This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft File: NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft (raw, json) Hash identifier: 8hpoMxq48nzONMTpf/eeKbzglFV3J+O02cSKh+EAWbI= Subject key identifier: 2A:8A:C9:48:67:CD:CC:A9:BC:9B:04:49:B2:E7:7C:1C:F6:9C:7D:35 Authority key identifier: 36:A4:66:8F:F8:38:14:AF:90:A7:8B:4F:C8:D2:62:32:50:58:CB:C6 Certificate issuer: /CN=36a4668ff83814af90a78b4fc8d262325058cbc6 Certificate serial: 019B405B41C320BF43A5F39DDF10E840C44D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft Manifest number: 178C Signing time: Sun 21 Dec 2025 10:01:20 +0000 Manifest this update: Sun 21 Dec 2025 10:01:20 +0000 Manifest next update: Mon 22 Dec 2025 10:01:20 +0000 Files and hashes: 1: Bha5fqCb4Fccw9Hz-g5tESnNC_M.roa (hash: 46eG+dZ14ZYRFYw5iRf0nTqMM6SE1SjEdU7Pao7e1x0=) 2: NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.crl (hash: a7eZmH66IQkdSEZpSaqZDmcNuoWY4UMKmBjMV5Fu0gA=) 3: k7ZKxdVx9_HpLEEXMgJ7VK0ot74.roa (hash: Jn0c0Y7u45CliHNs1mV0LEaHAyb9OLN6GTScJnODixs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.crl rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft rsync://rpki.ripe.net/repository/DEFAULT/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5b:41:c3:20:bf:43:a5:f3:9d:df:10:e8:40:c4:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36a4668ff83814af90a78b4fc8d262325058cbc6 Validity Not Before: Dec 21 10:01:20 2025 GMT Not After : Dec 22 10:01:20 2025 GMT Subject: CN=2a8ac94867cdcca9bc9b0449b2e77c1cf69c7d35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:37:a9:cf:16:08:cb:c5:17:ff:b6:3d:a5:75: ba:f2:55:14:4b:bf:f4:59:5d:81:ba:f2:2c:be:1c: 4d:06:0d:2f:9c:a1:7f:6c:a1:34:bb:f1:a2:da:4c: d7:f7:16:0f:55:1d:db:d7:a0:8b:de:fe:d5:c3:42: 80:f2:78:27:f8:c3:9c:29:4f:a1:e8:4a:36:26:bd: 5a:c6:da:42:82:af:de:c2:16:27:23:dd:68:51:c7: 98:d3:45:8f:92:c9:65:d8:f7:d4:cd:c1:95:a0:eb: f5:e9:df:ec:9d:71:ba:17:9c:23:c0:44:6d:e0:13: a9:80:d1:f3:22:90:c1:bc:28:55:e0:39:65:b1:df: d7:13:b3:6e:58:a3:e8:e0:21:5a:8c:4a:59:61:41: ff:fe:ad:eb:cc:4a:e5:f0:dc:7f:79:63:5e:2b:c1: 5e:d7:c7:f5:43:c3:e9:dd:dd:7b:ff:ff:89:e8:68: d5:b0:7c:69:ac:5d:a5:da:01:67:52:85:e9:d3:6e: ce:66:b9:81:8b:4d:50:f2:99:9b:7a:cb:0b:f2:bd: da:1a:32:6b:06:0f:f0:9e:86:b5:13:0a:79:68:a7: 8b:e6:02:16:d7:6b:c1:00:4f:dc:0d:67:1b:b2:f9: fc:93:b0:73:c0:85:14:80:fb:61:3f:46:12:00:f8: 25:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:8A:C9:48:67:CD:CC:A9:BC:9B:04:49:B2:E7:7C:1C:F6:9C:7D:35 X509v3 Authority Key Identifier: keyid:36:A4:66:8F:F8:38:14:AF:90:A7:8B:4F:C8:D2:62:32:50:58:CB:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:63:c4:42:e8:d1:9b:63:49:cd:b1:ab:9a:70:26:14:13:e3: c5:33:70:b3:e8:13:3d:fb:06:91:4e:19:2f:7a:35:6c:a6:15: 19:48:7a:ad:c0:4e:ae:a0:24:90:99:17:43:80:2e:8e:1d:e9: dd:f9:51:22:35:be:2c:c9:12:44:23:d1:cc:c6:33:c9:1c:6c: 2a:fb:ad:a5:26:cf:85:ac:54:5e:98:24:ab:e7:ec:d3:36:0d: a6:f3:c4:e3:cd:c4:9b:9a:a3:6d:cc:a4:ad:e8:32:f7:08:cc: 2e:f6:20:f6:87:23:6d:92:35:55:a9:72:bd:6c:d6:9e:c3:fd: 05:c1:d9:a9:88:41:d9:e6:7d:39:74:f4:b4:79:aa:36:45:11: ac:52:ab:55:d1:75:35:e2:d6:59:22:3b:cd:1e:2a:59:26:9d: d6:1d:c3:9a:90:ca:be:b2:24:42:c8:b0:01:f2:4c:4f:a8:6a: 49:f7:c0:bc:73:9a:69:dd:61:41:9e:2e:86:3e:45:d4:7e:ab: 05:b3:28:f0:2e:27:12:4d:54:45:19:b6:76:73:ca:89:0d:87: 93:3a:0d:1b:a8:56:6f:8a:e1:d9:55:ed:9b:06:b7:4f:ee:38: 03:98:b3:54:d3:b9:93:b2:09:75:d6:a1:3e:f1:25:6a:ea:a5: e5:f7:71:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAW0HDIL9DpfOd3xDoQMRNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YTQ2NjhmZjgzODE0YWY5MGE3OGI0ZmM4ZDI2MjMyNTA1 OGNiYzYwHhcNMjUxMjIxMTAwMTIwWhcNMjUxMjIyMTAwMTIwWjAzMTEwLwYDVQQD EygyYThhYzk0ODY3Y2RjY2E5YmM5YjA0NDliMmU3N2MxY2Y2OWM3ZDM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTepzxYIy8UX/7Y9pXW68lUUS7/0 WV2BuvIsvhxNBg0vnKF/bKE0u/Gi2kzX9xYPVR3b16CL3v7Vw0KA8ngn+MOcKU+h 6Eo2Jr1axtpCgq/ewhYnI91oUceY00WPksll2PfUzcGVoOv16d/snXG6F5wjwERt 4BOpgNHzIpDBvChV4Dllsd/XE7NuWKPo4CFajEpZYUH//q3rzErl8Nx/eWNeK8Fe 18f1Q8Pp3d17//+J6GjVsHxprF2l2gFnUoXp027OZrmBi01Q8pmbessL8r3aGjJr Bg/wnoa1Ewp5aKeL5gIW12vBAE/cDWcbsvn8k7BzwIUUgPthP0YSAPglmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCqKyUhnzcypvJsESbLnfBz2nH01MB8GA1UdIwQY MBaAFDakZo/4OBSvkKeLT8jSYjJQWMvGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnFSbWpfZzRGSy1RcDR0UHlOSmlNbEJZeThZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My8wMzFmY2ItYjc0ZS00ZTc1LWE3Yjkt OTBlNjU0MTIyNTJhLzEvTnFSbWpfZzRGSy1RcDR0UHlOSmlNbEJZeThZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My8wMzFmY2ItYjc0ZS00ZTc1LWE3YjktOTBlNjU0MTIyNTJh LzEvTnFSbWpfZzRGSy1RcDR0UHlOSmlNbEJZeThZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmmPEQujR m2NJzbGrmnAmFBPjxTNws+gTPfsGkU4ZL3o1bKYVGUh6rcBOrqAkkJkXQ4Aujh3p 3flRIjW+LMkSRCPRzMYzyRxsKvutpSbPhaxUXpgkq+fs0zYNpvPE483Em5qjbcyk regy9wjMLvYg9ocjbZI1ValyvWzWnsP9BcHZqYhB2eZ9OXT0tHmqNkURrFKrVdF1 NeLWWSI7zR4qWSad1h3DmpDKvrIkQsiwAfJMT6hqSffAvHOaad1hQZ4uhj5F1H6r BbMo8C4nEk1URRm2dnPKiQ2HkzoNG6hWb4rh2VXtmwa3T+44A5izVNO5k7IJddah PvElauql5fdxuA== -----END CERTIFICATE-----Generated at Sun Dec 21 15:39:56 2025 by rpki-client