This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.mft File: NE_a0Q7lWzKCpkJGpB3GGoki0l0.mft (raw, json) Hash identifier: 67ZCFt14xMRAT+iy6pEuyAeR2vJH7wDo1f7HpwP664E= Subject key identifier: C0:2F:3B:04:80:7D:A8:BF:B5:3F:C9:65:5C:C0:F0:0E:6D:06:83:DD Authority key identifier: 34:4F:DA:D1:0E:E5:5B:32:82:A6:42:46:A4:1D:C6:1A:89:22:D2:5D Certificate issuer: /CN=344fdad10ee55b3282a64246a41dc61a8922d25d Certificate serial: 019B0E2508F9ABF2928F90896B3EF0F90AA0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NE_a0Q7lWzKCpkJGpB3GGoki0l0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.mft Manifest number: 1474 Signing time: Thu 11 Dec 2025 16:01:06 +0000 Manifest this update: Thu 11 Dec 2025 16:01:06 +0000 Manifest next update: Fri 12 Dec 2025 16:01:06 +0000 Files and hashes: 1: GHI5fKOLnVPTORGJ-8HvgMn5I8g.roa (hash: tTyvweQSG7PSV/1T7+CqEyju3wttfhrfn44tpkM7ENI=) 2: NE_a0Q7lWzKCpkJGpB3GGoki0l0.crl (hash: Ghm0X6cpEG84cQYWjbqJ0UR9/A32wes1fbGdZOox224=) 3: xHwvN6-vM3aYD0WFb7ooENGYbZk.roa (hash: iMOiUeIxNdKNrUiqdP5pHSRFVDIEoaVwDT8Frv9xIdQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.crl rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.mft rsync://rpki.ripe.net/repository/DEFAULT/NE_a0Q7lWzKCpkJGpB3GGoki0l0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:25:08:f9:ab:f2:92:8f:90:89:6b:3e:f0:f9:0a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=344fdad10ee55b3282a64246a41dc61a8922d25d Validity Not Before: Dec 11 16:01:06 2025 GMT Not After : Dec 12 16:01:06 2025 GMT Subject: CN=c02f3b04807da8bfb53fc9655cc0f00e6d0683dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b6:30:37:b2:2c:0f:62:5c:52:0a:3e:8d:4d: de:8f:5f:c9:f8:2f:77:05:4a:d2:62:4b:cb:b0:08: 3d:6f:35:96:ec:83:72:a0:c5:13:a7:38:ae:20:ee: 9c:35:c2:2e:c0:ee:cb:35:1c:df:0a:71:d1:3d:9a: 67:99:85:f3:6e:15:05:37:8e:7a:ab:e7:78:06:f1: b6:8e:f7:4a:3b:e7:e5:b4:54:2c:35:ba:c0:1a:ed: b0:b7:77:04:c8:7f:a8:b3:e1:62:fb:06:97:dd:60: 29:f9:d5:b0:cf:17:43:32:1d:63:c4:9c:59:ae:2d: 9e:b6:d0:d9:10:16:bc:bf:7d:5f:34:ca:3e:34:2e: 09:de:3c:bf:a1:0e:f1:9e:69:3c:ec:a2:70:c8:61: e8:a9:1b:07:f3:bc:09:80:f3:ea:27:67:26:a6:54: 92:5c:c7:3b:a5:63:33:ee:18:9f:8a:d4:2c:b1:d2: c6:ab:f8:69:b3:35:01:94:6e:9b:a7:4e:66:57:f7: 71:1b:f2:65:e5:36:bf:ca:29:49:aa:5b:ee:43:06: b2:b1:37:ad:d2:08:0c:91:e7:31:44:57:d0:e0:ce: cd:29:ff:d1:ff:f7:ee:79:74:8b:18:b6:d1:71:ef: 1e:8a:bc:b3:53:9e:4b:ae:77:b6:a4:df:6c:62:78: 62:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:2F:3B:04:80:7D:A8:BF:B5:3F:C9:65:5C:C0:F0:0E:6D:06:83:DD X509v3 Authority Key Identifier: keyid:34:4F:DA:D1:0E:E5:5B:32:82:A6:42:46:A4:1D:C6:1A:89:22:D2:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NE_a0Q7lWzKCpkJGpB3GGoki0l0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:64:39:b7:a0:c5:36:8c:73:a0:0c:cc:29:29:98:ed:96:38: 3a:2d:be:fe:40:88:1e:00:36:e9:71:35:44:02:8c:ee:94:e2: a8:91:ec:0c:2a:eb:c1:d3:50:c0:f5:08:4f:7b:2a:fb:2c:02: a8:b4:63:c2:1e:d0:da:77:81:b6:f4:4a:ef:86:fd:25:c5:8a: f4:62:91:7b:aa:a5:7f:68:b1:6e:07:df:17:18:4f:45:a7:7f: 62:93:3f:a1:b5:3a:f0:3a:ac:90:2d:52:7b:60:a9:0d:2e:16: 8d:d8:11:79:89:82:d4:56:c3:5e:5e:6f:0a:9c:62:df:da:fe: d7:6a:aa:37:3d:63:57:c6:e4:48:d2:39:c9:e1:c3:4d:f3:d5: 11:e4:99:71:07:84:27:40:1d:7c:a0:89:c2:4c:3c:16:41:34: 00:e8:0a:76:94:94:3d:ed:ef:c9:29:f4:32:f9:ff:7a:aa:d7: a2:6f:c5:85:25:00:4a:3a:6e:a1:3b:c3:f5:14:cb:19:69:ea: ec:ff:44:49:56:b8:f5:6b:74:0b:7e:38:6b:a4:63:72:1d:5a: cc:f7:97:81:48:52:97:19:5e:b2:f8:b3:5e:ac:29:87:b9:ad: d1:2d:de:b8:b7:e3:0d:54:d4:51:d1:52:23:e8:e1:d2:07:01: 7d:30:b7:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJQj5q/KSj5CJaz7w+QqgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0NGZkYWQxMGVlNTViMzI4MmE2NDI0NmE0MWRjNjFhODky MmQyNWQwHhcNMjUxMjExMTYwMTA2WhcNMjUxMjEyMTYwMTA2WjAzMTEwLwYDVQQD EyhjMDJmM2IwNDgwN2RhOGJmYjUzZmM5NjU1Y2MwZjAwZTZkMDY4M2RkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7YwN7IsD2JcUgo+jU3ej1/J+C93 BUrSYkvLsAg9bzWW7INyoMUTpziuIO6cNcIuwO7LNRzfCnHRPZpnmYXzbhUFN456 q+d4BvG2jvdKO+fltFQsNbrAGu2wt3cEyH+os+Fi+waX3WAp+dWwzxdDMh1jxJxZ ri2ettDZEBa8v31fNMo+NC4J3jy/oQ7xnmk87KJwyGHoqRsH87wJgPPqJ2cmplSS XMc7pWMz7hifitQssdLGq/hpszUBlG6bp05mV/dxG/Jl5Ta/yilJqlvuQwaysTet 0ggMkecxRFfQ4M7NKf/R//fueXSLGLbRce8eiryzU55Lrne2pN9sYnhiAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMAvOwSAfai/tT/JZVzA8A5tBoPdMB8GA1UdIwQY MBaAFDRP2tEO5VsygqZCRqQdxhqJItJdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkVfYTBRN2xXektDcGtKR3BCM0dHb2tpMGwwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8wNjc2MzAtMzA2ZS00YzM3LThiY2Mt NGYwMjFjNzNlZjc0LzEvTkVfYTBRN2xXektDcGtKR3BCM0dHb2tpMGwwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS8wNjc2MzAtMzA2ZS00YzM3LThiY2MtNGYwMjFjNzNlZjc0 LzEvTkVfYTBRN2xXektDcGtKR3BCM0dHb2tpMGwwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVGQ5t6DF NoxzoAzMKSmY7ZY4Oi2+/kCIHgA26XE1RAKM7pTiqJHsDCrrwdNQwPUIT3sq+ywC qLRjwh7Q2neBtvRK74b9JcWK9GKRe6qlf2ixbgffFxhPRad/YpM/obU68DqskC1S e2CpDS4WjdgReYmC1FbDXl5vCpxi39r+12qqNz1jV8bkSNI5yeHDTfPVEeSZcQeE J0AdfKCJwkw8FkE0AOgKdpSUPe3vySn0Mvn/eqrXom/FhSUASjpuoTvD9RTLGWnq 7P9ESVa49Wt0C344a6Rjch1azPeXgUhSlxlesvizXqwph7mt0S3euLfjDVTUUdFS I+jh0gcBfTC3bQ== -----END CERTIFICATE-----Generated at Thu Dec 11 23:53:54 2025 by rpki-client