This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.mft File: NLQZ-koKFgUYgxjN9KIESZKFO5U.mft (raw, json) Hash identifier: bNY0Z3VfkJRb551FnHLsAQv/+eh5KvZEeiHGT1zrFQk= Subject key identifier: 01:84:8F:49:03:0F:70:17:F9:8C:0E:17:99:25:A6:69:0E:2F:CA:D3 Authority key identifier: 34:B4:19:FA:4A:0A:16:05:18:83:18:CD:F4:A2:04:49:92:85:3B:95 Certificate issuer: /CN=34b419fa4a0a1605188318cdf4a2044992853b95 Certificate serial: 019B115D2FF9FA4DA67D96B0B839F3C34752 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLQZ-koKFgUYgxjN9KIESZKFO5U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.mft Manifest number: 1035 Signing time: Fri 12 Dec 2025 07:01:18 +0000 Manifest this update: Fri 12 Dec 2025 07:01:18 +0000 Manifest next update: Sat 13 Dec 2025 07:01:18 +0000 Files and hashes: 1: CNQCSVKEMGXZWYhuFwFlfeJh3Us.roa (hash: HUYQM19IzL3twBwaH+2KXeSqoub/kejTXefcV/fEL14=) 2: CNv0NdNZKIhaMEB-_zcwx5XHpgI.roa (hash: jSc4O0ONF5PwUEe8AoTXbFWewQ1vQ1toZjhU7yhjZAU=) 3: NLQZ-koKFgUYgxjN9KIESZKFO5U.crl (hash: FnPV+EJkDI4S4g0rAeYam4W8sLfEc5JX1LKVw8c+/us=) 4: wig6KC4gSVw0HyIKRBc2xTnuVN4.roa (hash: EHt3EBj8Qls7cfEcrr19uaUc9VJjWJHcYHVlVYE7DsU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.mft rsync://rpki.ripe.net/repository/DEFAULT/NLQZ-koKFgUYgxjN9KIESZKFO5U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 07:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:5d:2f:f9:fa:4d:a6:7d:96:b0:b8:39:f3:c3:47:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34b419fa4a0a1605188318cdf4a2044992853b95 Validity Not Before: Dec 12 07:01:18 2025 GMT Not After : Dec 13 07:01:18 2025 GMT Subject: CN=01848f49030f7017f98c0e179925a6690e2fcad3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:be:13:3e:2d:ec:b0:d9:3c:51:c8:71:d5:44: 59:1f:42:58:a7:99:16:c2:cd:7d:73:de:1b:09:46: 3b:1a:c2:d9:da:51:f1:85:36:43:1a:6c:f5:a5:86: fb:af:44:a7:8e:e7:90:27:1a:b5:90:9b:6f:42:87: 67:13:22:02:84:07:5d:70:6f:97:a0:7d:5e:cd:ba: 3a:ea:e5:36:1d:be:c2:75:36:2b:0f:23:3c:bb:10: b3:c0:f4:58:58:cb:d8:3a:a5:0e:91:e3:b4:83:f2: e9:6d:d0:84:92:4f:02:d0:5f:14:79:ed:1f:1a:be: 68:ea:2a:99:2c:da:98:7a:e5:94:30:ca:4c:96:d7: e6:dc:e2:1c:86:4b:8d:3c:9a:c0:8e:67:2b:54:ca: 97:0d:0d:8b:00:a5:7f:b2:34:95:99:09:59:83:cc: 96:e4:40:ed:09:78:e8:d7:4a:a3:cc:13:35:3e:8c: f2:68:0d:45:78:a7:75:93:da:57:18:8b:03:79:0b: c2:19:86:61:13:91:ca:76:b2:1a:81:1d:1c:59:bb: 3a:54:7c:cc:43:1c:b5:78:1b:77:c9:eb:8d:53:a8: 2c:6c:29:17:4d:11:c0:38:c9:75:ac:b7:7a:b5:3f: 12:7d:58:b0:e8:11:8b:da:91:0e:18:06:6a:25:ef: 84:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:84:8F:49:03:0F:70:17:F9:8C:0E:17:99:25:A6:69:0E:2F:CA:D3 X509v3 Authority Key Identifier: keyid:34:B4:19:FA:4A:0A:16:05:18:83:18:CD:F4:A2:04:49:92:85:3B:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLQZ-koKFgUYgxjN9KIESZKFO5U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:2c:6f:f5:b2:14:b6:bb:c1:1f:55:1b:37:5b:7e:b5:c5:9a: 60:08:3a:eb:61:22:f6:75:07:57:d7:99:03:5f:48:89:a9:ff: bf:12:58:a1:09:61:ff:5a:b6:3e:8a:22:e1:6f:db:a0:6e:c0: d7:cd:35:cd:8e:39:c2:11:88:a2:db:e6:e9:62:eb:ee:8c:77: d7:65:bd:7d:9b:28:33:ad:f7:53:92:3d:96:7f:93:e1:99:08: 11:e4:e3:29:37:37:19:1d:4b:05:a3:42:ce:ef:ab:6f:e2:40: 61:84:ec:0a:bc:a3:7b:0f:4d:14:f3:b6:20:4c:f8:9f:6e:a5: 3a:57:7f:68:98:6d:e0:61:85:b8:8b:e9:51:c0:8e:eb:e3:6f: ee:06:78:8a:e6:2c:62:85:6c:2d:f0:50:8d:b1:f6:e3:5f:70: cd:b0:8a:ac:f1:c9:71:41:a5:4e:9c:58:73:52:ce:fc:88:61: 95:c0:a5:e4:8e:10:d6:1b:d7:08:d8:ea:01:04:46:dc:cf:6f: 1e:b8:0d:a8:b1:c1:c3:c7:d9:ec:2f:cd:bf:e3:5a:c9:b2:91: 07:c4:83:5b:d7:cf:c7:5a:c8:20:76:d6:72:c1:5e:ed:d5:9d: ab:1f:f3:b6:e6:91:d8:19:83:0d:41:06:28:06:2b:18:ea:df: d9:96:57:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsRXS/5+k2mfZawuDnzw0dSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0YjQxOWZhNGEwYTE2MDUxODgzMThjZGY0YTIwNDQ5OTI4 NTNiOTUwHhcNMjUxMjEyMDcwMTE4WhcNMjUxMjEzMDcwMTE4WjAzMTEwLwYDVQQD EygwMTg0OGY0OTAzMGY3MDE3Zjk4YzBlMTc5OTI1YTY2OTBlMmZjYWQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAor4TPi3ssNk8Uchx1URZH0JYp5kW ws19c94bCUY7GsLZ2lHxhTZDGmz1pYb7r0SnjueQJxq1kJtvQodnEyIChAddcG+X oH1ezbo66uU2Hb7CdTYrDyM8uxCzwPRYWMvYOqUOkeO0g/LpbdCEkk8C0F8Uee0f Gr5o6iqZLNqYeuWUMMpMltfm3OIchkuNPJrAjmcrVMqXDQ2LAKV/sjSVmQlZg8yW 5EDtCXjo10qjzBM1PozyaA1FeKd1k9pXGIsDeQvCGYZhE5HKdrIagR0cWbs6VHzM Qxy1eBt3yeuNU6gsbCkXTRHAOMl1rLd6tT8SfViw6BGL2pEOGAZqJe+EpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAGEj0kDD3AX+YwOF5klpmkOL8rTMB8GA1UdIwQY MBaAFDS0GfpKChYFGIMYzfSiBEmShTuVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkxRWi1rb0tGZ1VZZ3hqTjlLSUVTWktGTzVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi84Yzc5ZmItN2E1Ny00MjlkLTljMzMt ODc3NzU0NGM5Mjc1LzEvTkxRWi1rb0tGZ1VZZ3hqTjlLSUVTWktGTzVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi84Yzc5ZmItN2E1Ny00MjlkLTljMzMtODc3NzU0NGM5Mjc1 LzEvTkxRWi1rb0tGZ1VZZ3hqTjlLSUVTWktGTzVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVixv9bIU trvBH1UbN1t+tcWaYAg662Ei9nUHV9eZA19Iian/vxJYoQlh/1q2Pooi4W/boG7A 1801zY45whGIotvm6WLr7ox312W9fZsoM633U5I9ln+T4ZkIEeTjKTc3GR1LBaNC zu+rb+JAYYTsCryjew9NFPO2IEz4n26lOld/aJht4GGFuIvpUcCO6+Nv7gZ4iuYs YoVsLfBQjbH2419wzbCKrPHJcUGlTpxYc1LO/IhhlcCl5I4Q1hvXCNjqAQRG3M9v HrgNqLHBw8fZ7C/Nv+NaybKRB8SDW9fPx1rIIHbWcsFe7dWdqx/ztuaR2BmDDUEG KAYrGOrf2ZZXkA== -----END CERTIFICATE-----Generated at Fri Dec 12 13:21:19 2025 by rpki-client