This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.mft File: 1NZco0qWiw2FYauHdtuwLdt8eDM.mft (raw, json) Hash identifier: Hu9RnuRqQusH4y87EDo1mbD7lpv5/7MXChW7DWzIlVI= Subject key identifier: 7B:A5:08:F3:FD:B8:76:E7:F4:03:A0:DA:AA:75:71:35:A6:DE:37:A7 Authority key identifier: D4:D6:5C:A3:4A:96:8B:0D:85:61:AB:87:76:DB:B0:2D:DB:7C:78:33 Certificate issuer: /CN=d4d65ca34a968b0d8561ab8776dbb02ddb7c7833 Certificate serial: 019B18DF161B598744D5F42B86C14C8B85AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1NZco0qWiw2FYauHdtuwLdt8eDM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.mft Manifest number: 0756 Signing time: Sat 13 Dec 2025 18:00:31 +0000 Manifest this update: Sat 13 Dec 2025 18:00:31 +0000 Manifest next update: Sun 14 Dec 2025 18:00:31 +0000 Files and hashes: 1: 1NZco0qWiw2FYauHdtuwLdt8eDM.crl (hash: BSpuoTevsWx0CegzF4/c6TUB9pjZQbqWlDXYc9ZYv7s=) 2: 7jIS7Kg3pQ0rAdPTN8-mhFQ9NMI.roa (hash: X1BBv86nq4mpZk7vS1wx5rzfijmXxCD6/5jYb3vftEE=) 3: JBZwLHOeun9xUsFliq37fa6QYAo.roa (hash: 8ByuZxbvTl/x0Sjxc//zO5GFMR7JeQh92bNKijR57Vc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.crl rsync://rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.mft rsync://rpki.ripe.net/repository/DEFAULT/1NZco0qWiw2FYauHdtuwLdt8eDM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:18:df:16:1b:59:87:44:d5:f4:2b:86:c1:4c:8b:85:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4d65ca34a968b0d8561ab8776dbb02ddb7c7833 Validity Not Before: Dec 13 18:00:31 2025 GMT Not After : Dec 14 18:00:31 2025 GMT Subject: CN=7ba508f3fdb876e7f403a0daaa757135a6de37a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:09:a5:9b:39:48:0b:70:3f:75:ba:00:f0:59: 87:39:69:ea:79:ad:b1:da:b3:e8:f4:93:9e:92:58: eb:dd:41:26:75:9d:64:4e:07:2d:6c:f8:03:df:45: a3:09:f5:52:de:57:15:5a:82:db:86:65:41:26:05: 01:d2:59:88:6a:19:7c:7c:42:4b:4c:92:ec:dd:9e: 15:e7:77:f3:ca:a5:75:80:f7:20:51:45:49:a5:e3: e9:25:b2:2b:f0:70:77:dd:59:4a:de:d4:05:98:3d: f0:c6:9a:99:c1:70:5f:f8:22:30:ba:94:c0:0a:b4: a7:7c:1d:ee:cd:87:99:5d:2f:48:aa:40:23:0b:2d: 1f:1d:ea:bf:60:09:31:0f:03:32:64:ac:66:3c:cf: 3b:51:3b:86:91:5f:e2:25:5c:d7:84:2e:0e:2a:97: 8c:e9:c9:99:ae:83:26:46:bf:e9:d6:35:52:b8:e3: 3c:a0:a1:34:45:9b:39:02:e3:2d:a7:84:0e:c6:a3: d3:23:f9:22:7e:90:b8:d6:11:2d:d2:3a:91:aa:c9: 54:cb:ca:35:84:eb:14:e4:fc:45:16:ec:81:dc:c4: 7c:90:7b:29:c6:a5:f2:e8:34:89:fe:00:27:26:33: 0f:2a:b8:35:2b:e2:c5:d6:4d:7a:5d:86:02:de:8b: f9:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:A5:08:F3:FD:B8:76:E7:F4:03:A0:DA:AA:75:71:35:A6:DE:37:A7 X509v3 Authority Key Identifier: keyid:D4:D6:5C:A3:4A:96:8B:0D:85:61:AB:87:76:DB:B0:2D:DB:7C:78:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1NZco0qWiw2FYauHdtuwLdt8eDM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:f2:7f:28:3c:3a:08:87:e6:c5:2d:d9:c5:da:e5:a5:89:56: c6:51:4c:4e:07:95:c6:2c:42:b3:d1:64:fe:66:0f:20:20:e3: 8e:8f:8a:6a:dc:21:61:63:e6:d5:16:85:d7:82:91:dc:37:c8: 51:bc:26:57:6e:27:16:f4:d7:42:55:40:c7:c9:76:36:b8:70: 58:24:07:46:ae:8f:6a:66:cf:75:fa:e6:05:48:3d:69:1a:0f: c9:cc:1c:0c:75:1c:32:ac:ac:d5:3f:d8:8d:e0:92:59:af:a9: 17:62:1c:68:6e:90:ce:ba:08:6a:f4:32:e0:f9:83:b5:83:a6: e8:d5:6b:8e:f7:05:95:5c:d6:19:c1:2c:99:c4:13:73:6b:36: 22:fc:3a:8c:ad:54:7e:c3:51:a1:ea:ab:56:db:15:f3:2c:b0: dd:83:f6:f3:c3:b3:aa:67:88:f7:ab:47:37:99:93:26:ca:87: 2c:93:62:b2:7f:9c:09:0f:c9:fc:6a:6a:d4:16:10:f0:a4:3f: 77:c3:58:11:02:8d:0d:2d:81:36:47:42:59:91:ed:89:6f:d7: 55:38:0f:eb:e1:6c:ec:bb:25:a4:67:11:e8:c6:34:b6:8e:7c: 76:4b:8b:54:0a:9f:8d:92:48:4f:04:d6:74:77:ba:ac:1f:37: ea:3d:b9:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsY3xYbWYdE1fQrhsFMi4WuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0ZDY1Y2EzNGE5NjhiMGQ4NTYxYWI4Nzc2ZGJiMDJkZGI3 Yzc4MzMwHhcNMjUxMjEzMTgwMDMxWhcNMjUxMjE0MTgwMDMxWjAzMTEwLwYDVQQD Eyg3YmE1MDhmM2ZkYjg3NmU3ZjQwM2EwZGFhYTc1NzEzNWE2ZGUzN2E3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4wmlmzlIC3A/dboA8FmHOWnqea2x 2rPo9JOekljr3UEmdZ1kTgctbPgD30WjCfVS3lcVWoLbhmVBJgUB0lmIahl8fEJL TJLs3Z4V53fzyqV1gPcgUUVJpePpJbIr8HB33VlK3tQFmD3wxpqZwXBf+CIwupTA CrSnfB3uzYeZXS9IqkAjCy0fHeq/YAkxDwMyZKxmPM87UTuGkV/iJVzXhC4OKpeM 6cmZroMmRr/p1jVSuOM8oKE0RZs5AuMtp4QOxqPTI/kifpC41hEt0jqRqslUy8o1 hOsU5PxFFuyB3MR8kHspxqXy6DSJ/gAnJjMPKrg1K+LF1k16XYYC3ov5yQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHulCPP9uHbn9AOg2qp1cTWm3jenMB8GA1UdIwQY MBaAFNTWXKNKlosNhWGrh3bbsC3bfHgzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMU5aY28wcVdpdzJGWWF1SGR0dXdMZHQ4ZURNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8zY2MzNGQtMGYzMi00YTVkLTk4NGIt MzJlZmY5NWIzOWRjLzEvMU5aY28wcVdpdzJGWWF1SGR0dXdMZHQ4ZURNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS8zY2MzNGQtMGYzMi00YTVkLTk4NGItMzJlZmY5NWIzOWRj LzEvMU5aY28wcVdpdzJGWWF1SGR0dXdMZHQ4ZURNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZPJ/KDw6 CIfmxS3ZxdrlpYlWxlFMTgeVxixCs9Fk/mYPICDjjo+KatwhYWPm1RaF14KR3DfI UbwmV24nFvTXQlVAx8l2NrhwWCQHRq6PambPdfrmBUg9aRoPycwcDHUcMqys1T/Y jeCSWa+pF2IcaG6QzroIavQy4PmDtYOm6NVrjvcFlVzWGcEsmcQTc2s2Ivw6jK1U fsNRoeqrVtsV8yyw3YP288OzqmeI96tHN5mTJsqHLJNisn+cCQ/J/Gpq1BYQ8KQ/ d8NYEQKNDS2BNkdCWZHtiW/XVTgP6+Fs7LslpGcR6MY0to58dkuLVAqfjZJITwTW dHe6rB836j25pA== -----END CERTIFICATE-----Generated at Sun Dec 14 01:58:55 2025 by rpki-client