This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.mft File: _nqNfbMqQNTh0AKKfP0IFLZQ9CI.mft (raw, json) Hash identifier: pao058L9BKO4EBqHYXf6y4jVTYgP0YaJ3DqYBJ90XZ4= Subject key identifier: 3E:28:7E:D5:F7:41:E2:2C:D7:C5:EE:B1:C0:62:29:F3:C2:08:0B:6C Authority key identifier: FE:7A:8D:7D:B3:2A:40:D4:E1:D0:02:8A:7C:FD:08:14:B6:50:F4:22 Certificate issuer: /CN=fe7a8d7db32a40d4e1d0028a7cfd0814b650f422 Certificate serial: 019B5B64F2D59977CC90A3D020A99F3BC7CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.mft Manifest number: 172A Signing time: Fri 26 Dec 2025 16:01:40 +0000 Manifest this update: Fri 26 Dec 2025 16:01:40 +0000 Manifest next update: Sat 27 Dec 2025 16:01:40 +0000 Files and hashes: 1: Hm-j6QJU9FoWf5PoJTZArsYOO-Y.roa (hash: r74V+TICXc97SHMOMlLlN4zJGa1Cwt8Y3q6l6hYrpFg=) 2: _nqNfbMqQNTh0AKKfP0IFLZQ9CI.crl (hash: Y6HXA+ogm3JxxFa5++rf6RSnIMluB5BVhgVM7LrGgCs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.mft rsync://rpki.ripe.net/repository/DEFAULT/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5b:64:f2:d5:99:77:cc:90:a3:d0:20:a9:9f:3b:c7:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe7a8d7db32a40d4e1d0028a7cfd0814b650f422 Validity Not Before: Dec 26 16:01:40 2025 GMT Not After : Dec 27 16:01:40 2025 GMT Subject: CN=3e287ed5f741e22cd7c5eeb1c06229f3c2080b6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:11:e0:88:da:3d:b5:50:65:e2:fa:0a:15:dd: c2:8b:10:e2:83:84:4e:89:fb:12:69:28:de:87:ac: 05:e3:24:25:99:14:79:a9:cc:05:fa:f5:13:21:ee: 68:10:5c:ff:a5:b7:6e:fb:e3:ea:01:41:c0:f1:d0: e5:fa:44:ba:d8:54:7d:5f:68:8c:d5:7b:f7:48:54: aa:98:16:a4:9a:d3:41:90:00:52:eb:59:4f:69:c3: 81:44:ff:4a:01:b3:82:53:61:49:0c:b6:f2:68:cc: d8:32:c5:f4:da:03:4a:d2:aa:a6:f1:8f:92:99:16: f3:dd:af:35:20:e9:4f:62:55:2d:cc:c1:3d:98:d0: 18:c0:f2:2b:eb:5a:7c:51:7a:2e:68:f6:a3:66:88: 02:e1:ad:44:09:5b:e1:9c:62:d3:ed:6e:76:75:59: d8:61:8b:10:9b:7f:39:f2:7e:4a:65:89:e1:f4:e9: 3c:bb:05:c3:f0:96:40:73:56:3f:e4:6f:6a:dd:6c: 1f:f3:30:e1:87:62:ed:96:17:82:63:80:78:56:71: ae:9a:46:71:ea:5c:ea:bd:e3:9b:9c:70:05:26:d5: 9a:09:2f:cb:3d:9c:94:a0:16:80:ed:9d:80:4c:82: 4b:88:23:84:37:5d:11:d3:01:e0:7d:62:f1:23:bb: 49:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:28:7E:D5:F7:41:E2:2C:D7:C5:EE:B1:C0:62:29:F3:C2:08:0B:6C X509v3 Authority Key Identifier: keyid:FE:7A:8D:7D:B3:2A:40:D4:E1:D0:02:8A:7C:FD:08:14:B6:50:F4:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:35:17:fe:0c:a5:db:3d:0b:54:ca:e6:e3:81:66:9a:4b:93: 73:3e:48:67:52:4f:ea:10:af:96:21:ab:af:ea:85:79:08:bb: e1:11:c3:b6:5e:5c:02:03:c9:5a:12:1b:09:07:79:33:60:b7: 92:5c:ee:7c:70:d6:69:4a:2e:f0:36:6f:a2:99:48:d3:f9:87: a3:19:8e:05:45:4b:bf:8d:eb:ae:77:c6:5c:4e:43:a3:79:a5: de:ed:55:a3:b1:96:7e:88:7c:a3:4b:b8:3a:a5:42:e9:cb:c7: 79:3b:cc:95:6a:20:37:ae:b3:f8:11:e5:ec:48:ba:9e:01:38: ea:61:fc:74:3a:1c:0c:03:4e:6b:83:80:99:f1:b2:61:d9:4c: cf:2b:ea:6b:5f:c6:bc:77:b9:1c:af:2e:0b:8f:2a:d7:85:6a: c2:f6:a1:b1:41:b6:b6:aa:a3:43:8e:4f:f0:8a:50:67:8d:54: 87:66:a3:71:88:d9:f9:38:e8:6d:b2:72:d0:1b:53:f5:15:85: b7:af:a8:40:d6:f9:4e:2e:67:99:a8:15:2d:e4:6b:5c:c9:ed: 51:dc:3f:7b:81:ba:a2:54:d0:4e:86:25:fa:1d:e7:99:61:6e: f7:d0:d3:22:d2:c5:e6:f3:87:6c:03:b7:c1:7a:c0:e4:cd:7a: 11:96:0b:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtbZPLVmXfMkKPQIKmfO8fKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlN2E4ZDdkYjMyYTQwZDRlMWQwMDI4YTdjZmQwODE0YjY1 MGY0MjIwHhcNMjUxMjI2MTYwMTQwWhcNMjUxMjI3MTYwMTQwWjAzMTEwLwYDVQQD EygzZTI4N2VkNWY3NDFlMjJjZDdjNWVlYjFjMDYyMjlmM2MyMDgwYjZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxHgiNo9tVBl4voKFd3CixDig4RO ifsSaSjeh6wF4yQlmRR5qcwF+vUTIe5oEFz/pbdu++PqAUHA8dDl+kS62FR9X2iM 1Xv3SFSqmBakmtNBkABS61lPacOBRP9KAbOCU2FJDLbyaMzYMsX02gNK0qqm8Y+S mRbz3a81IOlPYlUtzME9mNAYwPIr61p8UXouaPajZogC4a1ECVvhnGLT7W52dVnY YYsQm3858n5KZYnh9Ok8uwXD8JZAc1Y/5G9q3Wwf8zDhh2LtlheCY4B4VnGumkZx 6lzqveObnHAFJtWaCS/LPZyUoBaA7Z2ATIJLiCOEN10R0wHgfWLxI7tJPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD4oftX3QeIs18XuscBiKfPCCAtsMB8GA1UdIwQY MBaAFP56jX2zKkDU4dACinz9CBS2UPQiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX25xTmZiTXFRTlRoMEFLS2ZQMElGTFpROUNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi83MWU5NDgtNjkxZS00ZGVhLWIwMmIt YjEyYTY5MzNmODI5LzEvX25xTmZiTXFRTlRoMEFLS2ZQMElGTFpROUNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi83MWU5NDgtNjkxZS00ZGVhLWIwMmItYjEyYTY5MzNmODI5 LzEvX25xTmZiTXFRTlRoMEFLS2ZQMElGTFpROUNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXDUX/gyl 2z0LVMrm44FmmkuTcz5IZ1JP6hCvliGrr+qFeQi74RHDtl5cAgPJWhIbCQd5M2C3 klzufHDWaUou8DZvoplI0/mHoxmOBUVLv43rrnfGXE5Do3ml3u1Vo7GWfoh8o0u4 OqVC6cvHeTvMlWogN66z+BHl7Ei6ngE46mH8dDocDANOa4OAmfGyYdlMzyvqa1/G vHe5HK8uC48q14VqwvahsUG2tqqjQ45P8IpQZ41Uh2ajcYjZ+TjobbJy0BtT9RWF t6+oQNb5Ti5nmagVLeRrXMntUdw/e4G6olTQToYl+h3nmWFu99DTItLF5vOHbAO3 wXrA5M16EZYLXQ== -----END CERTIFICATE-----Generated at Fri Dec 26 21:01:57 2025 by rpki-client