This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/366830-c634-4644-a752-820914022158/1/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.mft File: nqc_uHyHtv-EYgFhR3ZOfk8OrSk.mft (raw, json) Hash identifier: Ls04jVQjHew8w8JTcURzGM6CTtxcfdka6gVvM2Tztbo= Subject key identifier: 1E:47:8A:25:00:09:CB:46:B8:5B:BA:77:0C:99:06:45:F0:87:F1:DD Authority key identifier: 9E:A7:3F:B8:7C:87:B6:FF:84:62:01:61:47:76:4E:7E:4F:0E:AD:29 Certificate issuer: /CN=9ea73fb87c87b6ff8462016147764e7e4f0ead29 Certificate serial: 019B3A907E906856025514FB9027CA422C98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/366830-c634-4644-a752-820914022158/1/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.mft Manifest number: 09C9 Signing time: Sat 20 Dec 2025 07:01:46 +0000 Manifest this update: Sat 20 Dec 2025 07:01:46 +0000 Manifest next update: Sun 21 Dec 2025 07:01:46 +0000 Files and hashes: 1: Jc4wKdZujtBQlnsZSGZ-Msh3t-U.roa (hash: yoz3wQ6+m9WewYaNOk0D0h3Hx6RkufI02fLU4g+5owo=) 2: nqc_uHyHtv-EYgFhR3ZOfk8OrSk.crl (hash: uDN72PwUz8bbU3GnYH3uYivFZdQKWdHTxgmulNR3zxU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/366830-c634-4644-a752-820914022158/1/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/366830-c634-4644-a752-820914022158/1/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.mft rsync://rpki.ripe.net/repository/DEFAULT/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:90:7e:90:68:56:02:55:14:fb:90:27:ca:42:2c:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ea73fb87c87b6ff8462016147764e7e4f0ead29 Validity Not Before: Dec 20 07:01:46 2025 GMT Not After : Dec 21 07:01:46 2025 GMT Subject: CN=1e478a250009cb46b85bba770c990645f087f1dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c6:6b:b1:7f:f5:34:45:65:af:ce:ea:2c:ae: 81:8d:af:d2:fb:6e:e5:32:5e:8c:b3:55:74:01:13: 32:49:f1:81:e3:7c:f0:f1:b7:f0:9f:d6:a7:c5:40: 3a:b8:43:3b:5d:d9:3f:f0:ae:7b:60:a9:f1:2e:b7: a2:37:d9:98:c3:94:fb:30:5a:7c:39:10:79:40:05: f2:23:71:d3:bd:2d:30:e1:b4:e8:a9:ee:0f:b9:b2: 5c:06:c2:cb:79:81:02:cd:84:47:38:95:05:09:b8: c8:6c:14:50:63:43:ed:5d:f9:ed:19:bf:6b:23:63: 6b:84:18:2b:8e:aa:29:59:6b:9f:f0:9c:1b:a9:49: 4a:63:99:55:17:6f:0c:9a:70:28:ec:72:1e:21:5e: aa:0f:cc:ff:64:28:8d:cc:eb:7f:7f:5c:97:e9:50: ef:42:4d:41:9c:bd:98:d3:0c:17:a0:35:69:e1:b4: d9:ae:03:1c:17:aa:af:8a:1b:d5:3e:a3:48:58:a8: af:ff:6a:04:3d:9f:b3:d7:88:43:2c:cc:96:d8:90: a9:d3:74:00:33:ea:8a:ad:79:f6:0d:c8:53:a2:a8: 43:38:73:45:f0:a1:fb:68:60:c3:8a:3c:a8:bf:f3: b6:38:3b:12:81:c3:9e:5b:00:8e:a7:da:e0:38:d2: 01:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:47:8A:25:00:09:CB:46:B8:5B:BA:77:0C:99:06:45:F0:87:F1:DD X509v3 Authority Key Identifier: keyid:9E:A7:3F:B8:7C:87:B6:FF:84:62:01:61:47:76:4E:7E:4F:0E:AD:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/366830-c634-4644-a752-820914022158/1/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/366830-c634-4644-a752-820914022158/1/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:75:7c:23:8b:c3:ba:c3:dd:20:f3:89:76:77:cb:e2:f8:67: 47:70:b9:ca:34:35:be:77:7e:95:d0:50:a6:fd:f2:69:bc:6b: 9b:21:1f:bd:67:56:0b:38:50:34:9c:fa:cd:e7:6b:c8:36:67: 45:75:87:3e:00:e0:2c:c2:2c:aa:10:a3:bd:ac:d4:4b:f9:a2: c6:79:17:88:38:e8:16:88:bb:9d:f2:86:04:84:0c:da:08:0e: e5:de:4e:24:15:a1:b4:c1:c1:7b:bc:9b:9d:1b:43:06:5a:7b: 0b:8d:dc:ea:27:3d:74:9b:60:b7:8e:cd:7f:68:19:1a:b0:1e: 5a:a6:64:37:ab:f2:cb:4d:34:4f:99:a3:e0:c3:57:5f:f2:4e: ba:0b:d4:3b:82:ad:5b:d1:d3:78:24:89:49:11:71:63:ac:f9: a4:d3:c6:75:d8:52:66:00:15:62:fc:0b:f3:61:65:44:51:1c: 26:d6:27:2e:13:06:1f:80:3c:27:4e:a6:62:4f:20:c7:b1:0b: aa:d7:e2:e2:b5:62:88:ef:43:6d:46:ec:c8:49:32:4f:c1:55: ab:94:a7:e8:36:29:70:5c:ec:a1:f7:45:ad:60:46:71:fd:bd: 0e:be:39:02:04:26:3c:4e:55:62:c5:29:c8:b0:7f:7c:3d:50: 9b:37:dd:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kH6QaFYCVRT7kCfKQiyYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllYTczZmI4N2M4N2I2ZmY4NDYyMDE2MTQ3NzY0ZTdlNGYw ZWFkMjkwHhcNMjUxMjIwMDcwMTQ2WhcNMjUxMjIxMDcwMTQ2WjAzMTEwLwYDVQQD EygxZTQ3OGEyNTAwMDljYjQ2Yjg1YmJhNzcwYzk5MDY0NWYwODdmMWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucZrsX/1NEVlr87qLK6Bja/S+27l Ml6Ms1V0ARMySfGB43zw8bfwn9anxUA6uEM7Xdk/8K57YKnxLreiN9mYw5T7MFp8 ORB5QAXyI3HTvS0w4bToqe4PubJcBsLLeYECzYRHOJUFCbjIbBRQY0PtXfntGb9r I2NrhBgrjqopWWuf8JwbqUlKY5lVF28MmnAo7HIeIV6qD8z/ZCiNzOt/f1yX6VDv Qk1BnL2Y0wwXoDVp4bTZrgMcF6qvihvVPqNIWKiv/2oEPZ+z14hDLMyW2JCp03QA M+qKrXn2DchToqhDOHNF8KH7aGDDijyov/O2ODsSgcOeWwCOp9rgONIB2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB5HiiUACctGuFu6dwyZBkXwh/HdMB8GA1UdIwQY MBaAFJ6nP7h8h7b/hGIBYUd2Tn5PDq0pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnFjX3VIeUh0di1FWWdGaFIzWk9mazhPclNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8zNjY4MzAtYzYzNC00NjQ0LWE3NTIt ODIwOTE0MDIyMTU4LzEvbnFjX3VIeUh0di1FWWdGaFIzWk9mazhPclNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS8zNjY4MzAtYzYzNC00NjQ0LWE3NTItODIwOTE0MDIyMTU4 LzEvbnFjX3VIeUh0di1FWWdGaFIzWk9mazhPclNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeHV8I4vD usPdIPOJdnfL4vhnR3C5yjQ1vnd+ldBQpv3yabxrmyEfvWdWCzhQNJz6zedryDZn RXWHPgDgLMIsqhCjvazUS/mixnkXiDjoFoi7nfKGBIQM2ggO5d5OJBWhtMHBe7yb nRtDBlp7C43c6ic9dJtgt47Nf2gZGrAeWqZkN6vyy000T5mj4MNXX/JOugvUO4Kt W9HTeCSJSRFxY6z5pNPGddhSZgAVYvwL82FlRFEcJtYnLhMGH4A8J06mYk8gx7EL qtfi4rViiO9DbUbsyEkyT8FVq5Sn6DYpcFzsofdFrWBGcf29Dr45AgQmPE5VYsUp yLB/fD1Qmzfd3g== -----END CERTIFICATE-----Generated at Sat Dec 20 13:59:36 2025 by rpki-client