This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/903931-1698-41b7-af34-9dd82735da3d/1/NQF3JFfg-Ce56SCwDNEUgkpfpiE.mft File: NQF3JFfg-Ce56SCwDNEUgkpfpiE.mft (raw, json) Hash identifier: B5ePipAvi0/8NAqk1ECzzUtCVAGJAVb23fsQMn3HcxY= Subject key identifier: 73:15:1F:FB:94:99:CF:69:59:1E:72:51:A8:84:97:D1:D8:FD:61:6F Authority key identifier: 35:01:77:24:57:E0:F8:27:B9:E9:20:B0:0C:D1:14:82:4A:5F:A6:21 Certificate issuer: /CN=3501772457e0f827b9e920b00cd114824a5fa621 Certificate serial: 019B32D5F57565F7F2D0A0ADB138B9A723F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NQF3JFfg-Ce56SCwDNEUgkpfpiE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/903931-1698-41b7-af34-9dd82735da3d/1/NQF3JFfg-Ce56SCwDNEUgkpfpiE.mft Manifest number: 1783 Signing time: Thu 18 Dec 2025 19:00:41 +0000 Manifest this update: Thu 18 Dec 2025 19:00:41 +0000 Manifest next update: Fri 19 Dec 2025 19:00:41 +0000 Files and hashes: 1: NQF3JFfg-Ce56SCwDNEUgkpfpiE.crl (hash: s5YZ0S4OfLAEWK/tqFabcmxjmt8Ygn/EmhM3ZzXIAeE=) 2: f-luTA_tx0v0TH5JKilbt6SzcJU.roa (hash: +LXN4TEg0fwtohb1kuvdLScMnEdA9CiLPdalbBVCXxU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/903931-1698-41b7-af34-9dd82735da3d/1/NQF3JFfg-Ce56SCwDNEUgkpfpiE.crl rsync://rpki.ripe.net/repository/DEFAULT/12/903931-1698-41b7-af34-9dd82735da3d/1/NQF3JFfg-Ce56SCwDNEUgkpfpiE.mft rsync://rpki.ripe.net/repository/DEFAULT/NQF3JFfg-Ce56SCwDNEUgkpfpiE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d5:f5:75:65:f7:f2:d0:a0:ad:b1:38:b9:a7:23:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3501772457e0f827b9e920b00cd114824a5fa621 Validity Not Before: Dec 18 19:00:41 2025 GMT Not After : Dec 19 19:00:41 2025 GMT Subject: CN=73151ffb9499cf69591e7251a88497d1d8fd616f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:0d:f1:7d:64:ea:d8:27:27:ee:36:5e:32:7a: da:a3:83:7a:a6:7e:e8:d3:14:09:65:37:20:b9:57: 86:7c:08:1b:dd:d0:9f:d9:65:a9:d1:94:31:d2:dc: 5f:83:e8:3f:9e:ed:8a:11:27:53:fb:72:d6:53:9b: cd:9a:7b:b2:ec:86:b0:c0:a3:93:13:e5:ce:43:5d: 1a:93:6c:45:6c:61:52:72:a0:7d:26:5b:98:3c:a3: 61:a4:ac:4a:d4:c7:0c:bf:84:e2:1f:24:c3:4c:43: 60:42:19:63:21:29:57:20:e8:ee:11:e3:6d:b8:34: db:2c:78:52:6c:c8:d7:2a:00:99:00:20:c8:5f:95: 32:ba:d4:8b:3d:00:9e:9d:a7:a7:07:36:46:cc:e5: 11:05:cd:eb:2b:be:f4:2a:2f:ea:22:f5:fe:9e:a8: 9f:7c:1a:f6:32:1a:81:b0:2a:21:c1:69:b6:68:25: 9d:00:46:8c:47:af:d7:64:49:df:29:1d:c4:6a:b8: 89:d0:f7:2e:7a:46:6a:b3:33:2e:56:76:ab:05:ae: 65:81:01:20:85:db:c3:70:88:48:30:f9:9d:f4:1c: c3:33:25:73:4f:93:84:67:75:85:94:f5:41:98:9e: 9d:40:73:2e:56:9f:6b:99:58:2e:b8:f7:ab:ec:50: 79:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:15:1F:FB:94:99:CF:69:59:1E:72:51:A8:84:97:D1:D8:FD:61:6F X509v3 Authority Key Identifier: keyid:35:01:77:24:57:E0:F8:27:B9:E9:20:B0:0C:D1:14:82:4A:5F:A6:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NQF3JFfg-Ce56SCwDNEUgkpfpiE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/903931-1698-41b7-af34-9dd82735da3d/1/NQF3JFfg-Ce56SCwDNEUgkpfpiE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/903931-1698-41b7-af34-9dd82735da3d/1/NQF3JFfg-Ce56SCwDNEUgkpfpiE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:35:16:8b:39:4e:e4:2e:54:d7:98:32:f5:87:cc:2d:97:89: 50:6b:75:82:04:93:6f:67:a7:23:56:b1:58:44:af:78:13:8d: 13:e7:64:fb:61:8d:74:73:1f:89:06:09:6e:99:59:1e:36:fd: 5e:ad:4a:8f:70:51:ad:82:88:c1:fa:37:4e:bc:84:4d:d2:97: 01:50:d3:5b:be:1d:14:95:2b:34:c6:4c:a0:17:30:24:db:a3: ea:6b:06:1d:48:1c:e8:4b:07:a3:06:1d:03:ea:21:de:3c:db: 43:9e:73:44:48:b1:ae:35:e7:7d:28:d3:08:26:c5:0e:fd:78: 11:65:5b:cc:cf:dd:a9:ae:5a:f8:c0:82:49:5b:d1:3d:96:66: a8:c8:cd:a3:33:69:f1:0a:27:55:21:25:cd:7d:09:48:44:f9: 96:a5:90:a5:16:6e:85:c5:44:81:87:5f:d2:02:d7:c4:df:1e: 3f:22:0a:da:4e:b3:c9:ed:9c:d4:15:0f:82:1a:a5:ff:7b:9b: 1f:8f:28:9b:15:cf:3f:52:49:74:80:c7:77:1c:98:de:7c:6f: 89:99:1b:a0:e1:db:29:56:f8:43:ab:5b:59:77:17:02:8f:67: fd:d0:a0:f6:64:e2:5e:d2:ab:6a:94:f3:ec:e9:a6:1d:14:fc: 3a:f1:2b:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1fV1Zffy0KCtsTi5pyP5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MDE3NzI0NTdlMGY4MjdiOWU5MjBiMDBjZDExNDgyNGE1 ZmE2MjEwHhcNMjUxMjE4MTkwMDQxWhcNMjUxMjE5MTkwMDQxWjAzMTEwLwYDVQQD Eyg3MzE1MWZmYjk0OTljZjY5NTkxZTcyNTFhODg0OTdkMWQ4ZmQ2MTZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzw3xfWTq2Ccn7jZeMnrao4N6pn7o 0xQJZTcguVeGfAgb3dCf2WWp0ZQx0txfg+g/nu2KESdT+3LWU5vNmnuy7IawwKOT E+XOQ10ak2xFbGFScqB9JluYPKNhpKxK1McMv4TiHyTDTENgQhljISlXIOjuEeNt uDTbLHhSbMjXKgCZACDIX5UyutSLPQCenaenBzZGzOURBc3rK770Ki/qIvX+nqif fBr2MhqBsCohwWm2aCWdAEaMR6/XZEnfKR3EariJ0PcuekZqszMuVnarBa5lgQEg hdvDcIhIMPmd9BzDMyVzT5OEZ3WFlPVBmJ6dQHMuVp9rmVguuPer7FB5CwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHMVH/uUmc9pWR5yUaiEl9HY/WFvMB8GA1UdIwQY MBaAFDUBdyRX4PgnuekgsAzRFIJKX6YhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlFGM0pGZmctQ2U1NlNDd0RORVVna3BmcGlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi85MDM5MzEtMTY5OC00MWI3LWFmMzQt OWRkODI3MzVkYTNkLzEvTlFGM0pGZmctQ2U1NlNDd0RORVVna3BmcGlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi85MDM5MzEtMTY5OC00MWI3LWFmMzQtOWRkODI3MzVkYTNk LzEvTlFGM0pGZmctQ2U1NlNDd0RORVVna3BmcGlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAozUWizlO 5C5U15gy9YfMLZeJUGt1ggSTb2enI1axWESveBONE+dk+2GNdHMfiQYJbplZHjb9 Xq1Kj3BRrYKIwfo3TryETdKXAVDTW74dFJUrNMZMoBcwJNuj6msGHUgc6EsHowYd A+oh3jzbQ55zREixrjXnfSjTCCbFDv14EWVbzM/dqa5a+MCCSVvRPZZmqMjNozNp 8QonVSElzX0JSET5lqWQpRZuhcVEgYdf0gLXxN8ePyIK2k6zye2c1BUPghql/3ub H48omxXPP1JJdIDHdxyY3nxviZkboOHbKVb4Q6tbWXcXAo9n/dCg9mTiXtKrapTz 7OmmHRT8OvErGQ== -----END CERTIFICATE-----Generated at Thu Dec 18 22:10:07 2025 by rpki-client