This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.mft File: NQBF99g86xMNjWlf_n1D2zgZ3lU.mft (raw, json) Hash identifier: HwKuQbHRxdAoZ60LbuehzOFGCCThAgLreTq7J9smCtY= Subject key identifier: 4D:35:B8:06:7C:9D:9E:02:F9:48:C2:8F:E8:7B:00:E5:47:C2:41:CB Authority key identifier: 35:00:45:F7:D8:3C:EB:13:0D:8D:69:5F:FE:7D:43:DB:38:19:DE:55 Certificate issuer: /CN=350045f7d83ceb130d8d695ffe7d43db3819de55 Certificate serial: 019B0E26991C96B95EC1A237B4F4424C8813 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NQBF99g86xMNjWlf_n1D2zgZ3lU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.mft Manifest number: 1638 Signing time: Thu 11 Dec 2025 16:02:49 +0000 Manifest this update: Thu 11 Dec 2025 16:02:49 +0000 Manifest next update: Fri 12 Dec 2025 16:02:49 +0000 Files and hashes: 1: NQBF99g86xMNjWlf_n1D2zgZ3lU.crl (hash: rhA2mjghyZwBmb9DJlfl8DmOka3zhH2m7Jwe6pW9hWQ=) 2: i3NuLV9-SVOSQ4rLf1Rnzi76R8s.roa (hash: F0HuxkG9RZJHtx6EFFj7jJPD9PIqUuIoXshg3545UXg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.crl rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.mft rsync://rpki.ripe.net/repository/DEFAULT/NQBF99g86xMNjWlf_n1D2zgZ3lU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:26:99:1c:96:b9:5e:c1:a2:37:b4:f4:42:4c:88:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=350045f7d83ceb130d8d695ffe7d43db3819de55 Validity Not Before: Dec 11 16:02:49 2025 GMT Not After : Dec 12 16:02:49 2025 GMT Subject: CN=4d35b8067c9d9e02f948c28fe87b00e547c241cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:6e:52:4c:0e:66:c4:1b:c5:73:fb:bc:f2:08: 9e:ae:37:bb:b6:61:7a:d9:64:8a:15:91:c8:1b:54: 14:e2:4a:45:f7:d2:86:d2:fe:33:16:35:9c:d7:36: e8:28:1d:0d:cc:05:23:84:44:8b:93:3c:06:30:02: 4e:0a:69:88:1a:f9:6e:a1:38:58:da:16:ec:01:e3: 52:bc:a5:dd:62:d7:66:e7:ed:41:87:fe:64:23:47: de:93:88:7c:cf:9a:1a:ab:2e:12:29:b8:07:0a:03: d1:61:32:e6:0d:04:08:34:e8:91:9e:59:09:4a:f0: 75:94:87:fe:67:af:58:d3:de:6e:20:5d:a3:dd:65: bd:b8:7f:4b:a2:18:73:d6:57:d4:2d:2c:84:03:84: 8b:d1:6d:8d:c2:7c:6c:2b:5b:eb:ff:4c:c6:d3:df: a0:99:3c:6a:af:ee:57:fa:a3:8c:70:f7:29:86:e7: 2b:5b:75:26:0c:59:12:9e:0e:08:e6:29:4e:dc:60: db:26:c9:29:1e:88:65:87:4e:23:56:55:fb:b8:0f: cb:4c:41:4f:33:28:b1:07:32:cd:5a:4c:71:31:4e: 1e:03:71:5c:3a:d6:cc:d1:91:54:17:fd:77:a0:7b: 77:01:94:a0:cd:fa:e9:29:89:a6:2b:c2:86:4f:d0: e2:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:35:B8:06:7C:9D:9E:02:F9:48:C2:8F:E8:7B:00:E5:47:C2:41:CB X509v3 Authority Key Identifier: keyid:35:00:45:F7:D8:3C:EB:13:0D:8D:69:5F:FE:7D:43:DB:38:19:DE:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NQBF99g86xMNjWlf_n1D2zgZ3lU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:2e:53:fc:37:88:b6:d9:f3:e1:08:3d:35:ca:d7:6c:81:28: 9d:02:c1:16:cc:89:7f:8c:3e:56:85:96:d1:90:d4:59:9c:8c: b0:a4:3a:90:31:a0:f3:4e:84:2c:a7:a4:db:ad:19:f9:07:f1: 2b:15:20:44:ca:81:f8:6f:da:6e:7d:73:97:ba:59:d4:6c:fe: 11:ac:34:86:6c:02:59:bd:6a:1e:04:e4:2f:9e:16:11:68:64: d7:a3:64:7f:39:21:98:6a:bc:25:fd:f9:ab:c9:62:ed:75:9f: 4e:a7:21:11:23:fa:bb:c3:70:59:5e:43:1b:57:9e:10:72:d0: 9f:97:40:29:ef:ec:fd:9c:a8:e9:3c:27:d1:aa:cf:b7:4b:df: 7a:79:8f:13:dd:dd:6d:82:56:2f:78:02:0f:2c:ff:d8:ae:95: 15:b5:8d:18:89:ec:0c:3c:a0:f4:83:31:c8:f9:d3:34:53:ea: 55:5e:c1:8b:ea:b0:c7:67:6c:7d:32:5f:96:bc:05:ef:23:d1: 2e:05:31:7f:8f:6c:44:96:9d:64:56:4a:77:e5:bd:71:97:42: 1d:fe:0b:e3:07:ab:1c:ca:90:41:44:2c:43:58:16:9a:07:3e: 86:11:65:c8:34:97:a6:d7:49:72:59:0a:98:78:9b:44:4a:01: 20:60:84:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJpkclrlewaI3tPRCTIgTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MDA0NWY3ZDgzY2ViMTMwZDhkNjk1ZmZlN2Q0M2RiMzgx OWRlNTUwHhcNMjUxMjExMTYwMjQ5WhcNMjUxMjEyMTYwMjQ5WjAzMTEwLwYDVQQD Eyg0ZDM1YjgwNjdjOWQ5ZTAyZjk0OGMyOGZlODdiMDBlNTQ3YzI0MWNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwW5STA5mxBvFc/u88gierje7tmF6 2WSKFZHIG1QU4kpF99KG0v4zFjWc1zboKB0NzAUjhESLkzwGMAJOCmmIGvluoThY 2hbsAeNSvKXdYtdm5+1Bh/5kI0fek4h8z5oaqy4SKbgHCgPRYTLmDQQINOiRnlkJ SvB1lIf+Z69Y095uIF2j3WW9uH9Lohhz1lfULSyEA4SL0W2NwnxsK1vr/0zG09+g mTxqr+5X+qOMcPcphucrW3UmDFkSng4I5ilO3GDbJskpHohlh04jVlX7uA/LTEFP MyixBzLNWkxxMU4eA3FcOtbM0ZFUF/13oHt3AZSgzfrpKYmmK8KGT9DiYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE01uAZ8nZ4C+UjCj+h7AOVHwkHLMB8GA1UdIwQY MBaAFDUARffYPOsTDY1pX/59Q9s4Gd5VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlFCRjk5Zzg2eE1OaldsZl9uMUQyemdaM2xVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS81MDQzZmItY2NhYy00ZmI2LTg2OWQt NDhlMzBlMmY3YzM2LzEvTlFCRjk5Zzg2eE1OaldsZl9uMUQyemdaM2xVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS81MDQzZmItY2NhYy00ZmI2LTg2OWQtNDhlMzBlMmY3YzM2 LzEvTlFCRjk5Zzg2eE1OaldsZl9uMUQyemdaM2xVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApS5T/DeI ttnz4Qg9NcrXbIEonQLBFsyJf4w+VoWW0ZDUWZyMsKQ6kDGg806ELKek260Z+Qfx KxUgRMqB+G/abn1zl7pZ1Gz+Eaw0hmwCWb1qHgTkL54WEWhk16NkfzkhmGq8Jf35 q8li7XWfTqchESP6u8NwWV5DG1eeEHLQn5dAKe/s/Zyo6Twn0arPt0vfenmPE93d bYJWL3gCDyz/2K6VFbWNGInsDDyg9IMxyPnTNFPqVV7Bi+qwx2dsfTJflrwF7yPR LgUxf49sRJadZFZKd+W9cZdCHf4L4werHMqQQUQsQ1gWmgc+hhFlyDSXptdJclkK mHibREoBIGCEZQ== -----END CERTIFICATE-----Generated at Thu Dec 11 22:53:39 2025 by rpki-client