This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.mft File: NQBF99g86xMNjWlf_n1D2zgZ3lU.mft (raw, json) Hash identifier: aIX2YvNN1e0ShqknmhMQTMHz2jx95dWBqJarciS4Xxk= Subject key identifier: 07:38:63:35:38:9C:9C:FA:B1:EE:11:28:4C:48:0E:FC:C1:5E:2E:A4 Authority key identifier: 35:00:45:F7:D8:3C:EB:13:0D:8D:69:5F:FE:7D:43:DB:38:19:DE:55 Certificate issuer: /CN=350045f7d83ceb130d8d695ffe7d43db3819de55 Certificate serial: 019AF31B65E17E35FB4F34E4AC7C1C18FDB0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NQBF99g86xMNjWlf_n1D2zgZ3lU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.mft Manifest number: 162A Signing time: Sat 06 Dec 2025 10:00:50 +0000 Manifest this update: Sat 06 Dec 2025 10:00:50 +0000 Manifest next update: Sun 07 Dec 2025 10:00:50 +0000 Files and hashes: 1: NQBF99g86xMNjWlf_n1D2zgZ3lU.crl (hash: vSWfbKwuuiB0D0JLRQz4saUooGZ3sPQpLaKiDHY7NYU=) 2: i3NuLV9-SVOSQ4rLf1Rnzi76R8s.roa (hash: F0HuxkG9RZJHtx6EFFj7jJPD9PIqUuIoXshg3545UXg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.crl rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.mft rsync://rpki.ripe.net/repository/DEFAULT/NQBF99g86xMNjWlf_n1D2zgZ3lU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:65:e1:7e:35:fb:4f:34:e4:ac:7c:1c:18:fd:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=350045f7d83ceb130d8d695ffe7d43db3819de55 Validity Not Before: Dec 6 10:00:50 2025 GMT Not After : Dec 7 10:00:50 2025 GMT Subject: CN=07386335389c9cfab1ee11284c480efcc15e2ea4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:69:f1:b8:0e:7f:03:d1:8b:67:61:a7:9f:e4: 25:3b:72:ef:30:fa:8b:da:36:91:56:6a:1f:c9:46: d8:dc:48:0c:6b:da:6d:83:c0:86:ad:e6:4e:4f:5d: 54:e9:ae:ec:22:70:e5:84:36:fb:99:2e:45:1b:4e: be:47:62:87:9f:a0:61:50:08:45:90:52:d1:b6:fa: d6:92:8f:10:d1:56:9b:0a:dd:0b:61:7e:1e:fb:0a: b3:d6:40:c6:5b:02:be:f3:0e:a8:3b:01:b3:08:5c: dd:3a:6f:53:16:24:b2:61:1f:c1:b1:14:08:ad:1d: ff:ae:16:a0:d6:a3:64:84:74:45:df:9f:38:64:2f: 2f:6c:54:61:95:9c:c7:e8:1b:8f:52:d3:fe:db:a3: 9c:1c:8b:31:32:d9:69:9a:f9:4d:50:38:0e:47:10: 10:cc:fa:ad:18:85:89:7d:5b:d5:54:fa:d0:2f:e5: b7:d4:6a:33:b3:74:fc:0a:82:bd:05:5d:5e:40:aa: 79:a3:91:a3:c8:19:87:36:f4:d1:e2:ff:ff:3b:00: 59:f7:94:d6:a6:6f:6d:73:6f:cc:ee:e1:e3:99:c3: f5:9d:10:7b:18:ee:58:72:fe:b7:d9:21:91:13:97: 3b:8c:2c:49:0a:fb:bb:02:f1:e0:23:21:1b:fe:8b: 80:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:38:63:35:38:9C:9C:FA:B1:EE:11:28:4C:48:0E:FC:C1:5E:2E:A4 X509v3 Authority Key Identifier: keyid:35:00:45:F7:D8:3C:EB:13:0D:8D:69:5F:FE:7D:43:DB:38:19:DE:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NQBF99g86xMNjWlf_n1D2zgZ3lU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:f4:4c:26:02:9e:9a:f0:59:90:f1:d6:19:6f:94:c0:c2:ec: eb:42:59:fa:6f:ea:9d:a3:f7:36:4f:f9:2a:24:a9:b4:ea:af: f4:7b:4a:3f:c7:6c:3e:c6:6d:f9:8a:c0:49:1a:2b:af:97:bb: d6:46:49:6f:68:78:75:39:73:aa:17:d0:c7:ef:07:de:a0:74: 06:b3:57:da:15:56:81:74:d3:fb:ab:b1:42:ed:7d:01:ec:eb: 9f:32:f9:9f:6a:7d:72:39:33:d4:6b:91:18:6b:b2:95:d7:8e: f5:24:0a:ce:77:44:0f:20:19:71:5a:60:9c:09:c4:9e:a7:1d: 21:c4:49:01:a4:53:da:0e:37:eb:d0:cf:7f:05:7d:f7:45:d7: 27:c6:7f:3b:2a:a4:7e:60:a1:07:3a:30:93:1f:3a:cf:f6:33: 00:8b:d5:7f:cd:64:b7:42:45:99:4b:c9:ff:61:d7:da:28:b3: 89:cd:a9:6d:72:7d:d7:69:dc:1e:f3:a0:ea:1e:f3:25:5e:e9: 29:b9:6b:89:06:53:0b:76:f3:51:99:3f:55:27:91:e2:fc:a6: b2:8d:c1:65:af:0a:9d:f3:2b:2b:2e:5d:06:58:8b:f4:f4:64: aa:24:76:c1:07:7b:b0:50:3c:69:39:30:2f:f5:be:0a:07:84: ce:db:42:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG2XhfjX7TzTkrHwcGP2wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MDA0NWY3ZDgzY2ViMTMwZDhkNjk1ZmZlN2Q0M2RiMzgx OWRlNTUwHhcNMjUxMjA2MTAwMDUwWhcNMjUxMjA3MTAwMDUwWjAzMTEwLwYDVQQD EygwNzM4NjMzNTM4OWM5Y2ZhYjFlZTExMjg0YzQ4MGVmY2MxNWUyZWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmnxuA5/A9GLZ2Gnn+QlO3LvMPqL 2jaRVmofyUbY3EgMa9ptg8CGreZOT11U6a7sInDlhDb7mS5FG06+R2KHn6BhUAhF kFLRtvrWko8Q0VabCt0LYX4e+wqz1kDGWwK+8w6oOwGzCFzdOm9TFiSyYR/BsRQI rR3/rhag1qNkhHRF3584ZC8vbFRhlZzH6BuPUtP+26OcHIsxMtlpmvlNUDgORxAQ zPqtGIWJfVvVVPrQL+W31Gozs3T8CoK9BV1eQKp5o5GjyBmHNvTR4v//OwBZ95TW pm9tc2/M7uHjmcP1nRB7GO5Ycv632SGRE5c7jCxJCvu7AvHgIyEb/ouA+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAc4YzU4nJz6se4RKExIDvzBXi6kMB8GA1UdIwQY MBaAFDUARffYPOsTDY1pX/59Q9s4Gd5VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlFCRjk5Zzg2eE1OaldsZl9uMUQyemdaM2xVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS81MDQzZmItY2NhYy00ZmI2LTg2OWQt NDhlMzBlMmY3YzM2LzEvTlFCRjk5Zzg2eE1OaldsZl9uMUQyemdaM2xVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS81MDQzZmItY2NhYy00ZmI2LTg2OWQtNDhlMzBlMmY3YzM2 LzEvTlFCRjk5Zzg2eE1OaldsZl9uMUQyemdaM2xVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL/RMJgKe mvBZkPHWGW+UwMLs60JZ+m/qnaP3Nk/5KiSptOqv9HtKP8dsPsZt+YrASRorr5e7 1kZJb2h4dTlzqhfQx+8H3qB0BrNX2hVWgXTT+6uxQu19AezrnzL5n2p9cjkz1GuR GGuyldeO9SQKzndEDyAZcVpgnAnEnqcdIcRJAaRT2g4369DPfwV990XXJ8Z/Oyqk fmChBzowkx86z/YzAIvVf81kt0JFmUvJ/2HX2iizic2pbXJ912ncHvOg6h7zJV7p KblriQZTC3bzUZk/VSeR4vymso3BZa8KnfMrKy5dBliL9PRkqiR2wQd7sFA8aTkw L/W+CgeEzttCeA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:22:58 2025 by rpki-client