This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft File: 1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft (raw, json) Hash identifier: Dye+Lz2j2bor9ioMZY+WTdwH6S7N905F9k3xTGl63DA= Subject key identifier: F0:85:B3:2C:B9:71:DC:D1:D4:BF:98:BB:35:2D:50:53:AB:8A:51:B7 Authority key identifier: F8:D4:0A:2A:13:89:F5:4C:23:E7:87:1B:5A:E8:7F:65:3F:65:90:08 Certificate issuer: /CN=f8d40a2a1389f54c23e7871b5ae87f653f659008 Certificate serial: 019B38A0FC6BACDD70737DB18AF4A1791D61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft Manifest number: 0F7B Signing time: Fri 19 Dec 2025 22:00:33 +0000 Manifest this update: Fri 19 Dec 2025 22:00:33 +0000 Manifest next update: Sat 20 Dec 2025 22:00:33 +0000 Files and hashes: 1: 1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.crl (hash: 6DANpWyl96WJKF6UJojtrXvxqRzDbpxeaq7F8ExFeyo=) 2: C3CtZTgV6FhDx8jPsObo2L6FO8k.roa (hash: NvkBnoMHiuCQDQqP9VPXNRtC0nvpW5lhq9MDa3+jS9A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.crl rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft rsync://rpki.ripe.net/repository/DEFAULT/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a0:fc:6b:ac:dd:70:73:7d:b1:8a:f4:a1:79:1d:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8d40a2a1389f54c23e7871b5ae87f653f659008 Validity Not Before: Dec 19 22:00:33 2025 GMT Not After : Dec 20 22:00:33 2025 GMT Subject: CN=f085b32cb971dcd1d4bf98bb352d5053ab8a51b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:13:df:90:7f:91:e4:b3:2c:96:f7:a4:38:ce: a5:35:57:19:a2:98:e5:16:55:c5:82:89:62:7b:17: 9d:85:13:21:72:b0:fc:8e:36:d2:22:3e:78:f5:67: a0:a6:56:a5:0c:40:31:e9:e2:7f:55:c4:bf:9a:26: bf:76:33:ea:62:f2:46:cc:78:0e:29:02:fb:b2:6d: 7e:4b:2b:55:6c:b9:bc:22:88:ca:e5:ed:b4:7c:ff: 43:7c:01:e8:aa:8a:01:ba:1a:e5:90:cf:30:a8:68: 22:0a:53:b8:e7:f1:00:46:45:ec:8d:ec:aa:4c:8c: 93:ad:39:ce:74:17:a0:8b:2a:1d:4a:3a:f6:d0:54: 6b:e1:38:f1:51:be:5b:a7:3b:76:a6:88:26:cc:77: c7:9a:b2:82:4b:ed:30:8b:06:e0:f7:25:c5:c2:f5: d3:70:39:b8:5a:b7:5a:e9:07:3a:a8:2a:8e:b5:88: 68:e5:15:22:75:a9:85:43:d3:18:61:07:fe:84:ab: 56:fa:af:e5:f7:eb:4e:10:96:22:d6:81:1c:a1:65: 05:73:70:55:30:7b:19:cb:36:43:5f:bb:57:fa:b7: b0:d8:c3:27:3e:ff:97:49:83:bd:a5:2e:42:92:ea: 47:e0:3c:91:2e:7f:04:1d:46:2c:42:e0:aa:1c:e9: b6:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:85:B3:2C:B9:71:DC:D1:D4:BF:98:BB:35:2D:50:53:AB:8A:51:B7 X509v3 Authority Key Identifier: keyid:F8:D4:0A:2A:13:89:F5:4C:23:E7:87:1B:5A:E8:7F:65:3F:65:90:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:3d:df:10:be:9c:51:18:c0:6d:5b:63:da:17:dc:7f:32:e5: 99:d8:99:a6:cb:3f:3d:95:b1:62:95:19:1e:86:a5:cf:56:f3: 31:1b:3a:b5:63:0e:f8:f5:5e:ba:b7:7e:90:d2:5c:99:ac:62: 53:93:18:d2:01:68:4f:a8:60:33:88:fb:df:fb:62:22:76:90: e5:87:83:40:92:4b:8c:ab:d2:f7:9c:14:97:a4:48:4a:b6:a2: 23:27:82:f7:50:2c:56:b7:cb:ff:24:57:66:d0:1a:4d:77:dc: d4:43:34:ff:79:85:08:a1:5e:34:fe:85:b4:52:9d:a5:16:ac: 07:6d:ee:c2:86:03:e2:88:a6:63:13:79:ce:56:d7:91:a8:bf: 50:f5:0a:07:1e:91:73:07:39:65:15:e9:d2:80:1f:40:7a:4d: d6:9b:4c:2b:d0:13:d4:7d:a3:2d:6b:92:b4:a9:13:a8:b5:15: af:05:b8:23:69:6a:68:9a:3a:e5:d6:09:9d:2b:0d:6d:20:1d: 94:c1:b6:f6:1d:55:9b:cc:1c:43:15:c4:f2:9c:0c:c9:96:0e: 05:41:0e:83:63:86:fb:36:7e:5c:04:cc:1a:b6:26:72:d2:c4: 0b:ca:68:b4:dd:e9:14:ab:41:01:51:b0:1e:88:d0:75:7b:2f: 38:0f:08:bd -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZs4oPxrrN1wc32xivSheR1hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ZDQwYTJhMTM4OWY1NGMyM2U3ODcxYjVhZTg3ZjY1M2Y2 NTkwMDgwHhcNMjUxMjE5MjIwMDMzWhcNMjUxMjIwMjIwMDMzWjAzMTEwLwYDVQQD EyhmMDg1YjMyY2I5NzFkY2QxZDRiZjk4YmIzNTJkNTA1M2FiOGE1MWI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRPfkH+R5LMslvekOM6lNVcZopjl FlXFgoliexedhRMhcrD8jjbSIj549WegplalDEAx6eJ/VcS/mia/djPqYvJGzHgO KQL7sm1+SytVbLm8IojK5e20fP9DfAHoqooBuhrlkM8wqGgiClO45/EARkXsjeyq TIyTrTnOdBegiyodSjr20FRr4TjxUb5bpzt2pogmzHfHmrKCS+0wiwbg9yXFwvXT cDm4Wrda6Qc6qCqOtYho5RUidamFQ9MYYQf+hKtW+q/l9+tOEJYi1oEcoWUFc3BV MHsZyzZDX7tX+rew2MMnPv+XSYO9pS5CkupH4DyRLn8EHUYsQuCqHOm2dwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFPCFsyy5cdzR1L+YuzUtUFOrilG3MB8GA1UdIwQY MBaAFPjUCioTifVMI+eHG1rof2U/ZZAIMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1OUUtLaE9KOVV3ajU0Y2JXdWhfWlQ5bGtBZy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDQvN2JjNWYwLWUyMWItNDIzZS1iZTFj LTJkNDYwZTA3MjZmYS8xLzEtTlFLS2hPSjlVd2o1NGNiV3VoX1pUOWxrQWcubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzA0LzdiYzVmMC1lMjFiLTQyM2UtYmUxYy0yZDQ2MGUwNzI2 ZmEvMS8xLU5RS0toT0o5VXdqNTRjYld1aF9aVDlsa0FnLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhj3f EL6cURjAbVtj2hfcfzLlmdiZpss/PZWxYpUZHoalz1bzMRs6tWMO+PVeurd+kNJc maxiU5MY0gFoT6hgM4j73/tiInaQ5YeDQJJLjKvS95wUl6RISraiIyeC91AsVrfL /yRXZtAaTXfc1EM0/3mFCKFeNP6FtFKdpRasB23uwoYD4oimYxN5zlbXkai/UPUK Bx6Rcwc5ZRXp0oAfQHpN1ptMK9AT1H2jLWuStKkTqLUVrwW4I2lqaJo65dYJnSsN bSAdlMG29h1Vm8wcQxXE8pwMyZYOBUEOg2OG+zZ+XATMGrYmctLEC8potN3pFKtB AVGwHojQdXsvOA8IvQ== -----END CERTIFICATE-----Generated at Sat Dec 20 01:49:10 2025 by rpki-client