This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.mft File: Nz2PVXyuGOI12Ti608-uF8kbneY.mft (raw, json) Hash identifier: r9r92dmZ2Vvw6ltC7jhmxemo7d6iH+onVHwX3K09mdE= Subject key identifier: 4C:7E:30:62:4D:68:CF:92:0A:49:CF:7A:59:DF:2E:A6:7A:DE:09:A6 Authority key identifier: 37:3D:8F:55:7C:AE:18:E2:35:D9:38:BA:D3:CF:AE:17:C9:1B:9D:E6 Certificate issuer: /CN=373d8f557cae18e235d938bad3cfae17c91b9de6 Certificate serial: 019B53E152B3391CE4BBA42B3F2A71A94B3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nz2PVXyuGOI12Ti608-uF8kbneY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.mft Manifest number: 0E55 Signing time: Thu 25 Dec 2025 05:00:34 +0000 Manifest this update: Thu 25 Dec 2025 05:00:34 +0000 Manifest next update: Fri 26 Dec 2025 05:00:34 +0000 Files and hashes: 1: Nz2PVXyuGOI12Ti608-uF8kbneY.crl (hash: CcDpAeGiny2dScOZo46hZ0O8pP5qOHb8RR6KYmfsqwM=) 2: ozI4hI8kFkEQxCSmEwvkBXoCapM.roa (hash: nsuE7KYFnBTkOwSYDCdNStBanVXhSb5SsJb22tB9rcI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.mft rsync://rpki.ripe.net/repository/DEFAULT/Nz2PVXyuGOI12Ti608-uF8kbneY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 01:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:e1:52:b3:39:1c:e4:bb:a4:2b:3f:2a:71:a9:4b:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=373d8f557cae18e235d938bad3cfae17c91b9de6 Validity Not Before: Dec 25 05:00:34 2025 GMT Not After : Dec 26 05:00:34 2025 GMT Subject: CN=4c7e30624d68cf920a49cf7a59df2ea67ade09a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c7:5e:a6:b9:c1:f9:0a:11:e2:6c:98:67:f1: 2e:ba:a1:20:59:57:01:a2:10:18:bf:f1:9b:00:3c: 69:33:e1:d0:fd:f6:88:22:09:1c:40:90:bf:5b:a1: bc:d1:14:8d:61:38:ce:82:37:87:55:0f:97:9e:b2: 54:1f:bc:7f:fd:25:94:23:d4:8a:ae:89:87:ad:8b: 1c:16:84:45:af:dc:26:33:9c:0e:ae:0c:f1:76:91: a7:64:c4:67:7a:41:41:d8:92:09:a3:bf:5e:4c:e9: ef:14:88:5a:86:a4:df:2a:7c:04:25:fe:74:7e:b5: 39:b8:14:08:ba:8f:74:e6:01:8c:f9:38:75:33:b1: 06:a7:e5:3f:96:44:ed:77:c5:79:04:f8:fa:b0:a9: d1:b6:1d:19:fc:55:7f:6d:90:d9:24:15:9f:b7:92: 82:04:28:0f:71:ed:d2:18:05:6c:90:b7:02:6f:a3: 8b:c8:bd:7d:d4:43:8f:48:15:f0:d0:fb:ce:68:d2: fc:d5:6b:f4:4f:f2:48:73:aa:e5:bb:a4:36:fc:1c: a7:8c:7d:f0:08:08:7c:02:8d:8c:7e:04:a8:70:31: 58:c5:5f:1e:29:2c:e2:6e:09:8f:5a:37:1e:47:fc: 60:fa:33:ee:9e:8a:f7:95:7b:87:aa:db:da:5b:11: a6:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:7E:30:62:4D:68:CF:92:0A:49:CF:7A:59:DF:2E:A6:7A:DE:09:A6 X509v3 Authority Key Identifier: keyid:37:3D:8F:55:7C:AE:18:E2:35:D9:38:BA:D3:CF:AE:17:C9:1B:9D:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nz2PVXyuGOI12Ti608-uF8kbneY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:3f:f1:87:ce:4c:ce:68:9a:ba:5b:e4:8c:93:f4:e3:64:90: ab:9f:f3:bc:a8:0f:8c:d4:d3:ef:cd:a9:aa:e7:6a:78:39:fd: 23:ba:84:4b:23:bd:a9:0f:c3:c5:2b:10:13:16:d7:43:ec:87: dd:27:84:b8:b6:bd:58:45:fd:a8:f4:a8:8f:2a:88:b2:23:81: 78:e8:d1:6f:b6:25:a8:a0:95:0c:ef:11:a8:e2:85:3c:83:a9: 97:9e:14:52:64:26:32:d2:8e:9c:1c:ef:97:bc:8e:03:08:78: 6c:09:2f:f6:52:98:62:11:ce:40:df:79:19:29:aa:87:56:b1: 2d:77:94:8c:29:d4:fc:20:4e:de:73:35:20:c0:1d:6c:c3:29: 52:fd:3a:ba:a4:84:36:a0:25:4e:46:8c:a6:a4:3f:da:52:75: e2:62:5c:a8:24:60:e1:28:11:4c:fe:76:61:89:3d:49:bb:c3: af:16:25:71:74:31:26:d9:b3:df:5d:f9:92:38:f7:2d:fe:7c: 3c:91:4b:5f:d9:29:c0:81:4b:dd:49:fb:de:b4:e4:0b:46:7a: 9e:42:4d:71:93:28:e3:29:e7:3f:c3:42:e6:41:b0:b4:0b:e3: 2c:ca:1e:e9:85:3e:fb:86:fa:90:b5:76:dc:ec:3c:03:cd:1e: 50:77:dc:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtT4VKzORzku6QrPypxqUs9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3M2Q4ZjU1N2NhZTE4ZTIzNWQ5MzhiYWQzY2ZhZTE3Yzkx YjlkZTYwHhcNMjUxMjI1MDUwMDM0WhcNMjUxMjI2MDUwMDM0WjAzMTEwLwYDVQQD Eyg0YzdlMzA2MjRkNjhjZjkyMGE0OWNmN2E1OWRmMmVhNjdhZGUwOWE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncdeprnB+QoR4myYZ/EuuqEgWVcB ohAYv/GbADxpM+HQ/faIIgkcQJC/W6G80RSNYTjOgjeHVQ+XnrJUH7x//SWUI9SK romHrYscFoRFr9wmM5wOrgzxdpGnZMRnekFB2JIJo79eTOnvFIhahqTfKnwEJf50 frU5uBQIuo905gGM+Th1M7EGp+U/lkTtd8V5BPj6sKnRth0Z/FV/bZDZJBWft5KC BCgPce3SGAVskLcCb6OLyL191EOPSBXw0PvOaNL81Wv0T/JIc6rlu6Q2/BynjH3w CAh8Ao2MfgSocDFYxV8eKSzibgmPWjceR/xg+jPunor3lXuHqtvaWxGmTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEx+MGJNaM+SCknPelnfLqZ63gmmMB8GA1UdIwQY MBaAFDc9j1V8rhjiNdk4utPPrhfJG53mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnoyUFZYeXVHT0kxMlRpNjA4LXVGOGtibmVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy81MTc0MTEtMGM0Mi00ZDE4LTkwMzkt Yzk5ZGQzOTBhN2Q2LzEvTnoyUFZYeXVHT0kxMlRpNjA4LXVGOGtibmVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy81MTc0MTEtMGM0Mi00ZDE4LTkwMzktYzk5ZGQzOTBhN2Q2 LzEvTnoyUFZYeXVHT0kxMlRpNjA4LXVGOGtibmVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjT/xh85M zmiaulvkjJP042SQq5/zvKgPjNTT782pqudqeDn9I7qESyO9qQ/DxSsQExbXQ+yH 3SeEuLa9WEX9qPSojyqIsiOBeOjRb7YlqKCVDO8RqOKFPIOpl54UUmQmMtKOnBzv l7yOAwh4bAkv9lKYYhHOQN95GSmqh1axLXeUjCnU/CBO3nM1IMAdbMMpUv06uqSE NqAlTkaMpqQ/2lJ14mJcqCRg4SgRTP52YYk9SbvDrxYlcXQxJtmz3135kjj3Lf58 PJFLX9kpwIFL3Un73rTkC0Z6nkJNcZMo4ynnP8NC5kGwtAvjLMoe6YU++4b6kLV2 3Ow8A80eUHfcBg== -----END CERTIFICATE-----Generated at Thu Dec 25 06:29:31 2025 by rpki-client