This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/848fd6-eb80-4e1e-8378-3e46ce35d4e7/1/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.mft File: DQ2_nrg2CFwZ2T9SVCIcM5SOheM.mft (raw, json) Hash identifier: gYIJqNXUXZJ91hcfSrtkAF2uxjKnkAqUAEbhzOm9jnk= Subject key identifier: 13:1D:16:8B:4D:00:EA:E9:77:E8:B1:B2:4C:0F:01:F0:DB:E4:38:77 Authority key identifier: 0D:0D:BF:9E:B8:36:08:5C:19:D9:3F:52:54:22:1C:33:94:8E:85:E3 Certificate issuer: /CN=0d0dbf9eb836085c19d93f5254221c33948e85e3 Certificate serial: 019B18DF986055CBED51BDF9789688645908 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/848fd6-eb80-4e1e-8378-3e46ce35d4e7/1/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.mft Manifest number: 1384 Signing time: Sat 13 Dec 2025 18:01:05 +0000 Manifest this update: Sat 13 Dec 2025 18:01:05 +0000 Manifest next update: Sun 14 Dec 2025 18:01:05 +0000 Files and hashes: 1: DQ2_nrg2CFwZ2T9SVCIcM5SOheM.crl (hash: z+DX/bMGm7g0a4AIsVCskmX56NIPyjEHKpZ87n6SHW0=) 2: YVf3u5lFieXSo4MA7qYyxZHHzPg.roa (hash: LTVF5N88k7skTnyboglAJr7FjEe2LUwSGTf3pVeiANQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/848fd6-eb80-4e1e-8378-3e46ce35d4e7/1/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.crl rsync://rpki.ripe.net/repository/DEFAULT/89/848fd6-eb80-4e1e-8378-3e46ce35d4e7/1/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.mft rsync://rpki.ripe.net/repository/DEFAULT/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:18:df:98:60:55:cb:ed:51:bd:f9:78:96:88:64:59:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d0dbf9eb836085c19d93f5254221c33948e85e3 Validity Not Before: Dec 13 18:01:05 2025 GMT Not After : Dec 14 18:01:05 2025 GMT Subject: CN=131d168b4d00eae977e8b1b24c0f01f0dbe43877 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:6e:b7:72:61:e7:33:fa:68:6a:fc:d0:31:91: e3:f0:45:0f:1c:06:10:ca:61:c9:da:48:bd:c3:62: 6a:5b:cb:db:94:af:41:30:98:eb:5a:4d:10:33:c7: cc:25:84:20:08:b2:40:dc:d3:5e:a6:8b:3e:ab:6b: 0d:31:ef:ce:39:3d:da:dc:a9:ab:cb:6c:bd:8b:e8: ee:95:20:c5:eb:8d:0e:ed:d5:ce:29:87:e3:b7:d5: 4c:3a:e0:af:27:53:2e:3d:7a:89:34:b4:5f:e0:6d: e1:de:4b:5c:72:cc:44:5d:74:87:37:47:ce:88:b6: d5:90:81:88:33:ea:d1:2b:d0:0f:e2:41:5c:a8:04: e2:33:cb:ef:74:8d:fb:15:15:46:2e:35:87:6e:b6: 89:87:e7:02:d8:ab:38:6d:82:f0:08:81:15:05:88: a5:40:9e:7c:f9:55:11:45:60:c5:16:c7:c6:8b:97: 14:d3:a1:19:18:8b:0e:69:18:5e:a9:fa:6a:b9:ea: 4d:2e:e2:62:fa:28:c8:a5:67:fd:99:c8:55:ff:2a: e3:7b:60:41:21:01:43:e8:00:c6:85:6d:ad:68:60: 01:a0:85:cf:64:c6:de:89:3f:40:49:b3:df:d8:9c: cc:a3:62:48:3d:be:48:75:ce:0b:dd:38:ec:7f:af: 8b:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:1D:16:8B:4D:00:EA:E9:77:E8:B1:B2:4C:0F:01:F0:DB:E4:38:77 X509v3 Authority Key Identifier: keyid:0D:0D:BF:9E:B8:36:08:5C:19:D9:3F:52:54:22:1C:33:94:8E:85:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/848fd6-eb80-4e1e-8378-3e46ce35d4e7/1/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/848fd6-eb80-4e1e-8378-3e46ce35d4e7/1/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:84:9b:68:77:d4:ee:34:2b:6f:c0:f8:c9:a8:80:92:2e:ad: 15:d6:bc:cb:b0:11:74:cb:6e:20:46:1c:f7:c0:5f:8f:f2:a8: e0:0d:ff:00:5b:0e:ee:c5:91:6a:a9:c5:e5:e5:4a:5d:18:03: 2d:c8:d4:81:76:49:e3:9c:33:67:59:00:72:11:38:db:12:5f: 98:4a:5c:ec:1e:10:d4:65:19:68:53:74:7b:38:9f:85:04:49: 17:1c:07:e3:ad:f3:bc:d1:50:eb:d0:2c:79:94:57:03:d9:44: 2d:a9:6e:8f:5f:47:b8:43:2b:51:1a:70:93:cc:16:da:68:98: 88:8c:fa:e5:eb:bd:1e:d6:ea:75:ca:1c:26:28:03:22:cc:b8: 3a:2c:12:7f:31:0e:98:23:63:d6:49:a9:23:e7:77:32:f3:43: 30:99:91:bd:05:af:a2:54:ff:c6:68:a4:30:72:3a:7c:81:cc: cd:91:13:9b:c0:d4:f5:f7:de:49:ef:3a:46:f7:53:40:b7:a9: b5:0a:5b:eb:39:27:e2:3a:23:10:d9:74:3b:30:7f:1b:d4:39: a9:67:f2:b2:40:2d:5e:0b:f3:ae:02:79:e6:bb:1a:1f:d5:40: 87:8a:b1:2c:5a:46:a1:63:36:31:2a:b8:1e:18:ab:15:2b:04: 33:d6:72:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsY35hgVcvtUb35eJaIZFkIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkMGRiZjllYjgzNjA4NWMxOWQ5M2Y1MjU0MjIxYzMzOTQ4 ZTg1ZTMwHhcNMjUxMjEzMTgwMTA1WhcNMjUxMjE0MTgwMTA1WjAzMTEwLwYDVQQD EygxMzFkMTY4YjRkMDBlYWU5NzdlOGIxYjI0YzBmMDFmMGRiZTQzODc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl263cmHnM/poavzQMZHj8EUPHAYQ ymHJ2ki9w2JqW8vblK9BMJjrWk0QM8fMJYQgCLJA3NNepos+q2sNMe/OOT3a3Kmr y2y9i+julSDF640O7dXOKYfjt9VMOuCvJ1MuPXqJNLRf4G3h3ktccsxEXXSHN0fO iLbVkIGIM+rRK9AP4kFcqATiM8vvdI37FRVGLjWHbraJh+cC2Ks4bYLwCIEVBYil QJ58+VURRWDFFsfGi5cU06EZGIsOaRheqfpquepNLuJi+ijIpWf9mchV/yrje2BB IQFD6ADGhW2taGABoIXPZMbeiT9ASbPf2JzMo2JIPb5Idc4L3Tjsf6+LmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBMdFotNAOrpd+ixskwPAfDb5Dh3MB8GA1UdIwQY MBaAFA0Nv564NghcGdk/UlQiHDOUjoXjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFEyX25yZzJDRndaMlQ5U1ZDSWNNNVNPaGVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS84NDhmZDYtZWI4MC00ZTFlLTgzNzgt M2U0NmNlMzVkNGU3LzEvRFEyX25yZzJDRndaMlQ5U1ZDSWNNNVNPaGVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS84NDhmZDYtZWI4MC00ZTFlLTgzNzgtM2U0NmNlMzVkNGU3 LzEvRFEyX25yZzJDRndaMlQ5U1ZDSWNNNVNPaGVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVYSbaHfU 7jQrb8D4yaiAki6tFda8y7ARdMtuIEYc98Bfj/Ko4A3/AFsO7sWRaqnF5eVKXRgD LcjUgXZJ45wzZ1kAchE42xJfmEpc7B4Q1GUZaFN0ezifhQRJFxwH463zvNFQ69As eZRXA9lELaluj19HuEMrURpwk8wW2miYiIz65eu9HtbqdcocJigDIsy4OiwSfzEO mCNj1kmpI+d3MvNDMJmRvQWvolT/xmikMHI6fIHMzZETm8DU9ffeSe86RvdTQLep tQpb6zkn4jojENl0OzB/G9Q5qWfyskAtXgvzrgJ55rsaH9VAh4qxLFpGoWM2MSq4 HhirFSsEM9Zygw== -----END CERTIFICATE-----Generated at Sun Dec 14 01:02:31 2025 by rpki-client