This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.mft File: NOEQtZNi9nPq4ztm7nrqPEAoKU4.mft (raw, json) Hash identifier: YAq+i9AIJ9nbFZ6qZidSfY/yJUSPxhDO74kJ4uOAxI4= Subject key identifier: F5:55:C3:84:9A:ED:08:82:E6:2A:2E:CE:F8:22:40:0E:8D:CE:96:4B Authority key identifier: 34:E1:10:B5:93:62:F6:73:EA:E3:3B:66:EE:7A:EA:3C:40:28:29:4E Certificate issuer: /CN=34e110b59362f673eae33b66ee7aea3c4028294e Certificate serial: 019B0F3763060D0DA6D9DBA9E34CF38FA317 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NOEQtZNi9nPq4ztm7nrqPEAoKU4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.mft Manifest number: 0EE8 Signing time: Thu 11 Dec 2025 21:00:46 +0000 Manifest this update: Thu 11 Dec 2025 21:00:46 +0000 Manifest next update: Fri 12 Dec 2025 21:00:46 +0000 Files and hashes: 1: NOEQtZNi9nPq4ztm7nrqPEAoKU4.crl (hash: Z86clHbCYYA8bsZeGIYA3KEYYwRgNJury+TTrJccVAQ=) 2: XtfUxUGkjCJuklebiN54Yxg8R5M.roa (hash: 6ylTl3fnc+Bg9Pz92d7wJrvdCwc0XcQ4KZdtR4bRI4k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.mft rsync://rpki.ripe.net/repository/DEFAULT/NOEQtZNi9nPq4ztm7nrqPEAoKU4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:37:63:06:0d:0d:a6:d9:db:a9:e3:4c:f3:8f:a3:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34e110b59362f673eae33b66ee7aea3c4028294e Validity Not Before: Dec 11 21:00:46 2025 GMT Not After : Dec 12 21:00:46 2025 GMT Subject: CN=f555c3849aed0882e62a2ecef822400e8dce964b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:d1:39:fb:6d:c6:8f:73:97:10:0d:3b:e8:ef: 2a:f9:af:4d:d9:dc:ca:89:c7:c4:85:8b:7b:5a:39: f7:80:bb:3f:77:36:75:ca:ad:b2:a1:31:3f:68:48: 65:04:b4:c9:c4:ef:f7:f3:73:e3:c6:5e:74:3e:43: 5e:a5:06:0c:5d:88:68:1b:c7:6c:e5:5f:7c:d0:36: e4:a6:39:e7:36:9a:27:29:7b:39:d9:4e:5a:90:a6: e8:0b:cb:4d:ec:96:be:b1:36:db:6f:47:1b:07:cc: b9:26:3b:9e:33:a8:25:35:53:28:f8:ed:b8:22:45: fd:69:5e:dd:47:fa:80:ff:96:4c:22:e8:5e:05:2d: 3c:5d:d2:07:54:1a:b9:54:0a:a9:aa:2f:67:7a:bc: 22:c8:37:60:0f:f1:bc:9d:03:0a:5a:7d:00:e8:92: ff:65:0d:30:3b:df:a6:03:48:08:01:36:f6:c2:7b: c2:aa:6e:b2:1e:3a:76:af:5b:0a:32:d7:0c:5e:82: 80:14:1e:e4:3f:1e:8f:cd:a2:26:da:93:77:d7:76: 4a:45:b3:f3:d9:83:1d:3d:df:95:c2:d4:e3:3f:da: a2:e5:df:6d:7e:e2:0f:63:89:2f:83:71:58:8f:82: 6a:f6:de:96:fd:88:ca:34:e4:dd:0a:29:33:de:5a: fa:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:55:C3:84:9A:ED:08:82:E6:2A:2E:CE:F8:22:40:0E:8D:CE:96:4B X509v3 Authority Key Identifier: keyid:34:E1:10:B5:93:62:F6:73:EA:E3:3B:66:EE:7A:EA:3C:40:28:29:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NOEQtZNi9nPq4ztm7nrqPEAoKU4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:87:c8:b5:4a:a1:b9:2e:4f:0e:b8:11:a1:24:57:9f:fc:57: 7f:30:d7:80:af:a5:29:00:60:18:8e:c9:f3:f6:cf:52:da:1a: a4:ab:a3:8e:85:37:49:20:20:e8:0b:4a:9c:53:c8:3e:f3:0d: cd:bd:3e:0b:09:fb:b7:68:ab:c6:02:42:88:73:76:b6:0c:86: 24:6a:4b:b3:a9:89:ca:c3:74:18:bd:45:67:2e:af:f9:27:63: 07:22:21:ec:8c:03:bb:81:e4:80:46:87:d3:84:95:b4:5d:ad: fa:ad:31:ca:bb:79:34:c9:b8:6d:40:c6:58:18:4f:87:d7:6d: f1:eb:eb:f2:94:5a:99:8e:1b:54:ee:9e:0e:bd:6b:49:98:dd: 7f:d8:ab:b6:79:9e:47:63:ab:2a:7b:a0:c4:fe:ce:76:1c:6f: ee:c5:a6:9b:63:e8:62:b5:fb:33:9e:20:c0:5d:9d:03:a3:79: 21:14:50:6d:37:5b:8a:64:b5:ba:a5:a2:b2:68:59:bb:5f:11: 70:98:07:70:06:51:bc:e6:3a:c6:17:be:04:83:72:bc:75:7b: 68:06:e0:d0:90:2b:48:4f:fe:be:a2:dc:d6:9a:40:f5:e1:75: 44:5f:1b:31:40:f1:90:96:e6:af:c9:bf:17:c9:a3:6a:93:a4: 29:82:75:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPN2MGDQ2m2dup40zzj6MXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0ZTExMGI1OTM2MmY2NzNlYWUzM2I2NmVlN2FlYTNjNDAy ODI5NGUwHhcNMjUxMjExMjEwMDQ2WhcNMjUxMjEyMjEwMDQ2WjAzMTEwLwYDVQQD EyhmNTU1YzM4NDlhZWQwODgyZTYyYTJlY2VmODIyNDAwZThkY2U5NjRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3NE5+23Gj3OXEA076O8q+a9N2dzK icfEhYt7Wjn3gLs/dzZ1yq2yoTE/aEhlBLTJxO/383Pjxl50PkNepQYMXYhoG8ds 5V980DbkpjnnNponKXs52U5akKboC8tN7Ja+sTbbb0cbB8y5JjueM6glNVMo+O24 IkX9aV7dR/qA/5ZMIuheBS08XdIHVBq5VAqpqi9nerwiyDdgD/G8nQMKWn0A6JL/ ZQ0wO9+mA0gIATb2wnvCqm6yHjp2r1sKMtcMXoKAFB7kPx6PzaIm2pN313ZKRbPz 2YMdPd+VwtTjP9qi5d9tfuIPY4kvg3FYj4Jq9t6W/YjKNOTdCikz3lr6uwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPVVw4Sa7QiC5iouzvgiQA6NzpZLMB8GA1UdIwQY MBaAFDThELWTYvZz6uM7Zu566jxAKClOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTk9FUXRaTmk5blBxNHp0bTducnFQRUFvS1U0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8wYmY4ZmItMTYwNC00Y2QxLTlkYTYt MWJiMjdjNWQzOTdlLzEvTk9FUXRaTmk5blBxNHp0bTducnFQRUFvS1U0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy8wYmY4ZmItMTYwNC00Y2QxLTlkYTYtMWJiMjdjNWQzOTdl LzEvTk9FUXRaTmk5blBxNHp0bTducnFQRUFvS1U0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXIfItUqh uS5PDrgRoSRXn/xXfzDXgK+lKQBgGI7J8/bPUtoapKujjoU3SSAg6AtKnFPIPvMN zb0+Cwn7t2irxgJCiHN2tgyGJGpLs6mJysN0GL1FZy6v+SdjByIh7IwDu4HkgEaH 04SVtF2t+q0xyrt5NMm4bUDGWBhPh9dt8evr8pRamY4bVO6eDr1rSZjdf9irtnme R2OrKnugxP7Odhxv7sWmm2PoYrX7M54gwF2dA6N5IRRQbTdbimS1uqWismhZu18R cJgHcAZRvOY6xhe+BINyvHV7aAbg0JArSE/+vqLc1ppA9eF1RF8bMUDxkJbmr8m/ F8mjapOkKYJ1rw== -----END CERTIFICATE-----Generated at Fri Dec 12 01:02:06 2025 by rpki-client