This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft File: NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft (raw, json) Hash identifier: E2c02dabgZYq5mzMzMuAxpIMNntG5fWwA7FEsDsse8g= Subject key identifier: B8:AA:42:EB:93:35:67:2E:32:FA:A1:9A:5B:70:23:30:90:DC:53:79 Authority key identifier: 35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3 Certificate issuer: /CN=359f0f5ff620e0db5311f64736909973ac60f6f3 Certificate serial: 019B11CA63BA6951288CE8CD01ED223C4BB1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft Manifest number: 1792 Signing time: Fri 12 Dec 2025 09:00:35 +0000 Manifest this update: Fri 12 Dec 2025 09:00:35 +0000 Manifest next update: Sat 13 Dec 2025 09:00:35 +0000 Files and hashes: 1: 1NJrUEv9Bt0x372X5yweG9JeKbk.roa (hash: S6OqBfqA27CZ5lgQWoDV23LfWwUs3uLESRa+vcboqbA=) 2: 2UrKpNpXwQRG_RCEBy6jwKiUGY0.roa (hash: ga3NEHKHpZo6kUdfR8ZMTo0qgNot+btN7z+ZQk3zhiI=) 3: 4qMGWpgEfUvVfuYkCpl-cDfdOi8.roa (hash: 38HpzPTEyuA+scZwZQcFdTVJsXUC8CY1Kfy5zMrptq8=) 4: 77pFQYmLGFFV08L576oEHW3GDp0.roa (hash: w0kLGHk3jpcfZ/BQP6p+01FDOOb/LMYSuRYLEGuQI/g=) 5: FEemRqWNX5xhq2yBrzr1C3dcawc.roa (hash: zrzqLUFgS0O6VfPSR/q7YlCpjaLeDHcdItec7nZ4p/I=) 6: Gc4moE6h-0LPBafiLK_GmYOfnf8.roa (hash: B7ulvc5vYjfcQvRj4GAOq2Tqzy61ptY6XfnMhYDDe+Y=) 7: IoRXomrFNDnoBIF4qoE29SIUorU.roa (hash: 1sHe1bcx24ru9glaxoxQWRHjWb8ipfsqMRJr8SbCC/s=) 8: NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl (hash: lbacU8W8OVhBIsFywO4b6GClSyVfCUxqJ6KElWrrMgE=) 9: TNCpqe-GffYO9Oy5tCERO1-eUvc.roa (hash: tEekWUTWURynqaTdFQTnecYYou9fV3Tv2zuhFon83g0=) 10: VFBedq1I_YG5NP5YD9No0ItCqAI.roa (hash: Cca2YTmO6sfJdE+XLr3wI40Aj8jX93VIto7rInwpMCo=) 11: WW-Eg4lD08WXRjKIyMf5a9JN3sI.roa (hash: 4fdk3ZCxEVJ8pj7G/mfXogiKk5sTyJuf3rTPCLrHXpA=) 12: _yddHTNEel0GBu-2Argpr_u83GQ.roa (hash: ZAIghD2GFPvhVjpWbd6Zm9RJtXdqLd2jsS/IulWaoyc=) 13: aNywjk-hRURwFzlW2WgXo-tyI7k.roa (hash: 7GvPvCBbcDqco5BuG4uUSLpM+i4KeC8ZMy4qhRktBZ8=) 14: b1B34JvO-GcunbVTm8j4sBQw6MA.roa (hash: 0+rTmm2udmOGJ/v+UrcQLZyo966itB803WI6uUxjsqQ=) 15: d3a2WBeR1A3tJcpu4fWQBY6byfA.roa (hash: Zp2NY2sCUEQGxT621HkEtGngfanR7ZMZDlkAzEAeyIw=) 16: iFRYVznuoLn764Hzk0y8UncknZI.roa (hash: uIDffq/3bRoUd9ry3L4WiOXaxdw7ef/Tzoj8TcFGzHc=) 17: kUh2F-fVmltK7tW5jk5XUjsjxVQ.roa (hash: F9Uv120hAnV+E46AVbmB2sboaMIO2I3P8j+LmwLqm1M=) 18: mq2NxcwMUGbKqpSJLEjhdlVNidw.roa (hash: vE05RIMpgESTy8av4PcX8xn6jeiXKLqRql6sXAZ5+aE=) 19: rI3BUUNmmdz_A7GTMa-NmL7qtcI.roa (hash: aUp66qmmCZlHuRPbWVjj6jt7emRrai3ZD6hH/ipGctU=) 20: xX9yJEiYtOsEPk6D2Z_dgnJG6u8.roa (hash: brPlifO1VEl2vFMFC83o8IYbgEjTUIbuxorWEUgGfc8=) 21: xXju9qGmfbY7jtuhCeomjVXSGgc.roa (hash: aLsgVbOegZpDj1KVoAXCqtR2JSEILQDuwOxScth37yg=) 22: ziTaHEBzu703E1AnoRdGaeDxKDM.roa (hash: eQUr4D3nQGW0Uu+rc2TbhNUKE96ryh4ra9nO6RUZ5yo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:ca:63:ba:69:51:28:8c:e8:cd:01:ed:22:3c:4b:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=359f0f5ff620e0db5311f64736909973ac60f6f3 Validity Not Before: Dec 12 09:00:35 2025 GMT Not After : Dec 13 09:00:35 2025 GMT Subject: CN=b8aa42eb9335672e32faa19a5b70233090dc5379 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:98:e9:ea:fd:28:21:06:c9:05:75:98:2e:15: 50:b9:07:1e:08:60:cc:79:4c:fc:2e:75:5a:c4:53: f9:9b:b8:fc:1c:43:c4:63:8e:ea:08:f0:a7:23:c0: a6:23:6a:44:9f:f9:34:63:73:ac:63:e6:62:f7:84: 13:ce:da:f7:fc:cd:0a:6f:a4:cb:de:91:c5:39:4a: 5c:dd:98:84:f9:15:01:97:05:5a:da:ed:14:8f:34: fc:c0:33:55:d7:f1:1c:2d:2d:a1:e3:91:b7:10:12: 2a:f4:4d:92:4c:56:d7:7e:85:c4:f2:e2:d6:03:8c: 92:6e:4c:42:57:38:78:1c:67:e0:e5:18:e8:5a:58: 4e:24:98:13:7e:c1:81:44:3c:51:68:d7:99:7d:a6: 73:e5:12:9c:51:ca:31:50:72:ee:ad:db:e7:b3:7b: 0f:1c:f8:fd:4e:7d:43:65:ec:0a:12:a1:7f:ba:93: 45:b3:d9:9f:61:d1:e1:cc:78:74:6d:b4:89:59:60: 00:91:c2:19:62:b2:e9:76:bc:48:69:23:a1:8f:b8: 29:56:58:7b:56:b3:fe:9f:cb:68:0a:95:83:7b:3a: 86:96:8c:62:a6:e0:43:1a:f6:d5:b9:9b:aa:46:a6: fa:0b:13:57:e9:63:2a:a0:e0:6b:46:1a:ac:15:b7: 90:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:AA:42:EB:93:35:67:2E:32:FA:A1:9A:5B:70:23:30:90:DC:53:79 X509v3 Authority Key Identifier: keyid:35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:83:3a:fd:4b:00:0a:bb:9b:32:12:33:9c:7f:45:90:88:42: 60:61:61:44:48:23:4b:fa:a5:85:5a:29:6d:a6:af:6d:84:c6: 46:a0:0d:28:7f:cf:b3:f9:c1:1b:b9:c6:20:67:f5:79:65:1b: 2c:49:dc:ad:be:e4:4a:cb:10:73:f4:5f:8b:49:da:39:43:0b: e1:9f:2a:cb:92:af:5c:8e:c3:67:ad:21:78:c8:ce:04:99:24: c0:bc:b1:72:d3:b5:13:3b:6f:a5:78:70:67:c9:29:bc:db:be: 6a:56:59:8a:78:17:89:5c:38:36:b6:af:c7:0d:85:b8:c9:d0: 16:19:08:b3:81:74:f7:13:8e:8b:fe:ef:7d:da:85:56:2b:e1: ab:12:e6:3b:db:a0:4f:38:64:7b:3b:7a:16:43:e5:6f:a0:0e: 32:fd:12:c4:14:46:6a:8c:77:9e:02:72:18:60:3f:11:3b:0e: e7:69:08:3a:0a:d2:d8:e7:6b:1d:3a:74:96:ed:ad:f5:d5:cb: f4:41:a1:99:4a:c6:80:08:e6:9e:5b:0f:31:38:9f:37:cc:1e: d3:80:02:73:85:c8:04:1e:16:e6:7f:17:c3:7f:f0:e7:c8:f4: 96:6b:06:6a:46:66:ea:c8:b0:fd:88:c4:19:4a:51:9b:81:30: 4b:64:7e:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsRymO6aVEojOjNAe0iPEuxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1OWYwZjVmZjYyMGUwZGI1MzExZjY0NzM2OTA5OTczYWM2 MGY2ZjMwHhcNMjUxMjEyMDkwMDM1WhcNMjUxMjEzMDkwMDM1WjAzMTEwLwYDVQQD EyhiOGFhNDJlYjkzMzU2NzJlMzJmYWExOWE1YjcwMjMzMDkwZGM1Mzc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZjp6v0oIQbJBXWYLhVQuQceCGDM eUz8LnVaxFP5m7j8HEPEY47qCPCnI8CmI2pEn/k0Y3OsY+Zi94QTztr3/M0Kb6TL 3pHFOUpc3ZiE+RUBlwVa2u0UjzT8wDNV1/EcLS2h45G3EBIq9E2STFbXfoXE8uLW A4ySbkxCVzh4HGfg5RjoWlhOJJgTfsGBRDxRaNeZfaZz5RKcUcoxUHLurdvns3sP HPj9Tn1DZewKEqF/upNFs9mfYdHhzHh0bbSJWWAAkcIZYrLpdrxIaSOhj7gpVlh7 VrP+n8toCpWDezqGloxipuBDGvbVuZuqRqb6CxNX6WMqoOBrRhqsFbeQXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLiqQuuTNWcuMvqhmltwIzCQ3FN5MB8GA1UdIwQY MBaAFDWfD1/2IODbUxH2RzaQmXOsYPbzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlo4UFhfWWc0TnRURWZaSE5wQ1pjNnhnOXZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS80MGQ5YTUtMjU2Ni00OWUxLWE1N2It ZDFhYmY0ZWUzMmNiLzEvTlo4UFhfWWc0TnRURWZaSE5wQ1pjNnhnOXZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS80MGQ5YTUtMjU2Ni00OWUxLWE1N2ItZDFhYmY0ZWUzMmNi LzEvTlo4UFhfWWc0TnRURWZaSE5wQ1pjNnhnOXZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGIM6/UsA CrubMhIznH9FkIhCYGFhREgjS/qlhVopbaavbYTGRqANKH/Ps/nBG7nGIGf1eWUb LEncrb7kSssQc/Rfi0naOUML4Z8qy5KvXI7DZ60heMjOBJkkwLyxctO1EztvpXhw Z8kpvNu+alZZingXiVw4Nravxw2FuMnQFhkIs4F09xOOi/7vfdqFVivhqxLmO9ug Tzhkezt6FkPlb6AOMv0SxBRGaox3ngJyGGA/ETsO52kIOgrS2OdrHTp0lu2t9dXL 9EGhmUrGgAjmnlsPMTifN8we04ACc4XIBB4W5n8Xw3/w58j0lmsGakZm6siw/YjE GUpRm4EwS2R+1A== -----END CERTIFICATE-----Generated at Fri Dec 12 12:21:39 2025 by rpki-client