This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.mft File: nozX1qQQV1C_iXWn0LlnlMHv5iI.mft (raw, json) Hash identifier: 3fQVUIhCYYoyInRrfWbivaKo+MpbEBZkRCYjB6BsPBg= Subject key identifier: D0:8D:E3:A5:CB:7F:FB:39:80:AC:61:CD:6D:37:A1:A8:9D:6E:39:02 Authority key identifier: 9E:8C:D7:D6:A4:10:57:50:BF:89:75:A7:D0:B9:67:94:C1:EF:E6:22 Certificate issuer: /CN=9e8cd7d6a4105750bf8975a7d0b96794c1efe622 Certificate serial: 019B3155BA629D5C5C9B6032B8B53DF34233 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nozX1qQQV1C_iXWn0LlnlMHv5iI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.mft Manifest number: 10C5 Signing time: Thu 18 Dec 2025 12:01:00 +0000 Manifest this update: Thu 18 Dec 2025 12:01:00 +0000 Manifest next update: Fri 19 Dec 2025 12:01:00 +0000 Files and hashes: 1: YqcsRsNWUIAuSWFcG2LkwlaCRpU.roa (hash: JnjUw+oSYZ7zYyFgVViB1dXlZlt1DLN5IKIef4zg43A=) 2: _VhyulaRLMFmy7z_tqs-4L4cWXE.roa (hash: T2PRCy0LrQZ9+r9vTWIgoLmdpeQ4Ly8m5VmmmlXegNc=) 3: i4e34huH3g5sLDHdnkVm8dSr_sE.roa (hash: S/XQJg4OAS7AjMIGPw3l7NpJsp2Db+/obQ9OlOHPkv4=) 4: nozX1qQQV1C_iXWn0LlnlMHv5iI.crl (hash: 9hiiDcw2PzplwiXzEY8kBDbstOM29Q0jiS2xA6PLnWM=) 5: qdNG49hIyDFFdCFIGbm6kEPFcbI.roa (hash: oUfCXgwymuAlhA935EnqN9SnikKCG4eVZ1qECppIrzI=) 6: tgtnwoMSuJpvUhZwhk9qFrx7hWQ.roa (hash: rFNa5r+Q4PL0nS416jQMSkeeFMd2IaIQ8Oy1MIANZ/s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.crl rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.mft rsync://rpki.ripe.net/repository/DEFAULT/nozX1qQQV1C_iXWn0LlnlMHv5iI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:55:ba:62:9d:5c:5c:9b:60:32:b8:b5:3d:f3:42:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e8cd7d6a4105750bf8975a7d0b96794c1efe622 Validity Not Before: Dec 18 12:01:00 2025 GMT Not After : Dec 19 12:01:00 2025 GMT Subject: CN=d08de3a5cb7ffb3980ac61cd6d37a1a89d6e3902 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:d2:6a:9b:6f:df:5b:9e:ca:28:ef:f8:f9:5f: 84:32:d1:5d:05:2f:ce:ed:bc:22:90:d3:e7:3c:9c: 8e:03:cd:73:e5:6f:26:64:8b:0e:6a:73:cf:ba:c6: 7e:75:cf:7b:92:b9:bd:ac:e5:d2:b0:4b:07:6c:1e: 3a:e4:a5:dc:85:78:17:c6:0c:13:c2:28:26:ff:8c: 19:ec:f1:8f:11:96:6f:a5:e8:8f:ee:8a:30:68:c4: 73:b9:ed:2a:71:33:79:c2:17:8d:cb:57:3f:76:e9: 6d:52:d1:b8:52:e6:58:45:d7:dd:00:22:0a:e5:b0: c0:88:25:e6:40:88:0b:01:13:79:22:d1:cc:b3:6c: e1:9d:f8:12:a4:5c:c5:42:4b:bd:22:15:0e:0c:9b: 5f:f0:16:a4:5f:dc:2c:a5:5b:78:db:87:cb:83:0b: 48:9e:6f:7f:a0:2c:3e:47:fe:a1:6c:dc:37:d8:a3: 11:78:f0:25:5b:ef:d0:56:d5:2e:f3:e0:38:c8:90: c7:48:ca:5d:49:68:f7:7a:54:50:9d:90:1a:8d:1e: 28:32:d9:c3:a3:cd:6e:54:e6:4d:3b:4c:5a:43:2a: 28:22:a6:cd:8a:63:bb:d1:c8:06:9a:c9:da:ad:96: b7:60:09:4e:b3:93:70:ea:0d:12:5f:21:90:87:e0: 37:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:8D:E3:A5:CB:7F:FB:39:80:AC:61:CD:6D:37:A1:A8:9D:6E:39:02 X509v3 Authority Key Identifier: keyid:9E:8C:D7:D6:A4:10:57:50:BF:89:75:A7:D0:B9:67:94:C1:EF:E6:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nozX1qQQV1C_iXWn0LlnlMHv5iI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:3f:30:af:20:aa:90:c5:3f:12:c3:ea:43:30:c0:e3:38:48: c4:ff:a8:b9:ab:b6:c2:0f:a7:f2:52:02:35:f8:83:9d:e7:ab: dc:bd:90:01:eb:16:b0:20:e0:cc:5d:72:6b:94:0a:b2:57:80: 65:35:4d:93:54:a0:8d:06:79:99:6a:44:8f:77:7b:ba:90:3b: bc:47:70:b3:67:19:b0:eb:1b:f9:7d:dd:36:97:b6:6b:9e:32: ff:f5:2b:5f:00:73:9d:ab:f7:4a:4b:9e:71:e6:70:39:e0:c0: 3f:2b:1a:28:7e:9b:7d:65:6f:cc:4c:e5:4b:28:0a:fa:90:1a: 6d:f1:64:6a:7d:a6:ce:ea:f6:af:8c:0c:5e:0b:dc:de:ce:4a: 7b:cf:f8:d3:9b:be:97:00:ad:78:95:07:4c:46:8f:4d:6f:7f: a1:f2:b3:49:90:70:8a:60:38:5d:65:c1:90:b6:6b:50:bc:01: 12:72:c4:8d:e1:a3:98:a1:59:fa:4d:be:fb:0e:d0:c1:ae:ae: 16:49:39:a6:6b:35:a8:54:b4:83:c6:19:49:03:ce:22:cf:ec: 3c:9e:90:09:f3:68:18:64:95:c4:f8:ef:af:57:96:c1:e2:8b: f9:d6:b2:62:d2:f8:cd:ce:e3:4a:ec:f9:8a:4b:17:45:30:3f: c4:38:dd:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxVbpinVxcm2AyuLU980IzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOGNkN2Q2YTQxMDU3NTBiZjg5NzVhN2QwYjk2Nzk0YzFl ZmU2MjIwHhcNMjUxMjE4MTIwMTAwWhcNMjUxMjE5MTIwMTAwWjAzMTEwLwYDVQQD EyhkMDhkZTNhNWNiN2ZmYjM5ODBhYzYxY2Q2ZDM3YTFhODlkNmUzOTAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9dJqm2/fW57KKO/4+V+EMtFdBS/O 7bwikNPnPJyOA81z5W8mZIsOanPPusZ+dc97krm9rOXSsEsHbB465KXchXgXxgwT wigm/4wZ7PGPEZZvpeiP7oowaMRzue0qcTN5wheNy1c/dultUtG4UuZYRdfdACIK 5bDAiCXmQIgLARN5ItHMs2zhnfgSpFzFQku9IhUODJtf8BakX9wspVt424fLgwtI nm9/oCw+R/6hbNw32KMRePAlW+/QVtUu8+A4yJDHSMpdSWj3elRQnZAajR4oMtnD o81uVOZNO0xaQyooIqbNimO70cgGmsnarZa3YAlOs5Nw6g0SXyGQh+A3ewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNCN46XLf/s5gKxhzW03oaidbjkCMB8GA1UdIwQY MBaAFJ6M19akEFdQv4l1p9C5Z5TB7+YiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbm96WDFxUVFWMUNfaVhXbjBMbG5sTUh2NWlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi84NWM2YmQtNmE2OC00ZDExLWI5Y2Qt OGMyZGY1YTVjNmQ3LzEvbm96WDFxUVFWMUNfaVhXbjBMbG5sTUh2NWlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi84NWM2YmQtNmE2OC00ZDExLWI5Y2QtOGMyZGY1YTVjNmQ3 LzEvbm96WDFxUVFWMUNfaVhXbjBMbG5sTUh2NWlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATD8wryCq kMU/EsPqQzDA4zhIxP+ouau2wg+n8lICNfiDneer3L2QAesWsCDgzF1ya5QKsleA ZTVNk1SgjQZ5mWpEj3d7upA7vEdws2cZsOsb+X3dNpe2a54y//UrXwBznav3Skue ceZwOeDAPysaKH6bfWVvzEzlSygK+pAabfFkan2mzur2r4wMXgvc3s5Ke8/405u+ lwCteJUHTEaPTW9/ofKzSZBwimA4XWXBkLZrULwBEnLEjeGjmKFZ+k2++w7Qwa6u Fkk5pms1qFS0g8YZSQPOIs/sPJ6QCfNoGGSVxPjvr1eWweKL+dayYtL4zc7jSuz5 iksXRTA/xDjdZw== -----END CERTIFICATE-----Generated at Thu Dec 18 14:07:50 2025 by rpki-client