This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.mft File: nQcEH-VVkeTiI2pA9DkA7ybvBF4.mft (raw, json) Hash identifier: B4Mf1oH5zhP+1rJoq5nyYBzZoC1Zik8Di1eaCXfPdqc= Subject key identifier: DD:14:4F:A9:F8:44:31:56:65:07:76:EA:43:92:E4:76:F9:27:9E:25 Authority key identifier: 9D:07:04:1F:E5:55:91:E4:E2:23:6A:40:F4:39:00:EF:26:EF:04:5E Certificate issuer: /CN=9d07041fe55591e4e2236a40f43900ef26ef045e Certificate serial: 019B10145141479C458838BD6ABBBD131535 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQcEH-VVkeTiI2pA9DkA7ybvBF4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.mft Manifest number: 03FD Signing time: Fri 12 Dec 2025 01:02:05 +0000 Manifest this update: Fri 12 Dec 2025 01:02:05 +0000 Manifest next update: Sat 13 Dec 2025 01:02:05 +0000 Files and hashes: 1: bVoPO_kuGjJeQ_WdFTCc4Jx2oLw.roa (hash: EJPg3LL1a0LdpJ0FryPnZdGj4+/hRiOP31APEGYRAlc=) 2: nQcEH-VVkeTiI2pA9DkA7ybvBF4.crl (hash: 6X3B1AyKNhFh9dlt7Fc+l9WyLEmzKRrBiEkDFm/UuEs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.crl rsync://rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.mft rsync://rpki.ripe.net/repository/DEFAULT/nQcEH-VVkeTiI2pA9DkA7ybvBF4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:14:51:41:47:9c:45:88:38:bd:6a:bb:bd:13:15:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d07041fe55591e4e2236a40f43900ef26ef045e Validity Not Before: Dec 12 01:02:05 2025 GMT Not After : Dec 13 01:02:05 2025 GMT Subject: CN=dd144fa9f8443156650776ea4392e476f9279e25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:de:01:18:12:2c:6b:af:c8:de:0c:7c:1f:4e: fc:44:3a:48:3a:b5:48:77:cd:76:84:c7:d7:48:60: 44:76:e0:e7:32:33:41:f7:0e:3f:e2:c0:dc:33:ae: 70:3e:c4:f3:17:c4:63:24:27:86:40:84:af:0e:f7: 42:97:4e:83:25:c2:28:89:1f:6e:6f:a8:94:32:de: 2b:f3:0f:3b:32:55:24:12:ad:c1:73:02:2c:39:68: 9b:f3:e3:f0:7f:19:b0:5f:49:24:97:35:6c:60:eb: a6:0f:ff:91:5f:ee:55:7b:73:10:94:7c:24:37:a9: 8c:1c:66:1c:a6:ed:73:8f:50:a2:15:41:ba:4d:f7: ff:23:c2:3c:e9:f7:9c:64:a8:d3:6d:e7:d0:37:73: 34:7c:00:0b:12:5e:45:4c:50:28:2c:34:4e:1b:a8: 28:93:60:f4:99:4a:57:bf:4e:f8:bc:9a:44:be:6a: 86:50:d2:f7:eb:f9:09:11:9f:d2:18:03:45:f6:4f: e2:62:d7:b0:60:d3:f0:0e:e3:93:7f:fc:85:6b:c7: 15:79:13:84:66:6f:ee:25:51:bc:dd:9b:d1:fb:69: b8:df:b4:45:a8:0f:d9:ca:65:c5:e1:a5:a3:ec:6c: 64:68:05:1b:b0:cb:87:7c:7e:ac:54:67:2e:97:10: 36:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:14:4F:A9:F8:44:31:56:65:07:76:EA:43:92:E4:76:F9:27:9E:25 X509v3 Authority Key Identifier: keyid:9D:07:04:1F:E5:55:91:E4:E2:23:6A:40:F4:39:00:EF:26:EF:04:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQcEH-VVkeTiI2pA9DkA7ybvBF4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:dd:83:b9:b8:80:72:4f:3e:51:0e:54:60:54:fd:28:24:ff: 4e:c4:a8:1b:01:84:5b:00:08:70:17:92:44:86:0f:39:b9:b0: 01:22:60:ee:53:4d:38:49:6f:52:f3:e0:4b:75:4a:ae:f7:c1: d1:92:2c:39:71:1d:bc:fb:f9:b7:2d:da:ae:39:dc:d1:e8:46: bd:d9:76:17:31:a1:5e:82:63:d9:be:f0:db:f0:1e:20:15:b3: d6:e1:b5:f8:1e:90:3e:0f:55:90:2d:82:ce:18:95:00:d9:c5: 1d:96:55:7e:5c:ac:8c:df:24:c5:c2:81:1e:dc:6d:da:80:b7: 1b:ab:06:ce:2b:d2:d8:4d:43:43:83:b7:7f:00:c6:c0:66:8a: 3c:32:00:bf:af:ea:20:05:db:4f:62:01:92:0c:ac:b2:a3:eb: 62:96:3e:a1:56:37:d6:4f:71:bf:55:84:5b:b8:24:54:c1:74: 91:df:f7:64:26:56:fc:36:ca:e3:56:79:23:c3:ad:66:fd:0d: 8e:37:1a:de:91:5f:9a:b6:46:09:7d:85:48:1a:c9:cc:55:c0: 65:17:54:81:87:75:3f:e9:23:7b:05:ef:0e:f8:ea:73:51:49: 46:5a:60:42:fa:ad:18:db:dd:6a:ee:a0:02:32:33:36:f5:45: f9:60:21:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQFFFBR5xFiDi9aru9ExU1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMDcwNDFmZTU1NTkxZTRlMjIzNmE0MGY0MzkwMGVmMjZl ZjA0NWUwHhcNMjUxMjEyMDEwMjA1WhcNMjUxMjEzMDEwMjA1WjAzMTEwLwYDVQQD EyhkZDE0NGZhOWY4NDQzMTU2NjUwNzc2ZWE0MzkyZTQ3NmY5Mjc5ZTI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzN4BGBIsa6/I3gx8H078RDpIOrVI d812hMfXSGBEduDnMjNB9w4/4sDcM65wPsTzF8RjJCeGQISvDvdCl06DJcIoiR9u b6iUMt4r8w87MlUkEq3BcwIsOWib8+PwfxmwX0kklzVsYOumD/+RX+5Ve3MQlHwk N6mMHGYcpu1zj1CiFUG6Tff/I8I86fecZKjTbefQN3M0fAALEl5FTFAoLDROG6go k2D0mUpXv074vJpEvmqGUNL36/kJEZ/SGANF9k/iYtewYNPwDuOTf/yFa8cVeROE Zm/uJVG83ZvR+2m437RFqA/ZymXF4aWj7GxkaAUbsMuHfH6sVGculxA2uwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN0UT6n4RDFWZQd26kOS5Hb5J54lMB8GA1UdIwQY MBaAFJ0HBB/lVZHk4iNqQPQ5AO8m7wReMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblFjRUgtVlZrZVRpSTJwQTlEa0E3eWJ2QkY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8xMzU2YTgtODkxYy00ZWUxLWI2ZDkt NzQ3NDY5ODlhYzkyLzEvblFjRUgtVlZrZVRpSTJwQTlEa0E3eWJ2QkY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny8xMzU2YTgtODkxYy00ZWUxLWI2ZDktNzQ3NDY5ODlhYzky LzEvblFjRUgtVlZrZVRpSTJwQTlEa0E3eWJ2QkY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQd2DubiA ck8+UQ5UYFT9KCT/TsSoGwGEWwAIcBeSRIYPObmwASJg7lNNOElvUvPgS3VKrvfB 0ZIsOXEdvPv5ty3arjnc0ehGvdl2FzGhXoJj2b7w2/AeIBWz1uG1+B6QPg9VkC2C zhiVANnFHZZVflysjN8kxcKBHtxt2oC3G6sGzivS2E1DQ4O3fwDGwGaKPDIAv6/q IAXbT2IBkgyssqPrYpY+oVY31k9xv1WEW7gkVMF0kd/3ZCZW/DbK41Z5I8OtZv0N jjca3pFfmrZGCX2FSBrJzFXAZRdUgYd1P+kjewXvDvjqc1FJRlpgQvqtGNvdau6g AjIzNvVF+WAhCg== -----END CERTIFICATE-----Generated at Fri Dec 12 02:49:41 2025 by rpki-client