This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.mft File: nszH3a4R-I4QvSCGbhvW5ldWl-M.mft (raw, json) Hash identifier: DYHQgSZ7dtw19Dw+t9stPjnXSh/Ei/WvfqiPnoTk1Bc= Subject key identifier: EE:77:B8:AC:A5:11:A6:73:BD:B7:1B:85:54:25:27:EB:60:87:33:A4 Authority key identifier: 9E:CC:C7:DD:AE:11:F8:8E:10:BD:20:86:6E:1B:D6:E6:57:56:97:E3 Certificate issuer: /CN=9eccc7ddae11f88e10bd20866e1bd6e6575697e3 Certificate serial: 019B3CB509C3EC2F077E446BFE9D8731BEBA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nszH3a4R-I4QvSCGbhvW5ldWl-M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.mft Manifest number: 0501 Signing time: Sat 20 Dec 2025 17:00:56 +0000 Manifest this update: Sat 20 Dec 2025 17:00:56 +0000 Manifest next update: Sun 21 Dec 2025 17:00:56 +0000 Files and hashes: 1: nszH3a4R-I4QvSCGbhvW5ldWl-M.crl (hash: 1/D4RcJPI8EXnSBVJzaXpUgnJ5ArsarWmNmRJrwOFhI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.crl rsync://rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.mft rsync://rpki.ripe.net/repository/DEFAULT/nszH3a4R-I4QvSCGbhvW5ldWl-M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b5:09:c3:ec:2f:07:7e:44:6b:fe:9d:87:31:be:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9eccc7ddae11f88e10bd20866e1bd6e6575697e3 Validity Not Before: Dec 20 17:00:56 2025 GMT Not After : Dec 21 17:00:56 2025 GMT Subject: CN=ee77b8aca511a673bdb71b85542527eb608733a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:50:06:b8:d2:88:21:6c:bd:3a:e5:cf:90:23: 70:bc:2c:cd:a1:e4:bc:44:9d:0f:2d:81:e3:cc:04: 6e:b6:4a:a9:a4:1a:1c:59:95:0c:59:46:ba:d9:24: f2:56:fa:5b:67:1c:2a:2a:f1:1b:13:a3:d2:b6:fb: 1b:e4:00:9d:e1:33:aa:9f:62:9e:3c:4c:e6:6a:f7: a1:16:e9:f1:05:f9:0c:39:34:48:19:33:d9:56:51: 13:4b:27:f2:a5:8b:70:a5:57:a7:3a:a9:70:43:8a: f5:b5:a5:09:a8:a7:b6:41:63:78:14:1e:0a:62:cd: 3f:0d:0b:39:e8:20:c8:25:5b:23:73:58:c2:17:09: f1:48:14:60:e1:b7:59:3f:27:df:a2:40:15:07:20: b7:77:16:ea:f5:aa:ab:27:3e:3b:66:71:65:9c:e4: de:5d:c3:9b:17:aa:fb:a8:e3:a5:1d:e3:82:34:b1: 78:62:b8:94:25:5a:7a:19:cc:e5:4e:de:b0:23:dc: 00:61:b6:54:0e:e7:44:65:94:c2:aa:99:80:be:4f: ff:ad:14:dc:2d:8c:e8:6d:49:ef:e9:ce:ed:09:ea: 9c:bd:ff:1b:7a:51:19:95:32:82:6a:41:67:01:78: 20:bd:6a:65:30:a2:17:93:2d:0e:78:a3:2f:00:51: 5f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:77:B8:AC:A5:11:A6:73:BD:B7:1B:85:54:25:27:EB:60:87:33:A4 X509v3 Authority Key Identifier: keyid:9E:CC:C7:DD:AE:11:F8:8E:10:BD:20:86:6E:1B:D6:E6:57:56:97:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nszH3a4R-I4QvSCGbhvW5ldWl-M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:7f:58:a7:c8:50:52:85:6f:2b:08:9a:09:91:26:9a:b7:7e: d0:3e:ff:a6:75:87:60:8b:a5:ba:b0:4d:e1:e9:c4:3b:ab:75: b4:ec:96:b9:d3:fa:a2:30:cf:2c:8d:b8:48:f7:10:9b:d9:07: 56:11:05:3d:26:bc:3b:be:d2:e9:ca:f8:da:98:f4:02:0b:6e: 68:c8:8f:5a:31:66:67:08:c9:6d:0a:be:2f:08:6f:58:1b:70: da:de:f4:a1:c2:11:d8:e0:13:49:f7:c0:ff:a5:4d:03:42:ba: a4:48:e8:4b:63:1d:15:6b:cd:a6:99:4d:b1:a1:0c:ee:00:f7: 1a:9c:b4:51:73:90:3d:f5:f1:2b:75:5c:fe:7c:a1:1f:a8:a2: 08:8b:14:84:67:f2:b5:18:0d:0d:12:f6:4a:a7:2a:db:c3:ae: fa:47:cf:98:ae:44:44:0f:95:7a:6f:a3:24:c8:0f:ba:04:6e: 6a:ed:f0:c0:35:11:ec:a3:fb:ce:40:41:c1:9e:6a:0a:3a:61: 89:29:18:1c:58:eb:bd:5a:52:21:d0:3e:f9:fa:e3:6a:2a:ea: f5:7c:f0:69:af:24:a2:d0:0a:27:c6:a0:a0:42:c9:31:53:b3: 59:35:3b:8d:03:52:b9:a5:51:5b:25:5c:f4:c1:44:96:5c:7a: e4:0e:5b:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tQnD7C8HfkRr/p2HMb66MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllY2NjN2RkYWUxMWY4OGUxMGJkMjA4NjZlMWJkNmU2NTc1 Njk3ZTMwHhcNMjUxMjIwMTcwMDU2WhcNMjUxMjIxMTcwMDU2WjAzMTEwLwYDVQQD EyhlZTc3YjhhY2E1MTFhNjczYmRiNzFiODU1NDI1MjdlYjYwODczM2E0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlAGuNKIIWy9OuXPkCNwvCzNoeS8 RJ0PLYHjzARutkqppBocWZUMWUa62STyVvpbZxwqKvEbE6PStvsb5ACd4TOqn2Ke PEzmavehFunxBfkMOTRIGTPZVlETSyfypYtwpVenOqlwQ4r1taUJqKe2QWN4FB4K Ys0/DQs56CDIJVsjc1jCFwnxSBRg4bdZPyffokAVByC3dxbq9aqrJz47ZnFlnOTe XcObF6r7qOOlHeOCNLF4YriUJVp6GczlTt6wI9wAYbZUDudEZZTCqpmAvk//rRTc LYzobUnv6c7tCeqcvf8belEZlTKCakFnAXggvWplMKIXky0OeKMvAFFfnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO53uKylEaZzvbcbhVQlJ+tghzOkMB8GA1UdIwQY MBaAFJ7Mx92uEfiOEL0ghm4b1uZXVpfjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnN6SDNhNFItSTRRdlNDR2Jodlc1bGRXbC1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9lYjRkZmUtMDM4NC00ODMxLWIzYWQt ZTY3MmIzMTkwNjg3LzEvbnN6SDNhNFItSTRRdlNDR2Jodlc1bGRXbC1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS9lYjRkZmUtMDM4NC00ODMxLWIzYWQtZTY3MmIzMTkwNjg3 LzEvbnN6SDNhNFItSTRRdlNDR2Jodlc1bGRXbC1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlX9Yp8hQ UoVvKwiaCZEmmrd+0D7/pnWHYIulurBN4enEO6t1tOyWudP6ojDPLI24SPcQm9kH VhEFPSa8O77S6cr42pj0AgtuaMiPWjFmZwjJbQq+LwhvWBtw2t70ocIR2OATSffA /6VNA0K6pEjoS2MdFWvNpplNsaEM7gD3Gpy0UXOQPfXxK3Vc/nyhH6iiCIsUhGfy tRgNDRL2Sqcq28Ou+kfPmK5ERA+Vem+jJMgPugRuau3wwDUR7KP7zkBBwZ5qCjph iSkYHFjrvVpSIdA++frjairq9Xzwaa8kotAKJ8agoELJMVOzWTU7jQNSuaVRWyVc 9MFEllx65A5bfg== -----END CERTIFICATE-----Generated at Sun Dec 21 01:33:59 2025 by rpki-client