This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/cb9493-e834-4f0e-8abb-1a92fb0dc1c7/1/nqeCd0gM8trWyesKUr5I33q2Z1o.mft File: nqeCd0gM8trWyesKUr5I33q2Z1o.mft (raw, json) Hash identifier: x+6i72zZcnb70po06AHGpS1FVsLV8CY5XWzt14DGhfI= Subject key identifier: B5:06:BA:8A:D7:49:4D:34:C9:08:ED:F7:E2:60:3B:62:C6:91:52:70 Authority key identifier: 9E:A7:82:77:48:0C:F2:DA:D6:C9:EB:0A:52:BE:48:DF:7A:B6:67:5A Certificate issuer: /CN=9ea78277480cf2dad6c9eb0a52be48df7ab6675a Certificate serial: 019B12019CDDBE44B45446FDA608E4959580 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nqeCd0gM8trWyesKUr5I33q2Z1o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/cb9493-e834-4f0e-8abb-1a92fb0dc1c7/1/nqeCd0gM8trWyesKUr5I33q2Z1o.mft Manifest number: 1076 Signing time: Fri 12 Dec 2025 10:00:54 +0000 Manifest this update: Fri 12 Dec 2025 10:00:54 +0000 Manifest next update: Sat 13 Dec 2025 10:00:54 +0000 Files and hashes: 1: iSQJ7oUwp5EtejUI-66sGk-h7cQ.roa (hash: mpF7huYV9n/9/29y0+6CrRWd+U+y7E7ycfKNR3SN4Do=) 2: nqeCd0gM8trWyesKUr5I33q2Z1o.crl (hash: XuB4vkABVQPpG0NjmOlXXZ9ZDPtmMvJa0KT7DprGRTg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/cb9493-e834-4f0e-8abb-1a92fb0dc1c7/1/nqeCd0gM8trWyesKUr5I33q2Z1o.crl rsync://rpki.ripe.net/repository/DEFAULT/97/cb9493-e834-4f0e-8abb-1a92fb0dc1c7/1/nqeCd0gM8trWyesKUr5I33q2Z1o.mft rsync://rpki.ripe.net/repository/DEFAULT/nqeCd0gM8trWyesKUr5I33q2Z1o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:01:9c:dd:be:44:b4:54:46:fd:a6:08:e4:95:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ea78277480cf2dad6c9eb0a52be48df7ab6675a Validity Not Before: Dec 12 10:00:54 2025 GMT Not After : Dec 13 10:00:54 2025 GMT Subject: CN=b506ba8ad7494d34c908edf7e2603b62c6915270 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:39:4a:3c:98:ac:04:69:da:8e:c7:98:38:28: 62:f3:ae:de:4b:f3:dd:74:ef:fc:c6:46:45:9e:d7: 97:f0:3f:bc:c8:71:17:1a:ee:f7:14:4f:c7:6d:5a: 05:c4:81:ff:80:df:32:e1:4a:76:59:0a:17:f3:36: 99:38:aa:fb:33:a2:21:db:52:82:f7:03:3e:d1:a6: da:55:29:79:6a:3d:96:50:ea:34:94:8e:af:0e:bc: 94:08:6c:97:b8:9e:9d:2a:3e:7a:cc:d9:a8:1d:e0: 91:09:ab:d8:2e:d1:dd:55:be:6b:e9:80:b8:26:d4: ee:6d:07:75:d8:b6:88:46:f9:78:2f:a0:5b:e0:4f: 14:80:8b:9b:9e:4a:4b:87:1b:ca:fd:01:ca:f3:b4: 7f:7d:a3:dd:3d:b0:68:23:e2:f4:f0:63:40:51:f0: 90:04:23:27:3e:96:4c:c1:c3:51:0e:c0:6a:0f:b8: be:50:1f:f9:a0:7e:2a:8f:28:a5:70:b2:58:04:fc: 58:4d:dc:35:f2:e4:74:1b:41:83:d4:b3:05:7f:2c: 2f:97:50:c6:2f:b5:32:d6:33:6e:20:75:03:79:a3: 8c:c5:15:24:32:b6:0c:f0:b3:b9:af:96:fd:c1:85: dd:50:0a:8c:ea:46:0b:a6:c1:82:b3:78:22:17:5c: c9:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:06:BA:8A:D7:49:4D:34:C9:08:ED:F7:E2:60:3B:62:C6:91:52:70 X509v3 Authority Key Identifier: keyid:9E:A7:82:77:48:0C:F2:DA:D6:C9:EB:0A:52:BE:48:DF:7A:B6:67:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nqeCd0gM8trWyesKUr5I33q2Z1o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/cb9493-e834-4f0e-8abb-1a92fb0dc1c7/1/nqeCd0gM8trWyesKUr5I33q2Z1o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/cb9493-e834-4f0e-8abb-1a92fb0dc1c7/1/nqeCd0gM8trWyesKUr5I33q2Z1o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:07:a3:80:c0:80:f5:a3:f9:63:e6:f6:3b:d9:ea:71:96:d8: d2:43:0a:e2:26:79:03:ad:e2:e4:80:08:e9:d6:5a:b0:d2:44: 68:2b:46:2d:82:b1:03:a7:e8:d4:10:d2:da:80:a2:11:e3:04: c0:0e:3f:ef:2e:83:c0:8a:86:7b:47:1c:aa:87:ec:15:00:37: 64:24:c9:b7:e4:0e:e9:ae:9d:13:85:28:99:da:e6:79:59:7c: 28:b2:e4:2f:1a:ca:e4:bf:94:d5:ba:21:b2:c2:07:c1:47:7f: b3:f3:ee:61:54:a6:30:5e:92:89:cd:10:16:b2:f8:f9:bf:13: 6b:e4:8b:27:fe:cb:46:00:7e:7b:03:b4:90:c6:cb:6a:e3:6f: a8:aa:b1:23:3f:8f:54:ac:0a:c8:79:d7:19:32:ca:fa:0a:b2: 07:e1:2b:76:2a:66:08:d9:af:b3:94:5c:0a:b5:49:e7:d4:a7: 1d:00:f3:69:fa:94:e9:8a:0a:7d:84:34:44:14:6b:c1:c9:9c: 7b:77:15:90:ff:58:67:c9:c3:34:f5:0f:4a:fe:cf:b6:02:42: 40:7b:9b:53:72:5d:87:7a:a5:dc:e7:a6:87:d7:84:ad:f7:72: 35:17:ad:9e:5b:6a:60:ec:18:fd:2a:8c:dd:10:35:22:b3:c2: cd:e5:9a:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsSAZzdvkS0VEb9pgjklZWAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllYTc4Mjc3NDgwY2YyZGFkNmM5ZWIwYTUyYmU0OGRmN2Fi NjY3NWEwHhcNMjUxMjEyMTAwMDU0WhcNMjUxMjEzMTAwMDU0WjAzMTEwLwYDVQQD EyhiNTA2YmE4YWQ3NDk0ZDM0YzkwOGVkZjdlMjYwM2I2MmM2OTE1MjcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjlKPJisBGnajseYOChi867eS/Pd dO/8xkZFnteX8D+8yHEXGu73FE/HbVoFxIH/gN8y4Up2WQoX8zaZOKr7M6Ih21KC 9wM+0abaVSl5aj2WUOo0lI6vDryUCGyXuJ6dKj56zNmoHeCRCavYLtHdVb5r6YC4 JtTubQd12LaIRvl4L6Bb4E8UgIubnkpLhxvK/QHK87R/faPdPbBoI+L08GNAUfCQ BCMnPpZMwcNRDsBqD7i+UB/5oH4qjyilcLJYBPxYTdw18uR0G0GD1LMFfywvl1DG L7Uy1jNuIHUDeaOMxRUkMrYM8LO5r5b9wYXdUAqM6kYLpsGCs3giF1zJ7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLUGuorXSU00yQjt9+JgO2LGkVJwMB8GA1UdIwQY MBaAFJ6ngndIDPLa1snrClK+SN96tmdaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnFlQ2QwZ004dHJXeWVzS1VyNUkzM3EyWjFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9jYjk0OTMtZTgzNC00ZjBlLThhYmIt MWE5MmZiMGRjMWM3LzEvbnFlQ2QwZ004dHJXeWVzS1VyNUkzM3EyWjFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny9jYjk0OTMtZTgzNC00ZjBlLThhYmItMWE5MmZiMGRjMWM3 LzEvbnFlQ2QwZ004dHJXeWVzS1VyNUkzM3EyWjFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJQejgMCA 9aP5Y+b2O9nqcZbY0kMK4iZ5A63i5IAI6dZasNJEaCtGLYKxA6fo1BDS2oCiEeME wA4/7y6DwIqGe0ccqofsFQA3ZCTJt+QO6a6dE4UomdrmeVl8KLLkLxrK5L+U1boh ssIHwUd/s/PuYVSmMF6Sic0QFrL4+b8Ta+SLJ/7LRgB+ewO0kMbLauNvqKqxIz+P VKwKyHnXGTLK+gqyB+ErdipmCNmvs5RcCrVJ59SnHQDzafqU6YoKfYQ0RBRrwcmc e3cVkP9YZ8nDNPUPSv7PtgJCQHubU3Jdh3ql3Oemh9eErfdyNRetnltqYOwY/SqM 3RA1IrPCzeWagA== -----END CERTIFICATE-----Generated at Fri Dec 12 13:57:48 2025 by rpki-client