This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft File: 1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft (raw, json) Hash identifier: TFS33W+/g2DG+NXG3MQYZWVMBqD+sDfsUZs3QPo7h5Y= Subject key identifier: 5F:5B:3A:B3:2F:56:4D:EF:28:47:B7:AB:E8:BA:53:11:F8:6D:C9:F7 Authority key identifier: F8:D4:0A:2A:13:89:F5:4C:23:E7:87:1B:5A:E8:7F:65:3F:65:90:08 Certificate issuer: /CN=f8d40a2a1389f54c23e7871b5ae87f653f659008 Certificate serial: 019B1013D2972EA695DD2CD6F6C97E32528C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft Manifest number: 0F66 Signing time: Fri 12 Dec 2025 01:01:32 +0000 Manifest this update: Fri 12 Dec 2025 01:01:32 +0000 Manifest next update: Sat 13 Dec 2025 01:01:32 +0000 Files and hashes: 1: 1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.crl (hash: W02AhX7sDcdBun2ih45HyGypN9QNVzYjcyalDj+86lc=) 2: C3CtZTgV6FhDx8jPsObo2L6FO8k.roa (hash: NvkBnoMHiuCQDQqP9VPXNRtC0nvpW5lhq9MDa3+jS9A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.crl rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft rsync://rpki.ripe.net/repository/DEFAULT/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:13:d2:97:2e:a6:95:dd:2c:d6:f6:c9:7e:32:52:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8d40a2a1389f54c23e7871b5ae87f653f659008 Validity Not Before: Dec 12 01:01:32 2025 GMT Not After : Dec 13 01:01:32 2025 GMT Subject: CN=5f5b3ab32f564def2847b7abe8ba5311f86dc9f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:39:2e:21:c2:92:5d:31:77:c3:22:51:a8:c4: 9c:d1:f1:6d:87:04:a6:fa:63:c6:4c:d1:25:e5:64: 69:31:4b:8f:ee:3d:e3:34:7e:df:65:64:37:9b:25: 23:c9:54:cd:2c:53:a5:36:16:6e:a9:03:5d:1e:80: 15:8c:5f:88:66:d2:bc:a5:91:58:ac:3b:03:b0:ee: e2:1b:04:21:a4:bd:24:ca:6d:bf:d5:20:47:ed:a6: 68:72:d7:9b:a6:61:ab:c5:77:2b:c1:a0:09:d6:d1: c6:ed:56:41:28:c3:eb:d0:6b:3f:d2:e4:2b:24:19: f9:b1:a2:b0:cd:b8:d9:db:f6:41:69:8f:72:4e:6b: 5f:00:f8:53:5b:3f:ab:f7:de:42:d1:5a:e7:3c:af: 95:e0:00:e5:8c:16:cf:f3:4c:16:89:cb:a9:7c:ac: ed:9a:a4:bd:a8:c1:a9:fc:0f:c3:2e:f1:d7:a5:fd: f8:fa:09:05:46:20:e4:31:0d:a5:3b:23:0f:99:3e: 07:76:32:9b:5a:d4:9d:2b:95:1e:7c:9c:2b:3a:b2: f9:8e:3f:3c:6c:b3:21:4d:fe:5a:b3:15:05:f0:fa: 5d:3d:62:77:66:a7:05:f2:38:d1:1c:d2:86:1e:f7: 6c:3d:f8:e9:bc:6e:a0:17:4a:3b:f6:fb:13:37:4d: 00:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:5B:3A:B3:2F:56:4D:EF:28:47:B7:AB:E8:BA:53:11:F8:6D:C9:F7 X509v3 Authority Key Identifier: keyid:F8:D4:0A:2A:13:89:F5:4C:23:E7:87:1B:5A:E8:7F:65:3F:65:90:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:e5:62:27:95:a1:9f:71:1d:ce:54:d5:07:6d:6b:61:98:be: 91:a4:e8:61:d9:a9:23:ad:69:d8:0a:cd:f8:5c:79:04:5a:3d: a8:78:4a:24:e3:ee:20:56:4c:ab:f1:60:e3:3c:f9:9c:09:4c: c9:cb:99:a0:4d:84:ea:49:18:f5:55:89:cd:9d:9b:61:09:06: d1:ba:ae:e6:2c:48:65:aa:be:c2:8c:7a:a1:c9:0f:2a:80:50: 84:80:3f:99:6d:f8:d2:49:7e:d1:e8:da:e3:5c:4b:dc:4a:f8: 4c:dc:ed:44:74:4a:e3:4a:db:a6:3c:0c:8d:b6:20:c5:b4:4f: 82:68:50:c2:7b:a8:40:e8:2f:9c:b3:aa:21:d1:cb:5e:bf:85: b7:f7:31:81:0d:c1:80:cb:00:0c:01:7e:ce:f9:61:0c:c3:8f: f6:ed:1d:19:a8:11:6d:ed:2d:7f:84:76:bf:8f:34:f8:e5:54: 28:72:fe:26:e3:4d:82:02:1e:95:e8:b5:78:6d:49:66:5b:d8: 31:8b:5d:94:f5:b0:af:51:3a:16:09:be:6c:70:55:6c:72:c1: 21:0d:ec:df:f1:2c:ad:62:cf:b2:53:fa:56:26:2d:36:f3:d5: 9d:af:a2:59:49:92:72:65:f9:5a:3b:a3:4c:ef:50:a0:f2:a6: 2b:e0:3b:04 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZsQE9KXLqaV3SzW9sl+MlKMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ZDQwYTJhMTM4OWY1NGMyM2U3ODcxYjVhZTg3ZjY1M2Y2 NTkwMDgwHhcNMjUxMjEyMDEwMTMyWhcNMjUxMjEzMDEwMTMyWjAzMTEwLwYDVQQD Eyg1ZjViM2FiMzJmNTY0ZGVmMjg0N2I3YWJlOGJhNTMxMWY4NmRjOWY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzkuIcKSXTF3wyJRqMSc0fFthwSm +mPGTNEl5WRpMUuP7j3jNH7fZWQ3myUjyVTNLFOlNhZuqQNdHoAVjF+IZtK8pZFY rDsDsO7iGwQhpL0kym2/1SBH7aZoctebpmGrxXcrwaAJ1tHG7VZBKMPr0Gs/0uQr JBn5saKwzbjZ2/ZBaY9yTmtfAPhTWz+r995C0VrnPK+V4ADljBbP80wWicupfKzt mqS9qMGp/A/DLvHXpf34+gkFRiDkMQ2lOyMPmT4HdjKbWtSdK5UefJwrOrL5jj88 bLMhTf5asxUF8PpdPWJ3ZqcF8jjRHNKGHvdsPfjpvG6gF0o79vsTN00ARQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFF9bOrMvVk3vKEe3q+i6UxH4bcn3MB8GA1UdIwQY MBaAFPjUCioTifVMI+eHG1rof2U/ZZAIMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1OUUtLaE9KOVV3ajU0Y2JXdWhfWlQ5bGtBZy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDQvN2JjNWYwLWUyMWItNDIzZS1iZTFj LTJkNDYwZTA3MjZmYS8xLzEtTlFLS2hPSjlVd2o1NGNiV3VoX1pUOWxrQWcubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzA0LzdiYzVmMC1lMjFiLTQyM2UtYmUxYy0yZDQ2MGUwNzI2 ZmEvMS8xLU5RS0toT0o5VXdqNTRjYld1aF9aVDlsa0FnLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi+Vi J5Whn3EdzlTVB21rYZi+kaToYdmpI61p2ArN+Fx5BFo9qHhKJOPuIFZMq/Fg4zz5 nAlMycuZoE2E6kkY9VWJzZ2bYQkG0bqu5ixIZaq+wox6ockPKoBQhIA/mW340kl+ 0eja41xL3Er4TNztRHRK40rbpjwMjbYgxbRPgmhQwnuoQOgvnLOqIdHLXr+Ft/cx gQ3BgMsADAF+zvlhDMOP9u0dGagRbe0tf4R2v480+OVUKHL+JuNNggIelei1eG1J ZlvYMYtdlPWwr1E6Fgm+bHBVbHLBIQ3s3/EsrWLPslP6ViYtNvPVna+iWUmScmX5 WjujTO9QoPKmK+A7BA== -----END CERTIFICATE-----Generated at Fri Dec 12 05:34:24 2025 by rpki-client