This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/1c000d-7604-444b-b4e0-b844ce1c6238/1/NZ5FeU8Bkp_awnLCYms-guvJxd8.mft File: NZ5FeU8Bkp_awnLCYms-guvJxd8.mft (raw, json) Hash identifier: ACOVbPf2xmTDh8A4dTbX3EMcl+JZkq1+CJHJtHxkwy0= Subject key identifier: 08:FA:25:3B:6D:4D:BF:5A:39:F1:2A:C7:9B:3B:1A:78:8E:A9:70:A2 Authority key identifier: 35:9E:45:79:4F:01:92:9F:DA:C2:72:C2:62:6B:3E:82:EB:C9:C5:DF Certificate issuer: /CN=359e45794f01929fdac272c2626b3e82ebc9c5df Certificate serial: 019B6AD76C9976C600F3C8D04BE3B71B7B31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ5FeU8Bkp_awnLCYms-guvJxd8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/1c000d-7604-444b-b4e0-b844ce1c6238/1/NZ5FeU8Bkp_awnLCYms-guvJxd8.mft Manifest number: 179C Signing time: Mon 29 Dec 2025 16:01:01 +0000 Manifest this update: Mon 29 Dec 2025 16:01:01 +0000 Manifest next update: Tue 30 Dec 2025 16:01:01 +0000 Files and hashes: 1: NZ5FeU8Bkp_awnLCYms-guvJxd8.crl (hash: Qc81qIO0b8UmIims05vQWkp1p5K1RzZBnVBs9T/TS9Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/1c000d-7604-444b-b4e0-b844ce1c6238/1/NZ5FeU8Bkp_awnLCYms-guvJxd8.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/1c000d-7604-444b-b4e0-b844ce1c6238/1/NZ5FeU8Bkp_awnLCYms-guvJxd8.mft rsync://rpki.ripe.net/repository/DEFAULT/NZ5FeU8Bkp_awnLCYms-guvJxd8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 15:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6a:d7:6c:99:76:c6:00:f3:c8:d0:4b:e3:b7:1b:7b:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=359e45794f01929fdac272c2626b3e82ebc9c5df Validity Not Before: Dec 29 16:01:01 2025 GMT Not After : Dec 30 16:01:01 2025 GMT Subject: CN=08fa253b6d4dbf5a39f12ac79b3b1a788ea970a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d0:43:1c:bc:ee:42:07:83:7d:db:4c:c8:df: 9b:80:09:ce:92:92:a4:a7:3b:83:cc:2d:3a:1e:83: 12:9a:26:a5:66:a9:71:9b:f1:6f:8f:6a:94:b5:3d: 8f:60:e7:56:29:42:c0:17:27:d7:e1:a7:a0:fb:ca: b6:90:08:1c:3b:a2:a2:0e:b9:f5:24:c5:10:ce:a5: ee:f9:07:20:54:31:63:31:7f:42:91:c5:bd:4c:f3: 90:ae:37:df:88:e3:74:a5:b0:a3:bb:38:87:79:9c: e8:28:8d:56:06:a6:73:c9:20:46:94:3a:2b:c8:ca: 3f:c6:dc:91:aa:84:ce:b0:ef:81:1c:2f:75:e3:8a: d8:a4:dd:82:79:f7:7c:9b:14:eb:f6:d2:38:1c:52: c9:d4:2b:8b:17:52:67:ef:9d:df:a3:58:92:ba:59: ea:15:0f:bd:4c:5b:b9:7c:18:2f:21:fa:7d:42:82: e6:63:86:9c:d5:2a:11:47:b4:7d:64:d0:5c:03:ac: 2e:ff:fc:6b:87:1a:0b:ca:ba:2d:32:1b:d6:d0:a5: 97:ee:5b:26:ca:54:46:e1:ae:b0:df:f3:11:4b:d2: f5:68:82:af:39:34:91:bb:de:70:b1:53:fa:b9:98: e6:e0:aa:fa:f8:0c:13:b2:51:95:62:3a:9d:35:12: 57:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:FA:25:3B:6D:4D:BF:5A:39:F1:2A:C7:9B:3B:1A:78:8E:A9:70:A2 X509v3 Authority Key Identifier: keyid:35:9E:45:79:4F:01:92:9F:DA:C2:72:C2:62:6B:3E:82:EB:C9:C5:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ5FeU8Bkp_awnLCYms-guvJxd8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/1c000d-7604-444b-b4e0-b844ce1c6238/1/NZ5FeU8Bkp_awnLCYms-guvJxd8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/1c000d-7604-444b-b4e0-b844ce1c6238/1/NZ5FeU8Bkp_awnLCYms-guvJxd8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:57:a4:71:97:2c:6d:eb:a5:3a:70:d2:a8:20:01:f0:58:4d: d0:8c:3b:3e:e0:86:a5:1e:02:24:1f:6b:77:1c:58:b5:fa:3e: b6:96:28:77:dd:58:20:b4:20:17:eb:8e:c4:6a:b8:06:65:a7: 0e:80:89:d2:d0:f4:3f:25:06:5a:6f:20:ea:5b:94:c6:1b:52: e9:9e:08:f4:f6:44:c2:4f:3f:7b:63:9b:ba:87:74:cf:2d:ac: 1d:de:39:0b:d9:09:9e:93:74:fc:76:5e:84:23:ee:99:94:88: 7c:16:30:9b:97:c0:82:4f:e2:f5:01:59:f4:02:fd:c5:13:0b: f8:96:5f:2e:7e:c7:91:0f:b7:a1:5a:0f:cb:f2:91:d7:95:c9: 56:0e:f2:c6:87:7e:07:2a:d1:77:c0:9f:a4:ed:49:43:71:71: f4:59:63:6e:4f:2e:ee:d1:e4:5b:75:9f:85:f0:3d:32:a8:06: 78:fa:e1:a1:1d:2a:87:fe:fb:33:9c:a9:c2:03:ed:ae:98:64: ed:a7:7a:1a:58:ee:11:e4:e3:06:fa:6f:99:57:e8:93:9a:94: ea:7b:e1:71:22:2d:6c:c3:4a:90:1f:16:2f:96:13:b6:c4:22: fd:f6:5e:8d:6c:a2:4a:4d:35:a2:a0:3b:ed:98:7b:f7:87:59: 37:e7:28:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtq12yZdsYA88jQS+O3G3sxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1OWU0NTc5NGYwMTkyOWZkYWMyNzJjMjYyNmIzZTgyZWJj OWM1ZGYwHhcNMjUxMjI5MTYwMTAxWhcNMjUxMjMwMTYwMTAxWjAzMTEwLwYDVQQD EygwOGZhMjUzYjZkNGRiZjVhMzlmMTJhYzc5YjNiMWE3ODhlYTk3MGEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtBDHLzuQgeDfdtMyN+bgAnOkpKk pzuDzC06HoMSmialZqlxm/Fvj2qUtT2PYOdWKULAFyfX4aeg+8q2kAgcO6KiDrn1 JMUQzqXu+QcgVDFjMX9CkcW9TPOQrjffiON0pbCjuziHeZzoKI1WBqZzySBGlDor yMo/xtyRqoTOsO+BHC9144rYpN2Cefd8mxTr9tI4HFLJ1CuLF1Jn753fo1iSulnq FQ+9TFu5fBgvIfp9QoLmY4ac1SoRR7R9ZNBcA6wu//xrhxoLyrotMhvW0KWX7lsm ylRG4a6w3/MRS9L1aIKvOTSRu95wsVP6uZjm4Kr6+AwTslGVYjqdNRJXbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAj6JTttTb9aOfEqx5s7GniOqXCiMB8GA1UdIwQY MBaAFDWeRXlPAZKf2sJywmJrPoLrycXfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlo1RmVVOEJrcF9hd25MQ1ltcy1ndXZKeGQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8xYzAwMGQtNzYwNC00NDRiLWI0ZTAt Yjg0NGNlMWM2MjM4LzEvTlo1RmVVOEJrcF9hd25MQ1ltcy1ndXZKeGQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy8xYzAwMGQtNzYwNC00NDRiLWI0ZTAtYjg0NGNlMWM2MjM4 LzEvTlo1RmVVOEJrcF9hd25MQ1ltcy1ndXZKeGQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASFekcZcs beulOnDSqCAB8FhN0Iw7PuCGpR4CJB9rdxxYtfo+tpYod91YILQgF+uOxGq4BmWn DoCJ0tD0PyUGWm8g6luUxhtS6Z4I9PZEwk8/e2Obuod0zy2sHd45C9kJnpN0/HZe hCPumZSIfBYwm5fAgk/i9QFZ9AL9xRML+JZfLn7HkQ+3oVoPy/KR15XJVg7yxod+ ByrRd8CfpO1JQ3Fx9Fljbk8u7tHkW3WfhfA9MqgGePrhoR0qh/77M5ypwgPtrphk 7ad6GljuEeTjBvpvmVfok5qU6nvhcSItbMNKkB8WL5YTtsQi/fZejWyiSk01oqA7 7Zh794dZN+co3g== -----END CERTIFICATE-----Generated at Mon Dec 29 22:42:07 2025 by rpki-client