This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/925d4a-f5f4-4299-a829-152a59479e69/1/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.mft File: Nqr6XD8vjkoIP4Hwy4e8eupEiR8.mft (raw, json) Hash identifier: dUom4kQXAkkReedUUU8yQJyc7Sm280ojWlN01unjPSo= Subject key identifier: DE:4E:95:24:97:01:CE:D4:D8:DF:EF:08:6E:27:F8:F5:99:A2:1F:2F Authority key identifier: 36:AA:FA:5C:3F:2F:8E:4A:08:3F:81:F0:CB:87:BC:7A:EA:44:89:1F Certificate issuer: /CN=36aafa5c3f2f8e4a083f81f0cb87bc7aea44891f Certificate serial: 019B47A6D94CC79ADA77052CE2CD73C1A2BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/925d4a-f5f4-4299-a829-152a59479e69/1/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.mft Manifest number: 178C Signing time: Mon 22 Dec 2025 20:01:15 +0000 Manifest this update: Mon 22 Dec 2025 20:01:15 +0000 Manifest next update: Tue 23 Dec 2025 20:01:15 +0000 Files and hashes: 1: Nqr6XD8vjkoIP4Hwy4e8eupEiR8.crl (hash: QxCYVevOyRkWaEdEdMmR+zIEcJdxADUfqxrsLjCbtgA=) 2: Tz8QjBgBmzpa68NzWLRe2iAGU-U.roa (hash: juEtxBf0oAaQHOnDE0wzOzsnnb3wMIZXnN/0qajABas=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/925d4a-f5f4-4299-a829-152a59479e69/1/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/925d4a-f5f4-4299-a829-152a59479e69/1/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.mft rsync://rpki.ripe.net/repository/DEFAULT/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 20:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:a6:d9:4c:c7:9a:da:77:05:2c:e2:cd:73:c1:a2:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36aafa5c3f2f8e4a083f81f0cb87bc7aea44891f Validity Not Before: Dec 22 20:01:15 2025 GMT Not After : Dec 23 20:01:15 2025 GMT Subject: CN=de4e95249701ced4d8dfef086e27f8f599a21f2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ea:07:ab:ce:d6:3e:6d:2a:bf:1a:10:85:aa: c8:6b:fe:d4:cf:4f:ef:31:1d:6a:32:b5:db:bf:d8: 5b:60:25:45:be:af:08:0e:6e:85:9b:b2:f3:2e:9b: 44:9e:f4:65:af:fc:0a:5c:09:10:31:4e:bc:d3:33: 2d:65:97:7b:3e:f3:b3:26:63:fa:6c:7d:6d:fb:ca: 58:ef:93:8b:8c:fa:e8:7a:93:7b:5b:97:79:21:fb: ef:c7:3e:56:f0:be:32:c5:ee:54:eb:dd:99:0f:c3: 69:2e:e5:83:23:68:d2:34:bf:de:54:e0:94:ac:3a: 57:18:14:2c:7e:b7:88:4e:f1:73:a2:6e:e7:84:05: 4f:d7:03:da:e9:b5:a9:a9:d7:87:d8:8b:4c:ed:e3: 76:a5:0c:79:52:be:50:03:23:a3:b4:df:16:aa:09: 69:60:ea:77:05:c6:1c:80:7e:f4:4c:16:5d:1b:9a: e6:82:9f:40:f0:bf:01:87:ec:84:d6:93:69:39:e9: aa:29:dd:d7:b3:78:bf:10:36:22:af:d0:c3:15:68: 40:a1:17:65:3b:d2:91:eb:3e:01:cd:36:71:b6:f6: fb:d0:20:28:64:03:88:91:c3:c2:47:7e:ff:ca:ea: 9b:11:5e:2a:d2:a8:6c:40:99:81:6c:6f:23:4f:19: 83:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:4E:95:24:97:01:CE:D4:D8:DF:EF:08:6E:27:F8:F5:99:A2:1F:2F X509v3 Authority Key Identifier: keyid:36:AA:FA:5C:3F:2F:8E:4A:08:3F:81:F0:CB:87:BC:7A:EA:44:89:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/925d4a-f5f4-4299-a829-152a59479e69/1/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/925d4a-f5f4-4299-a829-152a59479e69/1/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:9e:39:62:1a:aa:99:e0:ad:6a:bc:8e:2b:56:70:1e:40:38: 78:29:b0:0d:f2:58:43:17:c6:ce:bf:b8:23:0c:16:e8:a6:b3: c5:ef:43:79:21:05:28:9f:05:bb:0c:7f:8f:93:18:5c:db:50: 60:d1:09:47:70:a1:c7:d1:7a:15:93:3f:66:c9:25:6d:1f:b6: e1:58:05:3c:a9:c3:1a:22:fc:58:43:22:26:40:d6:51:27:8d: a5:a8:9f:2e:c1:36:1e:45:1b:d4:c2:5a:d0:77:f8:81:62:bc: 31:cc:a8:76:31:8e:f3:17:fb:fb:73:97:db:50:b4:32:51:64: a8:22:9f:a2:70:63:45:d3:39:be:b1:fc:48:43:cb:2e:41:c0: 55:54:2d:8b:d9:34:59:6b:4d:4f:7f:23:ca:7d:e4:2b:95:8d: 9f:a2:7a:23:e0:c2:14:ab:45:c0:cb:78:05:8e:40:1c:e4:69: a6:70:84:48:13:5e:5d:ea:fa:db:bc:5b:cb:b0:a2:d8:b8:0d: 1b:7a:3f:09:63:c1:6b:2b:1b:53:8e:42:c4:e0:11:9d:2b:39: b2:74:a3:3d:cf:25:79:fa:93:c8:69:ee:3c:12:77:1d:b8:ac: df:f9:98:f1:61:c4:3a:0a:80:51:21:0b:ff:4d:8b:e1:27:11: 86:57:d4:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHptlMx5radwUs4s1zwaK+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YWFmYTVjM2YyZjhlNGEwODNmODFmMGNiODdiYzdhZWE0 NDg5MWYwHhcNMjUxMjIyMjAwMTE1WhcNMjUxMjIzMjAwMTE1WjAzMTEwLwYDVQQD EyhkZTRlOTUyNDk3MDFjZWQ0ZDhkZmVmMDg2ZTI3ZjhmNTk5YTIxZjJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+oHq87WPm0qvxoQharIa/7Uz0/v MR1qMrXbv9hbYCVFvq8IDm6Fm7LzLptEnvRlr/wKXAkQMU680zMtZZd7PvOzJmP6 bH1t+8pY75OLjProepN7W5d5Ifvvxz5W8L4yxe5U692ZD8NpLuWDI2jSNL/eVOCU rDpXGBQsfreITvFzom7nhAVP1wPa6bWpqdeH2ItM7eN2pQx5Ur5QAyOjtN8Wqglp YOp3BcYcgH70TBZdG5rmgp9A8L8Bh+yE1pNpOemqKd3Xs3i/EDYir9DDFWhAoRdl O9KR6z4BzTZxtvb70CAoZAOIkcPCR37/yuqbEV4q0qhsQJmBbG8jTxmD7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN5OlSSXAc7U2N/vCG4n+PWZoh8vMB8GA1UdIwQY MBaAFDaq+lw/L45KCD+B8MuHvHrqRIkfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnFyNlhEOHZqa29JUDRId3k0ZThldXBFaVI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC85MjVkNGEtZjVmNC00Mjk5LWE4Mjkt MTUyYTU5NDc5ZTY5LzEvTnFyNlhEOHZqa29JUDRId3k0ZThldXBFaVI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC85MjVkNGEtZjVmNC00Mjk5LWE4MjktMTUyYTU5NDc5ZTY5 LzEvTnFyNlhEOHZqa29JUDRId3k0ZThldXBFaVI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl545Yhqq meCtaryOK1ZwHkA4eCmwDfJYQxfGzr+4IwwW6Kazxe9DeSEFKJ8Fuwx/j5MYXNtQ YNEJR3Chx9F6FZM/ZsklbR+24VgFPKnDGiL8WEMiJkDWUSeNpaifLsE2HkUb1MJa 0Hf4gWK8McyodjGO8xf7+3OX21C0MlFkqCKfonBjRdM5vrH8SEPLLkHAVVQti9k0 WWtNT38jyn3kK5WNn6J6I+DCFKtFwMt4BY5AHORppnCESBNeXer627xby7Ci2LgN G3o/CWPBaysbU45CxOARnSs5snSjPc8lefqTyGnuPBJ3Hbis3/mY8WHEOgqAUSEL /02L4ScRhlfUaA== -----END CERTIFICATE-----Generated at Tue Dec 23 02:06:52 2025 by rpki-client