This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.mft File: nz7CHhDzZG5NwOI_X37ERQFWDeM.mft (raw, json) Hash identifier: /JhG2MRs2nLlBDe3b0eRb5fosJS2NK3y4NmIcq+n73M= Subject key identifier: B6:84:C1:95:C9:56:21:38:3A:CB:6E:AB:7A:1E:6A:2E:1A:EF:FE:44 Authority key identifier: 9F:3E:C2:1E:10:F3:64:6E:4D:C0:E2:3F:5F:7E:C4:45:01:56:0D:E3 Certificate issuer: /CN=9f3ec21e10f3646e4dc0e23f5f7ec44501560de3 Certificate serial: 019AAC14DD19BE73B574E9EAD69295A31FAF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nz7CHhDzZG5NwOI_X37ERQFWDeM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.mft Manifest number: 070C Signing time: Sat 22 Nov 2025 15:00:39 +0000 Manifest this update: Sat 22 Nov 2025 15:00:39 +0000 Manifest next update: Sun 23 Nov 2025 15:00:39 +0000 Files and hashes: 1: nz7CHhDzZG5NwOI_X37ERQFWDeM.crl (hash: IbMXKuXdtMQuTu8eStaDtffTjOi+FAM40tIn0jrJBNY=) 2: rj7cMvisc5sEsNUl1EQ8tKzz6C8.roa (hash: 6mpsbNewWQwOLcJiFmFyeCARGSCjU8+BOm6oNSA/kho=) 3: ymi9yVyZH-4QjFqx4TNJYTh4zAw.roa (hash: BjRl81ZbEIDdTp592nI0/wEPMbPN+bb2781H4ezqZJw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.crl rsync://rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.mft rsync://rpki.ripe.net/repository/DEFAULT/nz7CHhDzZG5NwOI_X37ERQFWDeM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ac:14:dd:19:be:73:b5:74:e9:ea:d6:92:95:a3:1f:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f3ec21e10f3646e4dc0e23f5f7ec44501560de3 Validity Not Before: Nov 22 15:00:39 2025 GMT Not After : Nov 23 15:00:39 2025 GMT Subject: CN=b684c195c95621383acb6eab7a1e6a2e1aeffe44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:dc:0a:92:11:e8:db:7b:42:82:6a:a6:4a:2c: f6:65:b9:a5:79:28:f1:0f:eb:e2:a0:01:b2:a9:4f: 68:f3:04:72:49:60:e7:69:45:d0:94:1f:e1:d7:34: f1:d5:8c:7c:1e:84:30:0e:02:79:e2:cc:01:ec:37: 1d:ec:fc:33:0a:5b:44:ed:7d:57:88:77:ff:f1:41: d9:45:ca:2a:74:bc:e2:9c:9a:07:f0:43:f0:ea:a8: 21:89:d3:34:01:1d:9d:c7:cb:f2:e5:01:23:da:7b: 35:b3:53:f1:f5:d0:e3:ad:cd:ed:90:dd:c3:a8:ef: 11:0d:d2:6f:c9:6c:8d:c7:75:b2:a4:4e:8f:4c:e4: 93:b4:01:e9:09:b0:cb:3e:d0:f7:29:0d:9f:b9:d7: e3:03:57:a8:55:53:c9:77:fa:e3:29:40:fa:b5:c3: af:ce:eb:f1:3d:8a:20:45:f3:d6:a1:7a:e9:7d:cf: fd:f6:c6:05:a4:fa:88:d8:88:63:64:ad:79:24:01: ef:11:09:00:6c:f0:06:44:93:8c:72:89:f6:08:01: f7:93:02:ef:84:8e:e4:0b:2c:b6:13:ce:eb:f0:9d: c5:d5:51:49:3c:77:c0:10:96:d3:ea:a5:6f:96:15: 0f:b4:45:db:de:29:71:cc:0e:cd:5d:16:b2:b7:11: 92:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:84:C1:95:C9:56:21:38:3A:CB:6E:AB:7A:1E:6A:2E:1A:EF:FE:44 X509v3 Authority Key Identifier: keyid:9F:3E:C2:1E:10:F3:64:6E:4D:C0:E2:3F:5F:7E:C4:45:01:56:0D:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nz7CHhDzZG5NwOI_X37ERQFWDeM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:d6:1f:b1:c1:37:cc:6b:3d:98:a1:14:5d:49:81:2c:66:ac: 98:02:f8:c5:5e:8c:35:a9:00:6a:95:42:c7:93:8a:ec:40:f5: 70:62:81:a8:21:7b:9b:06:36:2e:61:ed:6d:47:2b:e4:7f:10: 28:dc:f4:29:88:3d:ae:d1:a2:e7:9e:1d:80:2a:bc:f1:b0:ac: 3c:69:45:fc:2f:38:bf:e6:1c:ed:3f:56:fb:29:67:57:76:2b: a9:6c:c0:ae:b4:7b:d5:32:32:49:3a:15:1d:6c:46:28:16:f1: 65:da:26:11:f6:5a:b7:99:32:0d:ce:40:d9:2c:45:53:b4:56: 2a:a4:37:7d:b7:c0:4b:56:16:0c:a9:6d:39:83:e3:f4:33:29: 08:f6:4f:fe:27:c2:23:88:6d:5c:88:f4:6d:5d:33:14:ad:28: 19:1a:af:1f:e1:55:23:01:63:c0:c2:71:23:4d:52:2c:3c:25: df:4b:11:d3:05:9b:f4:2b:69:70:10:53:9c:10:1e:12:7f:fe: 15:ab:d1:cb:38:87:08:50:59:bb:9b:9f:68:9a:46:54:66:1b: ff:55:21:f0:02:fd:57:35:27:ec:58:ff:85:c5:1e:20:7a:12: 58:2c:b3:67:82:9b:b0:bf:50:a5:57:43:ac:f0:95:4e:a0:61: a9:a7:9d:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqsFN0ZvnO1dOnq1pKVox+vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmM2VjMjFlMTBmMzY0NmU0ZGMwZTIzZjVmN2VjNDQ1MDE1 NjBkZTMwHhcNMjUxMTIyMTUwMDM5WhcNMjUxMTIzMTUwMDM5WjAzMTEwLwYDVQQD EyhiNjg0YzE5NWM5NTYyMTM4M2FjYjZlYWI3YTFlNmEyZTFhZWZmZTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdwKkhHo23tCgmqmSiz2ZbmleSjx D+vioAGyqU9o8wRySWDnaUXQlB/h1zTx1Yx8HoQwDgJ54swB7Dcd7PwzCltE7X1X iHf/8UHZRcoqdLzinJoH8EPw6qghidM0AR2dx8vy5QEj2ns1s1Px9dDjrc3tkN3D qO8RDdJvyWyNx3WypE6PTOSTtAHpCbDLPtD3KQ2fudfjA1eoVVPJd/rjKUD6tcOv zuvxPYogRfPWoXrpfc/99sYFpPqI2IhjZK15JAHvEQkAbPAGRJOMcon2CAH3kwLv hI7kCyy2E87r8J3F1VFJPHfAEJbT6qVvlhUPtEXb3ilxzA7NXRaytxGS9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLaEwZXJViE4Ostuq3oeai4a7/5EMB8GA1UdIwQY MBaAFJ8+wh4Q82RuTcDiP19+xEUBVg3jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbno3Q0hoRHpaRzVOd09JX1gzN0VSUUZXRGVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS82YmFmZTktODc4Yi00NmZkLWEzMDUt N2JhMjVkNTU5NWZhLzEvbno3Q0hoRHpaRzVOd09JX1gzN0VSUUZXRGVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS82YmFmZTktODc4Yi00NmZkLWEzMDUtN2JhMjVkNTU5NWZh LzEvbno3Q0hoRHpaRzVOd09JX1gzN0VSUUZXRGVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbdYfscE3 zGs9mKEUXUmBLGasmAL4xV6MNakAapVCx5OK7ED1cGKBqCF7mwY2LmHtbUcr5H8Q KNz0KYg9rtGi554dgCq88bCsPGlF/C84v+Yc7T9W+ylnV3YrqWzArrR71TIySToV HWxGKBbxZdomEfZat5kyDc5A2SxFU7RWKqQ3fbfAS1YWDKltOYPj9DMpCPZP/ifC I4htXIj0bV0zFK0oGRqvH+FVIwFjwMJxI01SLDwl30sR0wWb9CtpcBBTnBAeEn/+ FavRyziHCFBZu5ufaJpGVGYb/1Uh8AL9VzUn7Fj/hcUeIHoSWCyzZ4KbsL9QpVdD rPCVTqBhqaedhA== -----END CERTIFICATE-----Generated at Sat Nov 22 21:45:53 2025 by rpki-client