This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft File: nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft (raw, json) Hash identifier: J+qQ2Ne5g06mmMbBfq3A4KKbeXeGQmG7MCNEBMgxYEg= Subject key identifier: 94:0B:F5:8A:E4:26:D2:19:BB:6D:B7:26:BB:3F:A9:0A:E8:DF:3A:F3 Authority key identifier: 9D:06:6C:B8:48:8D:AE:7E:42:34:AA:7C:89:24:30:DA:D1:1F:E5:B1 Certificate issuer: /CN=9d066cb8488dae7e4234aa7c892430dad11fe5b1 Certificate serial: 019B0D80C8A0A696C01EBF53EBC1CFBA2D5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft Manifest number: 1781 Signing time: Thu 11 Dec 2025 13:01:42 +0000 Manifest this update: Thu 11 Dec 2025 13:01:42 +0000 Manifest next update: Fri 12 Dec 2025 13:01:42 +0000 Files and hashes: 1: XTN0FV8C4mD4Sc_8vyQmb4SgIPI.roa (hash: BGUozoIWxfNXYZv8C7K/va/x94laPWjXcWXXKyL1Cm4=) 2: ctIdcbAxzlgE61iaJYeLZI-atK4.roa (hash: xe/X44jbVuhNTWtEZLlddMSK0Nf/sdgGvPMIEXHpN6g=) 3: nQZsuEiNrn5CNKp8iSQw2tEf5bE.crl (hash: CxdLLBcN8eFeJiHvDhoMf2CWLKbGSzE1r8PmdRKRycs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.crl rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 13:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:80:c8:a0:a6:96:c0:1e:bf:53:eb:c1:cf:ba:2d:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d066cb8488dae7e4234aa7c892430dad11fe5b1 Validity Not Before: Dec 11 13:01:42 2025 GMT Not After : Dec 12 13:01:42 2025 GMT Subject: CN=940bf58ae426d219bb6db726bb3fa90ae8df3af3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:66:4c:62:f4:5b:84:ed:14:a1:b5:cb:7e:e0: a6:ea:0e:fd:3e:00:38:1c:e8:d9:03:09:ef:d0:58: 5a:57:d2:87:a5:9e:8a:af:d2:cc:ac:c0:24:6c:a6: 51:31:2d:24:ea:fd:62:61:59:e4:d3:0d:07:62:3c: 41:a5:c7:ee:04:d4:bd:a3:63:3a:e0:fe:be:b3:51: 82:19:b2:f2:aa:cb:07:63:de:de:cc:80:d3:de:42: d2:44:71:61:69:00:8c:8c:7d:68:7d:69:30:a7:7a: f2:9f:f7:75:02:d3:30:d6:70:f1:21:bf:02:99:e4: af:d5:21:79:4f:fd:b9:73:c3:b4:da:7c:4e:84:21: cc:3d:ff:cf:3c:0f:e1:ee:54:c3:7c:8c:b6:12:88: ea:d4:bd:dd:20:fb:0f:f0:12:40:bf:8c:35:97:fb: f7:59:27:f3:9c:6d:41:f1:0d:51:48:61:03:f1:80: d4:7a:c1:8e:33:c4:db:f2:10:ec:f8:6a:43:3c:ab: a8:15:ed:2c:73:ed:c1:d6:ae:27:e7:08:da:87:4b: a9:08:72:dd:81:9d:dd:52:9f:46:1a:45:3f:17:69: 5e:1b:6a:41:b0:34:39:0d:08:44:5c:18:d4:0d:12: d7:16:db:32:11:96:1b:af:ea:47:63:e9:05:28:e5: 56:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:0B:F5:8A:E4:26:D2:19:BB:6D:B7:26:BB:3F:A9:0A:E8:DF:3A:F3 X509v3 Authority Key Identifier: keyid:9D:06:6C:B8:48:8D:AE:7E:42:34:AA:7C:89:24:30:DA:D1:1F:E5:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:f6:c7:6e:a5:e5:61:64:43:56:8c:cb:e9:ce:95:2f:67:c3: 32:6b:4f:48:e5:a2:5e:d1:51:0b:64:18:f1:67:38:84:a6:a1: 85:1e:ec:82:98:c0:f6:e0:a3:fd:fa:f3:7e:1d:1a:f5:b9:0e: d4:fb:52:e4:4b:26:ba:55:22:80:d2:f2:e7:ba:9d:11:ea:02: 1b:53:69:a6:8f:2f:d2:d9:da:c1:9b:36:69:33:39:a7:f5:ef: 9e:d3:f9:cc:78:e1:ad:10:30:0a:35:8e:e2:8c:1c:0b:08:72: 30:61:94:5b:9f:d8:ad:db:48:17:0d:bb:c8:d4:1c:b4:3f:35: a9:68:f3:ac:5b:e5:49:d8:59:5e:aa:4c:d1:cd:ca:f6:1b:7a: 39:cd:d8:82:de:0c:4e:f7:cd:88:06:4a:61:8b:70:fd:26:ff: 32:11:cb:46:0b:b6:97:1e:b8:2f:af:8b:c6:67:d4:b5:15:40: 57:be:5b:3f:58:ca:f3:37:05:6a:00:e9:83:23:74:e5:a2:16: f6:d5:0f:9b:8a:bb:5f:1f:47:fb:fc:52:6e:95:94:f0:f6:d4: 15:4e:a6:81:d4:d6:fe:be:0b:82:47:7a:26:c8:f1:ee:d7:73: 97:5b:88:46:40:7f:b7:a9:dc:ef:91:87:1b:5a:dd:94:ee:0f: 3f:ac:96:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsNgMigppbAHr9T68HPui1fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMDY2Y2I4NDg4ZGFlN2U0MjM0YWE3Yzg5MjQzMGRhZDEx ZmU1YjEwHhcNMjUxMjExMTMwMTQyWhcNMjUxMjEyMTMwMTQyWjAzMTEwLwYDVQQD Eyg5NDBiZjU4YWU0MjZkMjE5YmI2ZGI3MjZiYjNmYTkwYWU4ZGYzYWYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2GZMYvRbhO0UobXLfuCm6g79PgA4 HOjZAwnv0FhaV9KHpZ6Kr9LMrMAkbKZRMS0k6v1iYVnk0w0HYjxBpcfuBNS9o2M6 4P6+s1GCGbLyqssHY97ezIDT3kLSRHFhaQCMjH1ofWkwp3ryn/d1AtMw1nDxIb8C meSv1SF5T/25c8O02nxOhCHMPf/PPA/h7lTDfIy2Eojq1L3dIPsP8BJAv4w1l/v3 WSfznG1B8Q1RSGED8YDUesGOM8Tb8hDs+GpDPKuoFe0sc+3B1q4n5wjah0upCHLd gZ3dUp9GGkU/F2leG2pBsDQ5DQhEXBjUDRLXFtsyEZYbr+pHY+kFKOVWzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJQL9YrkJtIZu223Jrs/qQro3zrzMB8GA1UdIwQY MBaAFJ0GbLhIja5+QjSqfIkkMNrRH+WxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblFac3VFaU5ybjVDTktwOGlTUXcydEVmNWJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9kMGQyZmQtYWE5MC00MjA3LTkxMDQt M2VmMDJkNTE0MGI3LzEvblFac3VFaU5ybjVDTktwOGlTUXcydEVmNWJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC9kMGQyZmQtYWE5MC00MjA3LTkxMDQtM2VmMDJkNTE0MGI3 LzEvblFac3VFaU5ybjVDTktwOGlTUXcydEVmNWJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAePbHbqXl YWRDVozL6c6VL2fDMmtPSOWiXtFRC2QY8Wc4hKahhR7sgpjA9uCj/frzfh0a9bkO 1PtS5EsmulUigNLy57qdEeoCG1Nppo8v0tnawZs2aTM5p/XvntP5zHjhrRAwCjWO 4owcCwhyMGGUW5/YrdtIFw27yNQctD81qWjzrFvlSdhZXqpM0c3K9ht6Oc3Ygt4M TvfNiAZKYYtw/Sb/MhHLRgu2lx64L6+LxmfUtRVAV75bP1jK8zcFagDpgyN05aIW 9tUPm4q7Xx9H+/xSbpWU8PbUFU6mgdTW/r4Lgkd6Jsjx7tdzl1uIRkB/t6nc75GH G1rdlO4PP6yW+Q== -----END CERTIFICATE-----Generated at Thu Dec 11 23:57:27 2025 by rpki-client