This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft File: NrQT5TbZk1PwsFDudG_90k7bWTA.mft (raw, json) Hash identifier: rQzef+2Or1jNtYGhPbDsfy9rc4Y1LWNRDWNz5e2wILY= Subject key identifier: 9B:52:48:2B:BF:1F:F1:CB:19:9E:28:F1:F3:C6:56:E9:C6:81:BA:C8 Authority key identifier: 36:B4:13:E5:36:D9:93:53:F0:B0:50:EE:74:6F:FD:D2:4E:DB:59:30 Certificate issuer: /CN=36b413e536d99353f0b050ee746ffdd24edb5930 Certificate serial: 019AF01A69159F5F10CEA0193D243F905A8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NrQT5TbZk1PwsFDudG_90k7bWTA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft Manifest number: 1769 Signing time: Fri 05 Dec 2025 20:00:53 +0000 Manifest this update: Fri 05 Dec 2025 20:00:53 +0000 Manifest next update: Sat 06 Dec 2025 20:00:53 +0000 Files and hashes: 1: NrQT5TbZk1PwsFDudG_90k7bWTA.crl (hash: 0xI6PxzPxxNr7hgBv1fTYzzHjnpT4PuK+kuIJbqo7wE=) 2: kkI0VJ623ZMpCKAjZsrxAXz6PWk.roa (hash: wTnvsnp3yJHDHnSTINs0tfqN/DigtBsLrefQ3ls6zYA=) 3: uucUmYI6JsmVzUOd6RM4u1Uvm6c.roa (hash: FHR3fbJwd259J3Jj1zln57qgHYJEZGfouW6MVY+3Iko=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft rsync://rpki.ripe.net/repository/DEFAULT/NrQT5TbZk1PwsFDudG_90k7bWTA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 17:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:1a:69:15:9f:5f:10:ce:a0:19:3d:24:3f:90:5a:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36b413e536d99353f0b050ee746ffdd24edb5930 Validity Not Before: Dec 5 20:00:53 2025 GMT Not After : Dec 6 20:00:53 2025 GMT Subject: CN=9b52482bbf1ff1cb199e28f1f3c656e9c681bac8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e2:4e:c5:66:3d:4f:71:0d:fb:87:de:12:65: 51:37:07:eb:a2:05:7f:3b:0b:97:92:58:4b:cb:cc: 05:86:83:ce:0b:d5:5f:56:ba:e1:36:34:76:90:89: 6f:f5:f8:c0:17:4e:b9:77:6f:55:c2:66:c5:92:3d: 42:58:1a:0d:c6:c7:4f:95:21:4f:ea:78:a1:3c:c1: 10:51:1c:de:93:d8:2e:0e:1e:f7:a8:0a:df:8d:04: 5a:98:9a:f0:9b:89:51:82:3d:80:47:ea:6b:d5:20: 9d:16:9a:7d:a9:d1:a4:26:48:0b:78:7f:da:03:0f: ff:3c:6e:7d:a9:a9:25:12:3c:54:6b:f4:ee:3a:de: de:54:12:e2:5a:8a:fd:a9:a9:b3:5c:9d:ad:28:fa: 66:ec:32:f0:aa:a4:92:21:f2:9f:7a:00:27:cf:61: 96:b4:c8:df:42:3c:4e:59:fc:85:0a:08:16:b6:48: cc:5a:6b:b4:06:03:b1:c2:51:59:ab:c9:ed:8a:42: 2d:56:f2:22:91:43:ad:cf:35:28:86:cc:53:08:ff: 27:e2:6b:2f:89:e0:92:28:43:5a:5c:42:1c:df:27: ef:f7:07:80:cd:86:43:de:77:5c:0e:aa:0c:5f:a8: 60:d3:85:fe:72:6f:e6:cc:d6:ed:58:d3:8d:94:d9: 81:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:52:48:2B:BF:1F:F1:CB:19:9E:28:F1:F3:C6:56:E9:C6:81:BA:C8 X509v3 Authority Key Identifier: keyid:36:B4:13:E5:36:D9:93:53:F0:B0:50:EE:74:6F:FD:D2:4E:DB:59:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NrQT5TbZk1PwsFDudG_90k7bWTA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d0:04:e8:41:d2:5f:43:fa:a0:9e:10:ac:a8:f0:77:00:66:ea: ae:11:9a:bb:85:e7:9f:e9:d2:ff:15:fe:b0:8a:8b:97:a9:da: 63:80:af:04:41:c8:d5:49:6b:96:2b:0e:12:20:9f:c4:a8:d0: 09:f4:69:1e:89:69:65:4d:90:ec:b0:cd:85:66:5d:73:e9:82: 24:12:5d:19:51:65:49:22:fb:7f:9c:3c:25:ea:bd:aa:91:23: 66:8e:b7:d4:ec:e3:65:c8:69:a9:4e:f6:aa:c5:35:16:6b:ab: 0e:3a:ec:73:e3:ff:b1:f6:f4:39:3c:48:2e:c9:58:93:f1:69: b0:ee:c0:e7:6b:8a:88:8c:09:41:a1:4e:95:4b:5a:c2:2d:77: a8:21:3b:ad:eb:83:2f:8c:bc:3d:18:6c:92:7a:42:a3:f6:e2: 2e:b9:76:6b:f3:05:6c:17:b0:cc:a4:a5:f0:53:d9:1a:73:47: 0a:23:15:e0:fb:fc:33:1b:e8:3e:7c:7d:6e:73:40:94:2e:52: f7:62:42:0e:ca:b6:f6:82:9a:7c:00:91:6c:4c:87:30:95:77: d9:c1:12:5b:91:1c:1c:55:84:56:e8:c7:a0:4f:50:9c:be:12: 0a:e3:30:36:0f:73:91:3f:73:d6:f5:56:df:72:88:0f:f5:31: 37:75:13:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwGmkVn18QzqAZPSQ/kFqLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YjQxM2U1MzZkOTkzNTNmMGIwNTBlZTc0NmZmZGQyNGVk YjU5MzAwHhcNMjUxMjA1MjAwMDUzWhcNMjUxMjA2MjAwMDUzWjAzMTEwLwYDVQQD Eyg5YjUyNDgyYmJmMWZmMWNiMTk5ZTI4ZjFmM2M2NTZlOWM2ODFiYWM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOJOxWY9T3EN+4feEmVRNwfrogV/ OwuXklhLy8wFhoPOC9VfVrrhNjR2kIlv9fjAF065d29VwmbFkj1CWBoNxsdPlSFP 6nihPMEQURzek9guDh73qArfjQRamJrwm4lRgj2AR+pr1SCdFpp9qdGkJkgLeH/a Aw//PG59qaklEjxUa/TuOt7eVBLiWor9qamzXJ2tKPpm7DLwqqSSIfKfegAnz2GW tMjfQjxOWfyFCggWtkjMWmu0BgOxwlFZq8ntikItVvIikUOtzzUohsxTCP8n4msv ieCSKENaXEIc3yfv9weAzYZD3ndcDqoMX6hg04X+cm/mzNbtWNONlNmBYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJtSSCu/H/HLGZ4o8fPGVunGgbrIMB8GA1UdIwQY MBaAFDa0E+U22ZNT8LBQ7nRv/dJO21kwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnJRVDVUYlprMVB3c0ZEdWRHXzkwazdiV1RBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9lNjYyOTYtMDQ3OS00YzUyLTljZWEt YTFmNTczZDA2OWRhLzEvTnJRVDVUYlprMVB3c0ZEdWRHXzkwazdiV1RBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi9lNjYyOTYtMDQ3OS00YzUyLTljZWEtYTFmNTczZDA2OWRh LzEvTnJRVDVUYlprMVB3c0ZEdWRHXzkwazdiV1RBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0AToQdJf Q/qgnhCsqPB3AGbqrhGau4Xnn+nS/xX+sIqLl6naY4CvBEHI1UlrlisOEiCfxKjQ CfRpHolpZU2Q7LDNhWZdc+mCJBJdGVFlSSL7f5w8Jeq9qpEjZo631OzjZchpqU72 qsU1FmurDjrsc+P/sfb0OTxILslYk/FpsO7A52uKiIwJQaFOlUtawi13qCE7reuD L4y8PRhsknpCo/biLrl2a/MFbBewzKSl8FPZGnNHCiMV4Pv8MxvoPnx9bnNAlC5S 92JCDsq29oKafACRbEyHMJV32cESW5EcHFWEVujHoE9QnL4SCuMwNg9zkT9z1vVW 33KID/UxN3UT5w== -----END CERTIFICATE-----Generated at Fri Dec 5 23:02:17 2025 by rpki-client