This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.mft File: NiQhSOPmNqkDQ_PpUES439udHNk.mft (raw, json) Hash identifier: UrlF2tENMoLa5j6/+7gsDESHIS8Ugh3AVX8cST44LOM= Subject key identifier: 40:8A:2E:FF:A6:6E:90:54:CD:2C:51:41:E5:78:04:07:63:65:8C:EC Authority key identifier: 36:24:21:48:E3:E6:36:A9:03:43:F3:E9:50:44:B8:DF:DB:9D:1C:D9 Certificate issuer: /CN=36242148e3e636a90343f3e95044b8dfdb9d1cd9 Certificate serial: 019B12DDA1AE518D2AB38980AE9B65171076 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NiQhSOPmNqkDQ_PpUES439udHNk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.mft Manifest number: 02CD Signing time: Fri 12 Dec 2025 14:01:13 +0000 Manifest this update: Fri 12 Dec 2025 14:01:13 +0000 Manifest next update: Sat 13 Dec 2025 14:01:13 +0000 Files and hashes: 1: NiQhSOPmNqkDQ_PpUES439udHNk.crl (hash: oXxSiIGE+Xpvx/WYY4iBPdS4FLTS9cEDa0oKgbdHMxQ=) 2: zIR-Nz3H2D4s_KM8Bm98PoR8Mws.roa (hash: vxeo0iUuDX5Ze9Stf4uTh6KeWV+Vu5qvbWwTZuqVEFY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.crl rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.mft rsync://rpki.ripe.net/repository/DEFAULT/NiQhSOPmNqkDQ_PpUES439udHNk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:dd:a1:ae:51:8d:2a:b3:89:80:ae:9b:65:17:10:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36242148e3e636a90343f3e95044b8dfdb9d1cd9 Validity Not Before: Dec 12 14:01:13 2025 GMT Not After : Dec 13 14:01:13 2025 GMT Subject: CN=408a2effa66e9054cd2c5141e578040763658cec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:97:a0:82:a3:a1:87:84:45:87:bb:4d:0b:73: 95:84:23:0e:bb:9e:94:98:99:56:87:6a:55:a6:51: 2e:e0:c0:0c:a2:66:ad:d9:1a:37:b4:e9:20:f1:e2: 41:ab:cd:32:7f:55:b6:1e:b5:af:b2:45:04:82:26: 9f:b2:41:7c:be:d9:4c:e7:a1:62:5c:18:56:0f:2a: 9c:94:60:d8:9d:b2:2d:f0:c1:b7:38:1f:75:34:ff: a8:11:c1:1d:1a:e4:b6:f1:e6:56:24:ac:54:92:77: 86:39:5f:3b:5d:6b:37:45:ec:62:9b:75:9d:62:45: d5:23:d6:cd:25:81:e3:94:b3:81:8c:d1:5f:3c:be: 93:b2:2e:bb:2f:91:dc:8e:dd:0c:36:01:41:ae:df: 36:72:1a:be:e9:47:3d:e6:30:1d:41:c4:c2:ef:6e: e5:2e:85:88:33:04:67:3d:52:67:db:e2:a7:bf:96: 36:5e:9f:6b:02:06:1c:cf:de:f9:87:4d:1a:eb:09: e3:66:0b:5f:dc:90:d1:98:db:86:13:a9:e8:4e:e2: a8:34:95:3f:64:ae:28:63:f4:57:a5:f4:15:7a:4b: 90:2b:25:3e:76:1f:80:d7:7a:6f:eb:c9:c8:85:a9: aa:a4:ef:f2:ff:5f:51:d3:58:96:b9:96:29:71:7f: b2:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:8A:2E:FF:A6:6E:90:54:CD:2C:51:41:E5:78:04:07:63:65:8C:EC X509v3 Authority Key Identifier: keyid:36:24:21:48:E3:E6:36:A9:03:43:F3:E9:50:44:B8:DF:DB:9D:1C:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiQhSOPmNqkDQ_PpUES439udHNk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:6f:25:d9:6c:cb:f2:0b:a6:29:8a:0b:70:06:cf:30:05:e6: a9:99:55:03:66:d7:40:94:c1:38:e5:69:8c:95:b0:49:70:2e: 35:99:c5:24:67:ee:e8:82:6e:86:cf:6c:74:0b:3d:9c:cb:cb: 6e:73:c2:97:4b:d2:1b:e6:d6:0b:83:80:f6:13:f6:82:48:45: 4a:9f:bb:58:61:50:3e:7b:ae:0c:0e:53:89:cb:00:d0:c8:01: c3:e7:0b:25:ae:90:12:de:e6:4f:07:c5:5f:d9:87:a2:62:1f: 49:6c:64:e0:30:87:37:ed:33:5f:5a:a4:bd:6c:c4:ba:ad:1f: da:b4:13:27:19:2f:8e:7b:f0:0f:97:6c:18:e4:0e:17:b9:da: 94:02:4a:1a:8a:18:9a:7a:4c:e0:54:0f:74:73:51:1a:cb:f9: db:5a:e8:a6:52:86:81:55:ed:48:d7:b5:5e:fc:51:25:83:16: eb:aa:0e:cb:17:f6:63:b6:47:8c:c2:e1:09:5b:5f:16:a3:7c: da:80:8f:8b:a2:fa:5a:c5:11:75:bd:7b:a8:1b:e2:3e:f0:8c: 3c:98:6e:04:c6:db:47:97:32:5c:43:d2:85:94:72:2b:11:59: 05:2c:47:fd:db:3b:62:d9:a2:cc:d1:c6:5a:52:72:33:7e:89: 92:35:7f:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsS3aGuUY0qs4mArptlFxB2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2MjQyMTQ4ZTNlNjM2YTkwMzQzZjNlOTUwNDRiOGRmZGI5 ZDFjZDkwHhcNMjUxMjEyMTQwMTEzWhcNMjUxMjEzMTQwMTEzWjAzMTEwLwYDVQQD Eyg0MDhhMmVmZmE2NmU5MDU0Y2QyYzUxNDFlNTc4MDQwNzYzNjU4Y2VjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypeggqOhh4RFh7tNC3OVhCMOu56U mJlWh2pVplEu4MAMomat2Ro3tOkg8eJBq80yf1W2HrWvskUEgiafskF8vtlM56Fi XBhWDyqclGDYnbIt8MG3OB91NP+oEcEdGuS28eZWJKxUkneGOV87XWs3Rexim3Wd YkXVI9bNJYHjlLOBjNFfPL6Tsi67L5Hcjt0MNgFBrt82chq+6Uc95jAdQcTC727l LoWIMwRnPVJn2+Knv5Y2Xp9rAgYcz975h00a6wnjZgtf3JDRmNuGE6noTuKoNJU/ ZK4oY/RXpfQVekuQKyU+dh+A13pv68nIhamqpO/y/19R01iWuZYpcX+ybQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFECKLv+mbpBUzSxRQeV4BAdjZYzsMB8GA1UdIwQY MBaAFDYkIUjj5japA0Pz6VBEuN/bnRzZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmlRaFNPUG1OcWtEUV9QcFVFUzQzOXVkSE5rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8zYzNkYTAtZDNmOC00YWEyLTgzMzQt MjZkNzU5MzY1NDAyLzEvTmlRaFNPUG1OcWtEUV9QcFVFUzQzOXVkSE5rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC8zYzNkYTAtZDNmOC00YWEyLTgzMzQtMjZkNzU5MzY1NDAy LzEvTmlRaFNPUG1OcWtEUV9QcFVFUzQzOXVkSE5rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAz28l2WzL 8gumKYoLcAbPMAXmqZlVA2bXQJTBOOVpjJWwSXAuNZnFJGfu6IJuhs9sdAs9nMvL bnPCl0vSG+bWC4OA9hP2gkhFSp+7WGFQPnuuDA5TicsA0MgBw+cLJa6QEt7mTwfF X9mHomIfSWxk4DCHN+0zX1qkvWzEuq0f2rQTJxkvjnvwD5dsGOQOF7nalAJKGooY mnpM4FQPdHNRGsv521roplKGgVXtSNe1XvxRJYMW66oOyxf2Y7ZHjMLhCVtfFqN8 2oCPi6L6WsURdb17qBviPvCMPJhuBMbbR5cyXEPShZRyKxFZBSxH/ds7YtmizNHG WlJyM36JkjV/9g== -----END CERTIFICATE-----Generated at Fri Dec 12 18:50:51 2025 by rpki-client