This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.mft File: NOEQtZNi9nPq4ztm7nrqPEAoKU4.mft (raw, json) Hash identifier: jTQied8Nq1nYKudYI0PXLWaxqiNG9iSuemzoRthOHQs= Subject key identifier: 5A:99:A4:CC:F4:EA:60:D9:B7:2F:25:DA:91:59:2D:23:26:53:75:12 Authority key identifier: 34:E1:10:B5:93:62:F6:73:EA:E3:3B:66:EE:7A:EA:3C:40:28:29:4E Certificate issuer: /CN=34e110b59362f673eae33b66ee7aea3c4028294e Certificate serial: 019AF61C8CC5B78FF2C960B2FE8E1DC1EA93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NOEQtZNi9nPq4ztm7nrqPEAoKU4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.mft Manifest number: 0EDB Signing time: Sun 07 Dec 2025 00:00:57 +0000 Manifest this update: Sun 07 Dec 2025 00:00:57 +0000 Manifest next update: Mon 08 Dec 2025 00:00:57 +0000 Files and hashes: 1: NOEQtZNi9nPq4ztm7nrqPEAoKU4.crl (hash: JSvcK68N6UjhSvlfReEMdzbu9xb3xT2KXO0UaaPiuEo=) 2: XtfUxUGkjCJuklebiN54Yxg8R5M.roa (hash: 6ylTl3fnc+Bg9Pz92d7wJrvdCwc0XcQ4KZdtR4bRI4k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.mft rsync://rpki.ripe.net/repository/DEFAULT/NOEQtZNi9nPq4ztm7nrqPEAoKU4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:1c:8c:c5:b7:8f:f2:c9:60:b2:fe:8e:1d:c1:ea:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34e110b59362f673eae33b66ee7aea3c4028294e Validity Not Before: Dec 7 00:00:57 2025 GMT Not After : Dec 8 00:00:57 2025 GMT Subject: CN=5a99a4ccf4ea60d9b72f25da91592d2326537512 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e5:d5:b1:88:fc:08:55:d2:0b:77:ac:18:44: b9:2f:29:e7:49:d1:27:37:30:01:6a:89:5f:18:b9: 9f:71:42:47:7f:4a:a7:20:cf:88:19:4c:d4:cf:2a: 61:66:c7:18:c4:89:cb:e8:4f:c1:0f:4d:9e:24:5d: cc:4b:6b:c6:77:00:4f:d8:2f:09:2c:2f:08:f4:38: a0:b9:8a:97:28:26:61:31:7c:ec:f6:ad:b7:e5:63: da:05:e8:80:d3:d5:a3:5c:a3:b3:5f:37:3c:c0:b5: 16:7f:8a:63:6b:12:32:84:87:39:06:1b:1e:63:79: a2:ba:4c:0b:61:f9:bc:c9:83:6f:bf:23:b7:69:f5: 28:15:84:d3:8f:5e:8b:d2:8d:19:1d:a4:f7:13:6a: 0b:3a:f2:9c:b6:e0:6f:a9:18:6f:d6:25:ac:22:23: ab:fe:6a:ae:f3:2d:68:a5:4c:78:9c:07:15:b9:7d: 7f:2c:00:91:75:a8:0b:d7:57:9e:9f:09:9d:30:fe: 0f:ce:0b:b8:d0:81:41:9e:c0:24:0f:9f:87:15:6d: 98:de:b5:60:ec:e4:79:e1:aa:db:39:0b:23:82:bb: d5:89:40:f5:31:df:44:f8:72:9a:a5:22:1a:72:02: 77:4f:4d:68:45:42:c4:be:ab:76:2d:4d:93:5c:ae: 55:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:99:A4:CC:F4:EA:60:D9:B7:2F:25:DA:91:59:2D:23:26:53:75:12 X509v3 Authority Key Identifier: keyid:34:E1:10:B5:93:62:F6:73:EA:E3:3B:66:EE:7A:EA:3C:40:28:29:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NOEQtZNi9nPq4ztm7nrqPEAoKU4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:81:2b:81:0e:cf:30:ea:eb:d3:fc:f3:b3:66:9d:56:25:af: 5a:7d:f7:9e:76:e5:84:3e:5f:5e:b9:63:14:d8:70:cb:90:e9: 62:60:2b:bd:d3:48:3a:02:93:15:db:92:db:a7:0d:54:4d:22: 36:73:4c:3d:53:a9:9e:b8:c8:0d:23:64:9d:ec:58:3a:44:3a: f2:66:d5:64:bc:78:0b:33:81:73:97:29:b5:f7:f7:32:89:d7: 75:3e:76:7b:55:a2:90:b7:c5:9e:93:76:c6:0a:09:db:4b:ac: 37:62:44:aa:ac:2c:d2:d3:9a:6c:e0:80:c0:d3:5d:3a:82:98: cc:4c:34:1d:db:f8:19:67:28:b9:2d:bd:66:e4:b7:44:27:c8: 9d:3d:ea:58:24:83:9e:b5:19:21:70:3f:2a:ca:c0:97:8b:4c: ca:d6:e1:bf:c2:9f:0b:46:d4:c9:91:a6:af:12:e1:45:66:10: c0:9f:fa:50:a2:56:7e:9e:f9:0f:86:22:ff:f7:78:c0:64:32: 25:5c:27:2d:85:05:6d:d1:57:38:e5:72:51:3e:40:c9:55:53: 7a:2a:52:00:d6:b8:8b:9f:33:64:f6:2d:6f:d5:fd:37:01:b9: 10:6a:58:fd:7e:cf:0f:14:99:0d:3c:51:3f:13:ac:37:3f:e8: 1a:0c:d6:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2HIzFt4/yyWCy/o4dweqTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0ZTExMGI1OTM2MmY2NzNlYWUzM2I2NmVlN2FlYTNjNDAy ODI5NGUwHhcNMjUxMjA3MDAwMDU3WhcNMjUxMjA4MDAwMDU3WjAzMTEwLwYDVQQD Eyg1YTk5YTRjY2Y0ZWE2MGQ5YjcyZjI1ZGE5MTU5MmQyMzI2NTM3NTEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAreXVsYj8CFXSC3esGES5LynnSdEn NzABaolfGLmfcUJHf0qnIM+IGUzUzyphZscYxInL6E/BD02eJF3MS2vGdwBP2C8J LC8I9DiguYqXKCZhMXzs9q235WPaBeiA09WjXKOzXzc8wLUWf4pjaxIyhIc5Bhse Y3miukwLYfm8yYNvvyO3afUoFYTTj16L0o0ZHaT3E2oLOvKctuBvqRhv1iWsIiOr /mqu8y1opUx4nAcVuX1/LACRdagL11eenwmdMP4Pzgu40IFBnsAkD5+HFW2Y3rVg 7OR54arbOQsjgrvViUD1Md9E+HKapSIacgJ3T01oRULEvqt2LU2TXK5V/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFqZpMz06mDZty8l2pFZLSMmU3USMB8GA1UdIwQY MBaAFDThELWTYvZz6uM7Zu566jxAKClOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTk9FUXRaTmk5blBxNHp0bTducnFQRUFvS1U0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8wYmY4ZmItMTYwNC00Y2QxLTlkYTYt MWJiMjdjNWQzOTdlLzEvTk9FUXRaTmk5blBxNHp0bTducnFQRUFvS1U0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy8wYmY4ZmItMTYwNC00Y2QxLTlkYTYtMWJiMjdjNWQzOTdl LzEvTk9FUXRaTmk5blBxNHp0bTducnFQRUFvS1U0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACIErgQ7P MOrr0/zzs2adViWvWn33nnblhD5fXrljFNhwy5DpYmArvdNIOgKTFduS26cNVE0i NnNMPVOpnrjIDSNknexYOkQ68mbVZLx4CzOBc5cptff3MonXdT52e1WikLfFnpN2 xgoJ20usN2JEqqws0tOabOCAwNNdOoKYzEw0Hdv4GWcouS29ZuS3RCfInT3qWCSD nrUZIXA/KsrAl4tMytbhv8KfC0bUyZGmrxLhRWYQwJ/6UKJWfp75D4Yi//d4wGQy JVwnLYUFbdFXOOVyUT5AyVVTeipSANa4i58zZPYtb9X9NwG5EGpY/X7PDxSZDTxR PxOsNz/oGgzWAg== -----END CERTIFICATE-----Generated at Sun Dec 7 03:41:35 2025 by rpki-client