This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.mft File: Nz2PVXyuGOI12Ti608-uF8kbneY.mft (raw, json) Hash identifier: LsZMI6f7CoKZL92dSQzxVWIsUAgFjgiHaE7KGQ+1KHc= Subject key identifier: 17:47:FF:30:CC:8F:83:83:11:92:0B:EE:B4:23:7C:0D:07:91:42:7F Authority key identifier: 37:3D:8F:55:7C:AE:18:E2:35:D9:38:BA:D3:CF:AE:17:C9:1B:9D:E6 Certificate issuer: /CN=373d8f557cae18e235d938bad3cfae17c91b9de6 Certificate serial: 019B330CF54B9641BCC7520F84E62B9E75DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nz2PVXyuGOI12Ti608-uF8kbneY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.mft Manifest number: 0E44 Signing time: Thu 18 Dec 2025 20:00:45 +0000 Manifest this update: Thu 18 Dec 2025 20:00:45 +0000 Manifest next update: Fri 19 Dec 2025 20:00:45 +0000 Files and hashes: 1: Nz2PVXyuGOI12Ti608-uF8kbneY.crl (hash: A5/o77hL15v80aItEzXLVAJX8VJAeB0RQlPllYRoWR0=) 2: ozI4hI8kFkEQxCSmEwvkBXoCapM.roa (hash: nsuE7KYFnBTkOwSYDCdNStBanVXhSb5SsJb22tB9rcI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.mft rsync://rpki.ripe.net/repository/DEFAULT/Nz2PVXyuGOI12Ti608-uF8kbneY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:0c:f5:4b:96:41:bc:c7:52:0f:84:e6:2b:9e:75:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=373d8f557cae18e235d938bad3cfae17c91b9de6 Validity Not Before: Dec 18 20:00:45 2025 GMT Not After : Dec 19 20:00:45 2025 GMT Subject: CN=1747ff30cc8f838311920beeb4237c0d0791427f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ee:38:11:f5:92:ed:30:cc:20:26:97:7f:49: 61:a0:86:0b:cf:ec:b5:83:18:44:4f:b6:4b:d9:7a: ad:e8:30:05:c5:47:71:49:a5:c4:36:55:53:d7:67: 00:4d:c6:d8:92:d1:2f:6f:41:ed:74:d5:88:c5:5c: dd:97:83:39:d4:69:4e:8e:39:5f:4b:5c:06:cd:fc: b3:cc:8f:62:3e:f2:d4:63:73:29:60:39:94:d9:84: 79:74:22:22:dd:6d:af:52:7b:8e:9d:6b:60:86:56: 50:53:d3:7f:36:77:9e:30:2d:e8:e1:e3:99:e4:0e: 99:54:9f:33:55:bf:d3:dd:a5:84:22:8c:c7:19:bf: b2:06:4c:bd:bc:9b:2c:12:52:28:2e:ea:65:db:8c: 62:92:c0:f6:48:1a:6e:2d:56:4f:00:a1:58:30:43: 4d:77:22:ac:80:8d:55:94:3e:97:60:08:bd:77:a4: 27:6f:d7:4f:cd:f8:4f:c0:f6:7a:8e:b8:06:c2:73: 56:07:23:31:01:c7:3c:17:8c:85:83:02:12:bb:fb: 7c:8c:e3:35:ee:aa:57:3c:ad:c1:41:26:80:77:26: b3:b1:f1:92:c7:f6:01:f7:d7:76:d1:08:6b:5a:7d: 58:0e:f4:f9:fb:e5:69:c0:b9:ef:3f:ae:e9:fa:2c: 3b:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:47:FF:30:CC:8F:83:83:11:92:0B:EE:B4:23:7C:0D:07:91:42:7F X509v3 Authority Key Identifier: keyid:37:3D:8F:55:7C:AE:18:E2:35:D9:38:BA:D3:CF:AE:17:C9:1B:9D:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nz2PVXyuGOI12Ti608-uF8kbneY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:0f:de:a3:12:d0:c4:8f:15:00:27:b2:88:74:db:fc:8e:52: d1:cb:f0:ab:9e:49:f3:2d:3f:5b:91:fd:8b:7c:32:9e:90:de: 02:17:06:7d:4b:9b:93:41:4f:26:94:85:44:b3:3d:a9:60:6c: 1e:a3:ae:a7:38:84:ea:e6:f0:a0:a6:8c:a2:e5:14:0d:2d:ee: f3:b9:4c:94:fd:f4:6e:30:bb:4c:12:5b:5e:8c:58:6c:b4:a6: 4e:7b:0a:78:15:eb:2d:b5:39:d1:50:58:db:0b:6e:71:06:57: 28:29:92:5d:60:ff:92:af:d7:b5:2f:80:74:20:71:da:8a:e1: 29:ed:4d:22:39:53:1d:49:f1:aa:cb:84:06:03:d4:37:ea:e9: 86:e6:c0:e2:4f:b5:24:3e:c5:1b:cd:a5:9d:94:32:8c:c3:73: 1f:2c:86:1f:9a:2f:90:43:f7:93:c9:d5:d7:24:ca:95:23:d5: 7e:05:b2:41:6d:15:bd:05:dc:b3:33:4d:81:dc:c7:7a:b4:d4: c0:71:9e:7d:c8:b6:67:25:10:ee:f5:ed:c2:45:e8:8d:7f:e3: 99:5d:78:b3:aa:79:be:80:45:1e:99:80:17:5b:7d:e1:d0:3a: a6:32:04:9c:08:01:1b:ff:ff:19:d5:d4:96:4d:51:8e:33:40: 0f:ff:a2:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszDPVLlkG8x1IPhOYrnnXdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3M2Q4ZjU1N2NhZTE4ZTIzNWQ5MzhiYWQzY2ZhZTE3Yzkx YjlkZTYwHhcNMjUxMjE4MjAwMDQ1WhcNMjUxMjE5MjAwMDQ1WjAzMTEwLwYDVQQD EygxNzQ3ZmYzMGNjOGY4MzgzMTE5MjBiZWViNDIzN2MwZDA3OTE0MjdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmu44EfWS7TDMICaXf0lhoIYLz+y1 gxhET7ZL2Xqt6DAFxUdxSaXENlVT12cATcbYktEvb0HtdNWIxVzdl4M51GlOjjlf S1wGzfyzzI9iPvLUY3MpYDmU2YR5dCIi3W2vUnuOnWtghlZQU9N/NneeMC3o4eOZ 5A6ZVJ8zVb/T3aWEIozHGb+yBky9vJssElIoLupl24xiksD2SBpuLVZPAKFYMENN dyKsgI1VlD6XYAi9d6Qnb9dPzfhPwPZ6jrgGwnNWByMxAcc8F4yFgwISu/t8jOM1 7qpXPK3BQSaAdyazsfGSx/YB99d20QhrWn1YDvT5++VpwLnvP67p+iw7fQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBdH/zDMj4ODEZIL7rQjfA0HkUJ/MB8GA1UdIwQY MBaAFDc9j1V8rhjiNdk4utPPrhfJG53mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnoyUFZYeXVHT0kxMlRpNjA4LXVGOGtibmVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy81MTc0MTEtMGM0Mi00ZDE4LTkwMzkt Yzk5ZGQzOTBhN2Q2LzEvTnoyUFZYeXVHT0kxMlRpNjA4LXVGOGtibmVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy81MTc0MTEtMGM0Mi00ZDE4LTkwMzktYzk5ZGQzOTBhN2Q2 LzEvTnoyUFZYeXVHT0kxMlRpNjA4LXVGOGtibmVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbA/eoxLQ xI8VACeyiHTb/I5S0cvwq55J8y0/W5H9i3wynpDeAhcGfUubk0FPJpSFRLM9qWBs HqOupziE6ubwoKaMouUUDS3u87lMlP30bjC7TBJbXoxYbLSmTnsKeBXrLbU50VBY 2wtucQZXKCmSXWD/kq/XtS+AdCBx2orhKe1NIjlTHUnxqsuEBgPUN+rphubA4k+1 JD7FG82lnZQyjMNzHyyGH5ovkEP3k8nV1yTKlSPVfgWyQW0VvQXcszNNgdzHerTU wHGefci2ZyUQ7vXtwkXojX/jmV14s6p5voBFHpmAF1t94dA6pjIEnAgBG///GdXU lk1RjjNAD/+iPA== -----END CERTIFICATE-----Generated at Fri Dec 19 04:50:16 2025 by rpki-client