This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/745c65-b877-45f2-b898-b30b0e5265a8/1/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.mft File: NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.mft (raw, json) Hash identifier: 5wbWP/Ika1+lSDVwEFel72rwtQ79hhBQ8LricgqYN5w= Subject key identifier: 9C:9C:98:0D:94:40:45:82:9C:BB:59:DF:16:47:3F:69:09:D9:86:E3 Authority key identifier: 36:A1:DA:EC:E1:C6:E8:78:54:6D:BD:13:33:DA:09:FE:B8:BF:F0:18 Certificate issuer: /CN=36a1daece1c6e878546dbd1333da09feb8bff018 Certificate serial: 019B0DB6ED17D090F4102D41F129A59836E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/745c65-b877-45f2-b898-b30b0e5265a8/1/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.mft Manifest number: 0489 Signing time: Thu 11 Dec 2025 14:00:50 +0000 Manifest this update: Thu 11 Dec 2025 14:00:50 +0000 Manifest next update: Fri 12 Dec 2025 14:00:50 +0000 Files and hashes: 1: NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.crl (hash: Y0IAOMIfx8tIFz7B30wYw5wt4VAXm0aVSjETViXKRdQ=) 2: v9WYkBz15RpwA0n7rXgCIDyTPvU.roa (hash: vUv7k6coWvAmWrqVuPUy83SA1mmkmDGBast/PkGxxu4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/745c65-b877-45f2-b898-b30b0e5265a8/1/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/745c65-b877-45f2-b898-b30b0e5265a8/1/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.mft rsync://rpki.ripe.net/repository/DEFAULT/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:b6:ed:17:d0:90:f4:10:2d:41:f1:29:a5:98:36:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36a1daece1c6e878546dbd1333da09feb8bff018 Validity Not Before: Dec 11 14:00:50 2025 GMT Not After : Dec 12 14:00:50 2025 GMT Subject: CN=9c9c980d944045829cbb59df16473f6909d986e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:84:54:e5:b5:db:86:e5:31:f6:d2:0d:02:65: 9d:20:50:f6:2a:a7:24:58:b4:2e:d7:3f:74:fd:ae: 42:6d:81:20:e8:52:8f:02:de:b6:67:83:c7:86:c3: 83:1e:93:21:39:00:14:24:58:72:e4:a9:86:69:7c: 9c:1c:5f:dd:0d:09:fd:3a:06:66:39:b7:ef:86:34: b7:82:3e:55:42:5f:1a:2b:fe:f0:75:ee:ac:ce:03: 60:2e:57:c5:c6:c0:e3:14:15:77:f2:9b:1c:9f:3c: f3:a4:c3:58:1d:d9:3c:e2:cd:67:6d:2d:a9:ba:3f: e2:7d:53:50:8d:4c:65:91:9c:55:b4:35:b0:0f:4f: de:ee:bb:c0:29:cd:71:06:04:e9:c5:5c:3a:42:50: b7:70:8c:10:bf:b9:56:6b:86:7a:e1:8a:ee:19:10: 46:59:09:61:c1:5a:a4:94:57:8c:da:60:4f:de:1b: a1:d6:78:56:68:4f:20:4d:f3:cc:5e:16:68:55:0c: da:ec:96:fa:e8:84:6f:7a:b5:70:02:75:09:c9:a5: a1:12:1c:1e:61:8e:73:d9:46:2b:07:3b:e2:dd:e2: 5b:43:c4:a7:07:c3:9b:32:82:ab:85:0d:2c:d4:41: 08:55:ac:ba:6c:5d:09:fa:84:57:23:28:21:5b:45: c5:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:9C:98:0D:94:40:45:82:9C:BB:59:DF:16:47:3F:69:09:D9:86:E3 X509v3 Authority Key Identifier: keyid:36:A1:DA:EC:E1:C6:E8:78:54:6D:BD:13:33:DA:09:FE:B8:BF:F0:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/745c65-b877-45f2-b898-b30b0e5265a8/1/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/745c65-b877-45f2-b898-b30b0e5265a8/1/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:91:71:07:d4:36:d0:0d:88:84:ad:07:23:d9:77:36:67:3b: 0b:da:1e:37:57:bc:b9:52:86:cc:83:96:7e:22:ce:c8:d6:14: 3c:b4:07:6f:54:f1:a2:9d:4f:74:d5:df:d6:56:79:ef:c1:52: 79:b0:f6:4a:19:8d:09:3d:ca:8d:82:9f:bc:a8:5a:31:7a:d5: e6:7a:e8:43:2c:aa:bb:f0:91:a0:0c:86:b1:e2:db:fb:b8:c0: a1:43:1e:ba:80:e3:fc:bb:5b:e2:ee:47:22:ac:31:8a:c0:2a: 35:e3:19:aa:c8:b6:b3:98:4b:6c:30:10:76:2c:bd:c6:9d:25: 58:01:66:c0:59:05:96:e1:d7:2c:e7:bc:cb:56:34:0b:84:ff: a5:f8:86:ef:77:92:42:9d:cf:78:69:be:60:5c:a8:89:59:75: 8c:0a:7e:2e:ce:37:58:bf:c4:5d:12:7a:47:45:1f:89:35:6c: 9d:4b:af:65:d8:ef:00:fb:e7:af:81:9f:ec:e1:42:1c:2e:26: 76:d2:5b:ab:e3:63:b1:8d:33:1c:19:80:ec:d3:ff:41:08:ea: 0b:ec:79:ae:91:13:34:98:6c:d7:35:73:41:db:17:9b:c8:f4: b5:f7:9e:c7:37:d7:7f:b5:90:b1:39:44:ef:c8:0a:95:48:9e: 00:bc:4d:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsNtu0X0JD0EC1B8SmlmDbmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YTFkYWVjZTFjNmU4Nzg1NDZkYmQxMzMzZGEwOWZlYjhi ZmYwMTgwHhcNMjUxMjExMTQwMDUwWhcNMjUxMjEyMTQwMDUwWjAzMTEwLwYDVQQD Eyg5YzljOTgwZDk0NDA0NTgyOWNiYjU5ZGYxNjQ3M2Y2OTA5ZDk4NmUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8IRU5bXbhuUx9tINAmWdIFD2Kqck WLQu1z90/a5CbYEg6FKPAt62Z4PHhsODHpMhOQAUJFhy5KmGaXycHF/dDQn9OgZm ObfvhjS3gj5VQl8aK/7wde6szgNgLlfFxsDjFBV38pscnzzzpMNYHdk84s1nbS2p uj/ifVNQjUxlkZxVtDWwD0/e7rvAKc1xBgTpxVw6QlC3cIwQv7lWa4Z64YruGRBG WQlhwVqklFeM2mBP3huh1nhWaE8gTfPMXhZoVQza7Jb66IRverVwAnUJyaWhEhwe YY5z2UYrBzvi3eJbQ8SnB8ObMoKrhQ0s1EEIVay6bF0J+oRXIyghW0XFmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJycmA2UQEWCnLtZ3xZHP2kJ2YbjMB8GA1UdIwQY MBaAFDah2uzhxuh4VG29EzPaCf64v/AYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnFIYTdPSEc2SGhVYmIwVE05b0pfcmlfOEJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS83NDVjNjUtYjg3Ny00NWYyLWI4OTgt YjMwYjBlNTI2NWE4LzEvTnFIYTdPSEc2SGhVYmIwVE05b0pfcmlfOEJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS83NDVjNjUtYjg3Ny00NWYyLWI4OTgtYjMwYjBlNTI2NWE4 LzEvTnFIYTdPSEc2SGhVYmIwVE05b0pfcmlfOEJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADpFxB9Q2 0A2IhK0HI9l3Nmc7C9oeN1e8uVKGzIOWfiLOyNYUPLQHb1Txop1PdNXf1lZ578FS ebD2ShmNCT3KjYKfvKhaMXrV5nroQyyqu/CRoAyGseLb+7jAoUMeuoDj/Ltb4u5H IqwxisAqNeMZqsi2s5hLbDAQdiy9xp0lWAFmwFkFluHXLOe8y1Y0C4T/pfiG73eS Qp3PeGm+YFyoiVl1jAp+Ls43WL/EXRJ6R0UfiTVsnUuvZdjvAPvnr4Gf7OFCHC4m dtJbq+NjsY0zHBmA7NP/QQjqC+x5rpETNJhs1zVzQdsXm8j0tfeexzfXf7WQsTlE 78gKlUieALxNLw== -----END CERTIFICATE-----Generated at Thu Dec 11 23:19:15 2025 by rpki-client