This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft File: nzEukpe8HSfr60dt6g7hXddWVC0.mft (raw, json) Hash identifier: ACBEgRaBjhhM/CH7siG8UwULY62xOZTDFD/5Q3YBHcE= Subject key identifier: 58:78:A4:6C:E9:ED:A9:AB:2B:CC:AF:E5:64:A6:98:C9:77:87:82:16 Authority key identifier: 9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D Certificate issuer: /CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d Certificate serial: 019B3C46F4DDC78B5D00B28ED6E25142FB7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft Manifest number: 0E24 Signing time: Sat 20 Dec 2025 15:00:41 +0000 Manifest this update: Sat 20 Dec 2025 15:00:41 +0000 Manifest next update: Sun 21 Dec 2025 15:00:41 +0000 Files and hashes: 1: 9DNpUDfjfX1cw67GoTejssp0I60.roa (hash: waZpM47Y+Uz4d9MPb5IIUjKVJuGJ/1amyn5dhXRlaKQ=) 2: Aesp-0bkacoacCkCpfhQPmoA2Jo.roa (hash: auTmqPfhdn5WgGssEA4un4kBW/LnIC2gzs/3RcvN434=) 3: BuDcPMwCapskKDGJlWsZctPOBc4.roa (hash: 3bBve525vpAtWU3g8/6VOaPU/EQ0F7VvrXGpa6fOHFk=) 4: PxzPuUVa2hryVcFqS1RSxgTjwqA.roa (hash: +gcitwqIIi7APjhf/dnLtr2znKOxVEk4a5pTJPB9KaY=) 5: bO_WvrYP5ttqrPDJq5s463Nszpo.roa (hash: EspaZPCLRAen7G7qKwAXYq7KwKVTki6xdz4+i5S1a6Q=) 6: f0t-76IiXeLd5savEiu94YnlFko.roa (hash: XWQiN+uiCeNuRV8xmhiqHYcJeAP9QhC6mKZPlUW2ws4=) 7: nzEukpe8HSfr60dt6g7hXddWVC0.crl (hash: TzBQciCnsptSWFmYa3B0ODLrfARsSvM6DklsGvAw4Pw=) 8: rb-Sc2sMQouk09qe65I3IdAX2Wg.roa (hash: oIYCzWn5Llby9+MplpHfCcN3dR2X1heBfsWvSaio7wY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:46:f4:dd:c7:8b:5d:00:b2:8e:d6:e2:51:42:fb:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d Validity Not Before: Dec 20 15:00:41 2025 GMT Not After : Dec 21 15:00:41 2025 GMT Subject: CN=5878a46ce9eda9ab2bccafe564a698c977878216 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:93:b0:e5:dc:07:3b:aa:d9:01:96:71:25:c9: 6b:b3:d1:cc:d9:de:0a:d9:fe:a1:c7:3f:c0:c9:f1: 75:c0:36:61:8f:1c:e5:6a:1d:7e:12:84:a6:61:6b: aa:57:f8:9c:d9:55:f2:cc:a1:bc:b9:8b:ca:32:30: 1f:3b:8d:5e:8b:87:1f:9c:06:40:ac:ec:75:83:70: 5d:34:c9:53:02:d6:4c:01:69:70:af:f6:91:46:10: 97:97:dc:84:16:c1:c5:21:83:dd:08:0a:cf:2f:19: eb:65:17:6b:c1:94:ce:8c:54:0f:f1:66:30:94:16: 39:4d:58:e4:5f:6b:99:30:04:48:53:35:7e:98:73: 32:54:27:4f:58:b5:35:b0:c2:2e:31:16:22:9c:85: ce:8c:19:2e:8e:ac:b5:87:60:0a:d2:37:05:65:db: 6f:2b:58:77:ee:98:aa:3c:46:8b:5f:fc:3d:72:67: fa:b3:6a:c9:49:b5:09:e5:b9:b0:24:ba:df:c5:24: 39:24:5b:a3:66:f5:3d:c8:df:e3:79:1b:18:90:77: f3:9b:30:60:db:3c:e1:c0:dc:7f:ff:53:f4:8e:ff: 7f:a7:89:c5:aa:da:7d:6c:27:e2:01:6f:0c:6a:26: 07:40:df:c7:7e:1c:19:3e:d5:d6:c5:d4:6c:bd:08: 82:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:78:A4:6C:E9:ED:A9:AB:2B:CC:AF:E5:64:A6:98:C9:77:87:82:16 X509v3 Authority Key Identifier: keyid:9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:cf:ff:af:81:02:90:af:d1:c0:d4:e9:d5:f2:92:0c:cd:62: 67:2f:6f:f8:57:43:37:d2:f3:9b:55:9b:05:bf:40:fb:5a:2d: 44:64:84:0b:9e:08:24:83:44:a7:d4:38:cc:52:d6:a6:9e:64: ad:b5:ec:31:37:12:01:03:d8:cb:ee:53:f6:24:dc:ce:7b:bc: 78:23:d2:22:f6:ba:ea:aa:23:c5:24:51:e9:0a:75:21:0f:66: da:4e:00:fa:3e:a5:0d:53:ed:d7:37:c6:a2:28:11:1b:26:47: 31:6b:bf:ab:eb:29:fa:9d:f1:dc:39:9b:16:d3:c5:26:79:38: 77:87:da:4b:32:7c:ed:23:e2:04:b3:0a:03:cc:14:08:08:68: 5c:8d:0a:9b:07:cf:e2:a9:1d:5e:89:d1:7a:b2:e5:a6:38:32: ba:06:9d:6a:e3:d6:72:2c:43:36:b5:c8:ef:ce:be:26:96:b9: e8:37:64:8d:f4:8e:d4:5d:a6:30:ee:ef:c4:3c:27:e9:1f:bc: 17:9b:d9:32:2b:b3:e1:e3:c1:c1:3f:a5:b3:03:65:cc:38:81: 92:15:2d:d5:6b:10:0f:12:c4:4b:d2:23:c4:93:85:19:7e:a6: ab:fb:a2:c5:2e:af:09:70:9d:8e:f3:90:2b:02:fd:f4:bd:66: 3c:31:20:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8RvTdx4tdALKO1uJRQvt6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmMzEyZTkyOTdiYzFkMjdlYmViNDc2ZGVhMGVlMTVkZDc1 NjU0MmQwHhcNMjUxMjIwMTUwMDQxWhcNMjUxMjIxMTUwMDQxWjAzMTEwLwYDVQQD Eyg1ODc4YTQ2Y2U5ZWRhOWFiMmJjY2FmZTU2NGE2OThjOTc3ODc4MjE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5Ow5dwHO6rZAZZxJclrs9HM2d4K 2f6hxz/AyfF1wDZhjxzlah1+EoSmYWuqV/ic2VXyzKG8uYvKMjAfO41ei4cfnAZA rOx1g3BdNMlTAtZMAWlwr/aRRhCXl9yEFsHFIYPdCArPLxnrZRdrwZTOjFQP8WYw lBY5TVjkX2uZMARIUzV+mHMyVCdPWLU1sMIuMRYinIXOjBkujqy1h2AK0jcFZdtv K1h37piqPEaLX/w9cmf6s2rJSbUJ5bmwJLrfxSQ5JFujZvU9yN/jeRsYkHfzmzBg 2zzhwNx//1P0jv9/p4nFqtp9bCfiAW8MaiYHQN/HfhwZPtXWxdRsvQiCjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFh4pGzp7amrK8yv5WSmmMl3h4IWMB8GA1UdIwQY MBaAFJ8xLpKXvB0n6+tHbeoO4V3XVlQtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnpFdWtwZThIU2ZyNjBkdDZnN2hYZGRXVkMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9kZDVhMjgtZGY5ZC00NjI3LTgwOWQt YmQ1ZDNmMDBmYmIyLzEvbnpFdWtwZThIU2ZyNjBkdDZnN2hYZGRXVkMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS9kZDVhMjgtZGY5ZC00NjI3LTgwOWQtYmQ1ZDNmMDBmYmIy LzEvbnpFdWtwZThIU2ZyNjBkdDZnN2hYZGRXVkMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAks//r4EC kK/RwNTp1fKSDM1iZy9v+FdDN9Lzm1WbBb9A+1otRGSEC54IJINEp9Q4zFLWpp5k rbXsMTcSAQPYy+5T9iTcznu8eCPSIva66qojxSRR6Qp1IQ9m2k4A+j6lDVPt1zfG oigRGyZHMWu/q+sp+p3x3DmbFtPFJnk4d4faSzJ87SPiBLMKA8wUCAhoXI0KmwfP 4qkdXonRerLlpjgyugadauPWcixDNrXI786+Jpa56DdkjfSO1F2mMO7vxDwn6R+8 F5vZMiuz4ePBwT+lswNlzDiBkhUt1WsQDxLES9IjxJOFGX6mq/uixS6vCXCdjvOQ KwL99L1mPDEgPw== -----END CERTIFICATE-----Generated at Sat Dec 20 22:05:17 2025 by rpki-client