This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft File: NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft (raw, json) Hash identifier: 10fGkpGbIOup9WQvEG8x8BPcwQlrhEY8KKvK+r1iaQ8= Subject key identifier: 3E:7A:8E:4F:4D:CD:0D:EC:08:85:91:6F:62:7A:EF:DA:29:9B:60:1A Authority key identifier: 35:16:52:B8:38:FF:2D:96:72:AC:8C:A6:6B:A6:60:DD:4E:45:D6:99 Certificate issuer: /CN=351652b838ff2d9672ac8ca66ba660dd4e45d699 Certificate serial: 019B3A221DEB1FFBBDAE31E5B82B9EF62986 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRZSuDj_LZZyrIyma6Zg3U5F1pk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft Manifest number: 0C6B Signing time: Sat 20 Dec 2025 05:01:12 +0000 Manifest this update: Sat 20 Dec 2025 05:01:12 +0000 Manifest next update: Sun 21 Dec 2025 05:01:12 +0000 Files and hashes: 1: NRZSuDj_LZZyrIyma6Zg3U5F1pk.crl (hash: YJOYTiJWWzW/If4n7zILOAug/7yjzGDUbWzF28A/xiA=) 2: Zk0y4tHHB8Yu3r49IrGLEovlzps.roa (hash: Z8BlFARu3PiIVKgAzCmvXp/n3Elo4eu1cJ/tXUB0sZU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft rsync://rpki.ripe.net/repository/DEFAULT/NRZSuDj_LZZyrIyma6Zg3U5F1pk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 05:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:22:1d:eb:1f:fb:bd:ae:31:e5:b8:2b:9e:f6:29:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=351652b838ff2d9672ac8ca66ba660dd4e45d699 Validity Not Before: Dec 20 05:01:12 2025 GMT Not After : Dec 21 05:01:12 2025 GMT Subject: CN=3e7a8e4f4dcd0dec0885916f627aefda299b601a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:af:d1:13:79:ca:99:f1:f8:c0:f0:3d:62:31: 0e:a8:19:fc:3f:d2:4b:d4:22:98:eb:ed:73:43:fb: 07:3e:b2:ac:b8:77:90:ab:45:39:41:ce:52:b7:10: 4a:9e:e0:30:ca:19:2c:e1:1c:8d:a1:93:85:61:23: a0:db:84:e6:67:0d:75:49:89:e6:81:e4:9d:a5:ba: 60:d2:3e:9c:58:42:93:ba:2d:fe:b4:0f:d2:38:da: 0e:d6:4b:a7:b5:91:49:96:89:59:0f:d8:da:84:bf: f0:91:9b:62:4d:51:ba:8d:d1:c8:1e:3b:7b:30:38: 94:3c:39:70:b7:af:9e:d9:c2:24:83:0d:55:07:60: 57:4b:0a:0c:a5:f3:2e:6a:06:f9:05:83:f7:83:8a: 20:fd:ed:21:61:b3:22:cd:6a:91:d7:c5:4b:5b:ad: 1a:fe:20:54:5d:45:5c:de:19:4e:2f:b0:06:3f:9b: 26:14:0a:e0:c9:96:81:38:fd:fd:a2:58:2a:e0:56: ef:c1:e5:77:78:10:af:22:1e:ab:8f:8f:b9:1e:a5: 99:74:cc:57:f9:e2:10:01:56:07:d1:c9:56:40:96: 92:1f:b8:93:9e:b8:c1:2f:3c:dd:3b:78:a5:a3:27: d2:7f:9d:e0:6d:a9:43:de:16:29:b8:e9:72:96:2b: 0c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:7A:8E:4F:4D:CD:0D:EC:08:85:91:6F:62:7A:EF:DA:29:9B:60:1A X509v3 Authority Key Identifier: keyid:35:16:52:B8:38:FF:2D:96:72:AC:8C:A6:6B:A6:60:DD:4E:45:D6:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRZSuDj_LZZyrIyma6Zg3U5F1pk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:c8:6d:ac:60:fe:ea:57:ff:75:1d:0e:ff:bd:bc:eb:7f:eb: a0:28:d9:a1:a7:5c:ca:0a:24:92:4b:c6:4c:c0:86:79:7e:62: b0:16:ea:4c:c1:b1:f1:4e:ad:9a:6d:57:4e:17:62:8d:c9:67: 85:23:e4:7a:44:c3:56:47:8b:29:40:00:fd:e2:5e:d1:f8:ec: fd:5f:13:56:e0:47:0d:8e:dd:da:61:16:58:bd:18:7e:18:81: 0c:56:e6:40:fa:fa:4f:46:a7:4c:b9:93:9a:3a:9f:24:5a:69: c4:b1:33:da:16:ba:fd:d1:9e:71:d4:8a:38:2e:b5:7e:3c:67: 0f:2a:df:70:12:c0:90:98:30:e8:9b:51:60:a8:b5:f2:f0:bd: 55:7b:2d:bc:2b:30:40:56:b0:57:6e:ee:83:a9:8d:47:40:2e: 85:fa:03:8f:23:6e:70:8d:39:20:ff:02:5d:9b:c1:9b:c8:d5: 7b:6b:29:01:e2:bb:68:83:57:da:cf:24:1e:a4:3a:47:29:ee: ea:5c:7d:10:65:f6:01:c3:c8:19:35:56:cb:d2:a4:1c:a8:e7: bd:69:93:98:63:9a:31:a5:4e:92:a8:7e:b4:cf:5b:fe:b9:4b: 44:98:4e:8a:5c:8c:75:1c:da:d7:44:ff:c1:06:7c:71:a3:99: 7b:33:8e:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6Ih3rH/u9rjHluCue9imGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MTY1MmI4MzhmZjJkOTY3MmFjOGNhNjZiYTY2MGRkNGU0 NWQ2OTkwHhcNMjUxMjIwMDUwMTEyWhcNMjUxMjIxMDUwMTEyWjAzMTEwLwYDVQQD EygzZTdhOGU0ZjRkY2QwZGVjMDg4NTkxNmY2MjdhZWZkYTI5OWI2MDFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuq/RE3nKmfH4wPA9YjEOqBn8P9JL 1CKY6+1zQ/sHPrKsuHeQq0U5Qc5StxBKnuAwyhks4RyNoZOFYSOg24TmZw11SYnm geSdpbpg0j6cWEKTui3+tA/SONoO1kuntZFJlolZD9jahL/wkZtiTVG6jdHIHjt7 MDiUPDlwt6+e2cIkgw1VB2BXSwoMpfMuagb5BYP3g4og/e0hYbMizWqR18VLW60a /iBUXUVc3hlOL7AGP5smFArgyZaBOP39olgq4FbvweV3eBCvIh6rj4+5HqWZdMxX +eIQAVYH0clWQJaSH7iTnrjBLzzdO3iloyfSf53gbalD3hYpuOlylisMEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD56jk9NzQ3sCIWRb2J679opm2AaMB8GA1UdIwQY MBaAFDUWUrg4/y2WcqyMpmumYN1ORdaZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlJaU3VEal9MWlp5ckl5bWE2WmczVTVGMXBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi85Y2U2MGItY2JjNC00MGQ5LTk4YWQt MWNkNTA2MDcwYmI1LzEvTlJaU3VEal9MWlp5ckl5bWE2WmczVTVGMXBrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi85Y2U2MGItY2JjNC00MGQ5LTk4YWQtMWNkNTA2MDcwYmI1 LzEvTlJaU3VEal9MWlp5ckl5bWE2WmczVTVGMXBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXMhtrGD+ 6lf/dR0O/72863/roCjZoadcygokkkvGTMCGeX5isBbqTMGx8U6tmm1XThdijcln hSPkekTDVkeLKUAA/eJe0fjs/V8TVuBHDY7d2mEWWL0YfhiBDFbmQPr6T0anTLmT mjqfJFppxLEz2ha6/dGecdSKOC61fjxnDyrfcBLAkJgw6JtRYKi18vC9VXstvCsw QFawV27ug6mNR0AuhfoDjyNucI05IP8CXZvBm8jVe2spAeK7aINX2s8kHqQ6Rynu 6lx9EGX2AcPIGTVWy9KkHKjnvWmTmGOaMaVOkqh+tM9b/rlLRJhOilyMdRza10T/ wQZ8caOZezOOug== -----END CERTIFICATE-----Generated at Sat Dec 20 13:59:21 2025 by rpki-client