This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft File: nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft (raw, json) Hash identifier: Xf4zBq0jjFg3npXhN6AkKZ1Nm3xHEN/alfu+rxNX1RM= Subject key identifier: FD:85:4D:4E:14:59:4A:3E:5E:3A:74:0E:48:1C:21:FB:66:CD:93:FC Authority key identifier: 9D:06:6C:B8:48:8D:AE:7E:42:34:AA:7C:89:24:30:DA:D1:1F:E5:B1 Certificate issuer: /CN=9d066cb8488dae7e4234aa7c892430dad11fe5b1 Certificate serial: 019AF27681F12E28D81941D2F851E9CFECA4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft Manifest number: 1773 Signing time: Sat 06 Dec 2025 07:00:43 +0000 Manifest this update: Sat 06 Dec 2025 07:00:43 +0000 Manifest next update: Sun 07 Dec 2025 07:00:43 +0000 Files and hashes: 1: XTN0FV8C4mD4Sc_8vyQmb4SgIPI.roa (hash: BGUozoIWxfNXYZv8C7K/va/x94laPWjXcWXXKyL1Cm4=) 2: ctIdcbAxzlgE61iaJYeLZI-atK4.roa (hash: xe/X44jbVuhNTWtEZLlddMSK0Nf/sdgGvPMIEXHpN6g=) 3: nQZsuEiNrn5CNKp8iSQw2tEf5bE.crl (hash: gFzP6ZH3+loJFT5PvGnovhHFrdla7Z1XLegzTKQxpa8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.crl rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:81:f1:2e:28:d8:19:41:d2:f8:51:e9:cf:ec:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d066cb8488dae7e4234aa7c892430dad11fe5b1 Validity Not Before: Dec 6 07:00:43 2025 GMT Not After : Dec 7 07:00:43 2025 GMT Subject: CN=fd854d4e14594a3e5e3a740e481c21fb66cd93fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:bd:ef:d8:bf:55:28:9f:d0:ec:d6:1f:5e:ad: 17:84:fc:78:e5:bf:58:e8:ae:85:72:fe:20:a1:62: 65:95:23:2d:b7:be:30:c0:ca:f8:e4:c2:db:3f:3d: 67:b6:59:7c:15:80:57:6a:66:0a:0c:17:24:a2:fc: ed:0d:d0:e9:46:66:f7:ca:0a:13:ae:0f:51:a9:b0: 16:75:08:9c:5d:49:95:80:61:e8:10:f7:49:a2:ba: 1e:dc:a5:01:55:97:a2:26:49:76:46:63:c4:6e:9b: 5d:f2:be:6a:46:c8:5a:fd:fa:8b:8f:e1:17:af:bb: 5d:cf:98:fe:ca:be:03:3f:f1:fe:f6:bb:cc:3d:68: 4b:54:58:0b:85:1a:42:f6:b1:a8:c9:52:af:73:09: 42:9a:f2:f6:ea:82:93:ad:ad:4b:63:50:fb:cd:dd: f1:f5:bf:2f:95:34:8d:bb:d5:88:d9:c0:35:b6:c3: 15:46:25:0a:99:f9:7f:c5:95:98:0d:84:04:68:94: a7:3a:cd:43:0f:f6:66:78:3b:d4:ff:59:b6:3f:3b: 9e:b4:f8:11:4f:d8:23:29:56:1c:13:47:d1:7e:9d: 0a:57:1a:4b:16:17:44:92:62:da:4d:a8:4b:39:70: 89:82:a1:ad:09:9e:59:59:b9:e2:ec:3c:df:a2:51: 4d:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:85:4D:4E:14:59:4A:3E:5E:3A:74:0E:48:1C:21:FB:66:CD:93:FC X509v3 Authority Key Identifier: keyid:9D:06:6C:B8:48:8D:AE:7E:42:34:AA:7C:89:24:30:DA:D1:1F:E5:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:e9:35:af:99:9a:d8:8e:af:f3:ab:4a:33:f0:97:08:14:7f: 43:f8:13:4c:0b:ba:0a:2c:6d:3a:50:41:24:90:ca:2d:64:1f: 66:43:74:2b:fc:c2:01:e7:0d:21:01:09:f6:a1:a4:3b:ae:61: 2d:08:d6:1d:15:ee:00:04:6c:20:99:e7:f9:dd:b6:b7:6f:a1: 35:b5:b0:bc:9e:0b:42:41:1b:d2:bb:ff:b1:9f:6b:70:59:88: b8:fb:88:3a:8a:ae:e1:e4:3e:a2:22:38:6e:0c:fe:c7:20:d8: 2f:1f:d4:78:de:63:02:ab:0a:07:f0:b7:5e:77:c6:71:8e:0c: 90:1a:f6:18:b9:b5:fb:3c:79:e5:f1:32:03:b8:5b:21:1b:f8: 6b:58:02:e8:e1:36:4d:54:74:76:e4:12:6c:db:72:34:84:77: f7:52:79:2e:21:32:ee:8d:06:31:17:60:19:23:8d:e8:25:78: 32:dd:af:b2:c3:5a:81:d7:0b:65:cb:fd:f3:7f:38:78:24:b1: 45:f4:65:f0:cc:d8:6c:cc:06:32:4d:86:97:45:cc:b3:16:87: 8b:33:ac:97:75:06:1b:0e:6b:68:e6:32:9a:d6:4b:79:df:68: 38:b2:b6:50:fd:5f:08:95:10:f0:c7:2e:4c:44:a3:48:7e:f6: 43:1f:72:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydoHxLijYGUHS+FHpz+ykMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMDY2Y2I4NDg4ZGFlN2U0MjM0YWE3Yzg5MjQzMGRhZDEx ZmU1YjEwHhcNMjUxMjA2MDcwMDQzWhcNMjUxMjA3MDcwMDQzWjAzMTEwLwYDVQQD EyhmZDg1NGQ0ZTE0NTk0YTNlNWUzYTc0MGU0ODFjMjFmYjY2Y2Q5M2ZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApb3v2L9VKJ/Q7NYfXq0XhPx45b9Y 6K6Fcv4goWJllSMtt74wwMr45MLbPz1ntll8FYBXamYKDBckovztDdDpRmb3ygoT rg9RqbAWdQicXUmVgGHoEPdJoroe3KUBVZeiJkl2RmPEbptd8r5qRsha/fqLj+EX r7tdz5j+yr4DP/H+9rvMPWhLVFgLhRpC9rGoyVKvcwlCmvL26oKTra1LY1D7zd3x 9b8vlTSNu9WI2cA1tsMVRiUKmfl/xZWYDYQEaJSnOs1DD/ZmeDvU/1m2PzuetPgR T9gjKVYcE0fRfp0KVxpLFhdEkmLaTahLOXCJgqGtCZ5ZWbni7DzfolFNVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP2FTU4UWUo+Xjp0DkgcIftmzZP8MB8GA1UdIwQY MBaAFJ0GbLhIja5+QjSqfIkkMNrRH+WxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblFac3VFaU5ybjVDTktwOGlTUXcydEVmNWJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9kMGQyZmQtYWE5MC00MjA3LTkxMDQt M2VmMDJkNTE0MGI3LzEvblFac3VFaU5ybjVDTktwOGlTUXcydEVmNWJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC9kMGQyZmQtYWE5MC00MjA3LTkxMDQtM2VmMDJkNTE0MGI3 LzEvblFac3VFaU5ybjVDTktwOGlTUXcydEVmNWJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS+k1r5ma 2I6v86tKM/CXCBR/Q/gTTAu6CixtOlBBJJDKLWQfZkN0K/zCAecNIQEJ9qGkO65h LQjWHRXuAARsIJnn+d22t2+hNbWwvJ4LQkEb0rv/sZ9rcFmIuPuIOoqu4eQ+oiI4 bgz+xyDYLx/UeN5jAqsKB/C3XnfGcY4MkBr2GLm1+zx55fEyA7hbIRv4a1gC6OE2 TVR0duQSbNtyNIR391J5LiEy7o0GMRdgGSON6CV4Mt2vssNagdcLZcv98384eCSx RfRl8MzYbMwGMk2Gl0XMsxaHizOsl3UGGw5raOYymtZLed9oOLK2UP1fCJUQ8Mcu TESjSH72Qx9ynA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:48:25 2025 by rpki-client