This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/ba3577-ccb3-4ea6-8368-7458608f8d99/1/nqHn4vjzF3WfNGj9gVvxTrNuIcg.mft File: nqHn4vjzF3WfNGj9gVvxTrNuIcg.mft (raw, json) Hash identifier: b3vQhfGmhCTtc7Ir1TSDtPRSdaqqhzXhtodkFPDtaQ0= Subject key identifier: 8C:5C:B3:83:24:51:79:06:CA:2F:15:90:6C:02:CC:C9:DF:D6:59:C1 Authority key identifier: 9E:A1:E7:E2:F8:F3:17:75:9F:34:68:FD:81:5B:F1:4E:B3:6E:21:C8 Certificate issuer: /CN=9ea1e7e2f8f317759f3468fd815bf14eb36e21c8 Certificate serial: 019AF50B013EF387158D690885675019CD68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nqHn4vjzF3WfNGj9gVvxTrNuIcg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/ba3577-ccb3-4ea6-8368-7458608f8d99/1/nqHn4vjzF3WfNGj9gVvxTrNuIcg.mft Manifest number: 1281 Signing time: Sat 06 Dec 2025 19:02:10 +0000 Manifest this update: Sat 06 Dec 2025 19:02:10 +0000 Manifest next update: Sun 07 Dec 2025 19:02:10 +0000 Files and hashes: 1: nqHn4vjzF3WfNGj9gVvxTrNuIcg.crl (hash: dxrAoq0nWQuwd2CDhuGnJV3QQTwy8f5fSdPNe+C3WsE=) 2: vMWejL_WfAw5UGYBVG882HdQDVU.roa (hash: UfokJ9esFOS4de6evRWO+CcRCXAegKzSyR2ErWU1fPQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/ba3577-ccb3-4ea6-8368-7458608f8d99/1/nqHn4vjzF3WfNGj9gVvxTrNuIcg.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/ba3577-ccb3-4ea6-8368-7458608f8d99/1/nqHn4vjzF3WfNGj9gVvxTrNuIcg.mft rsync://rpki.ripe.net/repository/DEFAULT/nqHn4vjzF3WfNGj9gVvxTrNuIcg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:01:3e:f3:87:15:8d:69:08:85:67:50:19:cd:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ea1e7e2f8f317759f3468fd815bf14eb36e21c8 Validity Not Before: Dec 6 19:02:10 2025 GMT Not After : Dec 7 19:02:10 2025 GMT Subject: CN=8c5cb38324517906ca2f15906c02ccc9dfd659c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:75:09:f7:dc:ea:62:f2:7f:b1:a3:cc:2b:b9: 6b:4e:a8:db:bf:98:38:71:31:73:ea:61:9f:65:cb: f3:f8:4e:14:0b:2b:52:af:db:b2:ee:63:40:c7:d4: 6f:99:cb:19:20:58:7a:ab:74:16:44:48:8d:a9:d9: 1d:7d:ea:5b:a3:47:f8:ed:4e:cd:e1:6f:00:3f:67: 50:1f:3a:7e:de:56:ca:e6:35:fc:ec:1e:18:b9:e6: 08:a7:2e:fd:58:24:f6:08:cc:bb:7e:41:26:d9:41: b7:dc:b9:4c:3f:7b:bc:3e:dd:a7:f9:ce:f6:93:8e: ad:8e:a6:4e:2d:ea:7f:d6:7d:49:fd:79:7c:07:37: 2c:fa:65:d6:f4:73:b7:6a:d2:3c:ed:1a:5e:1d:dc: 97:ed:5f:73:76:08:e7:81:4e:5c:ad:a9:93:e9:c3: 8c:da:1f:78:55:b5:1b:7e:17:4b:5d:64:0d:98:20: 86:bc:4a:06:c4:0c:58:f5:f7:ae:58:17:c9:de:54: 0d:66:6a:9f:23:03:99:18:c6:f9:37:a8:4a:c4:9a: b3:5e:5b:5c:4e:ec:8a:f8:50:74:b6:2e:f1:84:27: 88:cf:cf:53:9c:e8:4e:05:05:52:96:52:78:9a:22: 76:81:ee:6e:36:71:3d:e7:24:9a:c4:76:a8:66:8e: c6:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:5C:B3:83:24:51:79:06:CA:2F:15:90:6C:02:CC:C9:DF:D6:59:C1 X509v3 Authority Key Identifier: keyid:9E:A1:E7:E2:F8:F3:17:75:9F:34:68:FD:81:5B:F1:4E:B3:6E:21:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nqHn4vjzF3WfNGj9gVvxTrNuIcg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ba3577-ccb3-4ea6-8368-7458608f8d99/1/nqHn4vjzF3WfNGj9gVvxTrNuIcg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ba3577-ccb3-4ea6-8368-7458608f8d99/1/nqHn4vjzF3WfNGj9gVvxTrNuIcg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:f1:22:1c:4f:77:f5:58:a1:d4:ed:27:e3:94:36:99:1e:e1: 34:67:e0:d1:80:06:78:d6:b3:23:57:0b:87:7d:32:ba:27:d3: 24:5f:cb:d2:c3:29:2e:82:b7:74:2f:bc:c9:64:83:13:34:92: f7:cc:43:d4:d8:21:c0:53:63:97:36:fe:0d:39:e9:a6:3f:8b: df:27:4a:19:4c:43:d0:b7:c4:38:51:2c:47:4d:e9:d6:89:f1: ff:06:2f:28:9c:47:e4:64:83:5a:9c:cf:26:89:0b:a5:60:c6: 34:c6:00:ad:8b:15:db:a0:73:e6:41:71:e6:64:da:04:1a:da: 2c:e1:c1:9d:84:e4:d0:88:46:0b:ea:70:07:2f:c8:17:a5:d0: a8:ca:10:e0:e4:23:ba:12:12:5d:cb:f6:1c:83:41:31:18:b3: d7:0f:1c:ab:18:2d:38:38:5f:86:5d:20:38:39:43:b5:ef:83: 94:ab:85:17:35:e0:70:8f:bf:2c:c7:0e:64:07:14:e2:4d:08: f3:c5:ae:7c:3d:af:49:56:51:6d:a3:4d:7a:3c:0a:87:2f:40: fd:45:8b:57:9f:b7:b3:9e:76:c7:ab:f2:d2:86:98:69:77:9c: 10:50:cb:fb:fe:81:00:ff:2b:cc:90:e6:48:b6:fb:f1:73:c5: d8:0b:0d:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CwE+84cVjWkIhWdQGc1oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllYTFlN2UyZjhmMzE3NzU5ZjM0NjhmZDgxNWJmMTRlYjM2 ZTIxYzgwHhcNMjUxMjA2MTkwMjEwWhcNMjUxMjA3MTkwMjEwWjAzMTEwLwYDVQQD Eyg4YzVjYjM4MzI0NTE3OTA2Y2EyZjE1OTA2YzAyY2NjOWRmZDY1OWMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXUJ99zqYvJ/saPMK7lrTqjbv5g4 cTFz6mGfZcvz+E4UCytSr9uy7mNAx9RvmcsZIFh6q3QWREiNqdkdfepbo0f47U7N 4W8AP2dQHzp+3lbK5jX87B4YueYIpy79WCT2CMy7fkEm2UG33LlMP3u8Pt2n+c72 k46tjqZOLep/1n1J/Xl8Bzcs+mXW9HO3atI87RpeHdyX7V9zdgjngU5cramT6cOM 2h94VbUbfhdLXWQNmCCGvEoGxAxY9feuWBfJ3lQNZmqfIwOZGMb5N6hKxJqzXltc TuyK+FB0ti7xhCeIz89TnOhOBQVSllJ4miJ2ge5uNnE95ySaxHaoZo7G8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIxcs4MkUXkGyi8VkGwCzMnf1lnBMB8GA1UdIwQY MBaAFJ6h5+L48xd1nzRo/YFb8U6zbiHIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnFIbjR2anpGM1dmTkdqOWdWdnhUck51SWNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9iYTM1NzctY2NiMy00ZWE2LTgzNjgt NzQ1ODYwOGY4ZDk5LzEvbnFIbjR2anpGM1dmTkdqOWdWdnhUck51SWNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9iYTM1NzctY2NiMy00ZWE2LTgzNjgtNzQ1ODYwOGY4ZDk5 LzEvbnFIbjR2anpGM1dmTkdqOWdWdnhUck51SWNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ/EiHE93 9Vih1O0n45Q2mR7hNGfg0YAGeNazI1cLh30yuifTJF/L0sMpLoK3dC+8yWSDEzSS 98xD1NghwFNjlzb+DTnppj+L3ydKGUxD0LfEOFEsR03p1onx/wYvKJxH5GSDWpzP JokLpWDGNMYArYsV26Bz5kFx5mTaBBraLOHBnYTk0IhGC+pwBy/IF6XQqMoQ4OQj uhISXcv2HINBMRiz1w8cqxgtODhfhl0gODlDte+DlKuFFzXgcI+/LMcOZAcU4k0I 88WufD2vSVZRbaNNejwKhy9A/UWLV5+3s552x6vy0oaYaXecEFDL+/6BAP8rzJDm SLb78XPF2AsNow== -----END CERTIFICATE-----Generated at Sat Dec 6 23:43:36 2025 by rpki-client