This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/cb9493-e834-4f0e-8abb-1a92fb0dc1c7/1/nqeCd0gM8trWyesKUr5I33q2Z1o.mft File: nqeCd0gM8trWyesKUr5I33q2Z1o.mft (raw, json) Hash identifier: BZdx/eAsAHcH+HieYdT/BNdiC2ueqf3id4eP0g0d7Ak= Subject key identifier: BF:44:54:36:77:AB:38:33:9F:D4:11:DA:06:AE:B3:5C:A8:F3:5B:CD Authority key identifier: 9E:A7:82:77:48:0C:F2:DA:D6:C9:EB:0A:52:BE:48:DF:7A:B6:67:5A Certificate issuer: /CN=9ea78277480cf2dad6c9eb0a52be48df7ab6675a Certificate serial: 019B32D60AC1E9FE5C35B9D54788C7418359 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nqeCd0gM8trWyesKUr5I33q2Z1o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/cb9493-e834-4f0e-8abb-1a92fb0dc1c7/1/nqeCd0gM8trWyesKUr5I33q2Z1o.mft Manifest number: 1087 Signing time: Thu 18 Dec 2025 19:00:46 +0000 Manifest this update: Thu 18 Dec 2025 19:00:46 +0000 Manifest next update: Fri 19 Dec 2025 19:00:46 +0000 Files and hashes: 1: iSQJ7oUwp5EtejUI-66sGk-h7cQ.roa (hash: mpF7huYV9n/9/29y0+6CrRWd+U+y7E7ycfKNR3SN4Do=) 2: nqeCd0gM8trWyesKUr5I33q2Z1o.crl (hash: X496rYdYNuimc0qcEYOw1OWNgdq35M9kk5qol0MWPHg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/cb9493-e834-4f0e-8abb-1a92fb0dc1c7/1/nqeCd0gM8trWyesKUr5I33q2Z1o.crl rsync://rpki.ripe.net/repository/DEFAULT/97/cb9493-e834-4f0e-8abb-1a92fb0dc1c7/1/nqeCd0gM8trWyesKUr5I33q2Z1o.mft rsync://rpki.ripe.net/repository/DEFAULT/nqeCd0gM8trWyesKUr5I33q2Z1o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d6:0a:c1:e9:fe:5c:35:b9:d5:47:88:c7:41:83:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ea78277480cf2dad6c9eb0a52be48df7ab6675a Validity Not Before: Dec 18 19:00:46 2025 GMT Not After : Dec 19 19:00:46 2025 GMT Subject: CN=bf44543677ab38339fd411da06aeb35ca8f35bcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:85:13:4d:5e:5a:b4:c8:40:71:6d:11:10:41: eb:54:cb:bd:1b:2a:38:4c:28:78:6b:7b:e5:fe:b4: 5d:9e:4e:67:22:a1:66:a8:48:f7:6e:d2:29:73:c6: 84:a8:2f:5e:93:b5:a3:f3:ac:92:a1:1b:c2:3d:1c: 37:23:9c:1b:8e:d6:e3:77:10:e9:47:cc:2d:33:35: b6:f4:a9:0b:7a:c1:ba:51:21:48:84:03:1c:7b:db: ed:ba:b8:ed:49:89:7f:a7:97:78:34:b4:9d:91:d0: af:ba:60:14:af:e0:4d:24:45:94:5d:26:35:c9:d5: c9:87:34:11:5f:02:5d:78:a6:5d:29:ab:d4:a7:07: 80:ca:ec:c5:e3:d8:44:b4:84:a0:f2:ad:75:d4:31: 59:aa:1b:1f:2b:27:92:26:ec:82:2a:c2:02:4e:54: 09:62:83:06:73:9a:0e:ad:64:e3:8a:d7:4c:bf:a0: 7c:45:3e:e7:e7:b4:3e:25:ec:7d:9e:84:74:40:69: 47:53:b7:71:7c:fe:36:2a:25:69:6c:c6:23:a2:d6: 00:eb:f2:77:ec:90:cb:9a:3d:ef:87:d1:1d:4a:63: d1:be:39:f5:e9:4c:63:11:aa:91:c8:5a:83:96:1f: d7:e7:c2:64:82:ad:2b:de:ef:ac:a6:c5:a4:48:b8: 64:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:44:54:36:77:AB:38:33:9F:D4:11:DA:06:AE:B3:5C:A8:F3:5B:CD X509v3 Authority Key Identifier: keyid:9E:A7:82:77:48:0C:F2:DA:D6:C9:EB:0A:52:BE:48:DF:7A:B6:67:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nqeCd0gM8trWyesKUr5I33q2Z1o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/cb9493-e834-4f0e-8abb-1a92fb0dc1c7/1/nqeCd0gM8trWyesKUr5I33q2Z1o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/cb9493-e834-4f0e-8abb-1a92fb0dc1c7/1/nqeCd0gM8trWyesKUr5I33q2Z1o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:37:48:c9:01:4f:3c:ea:99:e7:f3:0a:68:48:4d:f5:4d:e1: 8b:0f:26:c3:1b:53:14:77:2e:59:5d:d7:36:b1:ee:d2:6f:0f: f7:9b:d9:3a:e8:52:b6:90:b1:2b:ed:b9:d7:95:09:85:2d:f3: 73:09:01:b7:3a:ec:63:f5:b9:68:7f:a8:4c:dd:09:9a:1b:fa: f0:f9:23:ef:f9:cf:bc:7c:03:bf:5c:c7:91:19:be:6d:8d:15: 34:15:7a:18:d7:8c:17:4b:af:63:54:95:67:dd:15:b6:9a:c9: 30:55:0f:4d:9e:7a:cf:68:eb:14:56:95:37:8c:99:54:c0:a5: 09:50:b5:b4:ae:bd:71:83:3a:5d:31:8f:1c:07:f5:b1:1b:0c: a2:3f:03:d1:62:7b:98:a3:a3:15:f7:25:ae:58:21:8b:08:03: 56:d6:6e:1c:dd:5e:05:86:a2:d6:f2:79:e3:d0:be:4c:de:6a: d0:74:6a:b9:b8:7e:f0:5e:48:ea:31:f1:2c:f3:f0:b5:01:6e: c7:f3:70:75:b8:c7:72:ad:03:49:41:b7:7b:80:09:ba:76:52: 78:52:db:c1:24:c5:94:c5:55:23:50:f1:ec:b1:0a:17:66:d2: da:f7:0e:5a:75:f7:d1:db:fd:62:c2:89:44:ae:da:20:b5:6e: 8b:1d:41:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1grB6f5cNbnVR4jHQYNZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllYTc4Mjc3NDgwY2YyZGFkNmM5ZWIwYTUyYmU0OGRmN2Fi NjY3NWEwHhcNMjUxMjE4MTkwMDQ2WhcNMjUxMjE5MTkwMDQ2WjAzMTEwLwYDVQQD EyhiZjQ0NTQzNjc3YWIzODMzOWZkNDExZGEwNmFlYjM1Y2E4ZjM1YmNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4UTTV5atMhAcW0REEHrVMu9Gyo4 TCh4a3vl/rRdnk5nIqFmqEj3btIpc8aEqC9ek7Wj86ySoRvCPRw3I5wbjtbjdxDp R8wtMzW29KkLesG6USFIhAMce9vturjtSYl/p5d4NLSdkdCvumAUr+BNJEWUXSY1 ydXJhzQRXwJdeKZdKavUpweAyuzF49hEtISg8q111DFZqhsfKyeSJuyCKsICTlQJ YoMGc5oOrWTjitdMv6B8RT7n57Q+Jex9noR0QGlHU7dxfP42KiVpbMYjotYA6/J3 7JDLmj3vh9EdSmPRvjn16UxjEaqRyFqDlh/X58Jkgq0r3u+spsWkSLhkJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL9EVDZ3qzgzn9QR2gaus1yo81vNMB8GA1UdIwQY MBaAFJ6ngndIDPLa1snrClK+SN96tmdaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnFlQ2QwZ004dHJXeWVzS1VyNUkzM3EyWjFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9jYjk0OTMtZTgzNC00ZjBlLThhYmIt MWE5MmZiMGRjMWM3LzEvbnFlQ2QwZ004dHJXeWVzS1VyNUkzM3EyWjFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny9jYjk0OTMtZTgzNC00ZjBlLThhYmItMWE5MmZiMGRjMWM3 LzEvbnFlQ2QwZ004dHJXeWVzS1VyNUkzM3EyWjFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhDdIyQFP POqZ5/MKaEhN9U3hiw8mwxtTFHcuWV3XNrHu0m8P95vZOuhStpCxK+2515UJhS3z cwkBtzrsY/W5aH+oTN0Jmhv68Pkj7/nPvHwDv1zHkRm+bY0VNBV6GNeMF0uvY1SV Z90VtprJMFUPTZ56z2jrFFaVN4yZVMClCVC1tK69cYM6XTGPHAf1sRsMoj8D0WJ7 mKOjFfclrlghiwgDVtZuHN1eBYai1vJ549C+TN5q0HRqubh+8F5I6jHxLPPwtQFu x/NwdbjHcq0DSUG3e4AJunZSeFLbwSTFlMVVI1Dx7LEKF2bS2vcOWnX30dv9YsKJ RK7aILVuix1Bxg== -----END CERTIFICATE-----Generated at Fri Dec 19 01:55:52 2025 by rpki-client