This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.mft File: NZTKzdk15Fz3HGFngKGx1Kpox7U.mft (raw, json) Hash identifier: UuZ3tL1/USr6q8kNZJYfEEfXIcfPEJ6v65gWXELQJ9o= Subject key identifier: 98:BA:DF:2F:5F:34:22:FB:3B:EB:DD:C0:E3:24:CD:D5:49:A2:26:37 Authority key identifier: 35:94:CA:CD:D9:35:E4:5C:F7:1C:61:67:80:A1:B1:D4:AA:68:C7:B5 Certificate issuer: /CN=3594cacdd935e45cf71c616780a1b1d4aa68c7b5 Certificate serial: 019AC90DEEDF33632B98BBD0FD27F5714FE4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZTKzdk15Fz3HGFngKGx1Kpox7U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.mft Manifest number: 174D Signing time: Fri 28 Nov 2025 06:02:04 +0000 Manifest this update: Fri 28 Nov 2025 06:02:04 +0000 Manifest next update: Sat 29 Nov 2025 06:02:04 +0000 Files and hashes: 1: NZTKzdk15Fz3HGFngKGx1Kpox7U.crl (hash: wbshstFquGGD2bbPFSTqG1nI7L3UgRpSfY+XrZ2ULXU=) 2: ofsbRp2fd5LCZL5t0IaGNjdbGV0.roa (hash: bLNeuXUfAO52F/EGBeoEWZNzHoJs12X+xc+mr+Ggzjo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.mft rsync://rpki.ripe.net/repository/DEFAULT/NZTKzdk15Fz3HGFngKGx1Kpox7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 29 Nov 2025 05:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c9:0d:ee:df:33:63:2b:98:bb:d0:fd:27:f5:71:4f:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3594cacdd935e45cf71c616780a1b1d4aa68c7b5 Validity Not Before: Nov 28 06:02:04 2025 GMT Not After : Nov 29 06:02:04 2025 GMT Subject: CN=98badf2f5f3422fb3bebddc0e324cdd549a22637 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f3:d0:c5:59:4d:4c:15:79:ba:8c:37:80:36: 26:06:98:67:50:04:1b:d3:c9:c3:ab:b7:f4:08:37: c6:a0:e2:28:c7:4b:1a:c8:70:1b:a1:ce:b7:2e:56: 65:8c:bb:57:df:f6:a1:17:cf:6c:c9:87:47:76:b0: 73:03:cd:d7:2d:e7:eb:88:e9:38:ac:89:ea:e6:38: 05:d9:e8:84:b8:36:22:3a:e1:5a:d7:7d:e3:ea:b1: d3:a3:bb:42:39:8a:53:86:6e:b3:cc:fb:6a:e4:3a: 5d:96:09:ef:5b:89:ff:c6:80:c6:5d:73:64:c7:f1: 25:bf:e2:33:61:4a:1e:a1:4c:59:b9:aa:4f:29:9f: 30:e6:b7:77:10:b7:4e:90:0d:66:68:8b:f1:1d:fc: ad:32:b0:39:52:09:f1:38:de:fd:2e:41:9e:86:83: 15:b8:d7:27:32:95:b0:08:fa:9e:d5:c4:34:a6:a7: 63:cc:cc:c6:5a:d1:3e:04:e5:eb:e0:1b:9a:bd:bc: 94:a6:6e:01:bf:1c:e8:af:00:3f:d3:c8:03:e1:13: 68:32:5c:38:b8:7b:d5:1c:5d:00:da:ec:ae:4c:de: e2:8d:c1:24:13:d3:29:08:a6:72:b5:94:99:74:99: 39:a7:6a:de:09:fb:69:bb:8a:d1:c9:47:f1:bf:bb: 77:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:BA:DF:2F:5F:34:22:FB:3B:EB:DD:C0:E3:24:CD:D5:49:A2:26:37 X509v3 Authority Key Identifier: keyid:35:94:CA:CD:D9:35:E4:5C:F7:1C:61:67:80:A1:B1:D4:AA:68:C7:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZTKzdk15Fz3HGFngKGx1Kpox7U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:a6:78:ec:4c:1a:74:1c:f2:ce:00:05:d3:b0:a8:55:2c:b0: 6f:e1:64:54:d4:d3:4a:19:45:c7:d3:11:93:19:a8:70:7d:9d: 4b:df:07:25:68:7e:b1:d2:61:76:9e:66:9f:75:83:d6:bf:9c: 6d:af:cd:ce:54:6d:33:bc:d4:f4:8a:6a:9c:92:51:fc:5c:a5: 0b:58:b5:22:0c:97:e0:67:d1:68:ac:10:dc:34:23:57:cc:25: 65:64:69:e5:5a:4b:0c:69:f6:8b:00:9c:b8:1e:12:a6:b6:28: ed:64:72:74:41:c4:7f:58:ed:71:f5:ff:ec:b4:51:dc:bb:c0: 86:1d:84:f0:34:ef:36:77:74:58:ac:b7:f3:d0:d2:66:fc:df: 31:e6:94:c9:7c:65:e6:6f:45:f1:f5:79:f0:5a:59:54:ab:33: a0:3a:c6:09:75:55:a8:08:5c:f7:29:f1:1a:ec:69:e1:83:75: 87:1e:d0:94:a0:46:92:7d:b3:a2:68:4b:a8:8d:80:c2:02:c1: 59:62:c6:8f:4a:26:1c:83:40:57:68:a0:f8:e2:1f:9a:6b:ef: 26:87:a8:9e:d7:91:70:75:b2:e6:c7:46:23:8a:87:c0:b7:e3: 0f:98:e0:40:f8:6d:92:f1:45:65:74:a7:bf:24:32:ae:12:fb: be:4f:03:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrJDe7fM2MrmLvQ/Sf1cU/kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1OTRjYWNkZDkzNWU0NWNmNzFjNjE2NzgwYTFiMWQ0YWE2 OGM3YjUwHhcNMjUxMTI4MDYwMjA0WhcNMjUxMTI5MDYwMjA0WjAzMTEwLwYDVQQD Eyg5OGJhZGYyZjVmMzQyMmZiM2JlYmRkYzBlMzI0Y2RkNTQ5YTIyNjM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPPQxVlNTBV5uow3gDYmBphnUAQb 08nDq7f0CDfGoOIox0sayHAboc63LlZljLtX3/ahF89syYdHdrBzA83XLefriOk4 rInq5jgF2eiEuDYiOuFa133j6rHTo7tCOYpThm6zzPtq5DpdlgnvW4n/xoDGXXNk x/Elv+IzYUoeoUxZuapPKZ8w5rd3ELdOkA1maIvxHfytMrA5UgnxON79LkGehoMV uNcnMpWwCPqe1cQ0pqdjzMzGWtE+BOXr4BuavbyUpm4BvxzorwA/08gD4RNoMlw4 uHvVHF0A2uyuTN7ijcEkE9MpCKZytZSZdJk5p2reCftpu4rRyUfxv7t3wwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJi63y9fNCL7O+vdwOMkzdVJoiY3MB8GA1UdIwQY MBaAFDWUys3ZNeRc9xxhZ4ChsdSqaMe1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlpUS3pkazE1RnozSEdGbmdLR3gxS3BveDdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS81Y2IyNDUtNDJhMi00OThmLWI3YjIt NGFiZGMyYmI5ZmEzLzEvTlpUS3pkazE1RnozSEdGbmdLR3gxS3BveDdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS81Y2IyNDUtNDJhMi00OThmLWI3YjItNGFiZGMyYmI5ZmEz LzEvTlpUS3pkazE1RnozSEdGbmdLR3gxS3BveDdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeKZ47Ewa dBzyzgAF07CoVSywb+FkVNTTShlFx9MRkxmocH2dS98HJWh+sdJhdp5mn3WD1r+c ba/NzlRtM7zU9IpqnJJR/FylC1i1IgyX4GfRaKwQ3DQjV8wlZWRp5VpLDGn2iwCc uB4SprYo7WRydEHEf1jtcfX/7LRR3LvAhh2E8DTvNnd0WKy389DSZvzfMeaUyXxl 5m9F8fV58FpZVKszoDrGCXVVqAhc9ynxGuxp4YN1hx7QlKBGkn2zomhLqI2AwgLB WWLGj0omHINAV2ig+OIfmmvvJoeonteRcHWy5sdGI4qHwLfjD5jgQPhtkvFFZXSn vyQyrhL7vk8DaA== -----END CERTIFICATE-----Generated at Fri Nov 28 14:43:41 2025 by rpki-client