This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.mft File: nAqubUXQbffEJ4708hjkLbgHCUw.mft (raw, json) Hash identifier: FJvQFM3Gg7RcdcXCYQUktYd+jzOsIEId7IArHim8+6w= Subject key identifier: A3:A9:A0:47:C0:79:60:C1:92:02:73:9A:7E:7F:DE:82:6F:4C:43:03 Authority key identifier: 9C:0A:AE:6D:45:D0:6D:F7:C4:27:8E:F4:F2:18:E4:2D:B8:07:09:4C Certificate issuer: /CN=9c0aae6d45d06df7c4278ef4f218e42db807094c Certificate serial: 019B2F30BF270544BB3276239F45F6479110 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nAqubUXQbffEJ4708hjkLbgHCUw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.mft Manifest number: 1781 Signing time: Thu 18 Dec 2025 02:01:22 +0000 Manifest this update: Thu 18 Dec 2025 02:01:22 +0000 Manifest next update: Fri 19 Dec 2025 02:01:22 +0000 Files and hashes: 1: MJMdhZnjDE7HHdif7jOifgXeBWw.roa (hash: OAM+4dNU25EOni1NCJmygQc3McNUoy2zZaTz7W6MCZg=) 2: nAqubUXQbffEJ4708hjkLbgHCUw.crl (hash: BCx7RUT+waAhH4+MWnR7HI2m49alG9/8DKwpSn9FNmI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.crl rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.mft rsync://rpki.ripe.net/repository/DEFAULT/nAqubUXQbffEJ4708hjkLbgHCUw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 02:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:30:bf:27:05:44:bb:32:76:23:9f:45:f6:47:91:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c0aae6d45d06df7c4278ef4f218e42db807094c Validity Not Before: Dec 18 02:01:22 2025 GMT Not After : Dec 19 02:01:22 2025 GMT Subject: CN=a3a9a047c07960c19202739a7e7fde826f4c4303 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d8:65:59:89:39:64:86:42:eb:a8:7a:ef:db: 5a:c8:4a:01:82:cf:4f:d5:41:ca:d1:69:bb:7b:d5: 5d:a7:30:f5:6d:1f:b8:3c:f0:6c:80:61:b1:7a:98: 0b:37:67:9f:5d:8a:74:b0:3f:06:56:2b:ab:73:18: c5:e1:a7:b1:e7:54:88:e4:e6:c3:3e:bb:d4:3f:41: c0:04:5d:a6:be:94:6b:33:95:db:d4:c7:1c:7a:f5: d2:cb:4a:a3:a5:ab:c3:6c:b6:d6:62:4f:27:96:e5: 05:1c:15:30:dc:3a:0d:58:52:65:82:e0:55:dd:e1: 10:30:e4:75:e9:1e:8a:34:8a:38:96:3d:00:fa:89: 0c:19:26:4a:27:8e:e4:bd:88:14:6c:5c:ee:5e:aa: 1c:34:e3:a5:e6:f6:13:6f:21:08:36:10:f6:d4:ef: 66:47:10:c2:09:b1:bf:a7:2e:89:2f:2d:7e:cd:bf: 31:4b:ed:66:09:8b:bc:6c:f8:5f:aa:1f:fe:23:53: 7a:88:25:41:b1:ee:8c:34:30:2a:fc:8e:80:8b:f6: 43:62:09:a0:6f:0e:45:ac:18:69:65:26:1d:d9:e8: c6:a9:01:7f:ae:87:61:4d:68:ef:c0:6b:a9:5d:60: 14:7b:06:3e:f7:c4:88:ad:16:af:b3:a9:cb:e3:77: 82:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:A9:A0:47:C0:79:60:C1:92:02:73:9A:7E:7F:DE:82:6F:4C:43:03 X509v3 Authority Key Identifier: keyid:9C:0A:AE:6D:45:D0:6D:F7:C4:27:8E:F4:F2:18:E4:2D:B8:07:09:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAqubUXQbffEJ4708hjkLbgHCUw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:00:6d:90:e6:0b:71:b8:13:6f:9d:67:17:6b:c9:b0:66:d8: f0:7a:81:d5:ba:b5:dd:f7:fc:f4:79:13:c9:a5:a7:ac:c2:69: 95:5a:ce:92:66:c9:07:20:81:2e:b2:3e:68:4e:a8:4c:16:76: 47:ee:b2:04:85:e3:46:e1:61:b5:1a:1a:af:32:65:26:e7:a0: a0:aa:0c:33:63:81:b6:64:85:e5:5c:4e:25:e0:01:46:21:78: 7d:7c:ac:42:7a:2e:8d:85:54:48:94:53:ff:4a:37:a5:11:4b: bc:71:e9:ea:81:99:6d:5b:08:54:1d:74:63:a3:4b:e2:5c:f8: 18:e5:b7:7b:f0:99:dc:d6:bb:8c:d5:dc:ac:49:84:0a:48:09: 10:73:a6:38:dc:ef:b9:e3:d1:6a:41:b2:02:9d:26:f9:a7:c3: 7d:0b:da:0a:98:4f:4c:7d:c6:fe:bb:58:98:22:10:c2:65:53: 38:01:9d:76:a3:8c:e4:0e:9b:b8:6d:57:1b:99:5c:03:e2:75: c1:ea:5d:9a:0e:c5:28:83:f2:e7:94:ea:b1:e9:78:64:62:29: 73:b3:6a:65:70:af:70:64:5d:9a:1f:2b:b1:f2:ac:46:d7:1e: 1f:bc:79:46:11:c7:93:2d:3f:5b:b0:a3:2c:3c:c3:37:2a:72: 36:46:45:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvML8nBUS7MnYjn0X2R5EQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljMGFhZTZkNDVkMDZkZjdjNDI3OGVmNGYyMThlNDJkYjgw NzA5NGMwHhcNMjUxMjE4MDIwMTIyWhcNMjUxMjE5MDIwMTIyWjAzMTEwLwYDVQQD EyhhM2E5YTA0N2MwNzk2MGMxOTIwMjczOWE3ZTdmZGU4MjZmNGM0MzAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsthlWYk5ZIZC66h679tayEoBgs9P 1UHK0Wm7e9VdpzD1bR+4PPBsgGGxepgLN2efXYp0sD8GViurcxjF4aex51SI5ObD PrvUP0HABF2mvpRrM5Xb1MccevXSy0qjpavDbLbWYk8nluUFHBUw3DoNWFJlguBV 3eEQMOR16R6KNIo4lj0A+okMGSZKJ47kvYgUbFzuXqocNOOl5vYTbyEINhD21O9m RxDCCbG/py6JLy1+zb8xS+1mCYu8bPhfqh/+I1N6iCVBse6MNDAq/I6Ai/ZDYgmg bw5FrBhpZSYd2ejGqQF/rodhTWjvwGupXWAUewY+98SIrRavs6nL43eCfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKOpoEfAeWDBkgJzmn5/3oJvTEMDMB8GA1UdIwQY MBaAFJwKrm1F0G33xCeO9PIY5C24BwlMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkFxdWJVWFFiZmZFSjQ3MDhoamtMYmdIQ1V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9jOTIwZWMtMDdkYy00NjlkLWI4ODQt Yjk4YmJiMTYzN2MwLzEvbkFxdWJVWFFiZmZFSjQ3MDhoamtMYmdIQ1V3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi9jOTIwZWMtMDdkYy00NjlkLWI4ODQtYjk4YmJiMTYzN2Mw LzEvbkFxdWJVWFFiZmZFSjQ3MDhoamtMYmdIQ1V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANwBtkOYL cbgTb51nF2vJsGbY8HqB1bq13ff89HkTyaWnrMJplVrOkmbJByCBLrI+aE6oTBZ2 R+6yBIXjRuFhtRoarzJlJuegoKoMM2OBtmSF5VxOJeABRiF4fXysQnoujYVUSJRT /0o3pRFLvHHp6oGZbVsIVB10Y6NL4lz4GOW3e/CZ3Na7jNXcrEmECkgJEHOmONzv uePRakGyAp0m+afDfQvaCphPTH3G/rtYmCIQwmVTOAGddqOM5A6buG1XG5lcA+J1 wepdmg7FKIPy55Tqsel4ZGIpc7NqZXCvcGRdmh8rsfKsRtceH7x5RhHHky0/W7Cj LDzDNypyNkZF+A== -----END CERTIFICATE-----Generated at Thu Dec 18 10:59:17 2025 by rpki-client