This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.mft File: NZ8eO4BVHpihb8K7y33YfJoO_iU.mft (raw, json) Hash identifier: GGdVPJHY69GsS6CgaUbHpZhOmb+udwpga7TON9wl58M= Subject key identifier: 9F:3D:A5:3D:9C:AC:12:35:BD:C6:2E:0E:04:BA:CA:4E:CE:6B:53:83 Authority key identifier: 35:9F:1E:3B:80:55:1E:98:A1:6F:C2:BB:CB:7D:D8:7C:9A:0E:FE:25 Certificate issuer: /CN=359f1e3b80551e98a16fc2bbcb7dd87c9a0efe25 Certificate serial: 019B2D792AC23A29C80592CB1894D4E27E0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.mft Manifest number: 0EAC Signing time: Wed 17 Dec 2025 18:01:14 +0000 Manifest this update: Wed 17 Dec 2025 18:01:14 +0000 Manifest next update: Thu 18 Dec 2025 18:01:14 +0000 Files and hashes: 1: NZ8eO4BVHpihb8K7y33YfJoO_iU.crl (hash: h+FvwGDAKO0PtqZge4SbPvmXdDqAajVREtR3OkXhzXA=) 2: WQDK9xlCqpMVg3-ZBWFZfqNRgDU.roa (hash: 5EEZG5yrAU7W8n0dqk+GpepBnaLmDeUxI+tSTrknSrA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.crl rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.mft rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 18:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:79:2a:c2:3a:29:c8:05:92:cb:18:94:d4:e2:7e:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=359f1e3b80551e98a16fc2bbcb7dd87c9a0efe25 Validity Not Before: Dec 17 18:01:14 2025 GMT Not After : Dec 18 18:01:14 2025 GMT Subject: CN=9f3da53d9cac1235bdc62e0e04baca4ece6b5383 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:83:a6:b9:02:41:08:00:0a:21:56:b3:7f:b8: 71:e2:61:f5:5f:bb:c9:63:43:9c:f4:b2:79:f8:3d: 61:3b:3b:be:a1:ec:d3:ca:dc:cb:08:94:a6:76:83: 9d:2d:4a:7e:f8:bb:bc:a0:07:22:56:71:26:a6:6a: e4:bc:bc:c6:fa:ca:28:b1:a4:ec:4a:2c:8a:7b:2a: 1a:03:15:d8:f6:9e:a4:28:2c:c1:a1:e0:24:a2:03: b9:4c:d2:64:cf:4c:66:7a:51:e3:49:de:74:89:0c: a6:58:80:2b:d9:e2:30:cb:57:85:ea:f0:d3:0d:06: 49:97:26:fa:5b:f9:f2:44:a5:7d:7f:b2:3b:ab:c6: 33:1a:92:e3:21:48:a9:e4:33:aa:b9:0f:04:f4:fa: 0f:b4:83:aa:06:aa:dd:cf:c3:6b:79:31:7c:b3:0e: 6f:16:54:d0:af:d2:a3:65:a1:d3:d2:82:16:35:97: 35:2d:49:0a:a1:6f:6c:a9:3d:b4:9b:e7:e7:e0:83: 31:13:a3:02:59:69:db:f3:82:a3:c4:c2:28:79:e2: 5b:b5:66:36:a7:27:6f:c5:84:4b:a8:da:3d:6a:b8: 64:d3:61:94:24:91:7f:34:6c:ec:5e:1f:a9:08:8f: b8:c8:e0:07:a4:77:32:6a:90:dc:f4:88:99:8b:00: c1:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:3D:A5:3D:9C:AC:12:35:BD:C6:2E:0E:04:BA:CA:4E:CE:6B:53:83 X509v3 Authority Key Identifier: keyid:35:9F:1E:3B:80:55:1E:98:A1:6F:C2:BB:CB:7D:D8:7C:9A:0E:FE:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:07:93:74:5d:9c:c7:e2:f0:26:b1:b3:7f:8a:1c:d3:ac:fd: 64:70:53:d0:13:3b:cc:3b:4f:fa:84:39:ff:0b:ef:ee:e1:67: 00:38:d9:b2:42:87:32:07:3c:e1:f2:a1:a9:b2:36:1d:fb:71: a8:05:4a:db:da:78:0c:ea:46:50:b9:60:7c:2b:48:b1:ef:2f: 7d:0d:15:bd:59:e9:8e:3a:a1:10:41:86:d9:1f:33:f5:6e:17: 0a:b2:a1:25:8f:e7:04:df:33:34:10:2f:e6:0c:ba:95:f7:33: 29:a9:fd:33:ea:13:fd:80:4d:4d:5e:ed:62:b2:a1:32:52:1c: ff:7e:97:57:8c:8b:c0:11:db:f5:28:b9:6a:f8:52:39:32:42: 14:8b:e6:d4:7c:58:73:c9:1f:a2:7f:49:37:91:4e:f9:50:df: 42:99:7c:f4:2a:56:1f:c1:f9:80:fe:c4:71:00:d8:1d:c1:1c: a9:1e:8a:2d:39:b0:06:ae:c3:f9:f3:c2:cd:54:37:f6:66:77: 23:c6:85:c3:91:0b:35:80:68:c2:84:92:89:95:c9:2c:bf:10: b8:74:56:15:31:ce:da:b1:13:75:31:45:c8:19:d2:4a:8e:fb: 13:93:0b:6e:54:2d:32:4f:1b:7e:2e:6e:dd:0e:ce:24:64:b7: 32:4a:46:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsteSrCOinIBZLLGJTU4n4PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1OWYxZTNiODA1NTFlOThhMTZmYzJiYmNiN2RkODdjOWEw ZWZlMjUwHhcNMjUxMjE3MTgwMTE0WhcNMjUxMjE4MTgwMTE0WjAzMTEwLwYDVQQD Eyg5ZjNkYTUzZDljYWMxMjM1YmRjNjJlMGUwNGJhY2E0ZWNlNmI1MzgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvoOmuQJBCAAKIVazf7hx4mH1X7vJ Y0Oc9LJ5+D1hOzu+oezTytzLCJSmdoOdLUp++Lu8oAciVnEmpmrkvLzG+soosaTs SiyKeyoaAxXY9p6kKCzBoeAkogO5TNJkz0xmelHjSd50iQymWIAr2eIwy1eF6vDT DQZJlyb6W/nyRKV9f7I7q8YzGpLjIUip5DOquQ8E9PoPtIOqBqrdz8NreTF8sw5v FlTQr9KjZaHT0oIWNZc1LUkKoW9sqT20m+fn4IMxE6MCWWnb84KjxMIoeeJbtWY2 pydvxYRLqNo9arhk02GUJJF/NGzsXh+pCI+4yOAHpHcyapDc9IiZiwDBIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ89pT2crBI1vcYuDgS6yk7Oa1ODMB8GA1UdIwQY MBaAFDWfHjuAVR6YoW/Cu8t92HyaDv4lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlo4ZU80QlZIcGloYjhLN3kzM1lmSm9PX2lVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS84OWZkNDMtNTRmMC00YTE1LWIyYjEt M2YzYTAyNzQ4YzJhLzEvTlo4ZU80QlZIcGloYjhLN3kzM1lmSm9PX2lVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS84OWZkNDMtNTRmMC00YTE1LWIyYjEtM2YzYTAyNzQ4YzJh LzEvTlo4ZU80QlZIcGloYjhLN3kzM1lmSm9PX2lVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApgeTdF2c x+LwJrGzf4oc06z9ZHBT0BM7zDtP+oQ5/wvv7uFnADjZskKHMgc84fKhqbI2Hftx qAVK29p4DOpGULlgfCtIse8vfQ0VvVnpjjqhEEGG2R8z9W4XCrKhJY/nBN8zNBAv 5gy6lfczKan9M+oT/YBNTV7tYrKhMlIc/36XV4yLwBHb9Si5avhSOTJCFIvm1HxY c8kfon9JN5FO+VDfQpl89CpWH8H5gP7EcQDYHcEcqR6KLTmwBq7D+fPCzVQ39mZ3 I8aFw5ELNYBowoSSiZXJLL8QuHRWFTHO2rETdTFFyBnSSo77E5MLblQtMk8bfi5u 3Q7OJGS3MkpGpA== -----END CERTIFICATE-----Generated at Wed Dec 17 23:57:43 2025 by rpki-client