This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.mft File: nnQTW7B8ZUDNMHvaCMoGdLyEyTk.mft (raw, json) Hash identifier: TR4eCASXxNkVJtSPd6oSct5EiRrDtvHFq5PThpLb+dg= Subject key identifier: 69:FC:12:DD:99:65:61:05:3F:D0:0A:3E:48:3B:A8:3C:63:62:CE:46 Authority key identifier: 9E:74:13:5B:B0:7C:65:40:CD:30:7B:DA:08:CA:06:74:BC:84:C9:39 Certificate issuer: /CN=9e74135bb07c6540cd307bda08ca0674bc84c939 Certificate serial: 019B2F9E0FB2C557B3FD32198FF5000DC1F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.mft Manifest number: 1784 Signing time: Thu 18 Dec 2025 04:00:46 +0000 Manifest this update: Thu 18 Dec 2025 04:00:46 +0000 Manifest next update: Fri 19 Dec 2025 04:00:46 +0000 Files and hashes: 1: 1-T1wzl3TUKiA8m5iaH9QZh9hjp0.roa (hash: JRA15qBJeMepq09VmhJeTzptT8oyDdYWsjobeMnNOAk=) 2: nnQTW7B8ZUDNMHvaCMoGdLyEyTk.crl (hash: YSj6AklfVtBr9QQ+MvGDcgF9VU67zkJuc+zKHWEtqN4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.crl rsync://rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.mft rsync://rpki.ripe.net/repository/DEFAULT/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:9e:0f:b2:c5:57:b3:fd:32:19:8f:f5:00:0d:c1:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e74135bb07c6540cd307bda08ca0674bc84c939 Validity Not Before: Dec 18 04:00:46 2025 GMT Not After : Dec 19 04:00:46 2025 GMT Subject: CN=69fc12dd996561053fd00a3e483ba83c6362ce46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:64:64:82:82:e2:d2:e5:54:7d:22:b5:fb:64: fb:42:07:49:fc:bd:0a:b9:b7:10:f2:0c:b0:3a:48: 76:50:ee:a4:88:b7:e3:7f:d3:3f:92:32:c8:ea:90: 03:b1:fc:b1:14:a6:c7:70:b3:01:bc:ff:a5:36:87: 56:f5:7c:ea:30:0e:87:ea:ef:19:26:7e:56:34:e0: 9d:5d:06:2f:3e:6b:13:c5:a0:26:dc:4e:3c:05:90: e4:0f:63:1f:79:2b:66:1b:46:f0:ea:a7:27:13:e7: 67:d5:6f:a6:2b:74:85:bc:fe:b0:dc:e7:1a:5c:d0: 6d:39:83:7d:9f:3f:0a:06:21:b2:67:79:92:93:91: e5:12:f9:2f:31:ec:2d:e4:a7:9d:43:25:b3:62:96: 0d:f9:b7:cd:4b:96:f9:eb:a6:71:e3:2b:1b:b4:2e: e1:91:16:db:3d:78:3a:24:5b:84:65:d1:c6:07:62: 5d:15:43:9c:de:5a:65:9c:ea:b8:46:05:7f:9b:ee: 56:69:48:b2:a7:d4:43:cf:53:f6:3d:83:cd:df:d5: 6f:3b:67:fe:35:3e:75:15:ba:40:16:b1:98:28:c9: ef:98:45:d6:17:11:45:f5:a9:fd:66:1b:11:0c:35: a6:a3:c2:62:a2:60:4c:39:66:e4:bd:55:ee:96:4b: f5:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:FC:12:DD:99:65:61:05:3F:D0:0A:3E:48:3B:A8:3C:63:62:CE:46 X509v3 Authority Key Identifier: keyid:9E:74:13:5B:B0:7C:65:40:CD:30:7B:DA:08:CA:06:74:BC:84:C9:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:30:73:ad:d8:ae:67:c1:19:9d:31:be:40:2c:b2:cc:61:5d: 05:59:31:17:ff:12:73:14:d3:46:37:a6:dc:03:60:0e:6c:b3: 3f:d1:48:72:94:bf:46:b0:d4:79:2d:7a:5a:01:13:5d:82:0a: a9:d6:d3:3c:c8:9c:a0:d9:bf:f0:94:99:4f:fe:7c:08:8e:aa: 94:54:a4:a6:26:51:4b:e4:10:46:ba:50:55:eb:bb:f0:42:ef: c7:37:d1:86:3f:af:51:54:2f:cb:f9:d9:d3:fa:30:7a:f7:2f: 3e:d4:c0:34:db:41:20:dc:07:7d:43:70:54:e4:94:56:2c:ea: 03:e8:18:34:00:dc:08:34:a1:25:59:fa:ee:60:1d:95:53:f4: cb:08:23:06:dd:03:69:b5:45:db:ee:76:ab:d5:75:6a:f6:a0: 88:cc:05:65:b6:fa:13:0f:1e:1b:34:d0:2d:99:b0:1d:f8:5e: bd:4e:ae:2d:8e:17:42:8c:fd:1f:4d:e5:40:95:e8:25:ba:9c: 52:a9:63:60:49:cc:fa:60:94:50:49:05:9a:75:86:55:93:f4: 07:2b:7a:05:44:70:de:ad:07:4c:d9:95:24:22:fe:87:fd:bb: ec:f0:b2:7c:9c:e2:16:cb:2e:00:11:dd:fe:b6:96:a4:e5:5a: c1:6a:aa:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvng+yxVez/TIZj/UADcHzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNzQxMzViYjA3YzY1NDBjZDMwN2JkYTA4Y2EwNjc0YmM4 NGM5MzkwHhcNMjUxMjE4MDQwMDQ2WhcNMjUxMjE5MDQwMDQ2WjAzMTEwLwYDVQQD Eyg2OWZjMTJkZDk5NjU2MTA1M2ZkMDBhM2U0ODNiYTgzYzYzNjJjZTQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGRkgoLi0uVUfSK1+2T7QgdJ/L0K ubcQ8gywOkh2UO6kiLfjf9M/kjLI6pADsfyxFKbHcLMBvP+lNodW9XzqMA6H6u8Z Jn5WNOCdXQYvPmsTxaAm3E48BZDkD2MfeStmG0bw6qcnE+dn1W+mK3SFvP6w3Oca XNBtOYN9nz8KBiGyZ3mSk5HlEvkvMewt5KedQyWzYpYN+bfNS5b566Zx4ysbtC7h kRbbPXg6JFuEZdHGB2JdFUOc3lplnOq4RgV/m+5WaUiyp9RDz1P2PYPN39VvO2f+ NT51FbpAFrGYKMnvmEXWFxFF9an9ZhsRDDWmo8JiomBMOWbkvVXulkv1cwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGn8Et2ZZWEFP9AKPkg7qDxjYs5GMB8GA1UdIwQY MBaAFJ50E1uwfGVAzTB72gjKBnS8hMk5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbm5RVFc3QjhaVUROTUh2YUNNb0dkTHlFeVRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS81ZTc4ZjYtMjUzYS00MTE1LWFlNWQt NWRjODBmYWVkMmRjLzEvbm5RVFc3QjhaVUROTUh2YUNNb0dkTHlFeVRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS81ZTc4ZjYtMjUzYS00MTE1LWFlNWQtNWRjODBmYWVkMmRj LzEvbm5RVFc3QjhaVUROTUh2YUNNb0dkTHlFeVRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGDBzrdiu Z8EZnTG+QCyyzGFdBVkxF/8ScxTTRjem3ANgDmyzP9FIcpS/RrDUeS16WgETXYIK qdbTPMicoNm/8JSZT/58CI6qlFSkpiZRS+QQRrpQVeu78ELvxzfRhj+vUVQvy/nZ 0/owevcvPtTANNtBINwHfUNwVOSUVizqA+gYNADcCDShJVn67mAdlVP0ywgjBt0D abVF2+52q9V1avagiMwFZbb6Ew8eGzTQLZmwHfhevU6uLY4XQoz9H03lQJXoJbqc UqljYEnM+mCUUEkFmnWGVZP0Byt6BURw3q0HTNmVJCL+h/277PCyfJziFssuABHd /raWpOVawWqqWA== -----END CERTIFICATE-----Generated at Thu Dec 18 07:58:59 2025 by rpki-client