This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.mft File: nzcg6XD6oOB_UKY4nnrlOvpDnas.mft (raw, json) Hash identifier: AN3eb7yXek+rdi9xR1c5w7MjKHaO6+uyyKOeqxXK4v4= Subject key identifier: 0A:A8:F2:99:90:86:93:B9:04:0B:8A:76:7B:32:2F:57:0A:2E:F9:5D Authority key identifier: 9F:37:20:E9:70:FA:A0:E0:7F:50:A6:38:9E:7A:E5:3A:FA:43:9D:AB Certificate issuer: /CN=9f3720e970faa0e07f50a6389e7ae53afa439dab Certificate serial: 019B3EDAB1195581AF353857E6F581943FEF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzcg6XD6oOB_UKY4nnrlOvpDnas.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.mft Manifest number: 178E Signing time: Sun 21 Dec 2025 03:01:17 +0000 Manifest this update: Sun 21 Dec 2025 03:01:17 +0000 Manifest next update: Mon 22 Dec 2025 03:01:17 +0000 Files and hashes: 1: Etd-zR5nQJ_3oZWsvX_yh9qZs04.roa (hash: Va9UidVPtYR8CQHobQQrWe+S/Z2ABdjjbhF7ggqh2M0=) 2: nzcg6XD6oOB_UKY4nnrlOvpDnas.crl (hash: TRjXXtSsgUHEB49WzevbLhmGnRoDIZQq+Ih8Ud8//d4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.mft rsync://rpki.ripe.net/repository/DEFAULT/nzcg6XD6oOB_UKY4nnrlOvpDnas.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:b1:19:55:81:af:35:38:57:e6:f5:81:94:3f:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f3720e970faa0e07f50a6389e7ae53afa439dab Validity Not Before: Dec 21 03:01:17 2025 GMT Not After : Dec 22 03:01:17 2025 GMT Subject: CN=0aa8f299908693b9040b8a767b322f570a2ef95d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e6:6f:39:b7:3e:f1:ec:a3:e0:73:38:5c:32: f7:91:d2:2c:6c:eb:94:c1:62:39:4a:88:4f:14:bf: d0:67:ca:35:fe:3c:38:e4:e1:2c:2a:5a:05:a8:f4: 98:11:aa:cd:9c:05:fd:b4:cc:9c:a8:b3:4e:d6:01: 3a:73:93:6d:6e:0e:59:4d:c2:fa:3f:92:df:de:3e: ca:22:7b:a1:c0:f2:cc:cb:0e:d8:2c:bc:4e:f8:f1: 79:b8:da:10:6c:59:11:d0:66:17:fb:0f:51:3a:a7: 13:f7:78:4f:ff:aa:cc:dd:e2:78:4d:4e:c4:47:75: 87:be:ca:a9:ec:25:7e:73:d6:70:65:1e:fe:ac:cb: b3:35:e8:94:73:a8:ee:48:a6:0f:f9:f3:f8:4b:3e: 2f:54:ac:01:1c:c9:8a:dc:07:aa:dd:95:44:a8:07: 5f:ee:6c:77:10:57:e7:d9:8f:99:6b:04:b6:42:76: 82:c0:87:bb:e3:49:76:d9:35:a1:13:cb:05:59:a0: cc:3e:5e:54:9f:25:79:83:1b:4b:44:65:67:d3:06: a4:f1:ae:25:1e:03:e7:6d:dd:54:b9:c4:13:3c:be: 04:c1:1b:16:2b:f5:a7:1b:21:d2:d1:64:bc:51:56: 03:1e:fe:de:0c:41:16:f5:58:fe:3e:2d:7a:3d:df: cd:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:A8:F2:99:90:86:93:B9:04:0B:8A:76:7B:32:2F:57:0A:2E:F9:5D X509v3 Authority Key Identifier: keyid:9F:37:20:E9:70:FA:A0:E0:7F:50:A6:38:9E:7A:E5:3A:FA:43:9D:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzcg6XD6oOB_UKY4nnrlOvpDnas.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:68:ee:44:1b:d8:74:f8:70:0d:ed:55:b6:db:41:bd:33:64: 32:32:70:7a:85:40:f2:54:ad:a0:91:05:30:13:5f:50:a8:c6: 24:28:69:c0:26:b1:a0:ad:e6:93:08:3b:b9:01:3d:7b:17:91: 28:ee:89:60:ad:c2:1a:6f:f8:cf:43:ff:80:27:88:12:26:cc: 9c:3e:19:d7:05:45:05:9d:00:c2:a2:87:8e:dd:bd:42:3f:45: d5:28:a4:72:61:85:de:dd:07:f8:44:b7:c0:6b:76:cd:90:47: 16:ff:39:c6:4c:7e:cf:42:0d:e7:65:f3:52:fe:a0:78:03:22: e9:1d:7c:2e:93:23:69:ec:e5:f2:0f:4b:a4:65:6b:3d:ea:40: c3:25:21:dd:5f:c7:97:ba:ea:e3:86:00:ce:09:8b:b5:2b:0d: 84:cb:49:17:88:2e:fa:70:b8:c7:ec:76:9b:87:38:45:33:b1: 20:83:db:a5:a7:f5:72:da:1c:c2:99:2e:56:97:92:c8:26:65: 8a:65:ad:66:97:66:f3:f5:1e:44:98:31:c2:ad:bd:56:d4:b6: ce:03:40:fe:60:58:f0:a6:7e:37:f9:f5:99:fa:12:24:cd:eb: 9d:73:84:12:5f:34:f2:7d:f7:ca:13:63:4f:28:ae:74:a6:ee: 90:2e:de:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2rEZVYGvNThX5vWBlD/vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmMzcyMGU5NzBmYWEwZTA3ZjUwYTYzODllN2FlNTNhZmE0 MzlkYWIwHhcNMjUxMjIxMDMwMTE3WhcNMjUxMjIyMDMwMTE3WjAzMTEwLwYDVQQD EygwYWE4ZjI5OTkwODY5M2I5MDQwYjhhNzY3YjMyMmY1NzBhMmVmOTVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuZvObc+8eyj4HM4XDL3kdIsbOuU wWI5SohPFL/QZ8o1/jw45OEsKloFqPSYEarNnAX9tMycqLNO1gE6c5Ntbg5ZTcL6 P5Lf3j7KInuhwPLMyw7YLLxO+PF5uNoQbFkR0GYX+w9ROqcT93hP/6rM3eJ4TU7E R3WHvsqp7CV+c9ZwZR7+rMuzNeiUc6juSKYP+fP4Sz4vVKwBHMmK3Aeq3ZVEqAdf 7mx3EFfn2Y+ZawS2QnaCwIe740l22TWhE8sFWaDMPl5UnyV5gxtLRGVn0wak8a4l HgPnbd1UucQTPL4EwRsWK/WnGyHS0WS8UVYDHv7eDEEW9Vj+Pi16Pd/N+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAqo8pmQhpO5BAuKdnsyL1cKLvldMB8GA1UdIwQY MBaAFJ83IOlw+qDgf1CmOJ565Tr6Q52rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnpjZzZYRDZvT0JfVUtZNG5ucmxPdnBEbmFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9iYjdjMGUtZWU2OC00YmY4LWJiMzQt MTJlNmEwZDQzMThhLzEvbnpjZzZYRDZvT0JfVUtZNG5ucmxPdnBEbmFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9iYjdjMGUtZWU2OC00YmY4LWJiMzQtMTJlNmEwZDQzMThh LzEvbnpjZzZYRDZvT0JfVUtZNG5ucmxPdnBEbmFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAamjuRBvY dPhwDe1VtttBvTNkMjJweoVA8lStoJEFMBNfUKjGJChpwCaxoK3mkwg7uQE9exeR KO6JYK3CGm/4z0P/gCeIEibMnD4Z1wVFBZ0AwqKHjt29Qj9F1SikcmGF3t0H+ES3 wGt2zZBHFv85xkx+z0IN52XzUv6geAMi6R18LpMjaezl8g9LpGVrPepAwyUh3V/H l7rq44YAzgmLtSsNhMtJF4gu+nC4x+x2m4c4RTOxIIPbpaf1ctocwpkuVpeSyCZl imWtZpdm8/UeRJgxwq29VtS2zgNA/mBY8KZ+N/n1mfoSJM3rnXOEEl808n33yhNj TyiudKbukC7eqQ== -----END CERTIFICATE-----Generated at Sun Dec 21 08:16:58 2025 by rpki-client