This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/NNUZJHQCvPvfDs6QIK1kYi6dO64.mft File: NNUZJHQCvPvfDs6QIK1kYi6dO64.mft (raw, json) Hash identifier: jSz/nv/oO9sApFGSdKSIoAV7RiHusKtQxDLsoaWOaC0= Subject key identifier: 57:34:D0:E6:B6:DE:CF:3F:E9:8A:C6:24:C4:1B:CD:2E:72:2C:26:A1 Authority key identifier: 34:D5:19:24:74:02:BC:FB:DF:0E:CE:90:20:AD:64:62:2E:9D:3B:AE Certificate issuer: /CN=34d519247402bcfbdf0ece9020ad64622e9d3bae Certificate serial: 019B1201961E7684AB0D283A44A027188CA0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NNUZJHQCvPvfDs6QIK1kYi6dO64.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/NNUZJHQCvPvfDs6QIK1kYi6dO64.mft Manifest number: 1004 Signing time: Fri 12 Dec 2025 10:00:52 +0000 Manifest this update: Fri 12 Dec 2025 10:00:52 +0000 Manifest next update: Sat 13 Dec 2025 10:00:52 +0000 Files and hashes: 1: 1-UL9cqmZR86h5znGrLr9rng1OoA.roa (hash: E9P7J2BtII/1SfdjE4hkF/I8cNTQ+7Tkvjo9UHiDiQ4=) 2: 16Vx9JFdsAydCBt8o5HI01kMvEY.roa (hash: uE6o+4HCde5Q2IcMEoOR7KpTVTAt1VCw3Ve7SEAAgA8=) 3: AVkM8pQNQe4Lv2gygeYw_iwNR8o.roa (hash: eBDfXYDOLbSmgkFxViph+uhEyXOWfI38ugg/5BV4TtY=) 4: NNUZJHQCvPvfDs6QIK1kYi6dO64.crl (hash: cNYAaHJzRLtYP2qJKlDjBsnxO105N87U+Qxik2Wfbac=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/NNUZJHQCvPvfDs6QIK1kYi6dO64.crl rsync://rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/NNUZJHQCvPvfDs6QIK1kYi6dO64.mft rsync://rpki.ripe.net/repository/DEFAULT/NNUZJHQCvPvfDs6QIK1kYi6dO64.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 10:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:01:96:1e:76:84:ab:0d:28:3a:44:a0:27:18:8c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34d519247402bcfbdf0ece9020ad64622e9d3bae Validity Not Before: Dec 12 10:00:52 2025 GMT Not After : Dec 13 10:00:52 2025 GMT Subject: CN=5734d0e6b6decf3fe98ac624c41bcd2e722c26a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:56:95:57:0a:0e:82:2e:e0:d1:8a:27:97:5c: a0:80:e3:93:14:9a:18:23:92:48:0f:fd:f5:1f:11: 1a:ae:c2:7a:4d:d5:ef:2a:16:42:93:c0:8b:61:e8: a6:c8:2c:b5:79:59:04:be:1e:0f:3a:77:80:41:ce: 73:4d:e5:10:6a:ca:18:cb:79:4b:f2:8a:97:de:b5: c7:12:80:10:ec:54:ce:c5:f9:5b:57:cd:38:87:f0: 5b:2a:7d:19:be:08:94:33:5e:87:c5:5a:63:5e:d1: 45:26:f9:1a:f7:c3:e8:d2:61:9c:d7:7e:1c:b8:02: 80:24:cb:68:e6:86:00:ff:42:ad:5c:b8:1a:ec:a6: 45:c5:a3:ba:e1:7f:bf:bf:71:32:01:6a:5e:dc:22: a6:96:6b:03:4e:c6:fb:29:00:e9:79:ef:c5:b3:12: 7a:0b:19:31:07:b7:c2:68:86:d4:1b:76:b1:05:c6: 89:40:57:ee:d5:26:2b:db:7e:54:44:49:7f:03:91: 0b:8d:87:f7:91:1e:cd:fa:0f:89:1c:98:73:ad:e5: b2:94:9a:03:3c:e6:40:69:56:ca:ea:13:1a:ad:f8: 28:a2:c5:57:e4:aa:fb:8f:a6:83:e8:1c:3e:c5:6b: 17:9a:33:fe:ea:6c:2b:67:d2:1d:e8:90:29:8c:9b: 6d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:34:D0:E6:B6:DE:CF:3F:E9:8A:C6:24:C4:1B:CD:2E:72:2C:26:A1 X509v3 Authority Key Identifier: keyid:34:D5:19:24:74:02:BC:FB:DF:0E:CE:90:20:AD:64:62:2E:9D:3B:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NNUZJHQCvPvfDs6QIK1kYi6dO64.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/NNUZJHQCvPvfDs6QIK1kYi6dO64.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/NNUZJHQCvPvfDs6QIK1kYi6dO64.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:27:5d:01:40:29:e5:25:83:91:d0:66:e5:56:84:16:8c:11: 03:97:a3:86:b2:cf:dd:61:98:a8:b6:48:9f:72:b8:0b:9e:cd: 67:88:f8:c4:6f:92:e0:af:61:ad:b3:7f:7f:c4:14:b0:8b:35: 2c:a6:d9:0a:b2:98:16:51:ea:9f:d5:c0:dc:33:8e:64:58:40: 3c:ab:bc:4a:b0:5c:e3:0c:0c:f1:e2:04:56:1b:95:45:18:2e: f1:fe:f8:67:38:31:54:f7:5b:f6:49:a4:93:9c:03:a2:a9:a1: b6:fc:a0:ab:fe:23:a3:f8:e9:85:ac:3c:e7:75:a5:a0:d1:58: 82:c9:db:0d:60:ac:25:01:39:e6:72:55:14:e2:a3:62:21:8d: 13:9e:5e:39:77:ea:69:2d:fd:31:d6:46:30:f9:80:7e:83:5e: 81:95:98:3c:02:ab:94:d6:cc:4a:7a:2f:e7:1e:44:7c:2e:31: dc:c1:21:b1:56:49:ec:20:50:c3:1b:cb:4f:b9:08:94:c7:ec: 7a:60:ea:d2:84:79:7b:39:3e:0f:9f:6c:93:79:bd:37:3d:23: 54:ba:86:a7:22:5d:a3:26:d5:ae:35:89:da:ce:ec:39:46:a8: b0:f6:e9:aa:43:02:fa:a7:5e:10:b3:e1:34:a2:62:2a:df:23: 28:bf:20:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsSAZYedoSrDSg6RKAnGIygMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0ZDUxOTI0NzQwMmJjZmJkZjBlY2U5MDIwYWQ2NDYyMmU5 ZDNiYWUwHhcNMjUxMjEyMTAwMDUyWhcNMjUxMjEzMTAwMDUyWjAzMTEwLwYDVQQD Eyg1NzM0ZDBlNmI2ZGVjZjNmZTk4YWM2MjRjNDFiY2QyZTcyMmMyNmExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1aVVwoOgi7g0Yonl1yggOOTFJoY I5JID/31HxEarsJ6TdXvKhZCk8CLYeimyCy1eVkEvh4POneAQc5zTeUQasoYy3lL 8oqX3rXHEoAQ7FTOxflbV804h/BbKn0ZvgiUM16HxVpjXtFFJvka98Po0mGc134c uAKAJMto5oYA/0KtXLga7KZFxaO64X+/v3EyAWpe3CKmlmsDTsb7KQDpee/FsxJ6 CxkxB7fCaIbUG3axBcaJQFfu1SYr235UREl/A5ELjYf3kR7N+g+JHJhzreWylJoD POZAaVbK6hMarfgoosVX5Kr7j6aD6Bw+xWsXmjP+6mwrZ9Id6JApjJtthwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFc00Oa23s8/6YrGJMQbzS5yLCahMB8GA1UdIwQY MBaAFDTVGSR0Arz73w7OkCCtZGIunTuuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTk5VWkpIUUN2UHZmRHM2UUlLMWtZaTZkTzY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8zMDgxNzktYmU2OS00YzEwLTg2OTQt ZmJkMzk5YTQ0NzVlLzEvTk5VWkpIUUN2UHZmRHM2UUlLMWtZaTZkTzY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi8zMDgxNzktYmU2OS00YzEwLTg2OTQtZmJkMzk5YTQ0NzVl LzEvTk5VWkpIUUN2UHZmRHM2UUlLMWtZaTZkTzY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANyddAUAp 5SWDkdBm5VaEFowRA5ejhrLP3WGYqLZIn3K4C57NZ4j4xG+S4K9hrbN/f8QUsIs1 LKbZCrKYFlHqn9XA3DOOZFhAPKu8SrBc4wwM8eIEVhuVRRgu8f74ZzgxVPdb9kmk k5wDoqmhtvygq/4jo/jphaw853WloNFYgsnbDWCsJQE55nJVFOKjYiGNE55eOXfq aS39MdZGMPmAfoNegZWYPAKrlNbMSnov5x5EfC4x3MEhsVZJ7CBQwxvLT7kIlMfs emDq0oR5ezk+D59sk3m9Nz0jVLqGpyJdoybVrjWJ2s7sOUaosPbpqkMC+qdeELPh NKJiKt8jKL8ghg== -----END CERTIFICATE-----Generated at Fri Dec 12 19:31:21 2025 by rpki-client