This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.mft File: nnQTW7B8ZUDNMHvaCMoGdLyEyTk.mft (raw, json) Hash identifier: FwDxfgkz9Ji4E1z3EL78IQ+eGMGJFgcHKYzYivMFEfM= Subject key identifier: F7:4C:B2:35:CE:41:5D:5A:72:B8:90:50:92:3A:13:71:C2:A8:C4:4A Authority key identifier: 9E:74:13:5B:B0:7C:65:40:CD:30:7B:DA:08:CA:06:74:BC:84:C9:39 Certificate issuer: /CN=9e74135bb07c6540cd307bda08ca0674bc84c939 Certificate serial: 019B1E3D341D48A5FADD5CB544C21C809446 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.mft Manifest number: 177B Signing time: Sun 14 Dec 2025 19:01:26 +0000 Manifest this update: Sun 14 Dec 2025 19:01:26 +0000 Manifest next update: Mon 15 Dec 2025 19:01:26 +0000 Files and hashes: 1: 1-T1wzl3TUKiA8m5iaH9QZh9hjp0.roa (hash: JRA15qBJeMepq09VmhJeTzptT8oyDdYWsjobeMnNOAk=) 2: nnQTW7B8ZUDNMHvaCMoGdLyEyTk.crl (hash: y3Makm6VM9+XYpGvidB7mVod+MpffMvpjmK/hkN2E5Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.crl rsync://rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.mft rsync://rpki.ripe.net/repository/DEFAULT/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 19:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:3d:34:1d:48:a5:fa:dd:5c:b5:44:c2:1c:80:94:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e74135bb07c6540cd307bda08ca0674bc84c939 Validity Not Before: Dec 14 19:01:26 2025 GMT Not After : Dec 15 19:01:26 2025 GMT Subject: CN=f74cb235ce415d5a72b89050923a1371c2a8c44a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:da:8d:4d:8f:10:2d:62:59:16:9e:eb:ee:b0: 1d:94:ef:a5:55:86:ae:8f:dc:45:b8:62:57:1d:f8: 47:56:4e:3f:19:15:64:fb:c8:67:3b:75:1c:fb:2a: 65:8d:a2:33:ab:f0:30:97:41:17:50:f6:3f:d7:4a: 93:24:7e:b3:ef:b2:a9:0e:0a:30:05:b9:d7:6e:a1: 04:20:71:7a:3c:9a:02:5b:36:f3:39:32:10:0c:14: 54:6a:85:91:ec:81:64:86:15:b0:c8:57:41:74:07: 25:e6:c7:be:90:05:07:c3:ad:36:0e:b0:f1:3b:2a: 0d:fa:42:dd:57:6c:d6:20:d8:90:c9:17:e0:22:3c: 20:16:75:bc:37:69:55:d7:aa:fe:90:a1:a1:51:e6: 7a:2a:0f:60:b2:d8:d8:6d:e4:53:1b:3b:c5:a5:1d: 54:a6:b5:d5:79:99:bc:57:9d:89:ca:89:8c:bf:38: 7d:08:aa:c4:58:88:f1:76:96:9c:e6:87:40:be:b1: ce:82:26:70:aa:57:48:94:94:2c:0b:fd:a1:a9:c1: cd:e0:f2:52:ec:9c:a0:eb:fe:7c:89:2c:e9:24:d2: 2b:c8:19:e5:27:c1:2d:fa:59:5a:6c:39:ef:20:62: e8:c9:8e:03:94:13:74:8f:52:c9:96:db:09:b2:9b: 40:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:4C:B2:35:CE:41:5D:5A:72:B8:90:50:92:3A:13:71:C2:A8:C4:4A X509v3 Authority Key Identifier: keyid:9E:74:13:5B:B0:7C:65:40:CD:30:7B:DA:08:CA:06:74:BC:84:C9:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:2b:13:ff:7a:f8:16:d4:ed:15:32:71:48:18:87:79:65:24: c5:dc:30:dd:3b:e6:0b:c2:87:0f:0a:8a:11:e1:d8:fa:42:0d: a9:cd:9c:cd:c8:3b:92:5a:d0:c9:c7:96:5e:b4:59:68:02:09: 42:a8:bf:03:c0:cb:1e:39:00:de:c9:ba:d4:cd:ce:37:98:f8: 70:9b:d2:26:75:d2:34:8d:4d:75:ea:47:ef:87:5f:f2:f4:b7: 1e:60:cc:1e:f8:79:3b:f5:d2:9d:e9:b7:a5:31:ec:66:ee:4f: 2b:f3:2f:70:8e:18:55:39:cb:ea:25:ed:c9:9f:a5:06:91:d0: f0:ae:a7:10:81:b4:54:8e:8d:17:bf:df:aa:2a:30:12:cc:91: bf:98:66:13:3e:40:ee:3c:fb:99:54:b9:ba:70:12:69:fa:46: a6:3b:cc:6b:1b:7f:55:ee:9d:93:b4:3e:13:bd:28:ca:49:d2: fe:74:d6:8e:4a:1a:4a:12:77:25:18:f5:bc:b9:fb:5e:9d:66: 7f:7a:ec:f5:7c:6b:29:db:71:5c:02:b5:65:1b:66:7f:65:62: 59:98:a3:2b:c9:82:7a:34:39:d2:fe:47:6b:d8:ad:7e:e8:9b: 8c:b8:2f:8b:23:b7:b8:29:0d:6d:66:89:cc:85:b4:43:50:1b: 5d:83:23:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsePTQdSKX63Vy1RMIcgJRGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNzQxMzViYjA3YzY1NDBjZDMwN2JkYTA4Y2EwNjc0YmM4 NGM5MzkwHhcNMjUxMjE0MTkwMTI2WhcNMjUxMjE1MTkwMTI2WjAzMTEwLwYDVQQD EyhmNzRjYjIzNWNlNDE1ZDVhNzJiODkwNTA5MjNhMTM3MWMyYThjNDRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2tqNTY8QLWJZFp7r7rAdlO+lVYau j9xFuGJXHfhHVk4/GRVk+8hnO3Uc+ypljaIzq/Awl0EXUPY/10qTJH6z77KpDgow BbnXbqEEIHF6PJoCWzbzOTIQDBRUaoWR7IFkhhWwyFdBdAcl5se+kAUHw602DrDx OyoN+kLdV2zWINiQyRfgIjwgFnW8N2lV16r+kKGhUeZ6Kg9gstjYbeRTGzvFpR1U prXVeZm8V52JyomMvzh9CKrEWIjxdpac5odAvrHOgiZwqldIlJQsC/2hqcHN4PJS 7Jyg6/58iSzpJNIryBnlJ8Et+llabDnvIGLoyY4DlBN0j1LJltsJsptAnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPdMsjXOQV1acriQUJI6E3HCqMRKMB8GA1UdIwQY MBaAFJ50E1uwfGVAzTB72gjKBnS8hMk5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbm5RVFc3QjhaVUROTUh2YUNNb0dkTHlFeVRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS81ZTc4ZjYtMjUzYS00MTE1LWFlNWQt NWRjODBmYWVkMmRjLzEvbm5RVFc3QjhaVUROTUh2YUNNb0dkTHlFeVRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS81ZTc4ZjYtMjUzYS00MTE1LWFlNWQtNWRjODBmYWVkMmRj LzEvbm5RVFc3QjhaVUROTUh2YUNNb0dkTHlFeVRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOSsT/3r4 FtTtFTJxSBiHeWUkxdww3TvmC8KHDwqKEeHY+kINqc2czcg7klrQyceWXrRZaAIJ Qqi/A8DLHjkA3sm61M3ON5j4cJvSJnXSNI1NdepH74df8vS3HmDMHvh5O/XSnem3 pTHsZu5PK/MvcI4YVTnL6iXtyZ+lBpHQ8K6nEIG0VI6NF7/fqiowEsyRv5hmEz5A 7jz7mVS5unASafpGpjvMaxt/Ve6dk7Q+E70oyknS/nTWjkoaShJ3JRj1vLn7Xp1m f3rs9XxrKdtxXAK1ZRtmf2ViWZijK8mCejQ50v5Ha9itfuibjLgviyO3uCkNbWaJ zIW0Q1AbXYMjfA== -----END CERTIFICATE-----Generated at Mon Dec 15 01:01:49 2025 by rpki-client