This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/2fbba7-ea0e-4089-9727-c33372c9d507/1/nzbQijzYpC9Goslt_XLtjO4nlHc.mft File: nzbQijzYpC9Goslt_XLtjO4nlHc.mft (raw, json) Hash identifier: FGVc/QkvTvH6PwuwOn4+qAhg6qoxzSjl1P/ItSSFKlc= Subject key identifier: 79:DF:D9:12:EF:C8:E6:F2:ED:ED:31:AE:BB:FB:99:AE:8E:0B:3F:C1 Authority key identifier: 9F:36:D0:8A:3C:D8:A4:2F:46:A2:C9:6D:FD:72:ED:8C:EE:27:94:77 Certificate issuer: /CN=9f36d08a3cd8a42f46a2c96dfd72ed8cee279477 Certificate serial: 019B3BD99D699AE79684BD39FA851C38BD02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzbQijzYpC9Goslt_XLtjO4nlHc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/2fbba7-ea0e-4089-9727-c33372c9d507/1/nzbQijzYpC9Goslt_XLtjO4nlHc.mft Manifest number: 0D8F Signing time: Sat 20 Dec 2025 13:01:15 +0000 Manifest this update: Sat 20 Dec 2025 13:01:15 +0000 Manifest next update: Sun 21 Dec 2025 13:01:15 +0000 Files and hashes: 1: nzbQijzYpC9Goslt_XLtjO4nlHc.crl (hash: AVx7RTnD6haWBqAFOQskYYZzru3iE42WFnp+zmpp3W0=) 2: twzQnUgBAT35ET2oNZWOjjEoBE4.roa (hash: HIWNIMTAhxf1Wnub1ymBGmdU28kJ6snFsV9+PWAEB7E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/2fbba7-ea0e-4089-9727-c33372c9d507/1/nzbQijzYpC9Goslt_XLtjO4nlHc.crl rsync://rpki.ripe.net/repository/DEFAULT/52/2fbba7-ea0e-4089-9727-c33372c9d507/1/nzbQijzYpC9Goslt_XLtjO4nlHc.mft rsync://rpki.ripe.net/repository/DEFAULT/nzbQijzYpC9Goslt_XLtjO4nlHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 13:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:9d:69:9a:e7:96:84:bd:39:fa:85:1c:38:bd:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f36d08a3cd8a42f46a2c96dfd72ed8cee279477 Validity Not Before: Dec 20 13:01:15 2025 GMT Not After : Dec 21 13:01:15 2025 GMT Subject: CN=79dfd912efc8e6f2eded31aebbfb99ae8e0b3fc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:da:dc:ef:67:ef:9f:92:b0:49:d9:24:94:6b: d7:a3:94:2a:9e:e2:12:0a:f3:0f:54:77:78:d5:65: 7f:c7:bc:6c:74:40:33:a2:e5:c0:cf:fa:92:c6:22: 66:d1:f6:f7:df:0c:ca:1e:87:77:39:15:a8:e0:85: a8:0a:03:79:7c:a9:fd:53:ce:db:d5:e4:88:43:4a: 77:9d:3b:2c:03:28:68:cf:23:0f:11:95:84:fe:10: a5:f2:46:18:1b:76:cd:8e:43:93:e9:c1:6e:2b:79: 57:4d:3b:f8:0d:3b:b0:2f:f5:4e:98:d2:d4:54:3f: c2:d4:89:aa:b2:20:a2:d8:85:67:ac:f7:8d:a0:bd: e0:fa:f6:ce:ac:b8:74:b9:07:20:77:08:5c:ad:f6: ce:c3:29:f0:46:0b:ae:5a:d5:5d:39:ad:7e:fa:bd: 36:99:88:54:13:a3:0b:78:4f:00:d2:c3:ed:f7:55: 9b:0a:1d:87:a4:6e:e2:7f:51:8e:3a:1c:dd:c9:cb: 3b:7e:b7:50:42:f4:33:af:48:46:1e:9f:35:3a:65: 62:62:04:64:0a:84:94:13:28:3c:e4:fe:60:ad:94: f1:df:06:27:75:49:bc:fb:7d:9d:5c:4f:33:73:21: 12:b8:4f:fa:59:2c:56:08:96:5a:aa:cb:f1:6f:3b: bd:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:DF:D9:12:EF:C8:E6:F2:ED:ED:31:AE:BB:FB:99:AE:8E:0B:3F:C1 X509v3 Authority Key Identifier: keyid:9F:36:D0:8A:3C:D8:A4:2F:46:A2:C9:6D:FD:72:ED:8C:EE:27:94:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzbQijzYpC9Goslt_XLtjO4nlHc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2fbba7-ea0e-4089-9727-c33372c9d507/1/nzbQijzYpC9Goslt_XLtjO4nlHc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2fbba7-ea0e-4089-9727-c33372c9d507/1/nzbQijzYpC9Goslt_XLtjO4nlHc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:45:f2:a0:0d:5c:40:8f:cf:ff:89:14:81:ef:e4:a9:4e:05: 1c:f3:6f:f2:39:7e:ef:64:60:5e:86:88:57:d6:7f:3e:27:88: bc:1b:35:ef:cf:14:fc:d7:b4:1d:83:52:1e:b0:a2:04:a5:6a: cb:29:e0:e8:74:96:70:d6:63:99:08:75:b8:3c:31:33:36:46: 28:82:6a:04:c7:2f:81:b1:a6:00:22:7a:b5:ff:b9:43:11:a1: 06:1d:6e:27:8e:a7:e1:3d:23:d1:3d:ef:6e:bf:7d:b5:3f:d1: e3:d3:7b:51:06:03:56:96:51:c9:9a:fa:bb:f0:cc:1e:02:30: 3b:a9:f1:dd:24:b2:e4:a3:b3:2e:94:42:8d:a6:11:81:86:29: 35:31:a9:c9:c5:4b:57:4f:53:71:38:c9:3b:1f:35:6f:a0:6e: 63:71:39:86:d1:93:4d:e8:ce:e0:59:93:29:41:2a:19:59:37: 0d:aa:a4:6c:f2:a4:6b:c2:95:c7:22:1b:8f:13:ec:75:3a:7a: 0b:ff:bb:db:00:80:8c:cc:01:5f:12:b1:a7:b3:18:5c:95:30: 57:2f:dd:ca:32:a7:98:2b:96:be:e4:63:68:f6:4f:ac:a1:e8: bc:b6:29:f3:91:a8:66:ff:df:ee:39:0a:4b:49:43:ae:02:2b: bf:81:2d:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72Z1pmueWhL05+oUcOL0CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmMzZkMDhhM2NkOGE0MmY0NmEyYzk2ZGZkNzJlZDhjZWUy Nzk0NzcwHhcNMjUxMjIwMTMwMTE1WhcNMjUxMjIxMTMwMTE1WjAzMTEwLwYDVQQD Eyg3OWRmZDkxMmVmYzhlNmYyZWRlZDMxYWViYmZiOTlhZThlMGIzZmMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtrc72fvn5KwSdkklGvXo5QqnuIS CvMPVHd41WV/x7xsdEAzouXAz/qSxiJm0fb33wzKHod3ORWo4IWoCgN5fKn9U87b 1eSIQ0p3nTssAyhozyMPEZWE/hCl8kYYG3bNjkOT6cFuK3lXTTv4DTuwL/VOmNLU VD/C1ImqsiCi2IVnrPeNoL3g+vbOrLh0uQcgdwhcrfbOwynwRguuWtVdOa1++r02 mYhUE6MLeE8A0sPt91WbCh2HpG7if1GOOhzdycs7frdQQvQzr0hGHp81OmViYgRk CoSUEyg85P5grZTx3wYndUm8+32dXE8zcyESuE/6WSxWCJZaqsvxbzu9OQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHnf2RLvyOby7e0xrrv7ma6OCz/BMB8GA1UdIwQY MBaAFJ820Io82KQvRqLJbf1y7YzuJ5R3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnpiUWlqellwQzlHb3NsdF9YTHRqTzRubEhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8yZmJiYTctZWEwZS00MDg5LTk3Mjct YzMzMzcyYzlkNTA3LzEvbnpiUWlqellwQzlHb3NsdF9YTHRqTzRubEhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi8yZmJiYTctZWEwZS00MDg5LTk3MjctYzMzMzcyYzlkNTA3 LzEvbnpiUWlqellwQzlHb3NsdF9YTHRqTzRubEhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh0XyoA1c QI/P/4kUge/kqU4FHPNv8jl+72RgXoaIV9Z/PieIvBs1788U/Ne0HYNSHrCiBKVq yyng6HSWcNZjmQh1uDwxMzZGKIJqBMcvgbGmACJ6tf+5QxGhBh1uJ46n4T0j0T3v br99tT/R49N7UQYDVpZRyZr6u/DMHgIwO6nx3SSy5KOzLpRCjaYRgYYpNTGpycVL V09TcTjJOx81b6BuY3E5htGTTejO4FmTKUEqGVk3DaqkbPKka8KVxyIbjxPsdTp6 C/+72wCAjMwBXxKxp7MYXJUwVy/dyjKnmCuWvuRjaPZPrKHovLYp85GoZv/f7jkK S0lDrgIrv4EtOw== -----END CERTIFICATE-----Generated at Sat Dec 20 22:40:43 2025 by rpki-client