This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.mft File: NOQDSEY8YM6fxpQGCjf0aDCT8EU.mft (raw, json) Hash identifier: LfQTuocgSn/fwh/DYN0wYazxP8FV1W66EeGE33vZRSY= Subject key identifier: 8D:A3:63:26:3C:31:BB:D2:27:E0:69:EF:8E:39:11:F5:EC:8B:4F:CD Authority key identifier: 34:E4:03:48:46:3C:60:CE:9F:C6:94:06:0A:37:F4:68:30:93:F0:45 Certificate issuer: /CN=34e40348463c60ce9fc694060a37f4683093f045 Certificate serial: 019B2BF8814C407E09FA3985258C5D4554E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NOQDSEY8YM6fxpQGCjf0aDCT8EU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.mft Manifest number: 0B69 Signing time: Wed 17 Dec 2025 11:01:04 +0000 Manifest this update: Wed 17 Dec 2025 11:01:04 +0000 Manifest next update: Thu 18 Dec 2025 11:01:04 +0000 Files and hashes: 1: NOQDSEY8YM6fxpQGCjf0aDCT8EU.crl (hash: GnzSmf71YIsWMqKcGxxS21NXTyfE0lvslU/pr5ILEZY=) 2: t1BHctdeN3-hwrpqiOWRf8QN_Co.roa (hash: sJPUaFdOg0DhAMbLJjpATv5AEJJ9zxfLTR5pbOXKFNM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.crl rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.mft rsync://rpki.ripe.net/repository/DEFAULT/NOQDSEY8YM6fxpQGCjf0aDCT8EU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:f8:81:4c:40:7e:09:fa:39:85:25:8c:5d:45:54:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34e40348463c60ce9fc694060a37f4683093f045 Validity Not Before: Dec 17 11:01:04 2025 GMT Not After : Dec 18 11:01:04 2025 GMT Subject: CN=8da363263c31bbd227e069ef8e3911f5ec8b4fcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:78:b3:4e:94:ff:0b:db:f1:7c:62:2a:33:8a: 84:8a:e9:23:48:9f:5f:f7:57:f7:71:8d:9d:04:e4: 59:5e:57:8c:16:39:05:17:36:9e:d2:00:89:bc:fe: 1d:de:55:30:44:15:a3:c4:e6:6b:ff:94:f4:ee:56: c8:93:7c:eb:5d:4e:f8:40:7d:35:49:ed:fe:0a:ef: ea:b1:3f:5d:fd:63:af:45:c5:fc:97:d0:6c:70:66: df:85:26:08:20:4c:fb:95:af:f3:4c:6b:36:1a:67: 2f:09:a6:38:c8:0c:b5:1d:48:e0:12:a3:91:d5:fe: 24:0d:83:c9:9e:5c:11:b6:cf:d3:dd:86:11:54:4e: 48:99:3e:71:d8:86:c9:f0:7b:0f:25:e7:c4:2f:de: 55:1e:d6:a5:8c:41:95:d7:be:dd:32:96:30:3f:cd: 8e:1a:91:55:8a:77:1d:52:3e:ed:19:de:a7:0c:89: ca:26:c7:de:6f:e9:44:49:32:cd:d3:0f:00:97:5f: 8d:b5:a8:a9:81:f5:47:8d:79:b9:2d:63:1e:04:f7: d7:48:7c:62:c8:6d:84:73:a1:32:57:c1:87:04:e3: f1:36:82:17:8b:ce:36:d5:bb:a2:bb:26:0f:5f:eb: b6:d2:48:c2:1d:e9:47:1b:e5:4c:70:e1:27:fb:c4: 62:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:A3:63:26:3C:31:BB:D2:27:E0:69:EF:8E:39:11:F5:EC:8B:4F:CD X509v3 Authority Key Identifier: keyid:34:E4:03:48:46:3C:60:CE:9F:C6:94:06:0A:37:F4:68:30:93:F0:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NOQDSEY8YM6fxpQGCjf0aDCT8EU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:4d:23:0c:7c:00:00:26:c7:28:31:ae:93:84:e6:10:de:9c: 1a:f6:5d:63:96:ae:b1:1b:e0:89:90:c3:76:43:e2:99:09:0d: 8d:7b:a5:57:6f:ef:d3:ca:fd:e9:3c:44:8c:48:ec:42:cd:41: c1:fa:44:d9:3f:d1:ee:81:b5:e9:1e:5d:4e:4f:0e:a7:82:6d: 9b:ec:af:34:e4:9d:35:56:65:79:fc:81:e5:41:12:32:e1:13: a1:9f:0f:e2:d3:4e:ab:63:fb:a6:0f:d3:5d:26:fd:73:53:14: 21:a5:db:53:95:34:ce:a0:f2:ca:06:75:73:83:35:9f:7d:68: db:89:a2:17:77:99:36:09:84:39:23:c5:7a:cf:dc:c2:38:51: bc:d7:77:23:48:e4:da:41:81:32:d5:c6:1e:b8:08:3a:fb:ea: ba:e2:31:cf:d6:25:12:72:b1:82:0a:41:26:e9:17:b9:42:5d: fd:58:87:6f:01:00:20:9e:e6:43:17:69:37:7b:65:12:31:aa: e0:e5:aa:01:20:8f:37:28:23:6a:be:a9:c2:24:50:99:ba:14: 94:e4:3b:44:af:bc:a5:13:14:79:07:c4:1b:38:ad:93:4f:fb: 24:02:a2:b5:2c:02:cc:9c:ba:f1:99:54:02:8f:50:f9:d0:ce: d0:3c:7a:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsr+IFMQH4J+jmFJYxdRVTkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0ZTQwMzQ4NDYzYzYwY2U5ZmM2OTQwNjBhMzdmNDY4MzA5 M2YwNDUwHhcNMjUxMjE3MTEwMTA0WhcNMjUxMjE4MTEwMTA0WjAzMTEwLwYDVQQD Eyg4ZGEzNjMyNjNjMzFiYmQyMjdlMDY5ZWY4ZTM5MTFmNWVjOGI0ZmNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3izTpT/C9vxfGIqM4qEiukjSJ9f 91f3cY2dBORZXleMFjkFFzae0gCJvP4d3lUwRBWjxOZr/5T07lbIk3zrXU74QH01 Se3+Cu/qsT9d/WOvRcX8l9BscGbfhSYIIEz7la/zTGs2GmcvCaY4yAy1HUjgEqOR 1f4kDYPJnlwRts/T3YYRVE5ImT5x2IbJ8HsPJefEL95VHtaljEGV177dMpYwP82O GpFVincdUj7tGd6nDInKJsfeb+lESTLN0w8Al1+NtaipgfVHjXm5LWMeBPfXSHxi yG2Ec6EyV8GHBOPxNoIXi8421buiuyYPX+u20kjCHelHG+VMcOEn+8RilQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI2jYyY8MbvSJ+Bp7445EfXsi0/NMB8GA1UdIwQY MBaAFDTkA0hGPGDOn8aUBgo39Ggwk/BFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTk9RRFNFWThZTTZmeHBRR0NqZjBhRENUOEVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC8yYTNjY2MtMjkzYy00MWRhLWFkMTYt MWI5OWZkMDk3NjNlLzEvTk9RRFNFWThZTTZmeHBRR0NqZjBhRENUOEVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC8yYTNjY2MtMjkzYy00MWRhLWFkMTYtMWI5OWZkMDk3NjNl LzEvTk9RRFNFWThZTTZmeHBRR0NqZjBhRENUOEVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF00jDHwA ACbHKDGuk4TmEN6cGvZdY5ausRvgiZDDdkPimQkNjXulV2/v08r96TxEjEjsQs1B wfpE2T/R7oG16R5dTk8Op4Jtm+yvNOSdNVZlefyB5UESMuEToZ8P4tNOq2P7pg/T XSb9c1MUIaXbU5U0zqDyygZ1c4M1n31o24miF3eZNgmEOSPFes/cwjhRvNd3I0jk 2kGBMtXGHrgIOvvquuIxz9YlEnKxggpBJukXuUJd/ViHbwEAIJ7mQxdpN3tlEjGq 4OWqASCPNygjar6pwiRQmboUlOQ7RK+8pRMUeQfEGzitk0/7JAKitSwCzJy68ZlU Ao9Q+dDO0Dx6ew== -----END CERTIFICATE-----Generated at Wed Dec 17 18:33:44 2025 by rpki-client