This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft File: U_NZCAnRh_ezYfskzUP5P2ZLILM.mft (raw, json) Hash identifier: FGsxi1YAT+nsFyeOtcA/38FH9xlMutQ+38Zleo1/l48= Subject key identifier: B1:07:3C:5E:9E:01:F6:24:19:E4:A7:70:3D:3A:E7:FB:3B:5C:C5:09 Authority key identifier: 53:F3:59:08:09:D1:87:F7:B3:61:FB:24:CD:43:F9:3F:66:4B:20:B3 Certificate issuer: /CN=53f3590809d187f7b361fb24cd43f93f664b20b3 Certificate serial: 019B2F3080ADF9114A4A9DAD653AE544BC0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_NZCAnRh_ezYfskzUP5P2ZLILM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft Manifest number: 1786 Signing time: Thu 18 Dec 2025 02:01:06 +0000 Manifest this update: Thu 18 Dec 2025 02:01:06 +0000 Manifest next update: Fri 19 Dec 2025 02:01:06 +0000 Files and hashes: 1: 4yhrEPquDWqMWiUEurgxgpe4Z64.roa (hash: GAPEp0iDkhSK0QKol83Ga2o50iNkeUXCz5jUqWOb9Ow=) 2: 5piZhUc6B_Q8SXnCvmVdLn755tk.roa (hash: 1kX1fTcGnU3vqt6H68WNwGSWbpk3Ul9d3oLOLIk5xOI=) 3: 8nljJg7c24IFr_Sv-LV4LOMZqPI.roa (hash: deVXwXvj6xoqe5dfSwVOJXQZSoWKbMhfJNni40tWyZY=) 4: U_NZCAnRh_ezYfskzUP5P2ZLILM.crl (hash: mo78/2Ci/Sl2uWWEl08QhJ8RA7foK+SNGq2cOA+XIPs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft rsync://rpki.ripe.net/repository/DEFAULT/U_NZCAnRh_ezYfskzUP5P2ZLILM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:30:80:ad:f9:11:4a:4a:9d:ad:65:3a:e5:44:bc:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53f3590809d187f7b361fb24cd43f93f664b20b3 Validity Not Before: Dec 18 02:01:06 2025 GMT Not After : Dec 19 02:01:06 2025 GMT Subject: CN=b1073c5e9e01f62419e4a7703d3ae7fb3b5cc509 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:13:e7:07:0a:ba:90:3f:61:9a:82:86:ea:f1: aa:af:77:8c:22:37:9b:df:70:40:b5:ec:68:88:13: 4a:87:65:9d:ea:e2:6e:f2:0a:13:ad:74:5e:a4:de: bd:dd:f7:33:c0:1d:6c:ae:69:be:66:5c:ed:99:dd: bd:87:c9:2b:be:1c:b3:8a:ef:5a:d4:80:44:ec:59: 31:95:c2:90:99:29:41:87:29:14:cf:15:12:a0:7d: cc:d4:33:d6:b6:2f:6c:55:d5:a3:3a:06:39:d0:a4: 19:da:9f:8e:1d:c1:8e:94:f2:69:d6:97:b7:d6:07: 45:ab:c2:39:b4:b6:1b:c5:3b:98:49:a7:66:ab:8a: 19:9d:d9:5c:e6:23:b1:03:cd:4a:4a:47:39:d9:c0: e2:7d:03:b5:6c:56:ab:18:b0:e9:e0:0c:84:25:3c: be:5d:86:50:b7:87:07:29:e9:97:1a:bd:d4:71:3c: 45:4a:d3:a8:9e:59:85:8f:4c:63:d8:3f:b8:63:9e: 52:82:5f:1b:2a:9e:cd:23:4a:3c:a6:ae:00:42:45: 24:8b:c7:3d:d6:76:fe:fc:88:70:40:1b:df:a2:80: 82:a8:d5:43:5a:d3:b0:ed:a3:fa:dd:d9:05:8e:ce: ba:4f:07:ba:6c:72:2c:56:8b:1b:ba:c3:91:da:87: 1c:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:07:3C:5E:9E:01:F6:24:19:E4:A7:70:3D:3A:E7:FB:3B:5C:C5:09 X509v3 Authority Key Identifier: keyid:53:F3:59:08:09:D1:87:F7:B3:61:FB:24:CD:43:F9:3F:66:4B:20:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_NZCAnRh_ezYfskzUP5P2ZLILM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:e4:d4:43:d3:e8:e5:4b:ab:0c:d0:1b:c8:2c:5a:a9:2a:84: 12:49:bf:4e:fc:de:7b:f5:60:a3:42:a2:48:7a:15:d2:08:b1: 88:d9:06:7e:0d:e6:80:0d:1c:b6:0f:66:cf:e3:4f:17:dc:f3: 1f:e7:3c:86:ea:ae:3c:6d:58:0f:df:02:d5:f8:18:e8:29:b1: 3f:f1:3f:2e:8e:23:36:c0:1c:11:21:43:88:af:64:e5:fb:10: 35:b5:9b:71:ac:fa:a6:42:d0:05:01:70:60:f1:b0:6d:5c:a7: 29:2a:74:5e:39:0f:76:94:6b:0f:2b:e0:99:12:a7:d5:af:18: 32:38:8a:d1:27:92:65:e5:8b:dc:07:e9:e5:f4:db:73:72:9b: a9:90:8c:9d:63:ce:8f:4d:3b:a1:c6:6c:ab:50:04:02:4d:e4: 17:a3:38:ce:4d:6b:bd:5f:3e:f9:dd:9e:5d:8f:65:ad:34:7f: 95:69:21:67:43:29:06:67:17:81:30:aa:26:0f:50:f3:1f:08: 71:82:d1:d8:76:e5:3d:ff:d3:0e:03:4b:04:db:1e:68:b1:46: 96:a1:29:47:85:21:ae:fa:50:ea:22:04:50:f9:b6:e9:d6:90: e4:6e:58:5f:64:5d:a1:74:84:10:7b:6e:5d:4a:bc:40:2d:14: 02:b5:bf:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvMICt+RFKSp2tZTrlRLwNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzZjM1OTA4MDlkMTg3ZjdiMzYxZmIyNGNkNDNmOTNmNjY0 YjIwYjMwHhcNMjUxMjE4MDIwMTA2WhcNMjUxMjE5MDIwMTA2WjAzMTEwLwYDVQQD EyhiMTA3M2M1ZTllMDFmNjI0MTllNGE3NzAzZDNhZTdmYjNiNWNjNTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRPnBwq6kD9hmoKG6vGqr3eMIjeb 33BAtexoiBNKh2Wd6uJu8goTrXRepN693fczwB1srmm+Zlztmd29h8krvhyziu9a 1IBE7FkxlcKQmSlBhykUzxUSoH3M1DPWti9sVdWjOgY50KQZ2p+OHcGOlPJp1pe3 1gdFq8I5tLYbxTuYSadmq4oZndlc5iOxA81KSkc52cDifQO1bFarGLDp4AyEJTy+ XYZQt4cHKemXGr3UcTxFStOonlmFj0xj2D+4Y55Sgl8bKp7NI0o8pq4AQkUki8c9 1nb+/IhwQBvfooCCqNVDWtOw7aP63dkFjs66Twe6bHIsVosbusOR2occ4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLEHPF6eAfYkGeSncD065/s7XMUJMB8GA1UdIwQY MBaAFFPzWQgJ0Yf3s2H7JM1D+T9mSyCzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVV9OWkNBblJoX2V6WWZza3pVUDVQMlpMSUxNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9kZTYzODMtNGFkNS00NTdiLTk1M2Mt YTc3NmZlZGU5OTA1LzEvVV9OWkNBblJoX2V6WWZza3pVUDVQMlpMSUxNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9kZTYzODMtNGFkNS00NTdiLTk1M2MtYTc3NmZlZGU5OTA1 LzEvVV9OWkNBblJoX2V6WWZza3pVUDVQMlpMSUxNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXeTUQ9Po 5UurDNAbyCxaqSqEEkm/Tvzee/Vgo0KiSHoV0gixiNkGfg3mgA0ctg9mz+NPF9zz H+c8huquPG1YD98C1fgY6CmxP/E/Lo4jNsAcESFDiK9k5fsQNbWbcaz6pkLQBQFw YPGwbVynKSp0XjkPdpRrDyvgmRKn1a8YMjiK0SeSZeWL3Afp5fTbc3KbqZCMnWPO j007ocZsq1AEAk3kF6M4zk1rvV8++d2eXY9lrTR/lWkhZ0MpBmcXgTCqJg9Q8x8I cYLR2HblPf/TDgNLBNseaLFGlqEpR4UhrvpQ6iIEUPm26daQ5G5YX2RdoXSEEHtu XUq8QC0UArW/Sw== -----END CERTIFICATE-----Generated at Thu Dec 18 06:52:45 2025 by rpki-client