This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.mft File: NOQDSEY8YM6fxpQGCjf0aDCT8EU.mft (raw, json) Hash identifier: +/WAprq0v84vyVQyiHxHAiuX9NmoEzYKVQ3GTVmUgRA= Subject key identifier: 4F:1F:E4:4F:5A:46:DA:A8:17:D2:5F:C7:5D:A3:B9:71:55:9B:8D:AD Authority key identifier: 34:E4:03:48:46:3C:60:CE:9F:C6:94:06:0A:37:F4:68:30:93:F0:45 Certificate issuer: /CN=34e40348463c60ce9fc694060a37f4683093f045 Certificate serial: 019AF2099915BA06F22A4F75091284970B1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NOQDSEY8YM6fxpQGCjf0aDCT8EU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.mft Manifest number: 0B4B Signing time: Sat 06 Dec 2025 05:01:46 +0000 Manifest this update: Sat 06 Dec 2025 05:01:46 +0000 Manifest next update: Sun 07 Dec 2025 05:01:46 +0000 Files and hashes: 1: NOQDSEY8YM6fxpQGCjf0aDCT8EU.crl (hash: fjb3G1CZnoBceqR3G45RNUzwRDnNXScaSLWqOEgc5Ys=) 2: t1BHctdeN3-hwrpqiOWRf8QN_Co.roa (hash: sJPUaFdOg0DhAMbLJjpATv5AEJJ9zxfLTR5pbOXKFNM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.crl rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.mft rsync://rpki.ripe.net/repository/DEFAULT/NOQDSEY8YM6fxpQGCjf0aDCT8EU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:99:15:ba:06:f2:2a:4f:75:09:12:84:97:0b:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34e40348463c60ce9fc694060a37f4683093f045 Validity Not Before: Dec 6 05:01:46 2025 GMT Not After : Dec 7 05:01:46 2025 GMT Subject: CN=4f1fe44f5a46daa817d25fc75da3b971559b8dad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:21:8b:80:74:7d:cb:80:62:67:92:e2:98:79: 8a:07:bc:da:39:7d:7a:c1:b7:1e:09:19:19:18:6f: b4:37:56:9b:79:b4:12:1b:bb:59:85:b9:01:3a:e6: b7:2f:c8:ee:77:56:18:a3:f5:fb:73:fc:63:c1:d8: 88:f4:82:66:36:4c:be:71:06:98:af:c1:f1:b4:07: 7d:ff:b3:8b:72:e7:07:2e:c3:7d:ba:d6:3e:82:01: fb:d8:42:c2:4e:ea:01:af:d9:78:ea:60:30:1a:00: 1a:6e:cc:5b:38:75:ef:7e:77:38:28:35:f3:59:02: c7:b7:3a:d4:24:b6:2e:f4:2a:89:a4:4f:c6:3e:df: 9d:89:2e:2d:af:24:4d:97:30:5e:c6:7b:3f:f1:2d: d0:04:9f:85:34:9c:a4:9a:ae:e9:d9:20:4b:5b:99: d9:6f:5e:3a:00:59:05:a6:b3:a2:72:1f:81:5f:90: 95:0c:89:12:ec:b8:2c:42:b2:02:ba:31:f7:38:7f: ad:64:fc:9a:92:07:ff:75:7d:4a:27:5b:61:a8:e7: f0:f3:5e:c7:aa:6a:91:03:85:db:a0:24:c5:2b:e2: 88:86:c5:71:a5:11:1b:7d:38:17:09:e0:d4:5b:6b: f0:f2:3a:32:ad:b2:38:bd:61:d9:ee:0c:98:6f:4f: bb:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:1F:E4:4F:5A:46:DA:A8:17:D2:5F:C7:5D:A3:B9:71:55:9B:8D:AD X509v3 Authority Key Identifier: keyid:34:E4:03:48:46:3C:60:CE:9F:C6:94:06:0A:37:F4:68:30:93:F0:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NOQDSEY8YM6fxpQGCjf0aDCT8EU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:b7:2e:61:2d:e0:ec:b7:5f:85:4b:a2:7e:8e:24:b6:ce:92: 42:a7:71:8b:c0:b3:5d:56:32:a6:3a:1f:b2:57:1c:1d:18:2b: 8f:8f:e1:73:c2:4f:cb:83:d9:62:5f:02:7c:58:f3:d3:e9:c8: 7d:1c:a2:42:c4:87:2b:c5:5b:50:4e:b1:a6:77:6b:44:1c:0f: 3f:d7:94:d2:0e:12:87:99:3a:96:fc:61:00:24:61:07:60:39: a7:66:d7:31:5d:07:e9:5f:34:3a:84:67:36:14:79:ac:19:29: 70:99:e0:d2:c2:91:41:36:d5:46:87:d6:0d:ae:0b:60:56:4a: 44:a9:88:7f:35:32:aa:07:f3:f5:ef:08:b2:30:36:c4:61:14: 12:ad:96:a0:f0:86:ce:32:14:fb:1a:d8:c0:0f:0f:39:71:f1: c2:a7:e4:be:ae:20:01:53:e8:9f:ce:ba:9e:b6:b0:cf:d3:ce: f1:f3:b1:0b:1b:21:58:a4:dd:74:d1:38:50:32:c5:8f:27:57: 0a:bc:63:4a:cd:0f:74:18:da:9b:e6:84:3b:7a:18:9c:58:c5: 1f:74:bc:fb:de:d1:82:42:22:b0:b2:d4:2d:4c:ab:eb:6c:ca: d3:f4:3a:ee:21:7f:d1:aa:ab:72:e9:18:3a:1e:3c:fc:40:e0: 3e:03:16:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCZkVugbyKk91CRKElwsfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0ZTQwMzQ4NDYzYzYwY2U5ZmM2OTQwNjBhMzdmNDY4MzA5 M2YwNDUwHhcNMjUxMjA2MDUwMTQ2WhcNMjUxMjA3MDUwMTQ2WjAzMTEwLwYDVQQD Eyg0ZjFmZTQ0ZjVhNDZkYWE4MTdkMjVmYzc1ZGEzYjk3MTU1OWI4ZGFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyGLgHR9y4BiZ5LimHmKB7zaOX16 wbceCRkZGG+0N1abebQSG7tZhbkBOua3L8jud1YYo/X7c/xjwdiI9IJmNky+cQaY r8HxtAd9/7OLcucHLsN9utY+ggH72ELCTuoBr9l46mAwGgAabsxbOHXvfnc4KDXz WQLHtzrUJLYu9CqJpE/GPt+diS4tryRNlzBexns/8S3QBJ+FNJykmq7p2SBLW5nZ b146AFkFprOich+BX5CVDIkS7LgsQrICujH3OH+tZPyakgf/dX1KJ1thqOfw817H qmqRA4XboCTFK+KIhsVxpREbfTgXCeDUW2vw8joyrbI4vWHZ7gyYb0+7KQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE8f5E9aRtqoF9Jfx12juXFVm42tMB8GA1UdIwQY MBaAFDTkA0hGPGDOn8aUBgo39Ggwk/BFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTk9RRFNFWThZTTZmeHBRR0NqZjBhRENUOEVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC8yYTNjY2MtMjkzYy00MWRhLWFkMTYt MWI5OWZkMDk3NjNlLzEvTk9RRFNFWThZTTZmeHBRR0NqZjBhRENUOEVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC8yYTNjY2MtMjkzYy00MWRhLWFkMTYtMWI5OWZkMDk3NjNl LzEvTk9RRFNFWThZTTZmeHBRR0NqZjBhRENUOEVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsLcuYS3g 7LdfhUuifo4kts6SQqdxi8CzXVYypjofslccHRgrj4/hc8JPy4PZYl8CfFjz0+nI fRyiQsSHK8VbUE6xpndrRBwPP9eU0g4Sh5k6lvxhACRhB2A5p2bXMV0H6V80OoRn NhR5rBkpcJng0sKRQTbVRofWDa4LYFZKRKmIfzUyqgfz9e8IsjA2xGEUEq2WoPCG zjIU+xrYwA8POXHxwqfkvq4gAVPon866nrawz9PO8fOxCxshWKTddNE4UDLFjydX CrxjSs0PdBjam+aEO3oYnFjFH3S8+97RgkIisLLULUyr62zK0/Q67iF/0aqrcukY Oh48/EDgPgMW9Q== -----END CERTIFICATE-----Generated at Sat Dec 6 07:10:41 2025 by rpki-client