This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft File: NrQT5TbZk1PwsFDudG_90k7bWTA.mft (raw, json) Hash identifier: hmt3DGGhbrdPD/ZWFGav84qRj9IwB+R1rK0OtIlUyqA= Subject key identifier: BC:50:59:7C:B1:32:E2:87:76:BA:0F:1C:78:F9:D2:11:54:E2:D5:92 Authority key identifier: 36:B4:13:E5:36:D9:93:53:F0:B0:50:EE:74:6F:FD:D2:4E:DB:59:30 Certificate issuer: /CN=36b413e536d99353f0b050ee746ffdd24edb5930 Certificate serial: 019B0746C0CD14F2BEA4F5CCEF67EDAC2545 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NrQT5TbZk1PwsFDudG_90k7bWTA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft Manifest number: 1775 Signing time: Wed 10 Dec 2025 08:00:35 +0000 Manifest this update: Wed 10 Dec 2025 08:00:35 +0000 Manifest next update: Thu 11 Dec 2025 08:00:35 +0000 Files and hashes: 1: NrQT5TbZk1PwsFDudG_90k7bWTA.crl (hash: OHlaqtjpcG6zsnU4+qFJ0hdD0eu+RZj7JH0VLv2cZtM=) 2: kkI0VJ623ZMpCKAjZsrxAXz6PWk.roa (hash: wTnvsnp3yJHDHnSTINs0tfqN/DigtBsLrefQ3ls6zYA=) 3: uucUmYI6JsmVzUOd6RM4u1Uvm6c.roa (hash: FHR3fbJwd259J3Jj1zln57qgHYJEZGfouW6MVY+3Iko=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft rsync://rpki.ripe.net/repository/DEFAULT/NrQT5TbZk1PwsFDudG_90k7bWTA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 08:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:46:c0:cd:14:f2:be:a4:f5:cc:ef:67:ed:ac:25:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36b413e536d99353f0b050ee746ffdd24edb5930 Validity Not Before: Dec 10 08:00:35 2025 GMT Not After : Dec 11 08:00:35 2025 GMT Subject: CN=bc50597cb132e28776ba0f1c78f9d21154e2d592 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d5:23:db:95:6b:9a:6c:ee:05:cd:3e:17:55: 2b:b5:8e:a0:ab:19:ff:87:b7:cf:3d:36:47:93:dc: de:94:5b:b9:6f:ff:6b:7b:e8:fb:cc:0b:c9:ff:6a: 70:88:e3:0a:65:02:45:37:13:33:ef:2e:9f:d9:06: 8d:58:49:d8:7d:2d:26:0d:76:8f:0b:1d:7c:36:ae: 07:61:da:3c:dc:bf:ce:7d:11:7b:f4:db:37:ad:bc: 73:9b:30:47:3d:90:7f:b3:c6:a3:ba:73:ca:f1:e2: 84:5b:91:d8:1e:7c:c4:77:ab:7e:a0:62:b9:7b:05: 4e:27:6d:b3:45:36:ae:4f:3a:b0:0d:3d:e9:d4:2d: 90:3e:33:91:da:c8:cc:de:52:e4:22:15:c3:31:a3: 26:2e:73:11:de:2c:cc:af:73:bf:99:2a:dd:10:6f: 50:9d:71:1d:a0:7a:73:37:8c:1d:30:51:74:90:52: 39:51:37:cc:dc:52:4c:8e:51:4b:35:ec:72:6c:78: 16:cf:16:a8:37:0f:3f:90:cb:89:51:2c:f2:f8:1e: 9c:24:07:36:bc:4e:10:67:ab:08:e9:7f:04:f3:4b: 7a:1f:2b:e9:4e:e6:a9:67:33:e2:cd:c2:91:2d:3d: be:ac:d4:7c:b7:22:33:08:3f:f5:4c:d8:75:0d:9a: f5:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:50:59:7C:B1:32:E2:87:76:BA:0F:1C:78:F9:D2:11:54:E2:D5:92 X509v3 Authority Key Identifier: keyid:36:B4:13:E5:36:D9:93:53:F0:B0:50:EE:74:6F:FD:D2:4E:DB:59:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NrQT5TbZk1PwsFDudG_90k7bWTA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:a9:c6:4d:2e:d5:06:55:7c:42:26:a7:f1:da:19:2f:5a:70: a1:3c:c4:ee:99:85:1b:25:6d:c5:7d:75:9f:b4:03:61:32:ec: ad:e7:f7:db:5a:ad:3c:c4:61:6e:d8:a3:c7:41:5b:7a:1e:53: f7:0b:16:4e:68:de:2b:c6:dc:e8:26:4e:13:a6:6f:c6:3b:fc: 21:c8:a6:19:46:71:2b:c1:82:07:e5:8e:77:06:16:c7:8c:82: 60:60:e5:e0:00:28:71:e0:52:b2:4e:5f:e2:4e:fa:3c:dc:6a: ec:67:b1:cf:87:3a:e0:e4:ed:da:6b:50:66:16:a6:d8:77:9b: eb:ef:4c:8f:a8:21:34:c5:15:60:ff:1f:2c:c8:3f:c5:7c:4a: 85:59:1b:8a:b0:80:f3:de:68:63:9e:ea:9c:ed:21:9b:a0:91: 7f:cb:76:7b:53:28:82:54:a7:57:74:a2:55:3c:0c:33:e0:df: 63:37:9d:fd:26:19:f8:1c:ec:dc:0b:93:d7:14:8a:94:aa:ea: a6:88:e7:09:56:3d:75:ee:93:fd:f9:a7:87:1f:c1:fe:ab:20: bb:ef:54:94:be:21:91:ea:09:c9:2f:84:92:d9:81:f7:ee:46: 1e:c1:42:d3:25:e8:db:ff:46:41:be:3d:88:28:5a:ec:92:fe: 8a:dd:d7:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsHRsDNFPK+pPXM72ftrCVFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YjQxM2U1MzZkOTkzNTNmMGIwNTBlZTc0NmZmZGQyNGVk YjU5MzAwHhcNMjUxMjEwMDgwMDM1WhcNMjUxMjExMDgwMDM1WjAzMTEwLwYDVQQD EyhiYzUwNTk3Y2IxMzJlMjg3NzZiYTBmMWM3OGY5ZDIxMTU0ZTJkNTkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudUj25VrmmzuBc0+F1UrtY6gqxn/ h7fPPTZHk9zelFu5b/9re+j7zAvJ/2pwiOMKZQJFNxMz7y6f2QaNWEnYfS0mDXaP Cx18Nq4HYdo83L/OfRF79Ns3rbxzmzBHPZB/s8ajunPK8eKEW5HYHnzEd6t+oGK5 ewVOJ22zRTauTzqwDT3p1C2QPjOR2sjM3lLkIhXDMaMmLnMR3izMr3O/mSrdEG9Q nXEdoHpzN4wdMFF0kFI5UTfM3FJMjlFLNexybHgWzxaoNw8/kMuJUSzy+B6cJAc2 vE4QZ6sI6X8E80t6HyvpTuapZzPizcKRLT2+rNR8tyIzCD/1TNh1DZr17wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLxQWXyxMuKHdroPHHj50hFU4tWSMB8GA1UdIwQY MBaAFDa0E+U22ZNT8LBQ7nRv/dJO21kwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnJRVDVUYlprMVB3c0ZEdWRHXzkwazdiV1RBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9lNjYyOTYtMDQ3OS00YzUyLTljZWEt YTFmNTczZDA2OWRhLzEvTnJRVDVUYlprMVB3c0ZEdWRHXzkwazdiV1RBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi9lNjYyOTYtMDQ3OS00YzUyLTljZWEtYTFmNTczZDA2OWRh LzEvTnJRVDVUYlprMVB3c0ZEdWRHXzkwazdiV1RBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeqnGTS7V BlV8Qian8doZL1pwoTzE7pmFGyVtxX11n7QDYTLsref321qtPMRhbtijx0Fbeh5T 9wsWTmjeK8bc6CZOE6Zvxjv8IcimGUZxK8GCB+WOdwYWx4yCYGDl4AAoceBSsk5f 4k76PNxq7Gexz4c64OTt2mtQZham2Heb6+9Mj6ghNMUVYP8fLMg/xXxKhVkbirCA 895oY57qnO0hm6CRf8t2e1MoglSnV3SiVTwMM+DfYzed/SYZ+Bzs3AuT1xSKlKrq pojnCVY9de6T/fmnhx/B/qsgu+9UlL4hkeoJyS+EktmB9+5GHsFC0yXo2/9GQb49 iCha7JL+it3XFQ== -----END CERTIFICATE-----Generated at Wed Dec 10 13:45:01 2025 by rpki-client