This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft File: NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft (raw, json) Hash identifier: 9gjR7Cf3Q5OTGmZmc1N7yP46a5BWxi6DlOshYQf4iKU= Subject key identifier: 94:D5:01:5D:61:9F:03:D6:E2:F4:9E:6B:1D:D9:F8:38:7F:17:8A:CF Authority key identifier: 36:A4:66:8F:F8:38:14:AF:90:A7:8B:4F:C8:D2:62:32:50:58:CB:C6 Certificate issuer: /CN=36a4668ff83814af90a78b4fc8d262325058cbc6 Certificate serial: 019B38A1B8FA3175CE40FBEB1FA3B1434DAF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft Manifest number: 1788 Signing time: Fri 19 Dec 2025 22:01:21 +0000 Manifest this update: Fri 19 Dec 2025 22:01:21 +0000 Manifest next update: Sat 20 Dec 2025 22:01:21 +0000 Files and hashes: 1: Bha5fqCb4Fccw9Hz-g5tESnNC_M.roa (hash: 46eG+dZ14ZYRFYw5iRf0nTqMM6SE1SjEdU7Pao7e1x0=) 2: NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.crl (hash: PmmWoU1d8brHBI9L4y/GhV392hZxewnE/50vEgoyO0c=) 3: k7ZKxdVx9_HpLEEXMgJ7VK0ot74.roa (hash: Jn0c0Y7u45CliHNs1mV0LEaHAyb9OLN6GTScJnODixs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.crl rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft rsync://rpki.ripe.net/repository/DEFAULT/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a1:b8:fa:31:75:ce:40:fb:eb:1f:a3:b1:43:4d:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36a4668ff83814af90a78b4fc8d262325058cbc6 Validity Not Before: Dec 19 22:01:21 2025 GMT Not After : Dec 20 22:01:21 2025 GMT Subject: CN=94d5015d619f03d6e2f49e6b1dd9f8387f178acf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:41:d1:fe:48:0e:f8:67:3a:61:d1:98:3a:2e: d9:bb:71:35:a6:ff:79:44:9e:d1:88:af:40:fd:58: 9b:9c:cd:e8:11:16:b7:34:e0:fb:74:bd:a3:1b:4b: 1c:75:36:e3:22:97:25:cd:fb:6a:e0:cd:65:2a:ec: 18:0b:90:0d:0b:b4:fe:52:3b:7c:91:57:94:08:3a: 6e:0a:ee:64:b1:06:11:c7:b3:1f:4e:ab:44:a0:df: d3:8d:5a:de:18:ff:50:a1:9a:f5:4c:47:37:63:a6: 25:f5:0a:2d:4c:03:ba:bd:71:e9:5f:72:a7:3b:91: 21:86:fd:06:d3:a8:49:e9:11:5f:f7:6f:d7:48:b8: 9c:de:55:88:c0:6f:15:4e:e7:24:bd:0e:bd:b9:a1: c5:11:09:cc:1e:bb:78:d9:d6:61:7b:fe:3f:60:88: 5a:c7:70:f7:84:2a:e4:22:53:ee:7d:ef:fe:87:ba: c6:5f:40:b7:80:6f:fd:c0:2f:c2:fd:d4:14:7e:bd: d4:06:c4:78:07:66:de:27:f1:86:ef:97:5a:35:2d: 68:a2:eb:65:cb:99:6e:13:5f:ea:e5:97:fd:8d:a5: b5:55:a4:d1:9a:01:26:46:e1:53:8e:22:6f:c2:12: 61:1f:55:52:f8:32:34:29:42:cd:44:25:1f:a4:b7: 24:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:D5:01:5D:61:9F:03:D6:E2:F4:9E:6B:1D:D9:F8:38:7F:17:8A:CF X509v3 Authority Key Identifier: keyid:36:A4:66:8F:F8:38:14:AF:90:A7:8B:4F:C8:D2:62:32:50:58:CB:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:da:27:d8:d1:94:bd:f2:12:9a:cf:bd:43:be:ae:91:5a:fa: 64:ed:17:f6:16:11:fb:35:86:50:ed:b1:0c:60:81:c0:28:61: 03:e0:a7:d8:6f:72:c0:a6:a3:59:f6:fc:55:84:e8:f6:bd:91: 52:a3:9c:04:85:c9:dc:af:45:c5:d1:03:be:49:1b:8a:eb:50: 49:30:2f:28:b2:22:f6:49:50:3b:7f:24:04:31:f5:e6:03:e7: 81:91:72:93:79:fa:3a:33:f5:fd:b6:9d:68:fc:bd:e9:50:be: 1a:63:68:50:f8:ce:67:95:0d:7e:9d:89:39:e6:48:b7:16:c2: b0:c2:3a:04:de:d9:27:70:3d:3c:63:62:1e:02:f7:6d:84:e3: cb:5b:11:17:4f:56:d2:9a:c8:02:a0:e1:39:eb:95:a3:8d:a9: c8:95:60:c9:6d:d0:d3:5a:58:aa:58:8b:62:5b:54:97:48:77: 06:5f:5e:e4:35:ae:42:a6:92:1e:b1:ee:5b:22:f2:68:53:43: 92:20:4c:a3:43:2e:df:6e:d1:67:f3:65:2c:a7:68:4a:f0:4d: 7a:19:cf:4a:7d:46:3b:85:d5:7f:ed:d8:80:6b:e9:5a:b4:9d: 72:03:83:ec:73:cb:83:0a:e8:4a:88:d3:d0:e3:4e:3d:59:c1: 78:c8:34:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4obj6MXXOQPvrH6OxQ02vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YTQ2NjhmZjgzODE0YWY5MGE3OGI0ZmM4ZDI2MjMyNTA1 OGNiYzYwHhcNMjUxMjE5MjIwMTIxWhcNMjUxMjIwMjIwMTIxWjAzMTEwLwYDVQQD Eyg5NGQ1MDE1ZDYxOWYwM2Q2ZTJmNDllNmIxZGQ5ZjgzODdmMTc4YWNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0HR/kgO+Gc6YdGYOi7Zu3E1pv95 RJ7RiK9A/VibnM3oERa3NOD7dL2jG0scdTbjIpclzftq4M1lKuwYC5ANC7T+Ujt8 kVeUCDpuCu5ksQYRx7MfTqtEoN/TjVreGP9QoZr1TEc3Y6Yl9QotTAO6vXHpX3Kn O5Ehhv0G06hJ6RFf92/XSLic3lWIwG8VTuckvQ69uaHFEQnMHrt42dZhe/4/YIha x3D3hCrkIlPufe/+h7rGX0C3gG/9wC/C/dQUfr3UBsR4B2beJ/GG75daNS1ooutl y5luE1/q5Zf9jaW1VaTRmgEmRuFTjiJvwhJhH1VS+DI0KULNRCUfpLck6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJTVAV1hnwPW4vSeax3Z+Dh/F4rPMB8GA1UdIwQY MBaAFDakZo/4OBSvkKeLT8jSYjJQWMvGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnFSbWpfZzRGSy1RcDR0UHlOSmlNbEJZeThZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My8wMzFmY2ItYjc0ZS00ZTc1LWE3Yjkt OTBlNjU0MTIyNTJhLzEvTnFSbWpfZzRGSy1RcDR0UHlOSmlNbEJZeThZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My8wMzFmY2ItYjc0ZS00ZTc1LWE3YjktOTBlNjU0MTIyNTJh LzEvTnFSbWpfZzRGSy1RcDR0UHlOSmlNbEJZeThZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq9on2NGU vfISms+9Q76ukVr6ZO0X9hYR+zWGUO2xDGCBwChhA+Cn2G9ywKajWfb8VYTo9r2R UqOcBIXJ3K9FxdEDvkkbiutQSTAvKLIi9klQO38kBDH15gPngZFyk3n6OjP1/bad aPy96VC+GmNoUPjOZ5UNfp2JOeZItxbCsMI6BN7ZJ3A9PGNiHgL3bYTjy1sRF09W 0prIAqDhOeuVo42pyJVgyW3Q01pYqliLYltUl0h3Bl9e5DWuQqaSHrHuWyLyaFND kiBMo0Mu327RZ/NlLKdoSvBNehnPSn1GO4XVf+3YgGvpWrSdcgOD7HPLgwroSojT 0ONOPVnBeMg0bA== -----END CERTIFICATE-----Generated at Fri Dec 19 23:51:35 2025 by rpki-client