This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.mft File: NQzOG50G3M6IVmWVNkmcFgM5E3A.mft (raw, json) Hash identifier: iR9ggK6r8vIyK134/+vtJTjdf/06+bjuYzbZqEOaGsQ= Subject key identifier: 56:02:10:83:C9:D2:35:C4:6A:69:A7:37:CB:6A:5E:1C:C8:AD:66:7F Authority key identifier: 35:0C:CE:1B:9D:06:DC:CE:88:56:65:95:36:49:9C:16:03:39:13:70 Certificate issuer: /CN=350cce1b9d06dcce8856659536499c1603391370 Certificate serial: 019B2F6728513CF3380D4823432FC79C3C01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NQzOG50G3M6IVmWVNkmcFgM5E3A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.mft Manifest number: 1783 Signing time: Thu 18 Dec 2025 03:00:48 +0000 Manifest this update: Thu 18 Dec 2025 03:00:48 +0000 Manifest next update: Fri 19 Dec 2025 03:00:48 +0000 Files and hashes: 1: DFk17XzVK0-2LT-y57eUHLqsGoE.roa (hash: dXqY+iE+GyZrGAN3VZSoDHBgCd8KrkAD+zhIs/sw6B0=) 2: InA1Og6sR4YUgU6o-aAa42NlxCE.roa (hash: +mBUSakr5JllZ5ayoZAKPyK7MyouaEc8pwLjmxou6hg=) 3: NQzOG50G3M6IVmWVNkmcFgM5E3A.crl (hash: Jdua4qVTaH3tLDAgj6/CgEyXwXO3YjEutAQrvhIgJXY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.crl rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.mft rsync://rpki.ripe.net/repository/DEFAULT/NQzOG50G3M6IVmWVNkmcFgM5E3A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:67:28:51:3c:f3:38:0d:48:23:43:2f:c7:9c:3c:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=350cce1b9d06dcce8856659536499c1603391370 Validity Not Before: Dec 18 03:00:48 2025 GMT Not After : Dec 19 03:00:48 2025 GMT Subject: CN=56021083c9d235c46a69a737cb6a5e1cc8ad667f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d2:9f:5a:a5:ad:4b:48:55:e9:54:41:4b:8f: f4:3f:6a:74:43:bb:b3:15:20:9d:5b:7d:d8:a1:58: ee:59:5f:22:0a:eb:15:99:18:b6:2f:44:c7:1e:b9: 2f:42:f3:29:a0:77:9f:3b:67:bb:56:6c:3c:1a:4a: ef:64:2e:44:4f:65:a5:66:b9:16:13:44:27:aa:d8: 0e:9f:ab:15:73:a5:b6:c0:67:07:c0:d0:25:54:1a: fe:c1:82:d3:8e:96:9e:8c:f7:19:38:dd:b4:04:3a: 66:33:7b:76:cf:68:da:8b:4a:72:92:d5:72:26:ea: 72:fa:b6:12:03:79:a0:20:c0:6e:cd:86:9a:9b:a9: c8:e8:70:ec:25:ea:23:7a:4d:18:f0:a2:47:1c:91: 9c:10:21:0e:51:08:70:2e:46:08:9f:85:30:fb:07: 6f:bb:68:cd:51:65:29:35:5f:31:28:af:b2:27:6b: 34:1b:d5:e6:59:1b:8b:4d:cd:f8:fa:16:68:3c:22: 6e:30:40:d8:3b:6e:71:b4:6f:b0:a4:a9:68:83:69: a3:83:f0:33:5c:94:91:8e:7a:20:06:5e:a4:c8:53: 78:72:fe:03:fe:41:70:b6:78:7f:71:12:bb:76:fa: 9f:fb:59:da:55:5a:c2:28:6b:d7:0c:81:3f:e1:51: e4:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:02:10:83:C9:D2:35:C4:6A:69:A7:37:CB:6A:5E:1C:C8:AD:66:7F X509v3 Authority Key Identifier: keyid:35:0C:CE:1B:9D:06:DC:CE:88:56:65:95:36:49:9C:16:03:39:13:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NQzOG50G3M6IVmWVNkmcFgM5E3A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:6d:0d:eb:a9:01:ff:ff:dc:f8:29:16:13:b7:3a:b3:01:e1: 0f:a7:5e:55:9c:15:64:a2:2d:0e:2c:40:ca:4e:ec:19:be:dd: c7:18:b4:44:4e:da:b1:c5:35:83:24:58:ac:57:12:dc:42:a1: 30:d5:53:eb:b1:90:75:fd:91:0d:97:b6:97:5b:3e:8b:07:f9: 14:d7:1c:3e:51:cc:ba:ff:30:0c:02:59:ad:4e:6a:6d:b2:43: 54:9b:50:37:3c:45:8a:69:c4:9d:d1:43:61:7a:95:ac:75:4f: 08:fd:cf:8b:9c:d5:5c:5d:51:76:ce:3c:92:a4:df:6d:8f:50: 5d:d1:7d:cd:10:de:b1:08:12:59:8d:49:c7:df:5a:df:c6:f6: 68:63:24:ae:0a:fc:68:1d:68:93:bb:6c:58:1d:3f:4d:04:9f: 53:ff:7c:2e:5a:5a:a6:09:dc:1b:e6:90:41:e7:34:2a:27:82: d7:25:ea:71:0b:27:8f:e2:bc:e8:13:11:14:7a:92:15:0a:7b: 9a:13:2e:1a:ef:46:ee:8e:e5:58:1f:91:5e:4e:f4:be:59:1e: a3:6f:41:60:77:f7:9c:25:fa:f6:af:81:b9:7c:d5:aa:40:16: db:7c:1e:d3:73:90:f6:90:51:f9:7e:e1:63:58:3c:4a:05:3b: 7b:c3:d7:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvZyhRPPM4DUgjQy/HnDwBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MGNjZTFiOWQwNmRjY2U4ODU2NjU5NTM2NDk5YzE2MDMz OTEzNzAwHhcNMjUxMjE4MDMwMDQ4WhcNMjUxMjE5MDMwMDQ4WjAzMTEwLwYDVQQD Eyg1NjAyMTA4M2M5ZDIzNWM0NmE2OWE3MzdjYjZhNWUxY2M4YWQ2NjdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydKfWqWtS0hV6VRBS4/0P2p0Q7uz FSCdW33YoVjuWV8iCusVmRi2L0THHrkvQvMpoHefO2e7Vmw8GkrvZC5ET2WlZrkW E0QnqtgOn6sVc6W2wGcHwNAlVBr+wYLTjpaejPcZON20BDpmM3t2z2jai0pyktVy Jupy+rYSA3mgIMBuzYaam6nI6HDsJeojek0Y8KJHHJGcECEOUQhwLkYIn4Uw+wdv u2jNUWUpNV8xKK+yJ2s0G9XmWRuLTc34+hZoPCJuMEDYO25xtG+wpKlog2mjg/Az XJSRjnogBl6kyFN4cv4D/kFwtnh/cRK7dvqf+1naVVrCKGvXDIE/4VHkTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFYCEIPJ0jXEammnN8tqXhzIrWZ/MB8GA1UdIwQY MBaAFDUMzhudBtzOiFZllTZJnBYDORNwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlF6T0c1MEczTTZJVm1XVk5rbWNGZ001RTNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9mNTJkYjktOGUyNS00Mjk3LTkzZmQt NTU0MTVhMGJhNzNiLzEvTlF6T0c1MEczTTZJVm1XVk5rbWNGZ001RTNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9mNTJkYjktOGUyNS00Mjk3LTkzZmQtNTU0MTVhMGJhNzNi LzEvTlF6T0c1MEczTTZJVm1XVk5rbWNGZ001RTNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFG0N66kB ///c+CkWE7c6swHhD6deVZwVZKItDixAyk7sGb7dxxi0RE7ascU1gyRYrFcS3EKh MNVT67GQdf2RDZe2l1s+iwf5FNccPlHMuv8wDAJZrU5qbbJDVJtQNzxFimnEndFD YXqVrHVPCP3Pi5zVXF1Rds48kqTfbY9QXdF9zRDesQgSWY1Jx99a38b2aGMkrgr8 aB1ok7tsWB0/TQSfU/98LlpapgncG+aQQec0KieC1yXqcQsnj+K86BMRFHqSFQp7 mhMuGu9G7o7lWB+RXk70vlkeo29BYHf3nCX69q+BuXzVqkAW23we03OQ9pBR+X7h Y1g8SgU7e8PXiw== -----END CERTIFICATE-----Generated at Thu Dec 18 07:06:46 2025 by rpki-client