This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.mft File: NQzOG50G3M6IVmWVNkmcFgM5E3A.mft (raw, json) Hash identifier: ZbmHq0ISZZZub/q7Vqg0U3mYKqiorMTKP/HNbs525Vk= Subject key identifier: 81:4F:E0:33:CC:4F:EA:CB:01:42:45:3C:76:73:85:37:21:97:3E:17 Authority key identifier: 35:0C:CE:1B:9D:06:DC:CE:88:56:65:95:36:49:9C:16:03:39:13:70 Certificate issuer: /CN=350cce1b9d06dcce8856659536499c1603391370 Certificate serial: 019AF19BA3F3C0C1DD50B2B8035D54E1A34C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NQzOG50G3M6IVmWVNkmcFgM5E3A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 03:01:40 +0000 Manifest this update: Sat 06 Dec 2025 03:01:40 +0000 Manifest next update: Sun 07 Dec 2025 03:01:40 +0000 Files and hashes: 1: DFk17XzVK0-2LT-y57eUHLqsGoE.roa (hash: dXqY+iE+GyZrGAN3VZSoDHBgCd8KrkAD+zhIs/sw6B0=) 2: InA1Og6sR4YUgU6o-aAa42NlxCE.roa (hash: +mBUSakr5JllZ5ayoZAKPyK7MyouaEc8pwLjmxou6hg=) 3: NQzOG50G3M6IVmWVNkmcFgM5E3A.crl (hash: lsBseEym1BQonSt22m1v0Y/vQWBIaHyvbt+Dgr8mYuk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.crl rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.mft rsync://rpki.ripe.net/repository/DEFAULT/NQzOG50G3M6IVmWVNkmcFgM5E3A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:a3:f3:c0:c1:dd:50:b2:b8:03:5d:54:e1:a3:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=350cce1b9d06dcce8856659536499c1603391370 Validity Not Before: Dec 6 03:01:40 2025 GMT Not After : Dec 7 03:01:40 2025 GMT Subject: CN=814fe033cc4feacb0142453c7673853721973e17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:73:15:70:89:c8:86:32:40:cc:57:a0:29:14: 37:e9:1f:8a:7d:45:ba:78:4c:6a:eb:eb:5e:9e:6d: 32:5d:51:91:1b:dc:09:5b:c7:4e:fc:e5:a1:f6:1e: 14:48:40:b1:0f:4e:80:ca:b4:9e:42:0d:c3:e7:f0: c6:5b:3f:65:a0:4e:7e:9e:b5:d6:bd:3c:d6:61:74: d3:65:9c:3c:86:35:2c:43:e3:31:51:c8:aa:f9:5a: 50:17:22:5a:b8:9f:86:9b:36:9c:cd:ed:a3:6b:78: 1b:0b:e9:04:10:db:90:7e:19:66:4a:8f:d5:bb:04: ba:de:d9:4d:2b:cf:9e:83:d7:e2:34:12:c0:6e:82: 5c:05:e6:57:d3:35:fd:b6:4b:2b:3c:76:9b:9d:15: 10:fa:1b:f1:42:31:97:43:61:d2:d8:91:38:47:7f: 73:b2:e3:87:98:63:c3:c0:df:11:c6:66:94:ce:f9: 6e:28:3b:2d:d9:e0:9a:7e:10:72:62:c9:f8:54:81: 0d:43:ee:af:e9:d6:37:15:b3:23:ca:66:d1:53:1b: 4b:e6:02:2d:bc:40:83:35:2d:bf:e6:09:25:f8:11: 3e:f0:3c:73:42:8f:33:b9:3c:b0:2a:cf:05:c2:ee: 2c:a6:7c:b9:9f:23:67:3f:34:72:7e:39:79:01:fc: fa:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:4F:E0:33:CC:4F:EA:CB:01:42:45:3C:76:73:85:37:21:97:3E:17 X509v3 Authority Key Identifier: keyid:35:0C:CE:1B:9D:06:DC:CE:88:56:65:95:36:49:9C:16:03:39:13:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NQzOG50G3M6IVmWVNkmcFgM5E3A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:43:cb:f5:95:28:8f:b0:38:ea:ed:b4:56:3d:fa:f7:ab:a4: dd:c6:84:24:35:ec:d0:98:a4:f9:73:ea:94:7b:2e:98:a9:25: c3:64:23:33:bb:b3:67:63:35:d9:de:21:67:50:45:36:6b:0a: ba:3f:5e:59:1f:df:43:c5:75:01:ff:e5:24:c1:29:69:3e:b5: b0:99:c1:8c:d5:40:e3:3a:54:9b:19:f7:e2:13:98:53:3f:a8: f0:a7:8d:3e:11:ed:10:53:93:f4:55:a0:6b:00:af:67:25:f4: d7:f2:74:88:b2:0f:2a:bf:53:29:38:bc:c2:e9:a2:91:81:27: 30:84:e4:e0:90:db:26:bd:fa:fb:38:23:c4:4e:5b:fb:9c:e7: f8:d6:b0:85:21:3c:1f:33:58:0b:6c:f7:b8:5e:17:00:67:c5: bf:82:2e:f7:54:de:20:c6:04:78:12:a7:18:ff:04:ee:ac:00: 73:9f:79:46:b8:42:cb:3c:f1:98:88:b6:23:55:34:0f:3a:84: 07:e5:0b:53:f6:da:2e:a5:a4:94:05:64:03:94:ad:82:af:79: de:d3:ca:4e:73:19:5e:d2:6a:ec:e6:cc:3c:97:43:a0:01:5e: 77:d2:11:4f:77:de:0b:37:ba:1e:80:f1:1d:c2:76:44:64:b7: 85:0d:0a:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm6PzwMHdULK4A11U4aNMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MGNjZTFiOWQwNmRjY2U4ODU2NjU5NTM2NDk5YzE2MDMz OTEzNzAwHhcNMjUxMjA2MDMwMTQwWhcNMjUxMjA3MDMwMTQwWjAzMTEwLwYDVQQD Eyg4MTRmZTAzM2NjNGZlYWNiMDE0MjQ1M2M3NjczODUzNzIxOTczZTE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7HMVcInIhjJAzFegKRQ36R+KfUW6 eExq6+tenm0yXVGRG9wJW8dO/OWh9h4USECxD06AyrSeQg3D5/DGWz9loE5+nrXW vTzWYXTTZZw8hjUsQ+MxUciq+VpQFyJauJ+Gmzacze2ja3gbC+kEENuQfhlmSo/V uwS63tlNK8+eg9fiNBLAboJcBeZX0zX9tksrPHabnRUQ+hvxQjGXQ2HS2JE4R39z suOHmGPDwN8RxmaUzvluKDst2eCafhByYsn4VIENQ+6v6dY3FbMjymbRUxtL5gIt vECDNS2/5gkl+BE+8DxzQo8zuTywKs8Fwu4spny5nyNnPzRyfjl5Afz6hQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIFP4DPMT+rLAUJFPHZzhTchlz4XMB8GA1UdIwQY MBaAFDUMzhudBtzOiFZllTZJnBYDORNwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlF6T0c1MEczTTZJVm1XVk5rbWNGZ001RTNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9mNTJkYjktOGUyNS00Mjk3LTkzZmQt NTU0MTVhMGJhNzNiLzEvTlF6T0c1MEczTTZJVm1XVk5rbWNGZ001RTNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9mNTJkYjktOGUyNS00Mjk3LTkzZmQtNTU0MTVhMGJhNzNi LzEvTlF6T0c1MEczTTZJVm1XVk5rbWNGZ001RTNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATkPL9ZUo j7A46u20Vj3696uk3caEJDXs0Jik+XPqlHsumKklw2QjM7uzZ2M12d4hZ1BFNmsK uj9eWR/fQ8V1Af/lJMEpaT61sJnBjNVA4zpUmxn34hOYUz+o8KeNPhHtEFOT9FWg awCvZyX01/J0iLIPKr9TKTi8wumikYEnMITk4JDbJr36+zgjxE5b+5zn+NawhSE8 HzNYC2z3uF4XAGfFv4Iu91TeIMYEeBKnGP8E7qwAc595RrhCyzzxmIi2I1U0DzqE B+ULU/baLqWklAVkA5Stgq953tPKTnMZXtJq7ObMPJdDoAFed9IRT3feCze6HoDx HcJ2RGS3hQ0KTw== -----END CERTIFICATE-----Generated at Sat Dec 6 06:59:15 2025 by rpki-client