This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.mft File: NOQDSEY8YM6fxpQGCjf0aDCT8EU.mft (raw, json) Hash identifier: M4wLZWFpiRZWOIaBlFOe2MvfIa3SzUfXAOuhG6j7/1s= Subject key identifier: 07:F0:B8:A7:8D:AC:33:AA:66:1B:76:1D:E6:E3:A8:A6:25:21:2C:59 Authority key identifier: 34:E4:03:48:46:3C:60:CE:9F:C6:94:06:0A:37:F4:68:30:93:F0:45 Certificate issuer: /CN=34e40348463c60ce9fc694060a37f4683093f045 Certificate serial: 019B206233864F08161D2DC4E39BECC579D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NOQDSEY8YM6fxpQGCjf0aDCT8EU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.mft Manifest number: 0B63 Signing time: Mon 15 Dec 2025 05:01:05 +0000 Manifest this update: Mon 15 Dec 2025 05:01:05 +0000 Manifest next update: Tue 16 Dec 2025 05:01:05 +0000 Files and hashes: 1: NOQDSEY8YM6fxpQGCjf0aDCT8EU.crl (hash: 6tWLziTZF3mUOUfPGP3wusoxq8AoIfcoE1xq8BEcqzU=) 2: t1BHctdeN3-hwrpqiOWRf8QN_Co.roa (hash: sJPUaFdOg0DhAMbLJjpATv5AEJJ9zxfLTR5pbOXKFNM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.crl rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.mft rsync://rpki.ripe.net/repository/DEFAULT/NOQDSEY8YM6fxpQGCjf0aDCT8EU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 05:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:62:33:86:4f:08:16:1d:2d:c4:e3:9b:ec:c5:79:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34e40348463c60ce9fc694060a37f4683093f045 Validity Not Before: Dec 15 05:01:05 2025 GMT Not After : Dec 16 05:01:05 2025 GMT Subject: CN=07f0b8a78dac33aa661b761de6e3a8a625212c59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:9b:b3:64:7e:85:95:8c:23:f0:7d:99:4c:06: 5f:7d:19:af:e7:8d:d4:b1:a2:d4:5f:82:d2:71:8e: 85:db:79:2c:60:b4:6f:3c:ce:86:f0:0d:63:ef:1f: 5d:26:71:b3:8d:73:48:0f:91:6b:37:f4:fa:0c:4f: c4:bc:06:d4:72:26:a5:84:e1:35:91:7e:8f:ea:3b: 63:7f:e9:82:5d:d2:78:06:37:d7:bb:a5:06:bc:9a: 24:15:95:13:c8:d3:3d:e0:f1:01:b7:49:69:28:c6: 27:e1:bb:ba:df:9a:65:a0:b2:1e:70:fe:a3:c1:8b: 56:79:a3:f7:4b:fc:ab:b6:5b:c6:ca:be:54:1b:76: 44:77:94:44:44:0e:a2:a6:d5:7f:ab:9a:63:ea:a7: 5f:36:5b:93:c0:f0:0b:c8:70:ad:50:db:8c:4f:8c: 8b:fa:61:db:cf:a1:bb:a1:ac:d5:f3:16:30:d2:b4: 7d:9b:f9:21:71:e9:b2:f2:93:71:c6:84:3d:bf:c1: ea:21:e3:a1:0a:dc:04:ee:73:00:44:53:62:43:59: b5:66:6f:40:f9:a8:cc:a1:0c:1b:0e:92:aa:33:a0: e0:37:60:2c:e7:b9:fb:eb:a9:e7:70:8b:b9:da:47: d9:37:02:b1:57:c8:b8:50:b2:27:ac:da:e4:d1:51: 3b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:F0:B8:A7:8D:AC:33:AA:66:1B:76:1D:E6:E3:A8:A6:25:21:2C:59 X509v3 Authority Key Identifier: keyid:34:E4:03:48:46:3C:60:CE:9F:C6:94:06:0A:37:F4:68:30:93:F0:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NOQDSEY8YM6fxpQGCjf0aDCT8EU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:19:fc:b5:cb:54:7b:8c:fe:98:6b:56:3a:5a:2f:a1:71:36: 7e:1a:14:db:01:05:7b:1d:39:b8:65:de:7c:ed:f5:0b:af:f7: 36:1a:c7:83:11:28:ad:22:3c:b2:5a:1b:4e:31:f5:a0:cd:12: 71:92:64:7f:f8:e8:7b:b0:59:2e:4c:5b:ea:a9:a9:87:47:80: 28:db:bd:a4:8c:fb:04:0a:0c:a2:ad:bd:19:4b:b8:82:8d:60: 9c:02:5f:51:6e:9f:1e:32:eb:94:24:2f:50:38:77:91:c9:15: 70:16:05:52:25:f0:7d:80:dc:ea:09:ea:6a:47:2e:ed:cb:ae: f2:16:cd:9b:df:c0:ba:ba:4e:47:04:65:d9:15:41:15:0a:49: aa:91:af:54:ef:6e:69:51:35:07:91:a8:9a:f2:7e:62:f6:7e: ca:27:cb:06:4d:01:51:5f:db:c1:16:6c:d0:f1:39:ae:2a:d5: c4:4e:29:e8:a7:2a:14:42:f7:42:78:15:2f:d5:f7:ca:d6:be: 87:d9:25:cf:a3:fc:00:4b:11:04:17:69:40:ee:6d:05:1b:a1: 78:19:a6:2d:fd:36:be:46:92:3c:0b:9d:9a:a0:07:2f:cd:d9: 67:78:f7:4d:47:95:30:29:01:e1:d4:a8:e0:ce:f7:a4:4a:1b: 2a:37:b7:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsgYjOGTwgWHS3E45vsxXnRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0ZTQwMzQ4NDYzYzYwY2U5ZmM2OTQwNjBhMzdmNDY4MzA5 M2YwNDUwHhcNMjUxMjE1MDUwMTA1WhcNMjUxMjE2MDUwMTA1WjAzMTEwLwYDVQQD EygwN2YwYjhhNzhkYWMzM2FhNjYxYjc2MWRlNmUzYThhNjI1MjEyYzU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5uzZH6FlYwj8H2ZTAZffRmv543U saLUX4LScY6F23ksYLRvPM6G8A1j7x9dJnGzjXNID5FrN/T6DE/EvAbUcialhOE1 kX6P6jtjf+mCXdJ4BjfXu6UGvJokFZUTyNM94PEBt0lpKMYn4bu635ploLIecP6j wYtWeaP3S/yrtlvGyr5UG3ZEd5RERA6iptV/q5pj6qdfNluTwPALyHCtUNuMT4yL +mHbz6G7oazV8xYw0rR9m/khcemy8pNxxoQ9v8HqIeOhCtwE7nMARFNiQ1m1Zm9A +ajMoQwbDpKqM6DgN2As57n766nncIu52kfZNwKxV8i4ULInrNrk0VE7/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAfwuKeNrDOqZht2HebjqKYlISxZMB8GA1UdIwQY MBaAFDTkA0hGPGDOn8aUBgo39Ggwk/BFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTk9RRFNFWThZTTZmeHBRR0NqZjBhRENUOEVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC8yYTNjY2MtMjkzYy00MWRhLWFkMTYt MWI5OWZkMDk3NjNlLzEvTk9RRFNFWThZTTZmeHBRR0NqZjBhRENUOEVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC8yYTNjY2MtMjkzYy00MWRhLWFkMTYtMWI5OWZkMDk3NjNl LzEvTk9RRFNFWThZTTZmeHBRR0NqZjBhRENUOEVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnhn8tctU e4z+mGtWOlovoXE2fhoU2wEFex05uGXefO31C6/3NhrHgxEorSI8slobTjH1oM0S cZJkf/joe7BZLkxb6qmph0eAKNu9pIz7BAoMoq29GUu4go1gnAJfUW6fHjLrlCQv UDh3kckVcBYFUiXwfYDc6gnqakcu7cuu8hbNm9/AurpORwRl2RVBFQpJqpGvVO9u aVE1B5GomvJ+YvZ+yifLBk0BUV/bwRZs0PE5rirVxE4p6KcqFEL3QngVL9X3yta+ h9klz6P8AEsRBBdpQO5tBRuheBmmLf02vkaSPAudmqAHL83ZZ3j3TUeVMCkB4dSo 4M73pEobKje3tQ== -----END CERTIFICATE-----Generated at Mon Dec 15 12:01:12 2025 by rpki-client