This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.mft File: nAqubUXQbffEJ4708hjkLbgHCUw.mft (raw, json) Hash identifier: v01wciUalFhO4fwMiNdVgBL332bKCzuekPQrW17L8uw= Subject key identifier: 74:06:6F:51:EF:2F:EA:BF:86:4C:63:09:A4:A8:21:AE:C6:28:EF:79 Authority key identifier: 9C:0A:AE:6D:45:D0:6D:F7:C4:27:8E:F4:F2:18:E4:2D:B8:07:09:4C Certificate issuer: /CN=9c0aae6d45d06df7c4278ef4f218e42db807094c Certificate serial: 019B330D5FC6D533C29C82568980F5DB0F88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nAqubUXQbffEJ4708hjkLbgHCUw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.mft Manifest number: 1783 Signing time: Thu 18 Dec 2025 20:01:12 +0000 Manifest this update: Thu 18 Dec 2025 20:01:12 +0000 Manifest next update: Fri 19 Dec 2025 20:01:12 +0000 Files and hashes: 1: MJMdhZnjDE7HHdif7jOifgXeBWw.roa (hash: OAM+4dNU25EOni1NCJmygQc3McNUoy2zZaTz7W6MCZg=) 2: nAqubUXQbffEJ4708hjkLbgHCUw.crl (hash: vTQqeo9wXFZibwNvG5tq2AUvdsmPTkKhctfHlID6dws=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.crl rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.mft rsync://rpki.ripe.net/repository/DEFAULT/nAqubUXQbffEJ4708hjkLbgHCUw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:0d:5f:c6:d5:33:c2:9c:82:56:89:80:f5:db:0f:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c0aae6d45d06df7c4278ef4f218e42db807094c Validity Not Before: Dec 18 20:01:12 2025 GMT Not After : Dec 19 20:01:12 2025 GMT Subject: CN=74066f51ef2feabf864c6309a4a821aec628ef79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:25:76:4a:e2:24:3d:dc:30:ad:73:83:3c:04: ff:99:c0:3b:e6:bb:5f:8c:0f:9f:e5:bc:9c:8c:44: 3d:38:0d:8c:11:07:f3:59:57:e2:bd:2a:cb:cd:30: ee:58:34:fc:ba:62:87:44:3d:f0:14:e9:6f:27:13: 88:fc:14:c1:17:54:52:0d:6e:ea:50:9b:6f:07:22: 64:60:a8:1a:af:21:5c:2d:f0:fa:a0:44:0d:90:e3: 1c:bf:e7:93:61:42:33:dc:31:3d:03:8a:5b:47:b5: 35:e2:4a:db:20:35:0b:e2:97:a4:eb:20:e7:8a:49: 6d:9a:72:32:26:07:96:61:a0:3a:a0:7a:d3:72:b5: c8:41:97:f0:9c:39:15:19:71:e8:25:8a:cd:bf:7f: c9:9d:56:40:0f:55:fe:56:de:d0:fc:4a:7e:4d:d3: de:64:25:5a:f3:3c:5a:88:96:7f:2f:18:02:6c:af: 62:45:f5:8c:f5:42:9b:fe:b2:8f:12:69:d0:08:3b: 41:5f:2c:8e:76:bd:47:e0:ff:50:99:99:8c:c7:1c: f0:84:58:50:40:41:c5:c4:07:d5:8f:b3:50:e9:ff: a4:c2:c6:6d:6e:9e:47:0b:62:98:8e:e6:9b:e3:12: e1:0f:d4:f9:df:6c:e0:e1:37:c7:0e:9e:13:4f:ca: ae:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:06:6F:51:EF:2F:EA:BF:86:4C:63:09:A4:A8:21:AE:C6:28:EF:79 X509v3 Authority Key Identifier: keyid:9C:0A:AE:6D:45:D0:6D:F7:C4:27:8E:F4:F2:18:E4:2D:B8:07:09:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAqubUXQbffEJ4708hjkLbgHCUw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/c920ec-07dc-469d-b884-b98bbb1637c0/1/nAqubUXQbffEJ4708hjkLbgHCUw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:98:b0:f5:38:6f:23:56:38:5e:2d:a6:a3:75:e0:1e:4b:40: ad:2c:48:8c:98:36:c0:f7:c5:00:ba:cf:52:ce:8f:93:64:10: 41:bf:4d:1f:ef:2b:29:d7:af:8e:a5:dd:5b:01:96:78:cd:1e: 73:c0:99:b9:c9:03:ab:b1:cb:68:28:48:71:4c:75:e2:06:8d: 81:12:7f:11:7f:9b:1b:6b:7e:17:e5:a1:75:67:44:c1:3b:4a: 5c:95:18:af:9c:2a:65:b4:07:01:60:7c:29:d4:92:18:37:2a: cc:91:7f:d8:d1:69:84:79:8a:60:0e:a9:91:96:44:c5:5f:01: 6e:93:20:d0:e6:66:98:dd:3d:33:73:60:bb:88:16:e6:d8:6d: 0d:c8:8a:0e:7a:1a:ea:41:12:ed:9e:71:b5:9f:f7:9c:b7:14: 9b:9b:82:6a:9b:6a:93:a6:2a:f8:00:44:f9:c9:1b:2f:54:04: b4:b6:72:1b:27:be:18:98:cf:e4:d0:7b:06:6d:6e:00:c9:d6: eb:d2:8e:85:08:84:c3:fa:09:7e:11:e5:12:57:25:f1:ef:06: 8e:95:fd:67:f1:cd:82:71:37:e0:83:82:c9:73:9e:e8:91:23: b8:5a:94:85:40:ce:6f:50:8e:0d:9c:89:2d:fd:ed:2d:ca:41: 8b:a7:4a:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszDV/G1TPCnIJWiYD12w+IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljMGFhZTZkNDVkMDZkZjdjNDI3OGVmNGYyMThlNDJkYjgw NzA5NGMwHhcNMjUxMjE4MjAwMTEyWhcNMjUxMjE5MjAwMTEyWjAzMTEwLwYDVQQD Eyg3NDA2NmY1MWVmMmZlYWJmODY0YzYzMDlhNGE4MjFhZWM2MjhlZjc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiV2SuIkPdwwrXODPAT/mcA75rtf jA+f5bycjEQ9OA2MEQfzWVfivSrLzTDuWDT8umKHRD3wFOlvJxOI/BTBF1RSDW7q UJtvByJkYKgaryFcLfD6oEQNkOMcv+eTYUIz3DE9A4pbR7U14krbIDUL4pek6yDn ikltmnIyJgeWYaA6oHrTcrXIQZfwnDkVGXHoJYrNv3/JnVZAD1X+Vt7Q/Ep+TdPe ZCVa8zxaiJZ/LxgCbK9iRfWM9UKb/rKPEmnQCDtBXyyOdr1H4P9QmZmMxxzwhFhQ QEHFxAfVj7NQ6f+kwsZtbp5HC2KYjuab4xLhD9T532zg4TfHDp4TT8qu5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHQGb1HvL+q/hkxjCaSoIa7GKO95MB8GA1UdIwQY MBaAFJwKrm1F0G33xCeO9PIY5C24BwlMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkFxdWJVWFFiZmZFSjQ3MDhoamtMYmdIQ1V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9jOTIwZWMtMDdkYy00NjlkLWI4ODQt Yjk4YmJiMTYzN2MwLzEvbkFxdWJVWFFiZmZFSjQ3MDhoamtMYmdIQ1V3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi9jOTIwZWMtMDdkYy00NjlkLWI4ODQtYjk4YmJiMTYzN2Mw LzEvbkFxdWJVWFFiZmZFSjQ3MDhoamtMYmdIQ1V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHpiw9Thv I1Y4Xi2mo3XgHktArSxIjJg2wPfFALrPUs6Pk2QQQb9NH+8rKdevjqXdWwGWeM0e c8CZuckDq7HLaChIcUx14gaNgRJ/EX+bG2t+F+WhdWdEwTtKXJUYr5wqZbQHAWB8 KdSSGDcqzJF/2NFphHmKYA6pkZZExV8BbpMg0OZmmN09M3Ngu4gW5thtDciKDnoa 6kES7Z5xtZ/3nLcUm5uCaptqk6Yq+ABE+ckbL1QEtLZyGye+GJjP5NB7Bm1uAMnW 69KOhQiEw/oJfhHlElcl8e8GjpX9Z/HNgnE34IOCyXOe6JEjuFqUhUDOb1CODZyJ Lf3tLcpBi6dK4g== -----END CERTIFICATE-----Generated at Thu Dec 18 22:35:28 2025 by rpki-client