This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft File: NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft (raw, json) Hash identifier: uGek4cU0X7h0mKkv5dKMXYEo7lnlsI1+vN6qhRB82u8= Subject key identifier: AB:F3:C8:93:C4:42:A9:C9:A6:2E:36:60:43:14:FF:BE:2D:E3:1D:D1 Authority key identifier: 35:9C:72:43:BE:F2:DC:77:5A:E6:76:92:88:9D:5D:26:C1:B2:D1:48 Certificate issuer: /CN=359c7243bef2dc775ae67692889d5d26c1b2d148 Certificate serial: 019B1D9964E13140685B4448D6C68FC05E83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft Manifest number: 149F Signing time: Sun 14 Dec 2025 16:02:30 +0000 Manifest this update: Sun 14 Dec 2025 16:02:30 +0000 Manifest next update: Mon 15 Dec 2025 16:02:30 +0000 Files and hashes: 1: NZxyQ77y3Hda5naSiJ1dJsGy0Ug.crl (hash: aA5oYSG47QOjOl2b1qN6lsxV5hbc47b+iiX7+zFOPvc=) 2: UlJ9oB76eWY6RVDQIa5ElxGCtDY.roa (hash: a/bIJ0G7k9sAULUVW4Q26EjooAyLCFQQeertx5zrtWc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft rsync://rpki.ripe.net/repository/DEFAULT/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1d:99:64:e1:31:40:68:5b:44:48:d6:c6:8f:c0:5e:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=359c7243bef2dc775ae67692889d5d26c1b2d148 Validity Not Before: Dec 14 16:02:30 2025 GMT Not After : Dec 15 16:02:30 2025 GMT Subject: CN=abf3c893c442a9c9a62e36604314ffbe2de31dd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:96:84:ae:26:ae:53:77:94:c8:b2:0f:a3:ac: ce:e6:48:f7:4a:d7:fe:10:99:e0:67:9b:2a:f4:7a: 3e:93:83:49:f7:7a:52:4f:fe:3c:f0:48:cb:98:32: 7f:79:60:c8:8a:8a:af:13:72:9b:90:74:65:e4:a0: 8e:08:fb:e2:6b:30:5d:28:10:bd:7e:ff:39:8c:52: 2e:d0:4c:ae:07:f1:6e:d2:a1:1f:e8:7b:ee:a0:67: 31:b8:5e:2c:a9:7c:65:a4:3e:4d:cc:d6:15:af:6d: 6f:a8:4c:de:f5:2e:68:8e:f9:76:d1:52:a8:d7:c0: 0e:9c:6c:1f:1d:f9:da:4f:5c:8f:5a:a4:ac:3a:bd: 7b:94:f1:07:a8:91:4f:cf:ef:7f:6f:3f:91:4e:63: f8:0b:7d:16:fa:37:29:1a:50:0b:9c:59:68:cf:4f: 5f:87:12:9d:3f:40:79:7b:01:65:27:bb:1c:fa:cc: 22:36:a8:4b:8f:a2:b5:ab:75:08:54:21:81:da:7d: 7e:4e:ec:e9:2d:02:8e:04:ba:3e:54:f6:d2:01:1a: eb:76:f6:6b:6f:40:6f:a7:2b:98:76:0e:b4:02:8d: 85:43:d0:d6:f8:3e:ac:d9:f2:09:52:f0:7c:1d:3d: 39:5e:14:9a:50:5e:47:f6:b4:c9:33:2f:81:9f:27: d9:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:F3:C8:93:C4:42:A9:C9:A6:2E:36:60:43:14:FF:BE:2D:E3:1D:D1 X509v3 Authority Key Identifier: keyid:35:9C:72:43:BE:F2:DC:77:5A:E6:76:92:88:9D:5D:26:C1:B2:D1:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:65:a8:45:be:4e:5e:b0:b8:bc:06:9a:80:43:c1:da:7d:35: 84:fd:80:45:02:b0:e0:36:f0:7e:bf:d8:08:46:48:cf:c0:3b: 03:4d:65:f3:97:e9:69:e1:09:f4:bb:0d:5f:d2:96:03:c6:e4: 99:29:00:85:9b:de:27:11:77:2a:02:24:1c:5c:f8:1c:4e:60: ba:40:30:90:0d:f7:1e:4e:45:5b:2c:2e:ad:eb:69:66:88:fc: d6:a4:03:b6:a4:f5:92:c9:a3:39:d8:52:be:1c:0f:d5:eb:41: 7c:de:53:04:ed:9f:1f:04:4c:83:9e:21:0c:c6:b1:fd:1b:eb: e1:10:97:97:0c:56:5b:86:24:ab:1e:9a:ef:f6:24:30:96:fa: d0:dc:16:38:ad:f9:b4:eb:50:95:22:0e:6a:64:b9:ca:a5:d6: 80:37:76:6b:ab:4c:5a:bc:a8:11:cb:22:c6:90:56:92:00:fc: dd:a1:76:3c:e9:5e:0c:88:38:e0:2c:a5:31:36:b3:5e:c8:42: 61:36:0a:73:a5:e4:97:9c:76:4d:82:66:e5:fe:6b:e7:11:dc: ce:cb:0d:00:e8:5a:79:d4:17:b3:4a:b9:3d:68:9e:24:d4:4f: cc:d5:7c:45:86:97:bf:2a:6e:86:6f:5a:e6:f7:ca:08:06:29: 70:d2:c7:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsdmWThMUBoW0RI1saPwF6DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1OWM3MjQzYmVmMmRjNzc1YWU2NzY5Mjg4OWQ1ZDI2YzFi MmQxNDgwHhcNMjUxMjE0MTYwMjMwWhcNMjUxMjE1MTYwMjMwWjAzMTEwLwYDVQQD EyhhYmYzYzg5M2M0NDJhOWM5YTYyZTM2NjA0MzE0ZmZiZTJkZTMxZGQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJaEriauU3eUyLIPo6zO5kj3Stf+ EJngZ5sq9Ho+k4NJ93pST/488EjLmDJ/eWDIioqvE3KbkHRl5KCOCPviazBdKBC9 fv85jFIu0EyuB/Fu0qEf6HvuoGcxuF4sqXxlpD5NzNYVr21vqEze9S5ojvl20VKo 18AOnGwfHfnaT1yPWqSsOr17lPEHqJFPz+9/bz+RTmP4C30W+jcpGlALnFloz09f hxKdP0B5ewFlJ7sc+swiNqhLj6K1q3UIVCGB2n1+TuzpLQKOBLo+VPbSARrrdvZr b0BvpyuYdg60Ao2FQ9DW+D6s2fIJUvB8HT05XhSaUF5H9rTJMy+BnyfZwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKvzyJPEQqnJpi42YEMU/74t4x3RMB8GA1UdIwQY MBaAFDWcckO+8tx3WuZ2koidXSbBstFIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlp4eVE3N3kzSGRhNW5hU2lKMWRKc0d5MFVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi81NTViYzktNGUxOS00ODI4LThlYmEt NjFmZmI2NTA2NjQ0LzEvTlp4eVE3N3kzSGRhNW5hU2lKMWRKc0d5MFVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi81NTViYzktNGUxOS00ODI4LThlYmEtNjFmZmI2NTA2NjQ0 LzEvTlp4eVE3N3kzSGRhNW5hU2lKMWRKc0d5MFVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADmWoRb5O XrC4vAaagEPB2n01hP2ARQKw4Dbwfr/YCEZIz8A7A01l85fpaeEJ9LsNX9KWA8bk mSkAhZveJxF3KgIkHFz4HE5gukAwkA33Hk5FWywuretpZoj81qQDtqT1ksmjOdhS vhwP1etBfN5TBO2fHwRMg54hDMax/Rvr4RCXlwxWW4Ykqx6a7/YkMJb60NwWOK35 tOtQlSIOamS5yqXWgDd2a6tMWryoEcsixpBWkgD83aF2POleDIg44CylMTazXshC YTYKc6Xkl5x2TYJm5f5r5xHczssNAOhaedQXs0q5PWieJNRPzNV8RYaXvypuhm9a 5vfKCAYpcNLHxQ== -----END CERTIFICATE-----Generated at Sun Dec 14 21:37:45 2025 by rpki-client