This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.mft File: NiQhSOPmNqkDQ_PpUES439udHNk.mft (raw, json) Hash identifier: xpY/8zRwgaxCh5nUU1fjfQziFn0ACHpZHt+3XSmu0Ms= Subject key identifier: 52:46:53:9C:B2:A9:A0:0F:DD:73:51:B0:78:7B:F5:99:87:30:9D:92 Authority key identifier: 36:24:21:48:E3:E6:36:A9:03:43:F3:E9:50:44:B8:DF:DB:9D:1C:D9 Certificate issuer: /CN=36242148e3e636a90343f3e95044b8dfdb9d1cd9 Certificate serial: 019AF2098F6F3C59DBF3B26EA16D7DE3878D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NiQhSOPmNqkDQ_PpUES439udHNk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.mft Manifest number: 02BC Signing time: Sat 06 Dec 2025 05:01:44 +0000 Manifest this update: Sat 06 Dec 2025 05:01:44 +0000 Manifest next update: Sun 07 Dec 2025 05:01:44 +0000 Files and hashes: 1: NiQhSOPmNqkDQ_PpUES439udHNk.crl (hash: nPL6CpGtbmSPcudaH09GLzz0SP9gHxhyGvwimgnGvws=) 2: zIR-Nz3H2D4s_KM8Bm98PoR8Mws.roa (hash: vxeo0iUuDX5Ze9Stf4uTh6KeWV+Vu5qvbWwTZuqVEFY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.crl rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.mft rsync://rpki.ripe.net/repository/DEFAULT/NiQhSOPmNqkDQ_PpUES439udHNk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:8f:6f:3c:59:db:f3:b2:6e:a1:6d:7d:e3:87:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36242148e3e636a90343f3e95044b8dfdb9d1cd9 Validity Not Before: Dec 6 05:01:44 2025 GMT Not After : Dec 7 05:01:44 2025 GMT Subject: CN=5246539cb2a9a00fdd7351b0787bf59987309d92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ce:aa:91:1b:f4:c5:cc:4c:e3:72:f9:02:d3: 72:4e:05:14:20:73:ed:58:2f:fb:30:2b:56:71:d1: fb:c4:a3:2d:36:44:be:ca:1f:04:93:e0:4f:96:09: 3d:9b:49:00:79:a0:21:40:d8:fe:6f:f0:6f:2a:cf: 4f:f9:85:3b:ab:56:8f:5d:7e:54:91:81:59:7f:78: 5b:29:22:21:6f:f7:06:db:ea:e6:64:76:b8:3a:7b: eb:ea:d6:93:0c:76:33:38:5c:9c:6b:31:dd:99:d8: 29:e0:47:8e:1a:d6:c2:21:be:f0:c1:e8:4d:a2:81: 21:8e:95:22:23:38:70:49:77:aa:eb:d1:06:91:08: c6:95:eb:6c:73:33:24:75:5a:19:4f:39:ed:66:47: 03:e5:1e:0c:e9:4f:57:81:d3:50:cc:f9:7b:8e:f2: 6a:0b:77:c5:41:c7:85:a6:b7:0e:e6:b9:45:ce:3f: 06:df:21:40:3f:99:c7:da:81:ca:f5:de:33:6e:63: 68:71:93:44:45:9f:1a:cd:6e:d2:e8:fd:e0:d6:f3: 52:5c:f7:d6:52:90:fe:b5:81:e9:7a:b2:5f:4c:1f: aa:34:06:d2:ef:f4:c6:8f:93:b8:15:e4:5b:cc:cf: af:03:3a:96:19:4a:a8:36:09:fb:51:3c:fe:eb:48: e5:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:46:53:9C:B2:A9:A0:0F:DD:73:51:B0:78:7B:F5:99:87:30:9D:92 X509v3 Authority Key Identifier: keyid:36:24:21:48:E3:E6:36:A9:03:43:F3:E9:50:44:B8:DF:DB:9D:1C:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiQhSOPmNqkDQ_PpUES439udHNk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:5b:05:18:16:d7:8c:b6:d9:c4:49:bd:c4:19:9a:05:21:44: 61:30:d9:9c:ec:41:fa:3b:90:a6:53:97:81:2c:98:6a:5d:48: f1:4e:65:cf:08:9e:4d:93:58:bb:3e:c9:71:e1:67:a6:12:8f: c8:d9:93:7a:ba:1c:f2:bb:5b:eb:94:cd:c5:63:a8:92:70:04: 8d:9e:c8:23:cb:be:06:21:20:62:b5:f8:cd:27:c0:c2:3e:34: 34:ef:e7:89:94:ec:57:1e:72:4a:bc:4c:c5:e2:4b:bb:6f:18: e0:36:07:52:4c:6e:94:07:37:e1:92:43:53:76:0e:e3:15:2e: 69:59:60:c9:c3:53:4b:c8:9e:e8:f1:2e:c8:86:64:c5:fc:7d: eb:e0:04:0c:b2:82:58:28:8e:04:25:26:72:93:bf:f8:d8:32: 39:c5:5c:00:ae:4b:f1:18:0f:c3:d8:73:ff:77:83:f1:5f:ef: 02:dd:5a:64:9e:97:82:be:f4:db:1e:26:05:7e:fd:85:ac:44: 7d:b5:8f:f6:8b:d1:c1:83:04:ea:1d:2c:ef:74:ed:de:60:5b: 41:d1:92:d8:f8:67:87:d5:fd:42:20:b5:6b:ba:0a:9c:05:b4: 56:fd:a7:4e:dd:03:a1:25:ee:3f:75:fa:04:d2:36:78:5e:8b: 02:3b:15:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCY9vPFnb87JuoW1944eNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2MjQyMTQ4ZTNlNjM2YTkwMzQzZjNlOTUwNDRiOGRmZGI5 ZDFjZDkwHhcNMjUxMjA2MDUwMTQ0WhcNMjUxMjA3MDUwMTQ0WjAzMTEwLwYDVQQD Eyg1MjQ2NTM5Y2IyYTlhMDBmZGQ3MzUxYjA3ODdiZjU5OTg3MzA5ZDkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx86qkRv0xcxM43L5AtNyTgUUIHPt WC/7MCtWcdH7xKMtNkS+yh8Ek+BPlgk9m0kAeaAhQNj+b/BvKs9P+YU7q1aPXX5U kYFZf3hbKSIhb/cG2+rmZHa4Onvr6taTDHYzOFycazHdmdgp4EeOGtbCIb7wwehN ooEhjpUiIzhwSXeq69EGkQjGletsczMkdVoZTzntZkcD5R4M6U9XgdNQzPl7jvJq C3fFQceFprcO5rlFzj8G3yFAP5nH2oHK9d4zbmNocZNERZ8azW7S6P3g1vNSXPfW UpD+tYHperJfTB+qNAbS7/TGj5O4FeRbzM+vAzqWGUqoNgn7UTz+60jlswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFJGU5yyqaAP3XNRsHh79ZmHMJ2SMB8GA1UdIwQY MBaAFDYkIUjj5japA0Pz6VBEuN/bnRzZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmlRaFNPUG1OcWtEUV9QcFVFUzQzOXVkSE5rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8zYzNkYTAtZDNmOC00YWEyLTgzMzQt MjZkNzU5MzY1NDAyLzEvTmlRaFNPUG1OcWtEUV9QcFVFUzQzOXVkSE5rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC8zYzNkYTAtZDNmOC00YWEyLTgzMzQtMjZkNzU5MzY1NDAy LzEvTmlRaFNPUG1OcWtEUV9QcFVFUzQzOXVkSE5rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACFsFGBbX jLbZxEm9xBmaBSFEYTDZnOxB+juQplOXgSyYal1I8U5lzwieTZNYuz7JceFnphKP yNmTeroc8rtb65TNxWOoknAEjZ7II8u+BiEgYrX4zSfAwj40NO/niZTsVx5ySrxM xeJLu28Y4DYHUkxulAc34ZJDU3YO4xUuaVlgycNTS8ie6PEuyIZkxfx96+AEDLKC WCiOBCUmcpO/+NgyOcVcAK5L8RgPw9hz/3eD8V/vAt1aZJ6Xgr702x4mBX79haxE fbWP9ovRwYME6h0s73Tt3mBbQdGS2Phnh9X9QiC1a7oKnAW0Vv2nTt0DoSXuP3X6 BNI2eF6LAjsVOA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:08:41 2025 by rpki-client