This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/NmqdVCKXV3s3qgxCMZWv4qmOE10.mft File: NmqdVCKXV3s3qgxCMZWv4qmOE10.mft (raw, json) Hash identifier: a4OY9JPiGV2VDr38pKFmbXDfJi3SUIEfeN0PVWyoklo= Subject key identifier: E7:F6:CA:D5:6F:FE:33:CB:ED:11:05:F5:4D:F6:4D:A2:97:2B:02:6B Authority key identifier: 36:6A:9D:54:22:97:57:7B:37:AA:0C:42:31:95:AF:E2:A9:8E:13:5D Certificate issuer: /CN=366a9d542297577b37aa0c423195afe2a98e135d Certificate serial: 019B3A220049FDC4DDDC0A959DB9E3B72B4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NmqdVCKXV3s3qgxCMZWv4qmOE10.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/NmqdVCKXV3s3qgxCMZWv4qmOE10.mft Manifest number: 178A Signing time: Sat 20 Dec 2025 05:01:05 +0000 Manifest this update: Sat 20 Dec 2025 05:01:05 +0000 Manifest next update: Sun 21 Dec 2025 05:01:05 +0000 Files and hashes: 1: NmqdVCKXV3s3qgxCMZWv4qmOE10.crl (hash: PmPi7Dxg14jfYlmw/P3tUXsVRGvFRRv2D0nEL9Kf7GE=) 2: bEKsBvD9r6Xyt_P3Ap1ApX4DjcU.roa (hash: 24Br4dwLUP9p+zXB4KMnlxiNc2TbHeks2Jsk87QFi10=) 3: kSQ_R5Z-vsBcuOXx6WhdFdmllY0.roa (hash: OhKVJv+g1lqmaayTLliiukgCHTE/MZNzjIGSTC2Zdcw=) 4: naFGULOSYvt_ys0vvTSfwr2rqtk.roa (hash: b43Uckjczt2PCUz41jkHhIKmF+uwsILXTS5gZeF8UNU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/NmqdVCKXV3s3qgxCMZWv4qmOE10.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/NmqdVCKXV3s3qgxCMZWv4qmOE10.mft rsync://rpki.ripe.net/repository/DEFAULT/NmqdVCKXV3s3qgxCMZWv4qmOE10.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:22:00:49:fd:c4:dd:dc:0a:95:9d:b9:e3:b7:2b:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=366a9d542297577b37aa0c423195afe2a98e135d Validity Not Before: Dec 20 05:01:05 2025 GMT Not After : Dec 21 05:01:05 2025 GMT Subject: CN=e7f6cad56ffe33cbed1105f54df64da2972b026b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:69:dd:1e:90:59:df:36:f9:53:9a:72:44:92: 32:e1:1b:69:5c:11:8f:5e:ff:d1:79:7e:ac:b3:22: 63:1d:71:c2:ed:f3:dd:43:1d:7a:4f:52:3e:58:f8: 9a:ca:31:a4:08:28:ab:92:a6:f5:9f:2d:bf:e6:2f: 93:bc:4c:89:4c:a5:23:5e:25:31:ac:45:fe:96:7e: 02:0d:9a:bd:6b:cb:9d:07:ff:05:87:d4:fc:3d:ff: 87:9f:b3:04:32:ed:6a:0f:63:b8:86:01:13:c9:0e: b7:30:b8:f3:6e:41:77:c4:ee:82:6f:af:b3:cc:b6: 2e:50:08:57:ce:05:87:b8:40:3a:94:09:a4:fa:8b: fe:34:72:51:eb:49:c5:58:69:25:7c:66:9f:66:03: 4f:17:dc:d7:3d:a7:97:c4:38:68:c2:5e:d7:c3:0e: 25:a0:c9:ee:01:c2:9b:ca:74:39:dd:56:7d:d1:af: db:cb:22:0f:59:f1:79:ad:b2:c6:90:de:cb:04:a8: 99:2c:d8:1b:61:da:3d:4b:8e:53:33:c4:bf:a6:da: 04:b2:0b:9a:b5:cf:a6:90:33:27:cb:46:9e:73:50: 7c:fb:09:c0:ab:82:7e:b1:2a:78:84:1a:a8:f6:9b: 91:c1:3a:15:d9:45:4c:82:39:3f:0e:19:25:46:44: 04:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:F6:CA:D5:6F:FE:33:CB:ED:11:05:F5:4D:F6:4D:A2:97:2B:02:6B X509v3 Authority Key Identifier: keyid:36:6A:9D:54:22:97:57:7B:37:AA:0C:42:31:95:AF:E2:A9:8E:13:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NmqdVCKXV3s3qgxCMZWv4qmOE10.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/NmqdVCKXV3s3qgxCMZWv4qmOE10.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/NmqdVCKXV3s3qgxCMZWv4qmOE10.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:ab:61:4a:29:2e:20:25:a9:ae:43:86:1e:81:24:46:38:fb: 2e:c3:1e:35:59:fa:7e:71:cd:29:35:59:b3:96:4a:5d:da:a1: 2b:e2:55:e8:2b:75:0d:45:83:a2:d7:f6:64:d5:68:ec:52:07: 6c:a7:7d:54:87:dc:12:08:3c:39:38:ae:16:b2:71:9e:62:1e: 4b:12:06:b6:ef:9f:af:91:c7:47:e5:ff:04:c4:f2:52:bb:6e: ec:87:cf:1e:b3:27:f3:4c:60:e4:a4:5d:95:96:d4:c0:fc:23: 3b:3d:cc:39:57:5f:ec:17:49:41:11:e4:91:ef:6e:e3:06:b1: df:a4:8b:82:2b:55:a1:e7:6c:ab:aa:4e:54:e0:6f:05:e8:d8: 60:96:05:3f:68:7f:67:ae:b5:e3:a3:89:3f:af:8e:85:4b:42: a8:f7:20:8d:f2:72:ee:11:54:c2:7d:4e:57:96:e1:e8:01:45: 71:73:d8:5f:f6:8e:eb:52:9d:50:4d:6e:11:ac:bc:f3:2c:2d: 47:69:69:2c:b3:0b:18:40:5a:65:28:95:9c:be:55:49:4f:42: 76:24:78:ab:d8:04:16:59:89:66:0f:86:62:c6:22:58:62:3f: 3c:73:6b:68:34:f0:a2:4f:85:e3:b6:36:1a:53:5d:37:70:ce: fc:b4:93:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6IgBJ/cTd3AqVnbnjtytOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2NmE5ZDU0MjI5NzU3N2IzN2FhMGM0MjMxOTVhZmUyYTk4 ZTEzNWQwHhcNMjUxMjIwMDUwMTA1WhcNMjUxMjIxMDUwMTA1WjAzMTEwLwYDVQQD EyhlN2Y2Y2FkNTZmZmUzM2NiZWQxMTA1ZjU0ZGY2NGRhMjk3MmIwMjZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGndHpBZ3zb5U5pyRJIy4RtpXBGP Xv/ReX6ssyJjHXHC7fPdQx16T1I+WPiayjGkCCirkqb1ny2/5i+TvEyJTKUjXiUx rEX+ln4CDZq9a8udB/8Fh9T8Pf+Hn7MEMu1qD2O4hgETyQ63MLjzbkF3xO6Cb6+z zLYuUAhXzgWHuEA6lAmk+ov+NHJR60nFWGklfGafZgNPF9zXPaeXxDhowl7Xww4l oMnuAcKbynQ53VZ90a/byyIPWfF5rbLGkN7LBKiZLNgbYdo9S45TM8S/ptoEsgua tc+mkDMny0aec1B8+wnAq4J+sSp4hBqo9puRwToV2UVMgjk/DhklRkQE+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOf2ytVv/jPL7REF9U32TaKXKwJrMB8GA1UdIwQY MBaAFDZqnVQil1d7N6oMQjGVr+KpjhNdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTm1xZFZDS1hWM3MzcWd4Q01aV3Y0cW1PRTEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9mYzc1NDUtYzVmYS00M2JkLTg4Mzkt ZDE4NWRlYzA2MDEyLzEvTm1xZFZDS1hWM3MzcWd4Q01aV3Y0cW1PRTEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS9mYzc1NDUtYzVmYS00M2JkLTg4MzktZDE4NWRlYzA2MDEy LzEvTm1xZFZDS1hWM3MzcWd4Q01aV3Y0cW1PRTEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIqthSiku ICWprkOGHoEkRjj7LsMeNVn6fnHNKTVZs5ZKXdqhK+JV6Ct1DUWDotf2ZNVo7FIH bKd9VIfcEgg8OTiuFrJxnmIeSxIGtu+fr5HHR+X/BMTyUrtu7IfPHrMn80xg5KRd lZbUwPwjOz3MOVdf7BdJQRHkke9u4wax36SLgitVoedsq6pOVOBvBejYYJYFP2h/ Z66146OJP6+OhUtCqPcgjfJy7hFUwn1OV5bh6AFFcXPYX/aO61KdUE1uEay88ywt R2lpLLMLGEBaZSiVnL5VSU9CdiR4q9gEFlmJZg+GYsYiWGI/PHNraDTwok+F47Y2 GlNdN3DO/LSTvA== -----END CERTIFICATE-----Generated at Sat Dec 20 08:45:27 2025 by rpki-client