This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.mft File: _nqNfbMqQNTh0AKKfP0IFLZQ9CI.mft (raw, json) Hash identifier: vIxnsXcLSUgWwT3yoJx+gVwFTtvb4x22VfP9Q598XKI= Subject key identifier: B0:CE:FD:D4:76:70:26:93:62:E3:FE:5C:44:B2:57:70:00:56:2E:C5 Authority key identifier: FE:7A:8D:7D:B3:2A:40:D4:E1:D0:02:8A:7C:FD:08:14:B6:50:F4:22 Certificate issuer: /CN=fe7a8d7db32a40d4e1d0028a7cfd0814b650f422 Certificate serial: 019AF12DDFEC8E36AF966C32A47FA2D3F8C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.mft Manifest number: 16F3 Signing time: Sat 06 Dec 2025 01:01:46 +0000 Manifest this update: Sat 06 Dec 2025 01:01:46 +0000 Manifest next update: Sun 07 Dec 2025 01:01:46 +0000 Files and hashes: 1: Hm-j6QJU9FoWf5PoJTZArsYOO-Y.roa (hash: r74V+TICXc97SHMOMlLlN4zJGa1Cwt8Y3q6l6hYrpFg=) 2: _nqNfbMqQNTh0AKKfP0IFLZQ9CI.crl (hash: mzDWPAqmJ9m7cfd1NEFuiYFYJj5JK29+kaSVsyQZy3Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.mft rsync://rpki.ripe.net/repository/DEFAULT/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:df:ec:8e:36:af:96:6c:32:a4:7f:a2:d3:f8:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe7a8d7db32a40d4e1d0028a7cfd0814b650f422 Validity Not Before: Dec 6 01:01:46 2025 GMT Not After : Dec 7 01:01:46 2025 GMT Subject: CN=b0cefdd47670269362e3fe5c44b2577000562ec5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:34:78:91:a3:92:44:90:3a:14:0c:9b:a5:3b: 00:e6:43:8c:08:63:90:30:3e:cc:97:e1:a4:09:7d: 7d:db:d6:58:05:25:9b:e4:7f:be:3f:b7:06:16:e0: 98:4d:52:b2:fa:db:b9:b6:eb:c5:7b:5e:3a:1f:05: a8:9e:57:4e:e2:b4:c7:c5:35:dd:cf:93:32:4b:62: 97:81:f1:06:b7:d4:86:c7:69:4f:a4:70:0d:e5:85: b3:8f:0b:d2:47:a6:17:08:3a:1f:2f:ef:43:47:28: 79:e0:2f:f4:57:31:8f:59:92:f2:5d:cf:56:6c:0c: d5:74:10:81:f5:97:bc:e7:c3:3f:97:19:08:6c:a9: 8a:dd:b0:c9:6e:58:45:ae:b1:69:14:9a:ff:55:92: 45:ca:1a:30:71:03:f7:51:5b:d0:11:39:bd:7e:32: 0c:90:39:72:3e:c7:a5:51:44:ec:d4:bf:54:43:c9: 6b:25:6f:e2:d7:45:b3:87:64:80:b2:d7:83:92:a1: 31:b4:66:73:2b:e6:41:85:50:92:88:92:57:95:12: f9:de:e7:08:35:d8:25:81:e4:b0:da:69:b4:76:04: 66:df:16:43:61:b5:28:64:9d:da:2f:78:f6:b4:cc: 23:99:d5:a1:93:7f:ec:b0:41:5c:1d:b9:cc:2b:54: 4c:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:CE:FD:D4:76:70:26:93:62:E3:FE:5C:44:B2:57:70:00:56:2E:C5 X509v3 Authority Key Identifier: keyid:FE:7A:8D:7D:B3:2A:40:D4:E1:D0:02:8A:7C:FD:08:14:B6:50:F4:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:42:68:3a:be:80:96:bf:c9:eb:7b:6b:f7:68:f2:c2:64:96: c5:fc:ac:f1:97:8f:e1:7b:38:7f:c6:f4:2b:93:9d:6a:f7:68: b5:f5:a2:67:48:c3:9b:28:f5:2b:29:02:63:72:65:b8:fe:08: 2b:bf:d5:c1:ec:42:33:d7:20:c9:af:3a:a8:75:a8:9e:b6:43: 22:23:0a:af:86:f8:3c:d6:05:17:01:92:0b:54:d5:3a:c5:3e: a0:81:d6:63:70:24:85:ff:cf:40:14:0d:42:85:1f:6d:a9:95: 4a:ed:bb:a7:9f:da:09:52:bb:6a:1a:01:0a:82:91:fc:c4:c6: 4c:2d:e5:a4:a8:7f:ff:2a:6d:5e:e6:83:d6:1b:80:a4:04:f5: 89:42:c7:d0:d3:64:06:b3:2e:ae:45:f3:4a:d1:f8:aa:95:67: 34:69:d3:e6:6c:60:a4:9c:e2:7e:57:7e:dc:d7:b4:e6:30:2a: 85:f8:94:81:6d:b0:7a:06:3c:52:32:9e:92:37:30:bd:54:db: 45:02:05:04:56:16:50:a9:fb:cc:ae:52:88:88:e8:94:ed:21: 06:a1:9e:b6:dc:ad:10:6f:60:51:78:11:8c:4e:7d:8c:e6:a8: 87:5d:c2:37:a3:ac:ca:df:41:f9:8b:c8:e6:8d:d6:90:30:b9: d6:dd:e5:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLd/sjjavlmwypH+i0/jCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlN2E4ZDdkYjMyYTQwZDRlMWQwMDI4YTdjZmQwODE0YjY1 MGY0MjIwHhcNMjUxMjA2MDEwMTQ2WhcNMjUxMjA3MDEwMTQ2WjAzMTEwLwYDVQQD EyhiMGNlZmRkNDc2NzAyNjkzNjJlM2ZlNWM0NGIyNTc3MDAwNTYyZWM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDR4kaOSRJA6FAybpTsA5kOMCGOQ MD7Ml+GkCX1929ZYBSWb5H++P7cGFuCYTVKy+tu5tuvFe146HwWonldO4rTHxTXd z5MyS2KXgfEGt9SGx2lPpHAN5YWzjwvSR6YXCDofL+9DRyh54C/0VzGPWZLyXc9W bAzVdBCB9Ze858M/lxkIbKmK3bDJblhFrrFpFJr/VZJFyhowcQP3UVvQETm9fjIM kDlyPselUUTs1L9UQ8lrJW/i10Wzh2SAsteDkqExtGZzK+ZBhVCSiJJXlRL53ucI NdglgeSw2mm0dgRm3xZDYbUoZJ3aL3j2tMwjmdWhk3/ssEFcHbnMK1RMywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLDO/dR2cCaTYuP+XESyV3AAVi7FMB8GA1UdIwQY MBaAFP56jX2zKkDU4dACinz9CBS2UPQiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX25xTmZiTXFRTlRoMEFLS2ZQMElGTFpROUNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi83MWU5NDgtNjkxZS00ZGVhLWIwMmIt YjEyYTY5MzNmODI5LzEvX25xTmZiTXFRTlRoMEFLS2ZQMElGTFpROUNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi83MWU5NDgtNjkxZS00ZGVhLWIwMmItYjEyYTY5MzNmODI5 LzEvX25xTmZiTXFRTlRoMEFLS2ZQMElGTFpROUNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlEJoOr6A lr/J63tr92jywmSWxfys8ZeP4Xs4f8b0K5OdavdotfWiZ0jDmyj1KykCY3JluP4I K7/VwexCM9cgya86qHWonrZDIiMKr4b4PNYFFwGSC1TVOsU+oIHWY3Akhf/PQBQN QoUfbamVSu27p5/aCVK7ahoBCoKR/MTGTC3lpKh//yptXuaD1huApAT1iULH0NNk BrMurkXzStH4qpVnNGnT5mxgpJzifld+3Ne05jAqhfiUgW2wegY8UjKekjcwvVTb RQIFBFYWUKn7zK5SiIjolO0hBqGettytEG9gUXgRjE59jOaoh13CN6Osyt9B+YvI 5o3WkDC51t3lWQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:00:50 2025 by rpki-client