This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.mft File: nZoMhLMHIPTUzkvboB3QVE0Cjs0.mft (raw, json) Hash identifier: nvs7I7ohTBaaEQQeNR85NDB/qzrS3ZeGUZymDnPFa1E= Subject key identifier: 0B:A9:AE:B4:33:EE:B8:F2:1D:B2:FA:4B:59:3E:DB:43:BB:7F:07:65 Authority key identifier: 9D:9A:0C:84:B3:07:20:F4:D4:CE:4B:DB:A0:1D:D0:54:4D:02:8E:CD Certificate issuer: /CN=9d9a0c84b30720f4d4ce4bdba01dd0544d028ecd Certificate serial: 019B3569DF924807827D54DC4C6CB6881E47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nZoMhLMHIPTUzkvboB3QVE0Cjs0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.mft Manifest number: 1784 Signing time: Fri 19 Dec 2025 07:01:29 +0000 Manifest this update: Fri 19 Dec 2025 07:01:29 +0000 Manifest next update: Sat 20 Dec 2025 07:01:29 +0000 Files and hashes: 1: 8vJ7ABj3xVyEwXenD9W0ncMrU1A.roa (hash: 5gnWjjNTmQRrWBLMz2vS6KZph20DEPN6rQfmfIVo1TE=) 2: 95tOWT20XUkoFBLGQGdVcwDGE0s.roa (hash: Qa6N16B2kLdBJuSQoLOln9hPwf+0/JSY++MAPTIofBc=) 3: D2QorAtAGpZ4DSilBt-gZlYU1WU.roa (hash: vpJGRRZzUNjxMRhoSrLA2Ov0y70mAO/SHEjk1etazfE=) 4: nZoMhLMHIPTUzkvboB3QVE0Cjs0.crl (hash: SXl/bVTIN5lJ5fupXqrbS2onkHQHW5Gxjo9G4O0r/E4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.mft rsync://rpki.ripe.net/repository/DEFAULT/nZoMhLMHIPTUzkvboB3QVE0Cjs0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:69:df:92:48:07:82:7d:54:dc:4c:6c:b6:88:1e:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d9a0c84b30720f4d4ce4bdba01dd0544d028ecd Validity Not Before: Dec 19 07:01:29 2025 GMT Not After : Dec 20 07:01:29 2025 GMT Subject: CN=0ba9aeb433eeb8f21db2fa4b593edb43bb7f0765 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:0e:bc:ed:d2:cb:c8:0a:bb:ef:e4:5e:c7:be: b6:7a:d9:eb:e2:2f:1a:0a:af:54:bb:6b:d6:59:71: bc:32:8f:55:58:df:db:1e:09:b9:7c:b0:33:c5:ca: ea:9a:21:6f:41:8e:66:0e:05:57:1b:ae:af:c3:37: 86:6d:d2:bd:52:48:ee:88:ef:ed:84:f6:e4:8e:83: 11:c3:e8:70:05:1c:42:62:7e:a2:71:ed:67:d5:d3: c7:47:5b:71:2d:d2:ef:cc:63:78:d9:30:a7:7f:f9: 53:a3:ac:df:cc:c3:50:f7:b5:55:2d:8b:91:04:1b: 6f:c2:b3:45:49:7f:70:2c:ca:2a:f0:02:00:21:05: 46:5c:cd:36:24:42:2a:40:4d:ec:1e:41:59:50:3d: 89:89:1e:2f:d4:e9:41:d2:a5:48:82:63:b9:2a:37: 15:66:e3:cc:38:c8:d6:b3:d3:75:2b:5f:d4:7d:a1: 52:a3:fc:97:b4:df:66:bf:c5:a9:4f:1f:85:0a:84: 10:11:bb:68:64:eb:8f:a8:dc:3e:2f:d5:6f:75:8e: 9e:27:25:84:ba:b0:a3:3e:46:19:83:bf:d9:03:07: 20:7e:8f:1e:6b:ac:23:79:aa:8c:a7:a8:c1:ac:a4: 1c:6c:43:15:95:4f:a1:53:c7:fd:34:7a:39:f2:7c: e5:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:A9:AE:B4:33:EE:B8:F2:1D:B2:FA:4B:59:3E:DB:43:BB:7F:07:65 X509v3 Authority Key Identifier: keyid:9D:9A:0C:84:B3:07:20:F4:D4:CE:4B:DB:A0:1D:D0:54:4D:02:8E:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nZoMhLMHIPTUzkvboB3QVE0Cjs0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:5d:87:b5:ab:fb:bc:e6:c7:8c:b2:d1:e9:52:60:ca:af:5d: 57:32:4c:f8:39:48:d8:37:0a:b1:32:fb:57:5c:ff:5d:30:46: 4d:f9:b9:b6:62:54:33:fe:ee:cd:71:ec:7f:f1:e5:7a:42:e1: e4:1d:14:17:78:26:49:ac:76:c7:71:17:9c:e2:1d:a0:99:3d: bb:eb:1f:cd:d2:ee:e7:3f:e9:9a:a1:d5:e6:b8:b0:28:a0:5c: 8b:7b:41:d8:9d:c7:99:b1:bb:03:7f:30:0e:92:45:58:d5:a9: 4f:ca:8d:0a:ed:d5:8b:8b:95:01:04:47:60:d4:79:c5:45:f7: b5:3e:9a:91:35:04:8d:3c:03:38:f6:db:4a:ba:86:d1:32:9b: 2d:1b:ee:4a:cb:4c:5e:d7:fa:2b:3c:61:65:b7:93:da:4e:8f: 2a:f6:ec:ca:32:3c:e8:25:3a:7a:7e:3f:c8:1a:69:37:46:b8: 4c:8b:fb:64:6c:f4:f8:02:2b:6c:95:bb:d8:8d:2c:ea:26:57: a8:b3:f4:06:8e:29:92:dd:fe:79:42:e2:bb:76:fc:aa:59:12: 2f:c2:bf:f6:80:91:51:34:82:bb:f7:76:16:53:d5:7d:89:75: 0b:74:af:c7:71:96:d1:30:82:05:fc:55:6d:28:89:83:ff:9d: 21:8e:79:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1ad+SSAeCfVTcTGy2iB5HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkOWEwYzg0YjMwNzIwZjRkNGNlNGJkYmEwMWRkMDU0NGQw MjhlY2QwHhcNMjUxMjE5MDcwMTI5WhcNMjUxMjIwMDcwMTI5WjAzMTEwLwYDVQQD EygwYmE5YWViNDMzZWViOGYyMWRiMmZhNGI1OTNlZGI0M2JiN2YwNzY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsw687dLLyAq77+Rex762etnr4i8a Cq9Uu2vWWXG8Mo9VWN/bHgm5fLAzxcrqmiFvQY5mDgVXG66vwzeGbdK9UkjuiO/t hPbkjoMRw+hwBRxCYn6ice1n1dPHR1txLdLvzGN42TCnf/lTo6zfzMNQ97VVLYuR BBtvwrNFSX9wLMoq8AIAIQVGXM02JEIqQE3sHkFZUD2JiR4v1OlB0qVIgmO5KjcV ZuPMOMjWs9N1K1/UfaFSo/yXtN9mv8WpTx+FCoQQEbtoZOuPqNw+L9VvdY6eJyWE urCjPkYZg7/ZAwcgfo8ea6wjeaqMp6jBrKQcbEMVlU+hU8f9NHo58nzlGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAuprrQz7rjyHbL6S1k+20O7fwdlMB8GA1UdIwQY MBaAFJ2aDISzByD01M5L26Ad0FRNAo7NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblpvTWhMTUhJUFRVemt2Ym9CM1FWRTBDanMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8xZThkNGQtNTNiZi00YWNiLWJjMGMt NTJjYWQ2Njc1ZmM2LzEvblpvTWhMTUhJUFRVemt2Ym9CM1FWRTBDanMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS8xZThkNGQtNTNiZi00YWNiLWJjMGMtNTJjYWQ2Njc1ZmM2 LzEvblpvTWhMTUhJUFRVemt2Ym9CM1FWRTBDanMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJV2Htav7 vObHjLLR6VJgyq9dVzJM+DlI2DcKsTL7V1z/XTBGTfm5tmJUM/7uzXHsf/HlekLh 5B0UF3gmSax2x3EXnOIdoJk9u+sfzdLu5z/pmqHV5riwKKBci3tB2J3HmbG7A38w DpJFWNWpT8qNCu3Vi4uVAQRHYNR5xUX3tT6akTUEjTwDOPbbSrqG0TKbLRvuSstM Xtf6KzxhZbeT2k6PKvbsyjI86CU6en4/yBppN0a4TIv7ZGz0+AIrbJW72I0s6iZX qLP0Bo4pkt3+eULiu3b8qlkSL8K/9oCRUTSCu/d2FlPVfYl1C3Svx3GW0TCCBfxV bSiJg/+dIY55QQ== -----END CERTIFICATE-----Generated at Fri Dec 19 09:58:31 2025 by rpki-client