61:e6:93:86:7f:c5:c6:85:28: ab:60:37:68:01:ba:a8:8c:60:a1:97:79:5d:01:95:4b:5f:43: b8:5f:8d:57:83:1a:4e:df:f2:eb:7f:df:50:30:df:f4:52:45: f5:57:5b:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSWTXJhAKd4/GZUmPG20+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmMzc4MTgyNTFhMDgxZDFjYzdmMzAxNTMyMGViNjM1MjY3 MDliOTEwHhcNMjUxMjIxMTkwMTA0WhcNMjUxMjIyMTkwMTA0WjAzMTEwLwYDVQQD Eyg0MzA2ZWQ0NTIwMmJhM2M3ZWNmYjA4YWI5NjM2MTVmNWZmOThkNmExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9weoSCF5DkFV3fL3M9Ed/A9z/h5h lbR9feP9V0A2Q2umnpykInY0dIR6cIfnJsXAmnhK6D/NRTveplm1/+U+utaOR8Fm jlQhosWJJBGdITaLX0yIlmMrjPDx/obLW53xAAdac+DoO6Ul2YXMEKkGfXro0Lyn qou7ET+p/E5hwm/57g2HqtzL7fTy3aZM+X/l5/W/bdmdAxgrW8Wq/PJmGEnjkhLb +vyg9vOvfNbpBIPFVtTJOj8EutlFLwVRq1pNR59pNapI6vTYPTmIjo7SibvTlt2P oJzhnRhxuNPLDUpq8DzBHsjCQiqk0DdN5JJnn/UApoLADLKjXFdCTwglswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEMG7UUgK6PH7PsIq5Y2FfX/mNahMB8GA1UdIwQY MBaAFJ83gYJRoIHRzH8wFTIOtjUmcJuRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnplQmdsR2dnZEhNZnpBVk1nNjJOU1p3bTVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82YjViN2ItZjkzYy00ZjM3LThhNjQt NmIyZjUyNjA0N2E5LzEvbnplQmdsR2dnZEhNZnpBVk1nNjJOU1p3bTVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82YjViN2ItZjkzYy00ZjM3LThhNjQtNmIyZjUyNjA0N2E5 LzEvbnplQmdsR2dnZEhNZnpBVk1nNjJOU1p3bTVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANiVPSdTz YM+P/65D9hpSdBKJYYgqdtvxj3DbNqU+hER5PgRhaqjtTLerPsp5tliVjLr2QFxM pXYCNAEI8VngRciOwv/sqh+fsE88qxIWyGI6IxBLwBql8tvBZL+D4iJOwY0gW9wq nnwW9WE08hLSY2587e5n4s4i+vWYOP7fEbO74aZheeZxd+6fUhjqWM1mbj/v2Pj3 TG9+JbbJrbHJOxJVHGViWK3mcgiik1T0kgRTZlqZGb5eWg/jY7yb0B9gyAdxI2wq fk1QGr944QltYeaThn/FxoUoq2A3aAG6qIxgoZd5XQGVS19DuF+NV4MaTt/y63/f UDDf9FJF9VdbqA== -----END CERTIFICATE-----Generated at Sun Dec 21 22:37:41 2025 by rpki-client