This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft File: nzEukpe8HSfr60dt6g7hXddWVC0.mft (raw, json) Hash identifier: A3GVV64ta5CDleXEawSg+an+yDbuP/wACBoaPpCtGIo= Subject key identifier: 84:AC:B2:73:F0:83:BB:E4:22:E1:C0:D0:48:C2:B0:6F:6F:9E:DC:C5 Authority key identifier: 9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D Certificate issuer: /CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d Certificate serial: 019B3A5875AA741AF7668DADB0304E5E3748 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft Manifest number: 0E23 Signing time: Sat 20 Dec 2025 06:00:34 +0000 Manifest this update: Sat 20 Dec 2025 06:00:34 +0000 Manifest next update: Sun 21 Dec 2025 06:00:34 +0000 Files and hashes: 1: 9DNpUDfjfX1cw67GoTejssp0I60.roa (hash: waZpM47Y+Uz4d9MPb5IIUjKVJuGJ/1amyn5dhXRlaKQ=) 2: Aesp-0bkacoacCkCpfhQPmoA2Jo.roa (hash: auTmqPfhdn5WgGssEA4un4kBW/LnIC2gzs/3RcvN434=) 3: BuDcPMwCapskKDGJlWsZctPOBc4.roa (hash: 3bBve525vpAtWU3g8/6VOaPU/EQ0F7VvrXGpa6fOHFk=) 4: PxzPuUVa2hryVcFqS1RSxgTjwqA.roa (hash: +gcitwqIIi7APjhf/dnLtr2znKOxVEk4a5pTJPB9KaY=) 5: bO_WvrYP5ttqrPDJq5s463Nszpo.roa (hash: EspaZPCLRAen7G7qKwAXYq7KwKVTki6xdz4+i5S1a6Q=) 6: f0t-76IiXeLd5savEiu94YnlFko.roa (hash: XWQiN+uiCeNuRV8xmhiqHYcJeAP9QhC6mKZPlUW2ws4=) 7: nzEukpe8HSfr60dt6g7hXddWVC0.crl (hash: IxzQLWYLChUaVy/XA4xXPF+rluUm/C+mWO9t45jRbgs=) 8: rb-Sc2sMQouk09qe65I3IdAX2Wg.roa (hash: oIYCzWn5Llby9+MplpHfCcN3dR2X1heBfsWvSaio7wY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 06:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:58:75:aa:74:1a:f7:66:8d:ad:b0:30:4e:5e:37:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d Validity Not Before: Dec 20 06:00:34 2025 GMT Not After : Dec 21 06:00:34 2025 GMT Subject: CN=84acb273f083bbe422e1c0d048c2b06f6f9edcc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:19:3f:fd:2b:d7:f0:e7:6e:8c:0d:cc:5f:08: b5:64:bc:34:c4:ea:46:2a:ae:a5:03:2f:df:5c:5a: f7:1d:49:44:a2:e0:22:ac:dc:8d:f8:43:a8:c0:c4: 50:f2:19:a5:c1:e4:5c:a7:6f:3d:c4:da:75:c7:d6: 97:82:c9:ac:5a:53:e4:a3:f8:d7:e1:f4:eb:c4:dd: 25:95:cb:f9:24:00:59:0e:7a:e1:a5:34:29:de:45: ed:e7:e4:91:e6:69:0d:a5:e6:ff:17:7c:de:9f:6c: eb:8e:da:b3:c7:87:27:93:24:f7:1e:c6:80:d2:bc: cd:1a:1a:78:2d:27:21:3d:49:f1:3a:ed:44:1a:56: 7b:f8:79:36:5e:5a:5d:6f:65:b1:21:2a:5e:39:0e: 6e:23:fe:9a:a5:bd:60:be:08:0c:d8:0e:84:ab:d4: 7c:94:18:9c:00:77:97:d3:63:7a:00:07:34:5b:ba: 8f:e2:1c:dc:e0:b3:8a:0f:8a:e9:37:5d:48:a3:ad: 03:6a:9a:22:cd:7b:51:1e:e5:e1:59:8a:c5:3e:fd: 0a:ce:36:05:ab:a5:07:87:dc:22:15:ab:6c:cb:b3: a5:52:a3:5a:d2:4a:54:77:d2:b7:be:89:ab:f3:08: df:3a:db:e5:aa:28:c2:f0:da:77:77:77:d8:ba:aa: cb:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:AC:B2:73:F0:83:BB:E4:22:E1:C0:D0:48:C2:B0:6F:6F:9E:DC:C5 X509v3 Authority Key Identifier: keyid:9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:4c:46:83:7e:59:7a:47:fe:1d:db:3f:8a:22:a2:8f:fc:4a: 26:4a:29:b2:27:6d:45:6a:29:25:ee:a6:ab:de:40:83:51:29: 47:c0:d6:9b:3f:ca:d6:15:53:d7:27:f1:a9:10:4a:67:c8:6c: db:2e:ee:4c:fe:0e:7f:dd:6a:7e:86:de:48:12:26:73:cf:05: 79:eb:42:68:a4:2d:63:8c:93:7f:46:25:97:0d:df:8d:9b:b8: 39:7f:26:9e:e6:6b:b9:ae:1e:a6:b8:07:12:b9:fd:2a:f0:d1: 9f:1b:ac:71:2c:c3:56:8a:03:8b:1e:f1:3b:22:7c:63:1e:57: 2f:c5:d4:fb:89:35:af:15:ef:44:85:6e:c6:b1:57:a3:b7:4e: d8:81:17:de:34:b5:da:07:84:b1:5b:dc:f9:9d:a2:2f:cb:92: 52:33:a5:01:53:de:e3:bb:a1:16:b6:e4:ca:21:be:8c:01:cf: f2:34:85:25:a0:25:5e:21:ef:13:0a:76:99:ca:e9:e2:34:5a: cb:f6:e7:43:d4:77:1e:3e:81:2a:a0:10:2b:23:b6:e1:17:70: 20:76:02:35:0c:0f:e0:21:9f:f6:43:dd:7c:2b:d4:4f:30:73: 62:f0:5f:5a:3c:dd:c2:5f:a3:ca:62:5d:b1:8e:fc:05:fd:ca: bb:ca:14:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6WHWqdBr3Zo2tsDBOXjdIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmMzEyZTkyOTdiYzFkMjdlYmViNDc2ZGVhMGVlMTVkZDc1 NjU0MmQwHhcNMjUxMjIwMDYwMDM0WhcNMjUxMjIxMDYwMDM0WjAzMTEwLwYDVQQD Eyg4NGFjYjI3M2YwODNiYmU0MjJlMWMwZDA0OGMyYjA2ZjZmOWVkY2M1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhk//SvX8OdujA3MXwi1ZLw0xOpG Kq6lAy/fXFr3HUlEouAirNyN+EOowMRQ8hmlweRcp289xNp1x9aXgsmsWlPko/jX 4fTrxN0llcv5JABZDnrhpTQp3kXt5+SR5mkNpeb/F3zen2zrjtqzx4cnkyT3HsaA 0rzNGhp4LSchPUnxOu1EGlZ7+Hk2Xlpdb2WxISpeOQ5uI/6apb1gvggM2A6Eq9R8 lBicAHeX02N6AAc0W7qP4hzc4LOKD4rpN11Io60DapoizXtRHuXhWYrFPv0KzjYF q6UHh9wiFatsy7OlUqNa0kpUd9K3vomr8wjfOtvlqijC8Np3d3fYuqrLFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFISssnPwg7vkIuHA0EjCsG9vntzFMB8GA1UdIwQY MBaAFJ8xLpKXvB0n6+tHbeoO4V3XVlQtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnpFdWtwZThIU2ZyNjBkdDZnN2hYZGRXVkMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9kZDVhMjgtZGY5ZC00NjI3LTgwOWQt YmQ1ZDNmMDBmYmIyLzEvbnpFdWtwZThIU2ZyNjBkdDZnN2hYZGRXVkMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS9kZDVhMjgtZGY5ZC00NjI3LTgwOWQtYmQ1ZDNmMDBmYmIy LzEvbnpFdWtwZThIU2ZyNjBkdDZnN2hYZGRXVkMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQExGg35Z ekf+Hds/iiKij/xKJkopsidtRWopJe6mq95Ag1EpR8DWmz/K1hVT1yfxqRBKZ8hs 2y7uTP4Of91qfobeSBImc88FeetCaKQtY4yTf0Yllw3fjZu4OX8mnuZrua4eprgH Ern9KvDRnxuscSzDVooDix7xOyJ8Yx5XL8XU+4k1rxXvRIVuxrFXo7dO2IEX3jS1 2geEsVvc+Z2iL8uSUjOlAVPe47uhFrbkyiG+jAHP8jSFJaAlXiHvEwp2mcrp4jRa y/bnQ9R3Hj6BKqAQKyO24RdwIHYCNQwP4CGf9kPdfCvUTzBzYvBfWjzdwl+jymJd sY78Bf3Ku8oUyw== -----END CERTIFICATE-----Generated at Sat Dec 20 13:13:04 2025 by rpki-client