This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft File: NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft (raw, json) Hash identifier: +s3epebqwcTfB9LueqHVAL0dfqWXStYlgMkFAZVJaGw= Subject key identifier: E2:2F:9F:FC:31:8A:6A:55:7D:18:66:7C:7F:13:3C:0C:11:C2:11:7B Authority key identifier: 35:9C:72:43:BE:F2:DC:77:5A:E6:76:92:88:9D:5D:26:C1:B2:D1:48 Certificate issuer: /CN=359c7243bef2dc775ae67692889d5d26c1b2d148 Certificate serial: 019B72923D14E2C514C398A4EE41A9757C5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft Manifest number: 14CB Signing time: Wed 31 Dec 2025 04:02:24 +0000 Manifest this update: Wed 31 Dec 2025 04:02:24 +0000 Manifest next update: Thu 01 Jan 2026 04:02:24 +0000 Files and hashes: 1: NZxyQ77y3Hda5naSiJ1dJsGy0Ug.crl (hash: pT603y5nLhte+lZqW1S9fv9aNZj8li2cxvnC13YBmbg=) 2: UlJ9oB76eWY6RVDQIa5ElxGCtDY.roa (hash: a/bIJ0G7k9sAULUVW4Q26EjooAyLCFQQeertx5zrtWc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft rsync://rpki.ripe.net/repository/DEFAULT/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:72:92:3d:14:e2:c5:14:c3:98:a4:ee:41:a9:75:7c:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=359c7243bef2dc775ae67692889d5d26c1b2d148 Validity Not Before: Dec 31 04:02:24 2025 GMT Not After : Jan 1 04:02:24 2026 GMT Subject: CN=e22f9ffc318a6a557d18667c7f133c0c11c2117b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:94:f6:93:e2:88:e7:80:76:d2:38:03:35:dd: f2:a5:be:20:8f:ec:d3:8f:18:16:7f:06:32:80:96: ee:b8:b2:df:96:d4:80:4a:9f:0d:00:59:ba:ae:18: 69:57:4b:17:8b:07:37:ab:7e:cc:9f:3a:4c:0a:91: b9:98:8b:bf:27:a0:34:c5:69:f3:be:85:bc:84:25: 81:c5:16:c6:39:eb:2e:ad:56:9b:53:d6:7b:ee:b8: 44:9e:75:2a:e3:70:40:e0:b1:49:96:80:cf:1e:5b: b7:ef:79:aa:ab:71:9a:7b:cc:0c:40:a0:b0:c5:8b: d8:73:ba:74:52:8d:8d:df:60:09:cc:af:ed:37:4b: 5c:5a:26:b0:68:83:24:57:a7:38:8c:47:5f:96:f9: 56:e1:68:da:d7:df:06:eb:2d:27:a2:7f:71:04:88: e7:d6:c5:04:eb:f7:82:04:0d:4e:84:63:50:b6:7f: 37:ec:07:86:8c:83:9f:39:67:3e:06:7b:02:0d:2f: a3:be:98:59:3d:f3:53:07:06:34:1c:93:4a:62:c8: 9a:46:ae:0d:59:1d:d8:4f:5c:3e:41:63:da:d7:7a: c1:bf:b3:f1:bb:7c:7a:0c:27:2e:51:e8:4f:75:b4: cb:64:b2:4a:41:03:c7:9f:1a:9e:eb:84:e6:48:bc: 0a:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:2F:9F:FC:31:8A:6A:55:7D:18:66:7C:7F:13:3C:0C:11:C2:11:7B X509v3 Authority Key Identifier: keyid:35:9C:72:43:BE:F2:DC:77:5A:E6:76:92:88:9D:5D:26:C1:B2:D1:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:eb:fa:8e:f1:41:4c:7d:eb:d5:4f:99:6c:f9:c5:60:bd:c9: d2:11:65:7d:d0:a2:a1:e3:1b:86:40:34:fe:6b:03:74:0f:7a: 57:6a:d7:6d:9f:10:37:af:ab:20:3a:5d:63:39:86:ec:08:c3: 04:f3:e6:03:80:b3:10:d5:fd:a7:0d:f5:34:ee:1f:98:24:fd: fc:f6:6b:f8:11:98:a0:5f:5f:90:f9:8e:24:79:9a:51:57:eb: 6d:77:05:7b:02:6e:b8:40:8a:1c:b9:6e:ee:a5:e7:42:c1:aa: 12:a9:5c:19:5d:ca:7e:71:0f:9d:5c:89:24:81:f5:89:d6:da: ee:b7:59:11:90:c3:7a:c4:88:66:f0:f6:b4:c1:88:af:e7:0c: ed:a6:2d:e3:4a:81:ba:e6:e5:08:1a:d9:41:46:da:87:f0:11: 24:bd:45:e3:54:21:bd:79:5b:08:19:58:2f:96:95:28:e8:c7: d5:13:02:36:4f:ca:8c:9d:0b:60:93:69:bf:0b:f5:f0:23:6d: 98:93:de:7f:31:ef:07:ca:6a:2f:3d:89:5d:4a:18:f1:26:ef: 99:67:b0:74:2e:76:bb:96:77:9e:b8:d5:90:f1:4d:e8:bf:08: 96:3a:bc:ae:7d:86:35:06:a9:96:6f:84:0d:43:04:ba:dd:58: 63:09:8b:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtykj0U4sUUw5ik7kGpdXxfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1OWM3MjQzYmVmMmRjNzc1YWU2NzY5Mjg4OWQ1ZDI2YzFi MmQxNDgwHhcNMjUxMjMxMDQwMjI0WhcNMjYwMTAxMDQwMjI0WjAzMTEwLwYDVQQD EyhlMjJmOWZmYzMxOGE2YTU1N2QxODY2N2M3ZjEzM2MwYzExYzIxMTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpT2k+KI54B20jgDNd3ypb4gj+zT jxgWfwYygJbuuLLfltSASp8NAFm6rhhpV0sXiwc3q37MnzpMCpG5mIu/J6A0xWnz voW8hCWBxRbGOesurVabU9Z77rhEnnUq43BA4LFJloDPHlu373mqq3Gae8wMQKCw xYvYc7p0Uo2N32AJzK/tN0tcWiawaIMkV6c4jEdflvlW4Wja198G6y0non9xBIjn 1sUE6/eCBA1OhGNQtn837AeGjIOfOWc+BnsCDS+jvphZPfNTBwY0HJNKYsiaRq4N WR3YT1w+QWPa13rBv7Pxu3x6DCcuUehPdbTLZLJKQQPHnxqe64TmSLwKaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOIvn/wximpVfRhmfH8TPAwRwhF7MB8GA1UdIwQY MBaAFDWcckO+8tx3WuZ2koidXSbBstFIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlp4eVE3N3kzSGRhNW5hU2lKMWRKc0d5MFVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi81NTViYzktNGUxOS00ODI4LThlYmEt NjFmZmI2NTA2NjQ0LzEvTlp4eVE3N3kzSGRhNW5hU2lKMWRKc0d5MFVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi81NTViYzktNGUxOS00ODI4LThlYmEtNjFmZmI2NTA2NjQ0 LzEvTlp4eVE3N3kzSGRhNW5hU2lKMWRKc0d5MFVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApev6jvFB TH3r1U+ZbPnFYL3J0hFlfdCioeMbhkA0/msDdA96V2rXbZ8QN6+rIDpdYzmG7AjD BPPmA4CzENX9pw31NO4fmCT9/PZr+BGYoF9fkPmOJHmaUVfrbXcFewJuuECKHLlu 7qXnQsGqEqlcGV3KfnEPnVyJJIH1idba7rdZEZDDesSIZvD2tMGIr+cM7aYt40qB uublCBrZQUbah/ARJL1F41QhvXlbCBlYL5aVKOjH1RMCNk/KjJ0LYJNpvwv18CNt mJPefzHvB8pqLz2JXUoY8SbvmWewdC52u5Z3nrjVkPFN6L8Iljq8rn2GNQaplm+E DUMEut1YYwmLFg== -----END CERTIFICATE-----Generated at Wed Dec 31 09:35:10 2025 by rpki-client