This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/0c8db6-71fd-4320-a0dc-186080ed9002/1/NrzwGgmAWLhROxb9nksbI4_Nb1g.mft File: NrzwGgmAWLhROxb9nksbI4_Nb1g.mft (raw, json) Hash identifier: o2pukhAjA0kvXR823YPFenKZdD0DQmwfAJEUuMwiZY8= Subject key identifier: 17:91:CA:20:B9:B4:7F:43:40:87:CB:32:64:B6:FD:A3:97:80:55:40 Authority key identifier: 36:BC:F0:1A:09:80:58:B8:51:3B:16:FD:9E:4B:1B:23:8F:CD:6F:58 Certificate issuer: /CN=36bcf01a098058b8513b16fd9e4b1b238fcd6f58 Certificate serial: 019B4C5F560B14CBD3191454A2ED59F445D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NrzwGgmAWLhROxb9nksbI4_Nb1g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/0c8db6-71fd-4320-a0dc-186080ed9002/1/NrzwGgmAWLhROxb9nksbI4_Nb1g.mft Manifest number: 033D Signing time: Tue 23 Dec 2025 18:01:14 +0000 Manifest this update: Tue 23 Dec 2025 18:01:14 +0000 Manifest next update: Wed 24 Dec 2025 18:01:14 +0000 Files and hashes: 1: AfyofESsKziO9R3ILuO1YYWUdu8.roa (hash: nUxsrIBKiuHD8xm10VmDY98apv5y2MdixCNIXLJz49Q=) 2: NrzwGgmAWLhROxb9nksbI4_Nb1g.crl (hash: izlDbemYgOwMsZxPPo60dtukAZ91pyJGLVujS3Uw/go=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/0c8db6-71fd-4320-a0dc-186080ed9002/1/NrzwGgmAWLhROxb9nksbI4_Nb1g.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/0c8db6-71fd-4320-a0dc-186080ed9002/1/NrzwGgmAWLhROxb9nksbI4_Nb1g.mft rsync://rpki.ripe.net/repository/DEFAULT/NrzwGgmAWLhROxb9nksbI4_Nb1g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 18:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:5f:56:0b:14:cb:d3:19:14:54:a2:ed:59:f4:45:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36bcf01a098058b8513b16fd9e4b1b238fcd6f58 Validity Not Before: Dec 23 18:01:14 2025 GMT Not After : Dec 24 18:01:14 2025 GMT Subject: CN=1791ca20b9b47f434087cb3264b6fda397805540 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b0:53:8c:d3:91:e1:9f:b8:12:4e:db:44:9e: c5:bc:4b:c3:da:07:24:1a:0d:08:77:db:ea:4c:3c: 01:e4:0f:d2:49:7b:68:83:49:7f:18:88:2d:ac:6f: f2:cc:a0:07:a4:48:c4:73:34:d9:e2:68:11:29:ea: fb:dd:81:fd:dd:64:02:23:cc:15:52:b8:42:fe:07: b8:bf:d6:1c:fc:8f:8a:16:c1:95:d3:d0:0a:5d:e1: 2c:6a:09:1b:ff:9e:e6:08:ec:eb:e9:57:a4:45:c8: 31:83:81:29:72:7b:34:ff:f9:cc:8e:df:1a:7f:a8: 55:f3:4f:9a:d2:70:b9:a5:4c:92:8d:aa:e7:ea:9e: ee:5b:f7:ec:92:e2:65:3c:d8:a1:b6:72:6d:34:bd: dd:d7:a2:78:cc:19:31:38:5d:ae:3a:ae:ca:a5:97: 06:e6:f7:4e:0c:98:3f:cf:f8:6d:42:70:29:ef:9c: 5e:e1:70:e4:6b:d4:37:f3:88:2a:6d:14:40:91:62: ea:1e:62:ce:e8:b4:63:d0:3b:63:2e:ae:49:30:af: 4c:92:7e:4e:a5:5d:51:8a:93:ad:1d:58:3d:08:12: 59:ef:7e:2b:62:38:a2:cc:d9:e2:fd:2d:86:d9:f2: 8b:0b:57:35:7f:24:d9:14:4c:aa:85:08:b6:d2:0e: 32:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:91:CA:20:B9:B4:7F:43:40:87:CB:32:64:B6:FD:A3:97:80:55:40 X509v3 Authority Key Identifier: keyid:36:BC:F0:1A:09:80:58:B8:51:3B:16:FD:9E:4B:1B:23:8F:CD:6F:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NrzwGgmAWLhROxb9nksbI4_Nb1g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/0c8db6-71fd-4320-a0dc-186080ed9002/1/NrzwGgmAWLhROxb9nksbI4_Nb1g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/0c8db6-71fd-4320-a0dc-186080ed9002/1/NrzwGgmAWLhROxb9nksbI4_Nb1g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:50:7d:0a:b7:c2:7e:bd:ab:de:56:95:b8:3f:73:9a:40:2f: b5:79:ca:82:05:35:e4:ff:74:c7:c1:fd:88:00:79:03:53:de: c7:f6:02:9a:42:7c:7e:02:09:04:64:e9:99:03:6a:37:8d:ed: 39:83:5e:f5:f9:52:06:df:a7:bb:53:6d:92:2c:64:c3:14:36: 5a:69:09:c9:7e:97:56:1e:70:07:c2:92:3d:78:01:50:ba:e0: 84:33:ec:e5:7e:23:d1:a2:ce:04:77:f9:87:f6:98:3c:06:47: 17:b3:72:1e:ef:8b:c2:22:f4:66:70:20:1d:91:c3:d1:73:48: 92:1e:18:fc:d2:fb:91:e2:cb:6e:3a:da:60:c0:dd:41:a6:6f: 40:b5:15:a4:1f:31:40:21:34:38:78:e8:5c:ab:f0:10:a6:e1: 82:af:c5:be:e6:58:a0:67:e2:ea:4f:dd:c9:5e:42:76:0e:5b: 80:4e:77:d8:94:22:11:8f:83:bc:90:b4:e6:49:6b:37:d9:8b: dc:da:6b:c1:20:ad:42:e1:9d:7c:b7:da:25:32:c2:de:c5:38: 8c:47:f5:a0:17:95:3d:8c:15:19:bf:ce:f4:a5:99:d2:b1:7f: 56:83:06:e0:4b:12:3c:75:33:6e:9b:37:04:f6:fb:31:af:7f: 5c:6b:4c:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtMX1YLFMvTGRRUou1Z9EXXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YmNmMDFhMDk4MDU4Yjg1MTNiMTZmZDllNGIxYjIzOGZj ZDZmNTgwHhcNMjUxMjIzMTgwMTE0WhcNMjUxMjI0MTgwMTE0WjAzMTEwLwYDVQQD EygxNzkxY2EyMGI5YjQ3ZjQzNDA4N2NiMzI2NGI2ZmRhMzk3ODA1NTQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrBTjNOR4Z+4Ek7bRJ7FvEvD2gck Gg0Id9vqTDwB5A/SSXtog0l/GIgtrG/yzKAHpEjEczTZ4mgRKer73YH93WQCI8wV UrhC/ge4v9Yc/I+KFsGV09AKXeEsagkb/57mCOzr6VekRcgxg4Epcns0//nMjt8a f6hV80+a0nC5pUySjarn6p7uW/fskuJlPNihtnJtNL3d16J4zBkxOF2uOq7KpZcG 5vdODJg/z/htQnAp75xe4XDka9Q384gqbRRAkWLqHmLO6LRj0DtjLq5JMK9Mkn5O pV1RipOtHVg9CBJZ734rYjiizNni/S2G2fKLC1c1fyTZFEyqhQi20g4yWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBeRyiC5tH9DQIfLMmS2/aOXgFVAMB8GA1UdIwQY MBaAFDa88BoJgFi4UTsW/Z5LGyOPzW9YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnJ6d0dnbUFXTGhST3hiOW5rc2JJNF9OYjFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8wYzhkYjYtNzFmZC00MzIwLWEwZGMt MTg2MDgwZWQ5MDAyLzEvTnJ6d0dnbUFXTGhST3hiOW5rc2JJNF9OYjFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy8wYzhkYjYtNzFmZC00MzIwLWEwZGMtMTg2MDgwZWQ5MDAy LzEvTnJ6d0dnbUFXTGhST3hiOW5rc2JJNF9OYjFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVFB9CrfC fr2r3laVuD9zmkAvtXnKggU15P90x8H9iAB5A1Pex/YCmkJ8fgIJBGTpmQNqN43t OYNe9flSBt+nu1NtkixkwxQ2WmkJyX6XVh5wB8KSPXgBULrghDPs5X4j0aLOBHf5 h/aYPAZHF7NyHu+LwiL0ZnAgHZHD0XNIkh4Y/NL7keLLbjraYMDdQaZvQLUVpB8x QCE0OHjoXKvwEKbhgq/FvuZYoGfi6k/dyV5Cdg5bgE532JQiEY+DvJC05klrN9mL 3NprwSCtQuGdfLfaJTLC3sU4jEf1oBeVPYwVGb/O9KWZ0rF/VoMG4EsSPHUzbps3 BPb7Ma9/XGtMWQ== -----END CERTIFICATE-----Generated at Wed Dec 24 03:02:04 2025 by rpki-client