This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/e9fb61-b566-4f36-95c9-f975ea4e3674/1/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.mft File: n-GzNgF3oAvD3FdD4CYyhGBPm3Q.mft (raw, json) Hash identifier: B9VyLjH9pVHVZxQTKEDVrVwQT7xnUrYRNRzCTg1+NYU= Subject key identifier: 75:13:CC:28:74:52:16:FB:20:35:23:1E:C2:A1:D1:F5:BF:04:15:F0 Authority key identifier: 9F:E1:B3:36:01:77:A0:0B:C3:DC:57:43:E0:26:32:84:60:4F:9B:74 Certificate issuer: /CN=9fe1b3360177a00bc3dc5743e0263284604f9b74 Certificate serial: 019B32685E1FCC02AD8788F6CD192B9E3789 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/e9fb61-b566-4f36-95c9-f975ea4e3674/1/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.mft Manifest number: 0527 Signing time: Thu 18 Dec 2025 17:00:59 +0000 Manifest this update: Thu 18 Dec 2025 17:00:59 +0000 Manifest next update: Fri 19 Dec 2025 17:00:59 +0000 Files and hashes: 1: n-GzNgF3oAvD3FdD4CYyhGBPm3Q.crl (hash: +Eb1W8N69F93oyhPv0Ig97bSVQ3e6ulWWfTBx3BfdSA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/e9fb61-b566-4f36-95c9-f975ea4e3674/1/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/e9fb61-b566-4f36-95c9-f975ea4e3674/1/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.mft rsync://rpki.ripe.net/repository/DEFAULT/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 17:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:68:5e:1f:cc:02:ad:87:88:f6:cd:19:2b:9e:37:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9fe1b3360177a00bc3dc5743e0263284604f9b74 Validity Not Before: Dec 18 17:00:59 2025 GMT Not After : Dec 19 17:00:59 2025 GMT Subject: CN=7513cc28745216fb2035231ec2a1d1f5bf0415f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:21:96:44:6c:f4:0d:37:87:a9:36:6b:e8:04: 20:39:47:8f:71:bf:c4:4f:64:ed:b3:6d:9a:30:67: 0c:b6:a3:e4:ee:93:38:2b:d7:40:c0:5d:fc:c5:72: 86:8f:ee:74:2d:cf:ed:c6:18:99:d9:da:c9:61:b4: d1:d2:a1:e1:47:5f:9b:48:98:5e:48:42:2e:ea:19: e2:e4:42:05:32:f0:d1:7a:29:0c:5b:f1:17:80:40: 0e:51:7c:17:b1:5b:6f:57:20:d6:df:1e:07:95:27: af:23:13:08:00:75:5a:ef:43:9d:26:a3:79:70:39: 87:60:84:da:3c:a2:ca:91:83:85:d0:7a:0a:a5:e4: c0:01:b2:ea:cb:7a:6d:e3:ed:53:1e:ff:23:cf:18: 41:b2:12:f8:eb:06:1c:d6:a4:a0:9e:4d:a2:96:55: d1:35:27:1e:d8:bf:d0:af:cd:0f:83:63:9d:e1:aa: 35:a6:b2:c2:e8:2a:bc:5b:b9:16:ba:2d:96:fd:ef: d7:e4:ca:9f:a2:ae:cf:f1:42:77:46:22:90:41:db: 87:cd:b1:19:e8:81:00:10:6a:b0:21:37:5f:c3:82: 06:8a:da:a1:5e:47:64:47:50:c9:be:1f:50:18:71: 06:f2:f6:ec:52:a2:f2:54:fb:d0:03:ad:6c:7f:2b: c5:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:13:CC:28:74:52:16:FB:20:35:23:1E:C2:A1:D1:F5:BF:04:15:F0 X509v3 Authority Key Identifier: keyid:9F:E1:B3:36:01:77:A0:0B:C3:DC:57:43:E0:26:32:84:60:4F:9B:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e9fb61-b566-4f36-95c9-f975ea4e3674/1/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e9fb61-b566-4f36-95c9-f975ea4e3674/1/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:d4:c1:e0:79:7d:db:9c:6f:ac:35:94:03:ec:69:1e:35:5b: 91:f1:a6:33:31:30:a0:30:8a:71:8e:f4:86:ec:ed:d3:e4:25: 24:90:b0:32:b3:92:d4:08:d3:7c:f8:b4:ac:7c:1a:7f:80:2b: 64:1f:d1:42:49:fe:b7:24:13:35:23:33:21:13:8d:61:ef:ab: 75:02:84:49:3b:c9:80:71:29:70:d5:57:96:b3:a3:be:fc:e6: 4d:b0:df:7c:5b:f5:98:96:fa:21:06:5b:44:45:3d:ff:f5:42: 55:8d:e4:1b:ea:2b:d1:a6:b0:45:b1:1b:c7:f7:11:30:2b:36: 62:6d:bd:70:64:81:46:f2:67:67:83:51:65:3e:7d:22:9c:53: 0b:a1:4b:bc:13:89:59:08:26:07:14:26:8d:07:27:c7:86:0b: 31:1b:88:e3:01:9d:bc:c4:6b:54:27:5b:aa:c2:e2:8b:5f:a2: 81:ad:3e:91:2e:f6:d4:1a:c0:4e:f1:55:bf:f1:ce:31:a6:9a: a3:7a:24:48:d8:ce:70:9a:7c:0e:61:2d:97:60:a6:f6:9f:b6: 56:5e:a8:c9:8b:27:ac:96:5d:57:58:dc:6f:ce:34:bc:ab:f8: f7:7b:7d:49:46:4d:14:fb:14:e3:98:ee:e2:ca:ab:37:53:3d: bd:bd:ed:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyaF4fzAKth4j2zRkrnjeJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmZTFiMzM2MDE3N2EwMGJjM2RjNTc0M2UwMjYzMjg0NjA0 ZjliNzQwHhcNMjUxMjE4MTcwMDU5WhcNMjUxMjE5MTcwMDU5WjAzMTEwLwYDVQQD Eyg3NTEzY2MyODc0NTIxNmZiMjAzNTIzMWVjMmExZDFmNWJmMDQxNWYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSGWRGz0DTeHqTZr6AQgOUePcb/E T2Tts22aMGcMtqPk7pM4K9dAwF38xXKGj+50Lc/txhiZ2drJYbTR0qHhR1+bSJhe SEIu6hni5EIFMvDReikMW/EXgEAOUXwXsVtvVyDW3x4HlSevIxMIAHVa70OdJqN5 cDmHYITaPKLKkYOF0HoKpeTAAbLqy3pt4+1THv8jzxhBshL46wYc1qSgnk2illXR NSce2L/Qr80Pg2Od4ao1prLC6Cq8W7kWui2W/e/X5Mqfoq7P8UJ3RiKQQduHzbEZ 6IEAEGqwITdfw4IGitqhXkdkR1DJvh9QGHEG8vbsUqLyVPvQA61sfyvFSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHUTzCh0Uhb7IDUjHsKh0fW/BBXwMB8GA1UdIwQY MBaAFJ/hszYBd6ALw9xXQ+AmMoRgT5t0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbi1Hek5nRjNvQXZEM0ZkRDRDWXloR0JQbTNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9lOWZiNjEtYjU2Ni00ZjM2LTk1Yzkt Zjk3NWVhNGUzNjc0LzEvbi1Hek5nRjNvQXZEM0ZkRDRDWXloR0JQbTNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9lOWZiNjEtYjU2Ni00ZjM2LTk1YzktZjk3NWVhNGUzNjc0 LzEvbi1Hek5nRjNvQXZEM0ZkRDRDWXloR0JQbTNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqNTB4Hl9 25xvrDWUA+xpHjVbkfGmMzEwoDCKcY70huzt0+QlJJCwMrOS1AjTfPi0rHwaf4Ar ZB/RQkn+tyQTNSMzIRONYe+rdQKESTvJgHEpcNVXlrOjvvzmTbDffFv1mJb6IQZb REU9//VCVY3kG+or0aawRbEbx/cRMCs2Ym29cGSBRvJnZ4NRZT59IpxTC6FLvBOJ WQgmBxQmjQcnx4YLMRuI4wGdvMRrVCdbqsLii1+iga0+kS721BrATvFVv/HOMaaa o3okSNjOcJp8DmEtl2Cm9p+2Vl6oyYsnrJZdV1jcb840vKv493t9SUZNFPsU45ju 4sqrN1M9vb3t6g== -----END CERTIFICATE-----Generated at Fri Dec 19 02:22:29 2025 by rpki-client