This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.mft File: nz7CHhDzZG5NwOI_X37ERQFWDeM.mft (raw, json) Hash identifier: ieB7ncws9M9NDmxSoWImSBYAiZ90nF0BZJAFD81TedI= Subject key identifier: 0F:C9:C0:3D:BA:02:8C:41:19:37:D3:77:CC:04:47:90:F0:D6:AD:69 Authority key identifier: 9F:3E:C2:1E:10:F3:64:6E:4D:C0:E2:3F:5F:7E:C4:45:01:56:0D:E3 Certificate issuer: /CN=9f3ec21e10f3646e4dc0e23f5f7ec44501560de3 Certificate serial: 019B48826EC2C1355CFE2C9FECCAAE305521 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nz7CHhDzZG5NwOI_X37ERQFWDeM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.mft Manifest number: 075D Signing time: Tue 23 Dec 2025 00:01:06 +0000 Manifest this update: Tue 23 Dec 2025 00:01:06 +0000 Manifest next update: Wed 24 Dec 2025 00:01:06 +0000 Files and hashes: 1: nz7CHhDzZG5NwOI_X37ERQFWDeM.crl (hash: lo1vdCEIFEMulj89FJpOGN3zRoMY43WJOfuKhhXG0pw=) 2: rj7cMvisc5sEsNUl1EQ8tKzz6C8.roa (hash: 6mpsbNewWQwOLcJiFmFyeCARGSCjU8+BOm6oNSA/kho=) 3: ymi9yVyZH-4QjFqx4TNJYTh4zAw.roa (hash: BjRl81ZbEIDdTp592nI0/wEPMbPN+bb2781H4ezqZJw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.crl rsync://rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.mft rsync://rpki.ripe.net/repository/DEFAULT/nz7CHhDzZG5NwOI_X37ERQFWDeM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:82:6e:c2:c1:35:5c:fe:2c:9f:ec:ca:ae:30:55:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f3ec21e10f3646e4dc0e23f5f7ec44501560de3 Validity Not Before: Dec 23 00:01:06 2025 GMT Not After : Dec 24 00:01:06 2025 GMT Subject: CN=0fc9c03dba028c411937d377cc044790f0d6ad69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:fc:f5:73:cb:36:c8:04:23:e2:6f:3e:93:6a: 99:27:7a:77:d7:81:84:91:b4:e4:aa:4b:05:f9:d0: 80:f1:b1:9c:6a:28:c6:72:00:d8:b8:1e:a4:a4:d9: 23:b5:fb:7c:cd:4b:95:a4:ff:98:12:d5:08:2e:e1: fd:9e:37:ef:47:48:a2:00:f7:b5:97:7d:ad:80:41: a7:f5:2f:6e:b0:4f:8f:c0:79:f2:3c:a9:8b:a2:d5: 42:f6:5b:50:75:05:de:70:00:22:35:a9:f0:ae:90: 48:59:22:66:7a:54:3a:bd:47:df:55:da:28:de:54: a2:5f:24:f7:ee:2c:37:63:61:db:43:39:d5:96:df: 38:5b:16:52:75:10:8d:b7:83:bf:1e:de:d3:45:b6: e9:cf:21:9d:aa:8a:7c:5b:67:b2:cc:d9:d6:d4:d4: 44:0e:3d:45:ff:6d:bf:72:9a:52:be:da:77:0b:bd: 10:66:27:43:f0:76:ff:38:77:7c:af:3b:00:5e:c0: 4f:e3:ad:20:8a:b7:84:04:eb:da:35:95:5b:a7:a4: 0c:1b:02:11:c6:56:d7:52:38:bb:ef:30:13:89:ba: cc:a4:95:ff:1a:a6:08:88:3f:a3:60:68:2d:ba:5f: a4:89:9c:c0:40:cb:1f:c2:54:a3:87:ec:5e:0e:45: 8e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:C9:C0:3D:BA:02:8C:41:19:37:D3:77:CC:04:47:90:F0:D6:AD:69 X509v3 Authority Key Identifier: keyid:9F:3E:C2:1E:10:F3:64:6E:4D:C0:E2:3F:5F:7E:C4:45:01:56:0D:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nz7CHhDzZG5NwOI_X37ERQFWDeM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:70:2a:51:8e:61:96:7f:86:71:f5:37:65:41:d7:6c:6b:7c: e1:85:76:50:9f:3c:da:30:b4:41:34:ee:db:84:38:69:50:8e: c2:ec:94:83:49:dc:b4:01:78:57:e3:03:0c:c2:f5:a9:d0:7d: 30:48:2a:a3:c1:c3:82:27:ab:4a:d3:83:e2:eb:b0:ab:b5:bb: 3d:54:41:4d:9e:39:2b:09:de:65:5a:ce:78:f1:1a:ed:d6:b3: 14:4f:8b:ed:1b:fd:3a:c7:1b:3d:34:2d:6b:eb:ed:80:64:70: 19:bb:8e:42:f3:5a:46:d7:73:8a:02:7d:8b:8d:2c:d7:67:3c: de:76:24:b2:06:88:db:e8:38:e6:b9:66:52:cf:6e:8d:51:f4: 96:c3:56:d1:19:89:1d:78:0a:e3:80:60:fe:ea:d3:49:17:05: bb:88:fe:67:ec:41:5f:ac:1e:0e:71:11:4f:20:67:aa:92:0e: 66:2e:c4:cc:15:46:14:68:7e:57:02:b6:bb:5e:c4:a6:13:66: 54:33:03:41:6a:8a:ea:46:dd:0b:7e:3f:ae:3d:35:05:ca:3a: 96:c9:c0:c1:03:f7:01:cb:8f:f7:cb:48:46:ae:34:f7:36:96: 9a:1b:3f:25:d9:d9:62:e5:53:6d:a1:f9:40:de:0c:6d:10:eb: 76:34:e0:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIgm7CwTVc/iyf7MquMFUhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmM2VjMjFlMTBmMzY0NmU0ZGMwZTIzZjVmN2VjNDQ1MDE1 NjBkZTMwHhcNMjUxMjIzMDAwMTA2WhcNMjUxMjI0MDAwMTA2WjAzMTEwLwYDVQQD EygwZmM5YzAzZGJhMDI4YzQxMTkzN2QzNzdjYzA0NDc5MGYwZDZhZDY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfz1c8s2yAQj4m8+k2qZJ3p314GE kbTkqksF+dCA8bGcaijGcgDYuB6kpNkjtft8zUuVpP+YEtUILuH9njfvR0iiAPe1 l32tgEGn9S9usE+PwHnyPKmLotVC9ltQdQXecAAiNanwrpBIWSJmelQ6vUffVdoo 3lSiXyT37iw3Y2HbQznVlt84WxZSdRCNt4O/Ht7TRbbpzyGdqop8W2eyzNnW1NRE Dj1F/22/cppSvtp3C70QZidD8Hb/OHd8rzsAXsBP460gireEBOvaNZVbp6QMGwIR xlbXUji77zATibrMpJX/GqYIiD+jYGgtul+kiZzAQMsfwlSjh+xeDkWOvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA/JwD26AoxBGTfTd8wER5Dw1q1pMB8GA1UdIwQY MBaAFJ8+wh4Q82RuTcDiP19+xEUBVg3jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbno3Q0hoRHpaRzVOd09JX1gzN0VSUUZXRGVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS82YmFmZTktODc4Yi00NmZkLWEzMDUt N2JhMjVkNTU5NWZhLzEvbno3Q0hoRHpaRzVOd09JX1gzN0VSUUZXRGVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS82YmFmZTktODc4Yi00NmZkLWEzMDUtN2JhMjVkNTU5NWZh LzEvbno3Q0hoRHpaRzVOd09JX1gzN0VSUUZXRGVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj3AqUY5h ln+GcfU3ZUHXbGt84YV2UJ882jC0QTTu24Q4aVCOwuyUg0nctAF4V+MDDML1qdB9 MEgqo8HDgierStOD4uuwq7W7PVRBTZ45KwneZVrOePEa7dazFE+L7Rv9OscbPTQt a+vtgGRwGbuOQvNaRtdzigJ9i40s12c83nYksgaI2+g45rlmUs9ujVH0lsNW0RmJ HXgK44Bg/urTSRcFu4j+Z+xBX6weDnERTyBnqpIOZi7EzBVGFGh+VwK2u17EphNm VDMDQWqK6kbdC34/rj01Bco6lsnAwQP3AcuP98tIRq409zaWmhs/JdnZYuVTbaH5 QN4MbRDrdjTgLw== -----END CERTIFICATE-----Generated at Tue Dec 23 06:09:47 2025 by rpki-client