This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/NztHo87nmYKtsXA0HQICYCczICM.mft File: NztHo87nmYKtsXA0HQICYCczICM.mft (raw, json) Hash identifier: aBeRfpkyWuR0LaSdENxiwYpu36s1LqIupIZm8eU0+OQ= Subject key identifier: 0F:7E:BB:84:45:53:57:A1:25:13:C6:12:12:7A:A6:F1:C6:DF:92:75 Authority key identifier: 37:3B:47:A3:CE:E7:99:82:AD:B1:70:34:1D:02:02:60:27:33:20:23 Certificate issuer: /CN=373b47a3cee79982adb170341d02026027332023 Certificate serial: 019B5A5192A6DCD27C88B7A1AF940CEE7988 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NztHo87nmYKtsXA0HQICYCczICM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/NztHo87nmYKtsXA0HQICYCczICM.mft Manifest number: 1799 Signing time: Fri 26 Dec 2025 11:00:53 +0000 Manifest this update: Fri 26 Dec 2025 11:00:53 +0000 Manifest next update: Sat 27 Dec 2025 11:00:53 +0000 Files and hashes: 1: 44PWl9t-VK2hhZNHr5AmomvoGFc.roa (hash: OxQ7QHN27yQWahrAlORJzxbYRAyj5Alk9/N2TAEqxrY=) 2: NztHo87nmYKtsXA0HQICYCczICM.crl (hash: bXtRgwx+uF5kkucDpyS24GJNRqTX6IC5XIrT8vFt1BE=) 3: fHM2AB9lWMdrr6W98wCcBfFFZto.roa (hash: O5xk5dJ9bNLjoHECEnZnVJ7Que2qp5xFQYolbd9r+sI=) 4: yGyQiv41kYE21uqhtuih0OLSi9I.roa (hash: tdu5vnXKQDyjaj/70REfOS/T9RJiHmxdfg/dwymFlGk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/NztHo87nmYKtsXA0HQICYCczICM.crl rsync://rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/NztHo87nmYKtsXA0HQICYCczICM.mft rsync://rpki.ripe.net/repository/DEFAULT/NztHo87nmYKtsXA0HQICYCczICM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:92:a6:dc:d2:7c:88:b7:a1:af:94:0c:ee:79:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=373b47a3cee79982adb170341d02026027332023 Validity Not Before: Dec 26 11:00:53 2025 GMT Not After : Dec 27 11:00:53 2025 GMT Subject: CN=0f7ebb84455357a12513c612127aa6f1c6df9275 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:60:c5:c0:02:b6:e6:77:ca:39:ff:b1:e8:26: 49:aa:92:b5:01:b5:b1:c7:a9:53:7a:3b:b0:d2:0f: 17:25:c7:34:63:6f:a1:17:ae:1c:90:b3:be:03:d9: 6a:ba:b6:40:43:f3:b7:e4:59:a1:c6:49:45:d3:b8: 2f:e0:3d:19:6b:ed:e5:ab:36:33:c0:13:bb:99:6e: 15:3a:41:e8:57:e9:c8:70:09:38:f9:d9:1d:d4:bc: 33:45:a2:e9:fa:12:f9:56:5c:bf:35:c0:c8:9f:0a: ef:79:68:19:7e:24:c1:26:53:4c:6f:64:88:ad:ee: b7:e9:8e:bc:05:4a:c5:db:ee:17:58:ad:02:b7:fe: f9:09:f6:9f:68:d2:9f:7d:cd:db:5a:54:d2:cf:19: 52:f6:55:1a:3b:b3:d1:37:58:08:9f:d9:ae:4b:62: 3b:67:6b:b9:bb:e3:c4:58:16:c2:34:8c:05:18:01: 48:74:16:df:83:46:81:ee:f3:53:62:f3:85:ab:58: 55:47:d9:89:e1:de:8d:aa:92:c9:99:ba:9d:ec:0a: b4:10:34:9f:0a:8e:9c:4a:c8:a8:8c:a7:3e:a8:a3: cf:f4:0a:e0:87:21:b4:e2:39:fe:06:a8:9b:56:f3: 61:6c:69:e7:0e:5f:c6:03:b7:97:bd:a5:1e:8f:11: 7f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:7E:BB:84:45:53:57:A1:25:13:C6:12:12:7A:A6:F1:C6:DF:92:75 X509v3 Authority Key Identifier: keyid:37:3B:47:A3:CE:E7:99:82:AD:B1:70:34:1D:02:02:60:27:33:20:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NztHo87nmYKtsXA0HQICYCczICM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/NztHo87nmYKtsXA0HQICYCczICM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/NztHo87nmYKtsXA0HQICYCczICM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:5a:92:3f:f9:d9:81:ad:99:35:6a:55:55:af:50:cd:e4:10: 42:5a:c6:d1:a1:36:c2:51:16:5c:85:3d:cf:ec:22:6c:0d:01: 52:7a:85:85:52:8b:ff:2e:a9:b7:f1:98:8b:6b:59:24:23:9d: 30:b0:9e:92:31:d0:32:ce:93:09:54:9f:ec:16:39:b4:b9:27: 8d:3f:bb:60:97:65:7f:b4:bc:2e:e3:7a:bd:00:67:3e:ec:cd: 70:38:a6:a7:23:5b:41:9b:01:96:1d:ac:54:1d:06:4b:d2:43: 50:99:5f:4c:5a:d7:f6:d0:08:1f:ca:19:2c:e2:eb:67:d7:fe: fd:2a:c0:87:0c:8c:6c:f3:a9:e8:5c:8c:a3:05:a5:80:c5:48: 89:e3:bc:86:df:fb:fb:cd:78:ab:ce:55:bb:8a:7d:e1:89:e1: 87:c3:9e:f0:59:cb:82:ee:cb:d4:54:9d:19:24:7d:95:78:c9: 38:27:aa:9a:0d:c1:48:a2:36:a3:bd:6a:9f:bf:d7:ea:5c:08: c9:71:6e:a8:9f:5c:a9:fb:ea:d6:0b:94:09:06:37:06:30:b5: f0:bc:1c:82:5b:c7:b4:52:c3:47:a3:31:6f:ed:e6:fc:09:11: 0a:12:a3:ac:53:f2:a4:30:0f:ba:6f:f0:4a:aa:f6:46:04:e0: 2c:61:82:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUZKm3NJ8iLehr5QM7nmIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3M2I0N2EzY2VlNzk5ODJhZGIxNzAzNDFkMDIwMjYwMjcz MzIwMjMwHhcNMjUxMjI2MTEwMDUzWhcNMjUxMjI3MTEwMDUzWjAzMTEwLwYDVQQD EygwZjdlYmI4NDQ1NTM1N2ExMjUxM2M2MTIxMjdhYTZmMWM2ZGY5Mjc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWDFwAK25nfKOf+x6CZJqpK1AbWx x6lTejuw0g8XJcc0Y2+hF64ckLO+A9lqurZAQ/O35FmhxklF07gv4D0Za+3lqzYz wBO7mW4VOkHoV+nIcAk4+dkd1LwzRaLp+hL5Vly/NcDInwrveWgZfiTBJlNMb2SI re636Y68BUrF2+4XWK0Ct/75CfafaNKffc3bWlTSzxlS9lUaO7PRN1gIn9muS2I7 Z2u5u+PEWBbCNIwFGAFIdBbfg0aB7vNTYvOFq1hVR9mJ4d6NqpLJmbqd7Aq0EDSf Co6cSsiojKc+qKPP9ArghyG04jn+BqibVvNhbGnnDl/GA7eXvaUejxF/6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA9+u4RFU1ehJRPGEhJ6pvHG35J1MB8GA1UdIwQY MBaAFDc7R6PO55mCrbFwNB0CAmAnMyAjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnp0SG84N25tWUt0c1hBMEhRSUNZQ2N6SUNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC83YzJhMTUtYWM0ZC00NjRhLWE3N2Ut MzJmOWEyODJmNTZjLzEvTnp0SG84N25tWUt0c1hBMEhRSUNZQ2N6SUNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC83YzJhMTUtYWM0ZC00NjRhLWE3N2UtMzJmOWEyODJmNTZj LzEvTnp0SG84N25tWUt0c1hBMEhRSUNZQ2N6SUNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcFqSP/nZ ga2ZNWpVVa9QzeQQQlrG0aE2wlEWXIU9z+wibA0BUnqFhVKL/y6pt/GYi2tZJCOd MLCekjHQMs6TCVSf7BY5tLknjT+7YJdlf7S8LuN6vQBnPuzNcDimpyNbQZsBlh2s VB0GS9JDUJlfTFrX9tAIH8oZLOLrZ9f+/SrAhwyMbPOp6FyMowWlgMVIieO8ht/7 +814q85Vu4p94Ynhh8Oe8FnLgu7L1FSdGSR9lXjJOCeqmg3BSKI2o71qn7/X6lwI yXFuqJ9cqfvq1guUCQY3BjC18LwcglvHtFLDR6Mxb+3m/AkRChKjrFPypDAPum/w Sqr2RgTgLGGCAQ== -----END CERTIFICATE-----Generated at Fri Dec 26 17:43:27 2025 by rpki-client