This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft File: NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft (raw, json) Hash identifier: 6K313m19+FJn2dMDQZrahgBBtWFvgmOY3vxTlb87bKA= Subject key identifier: 8C:70:62:4B:72:F7:B6:FD:13:C7:6E:22:89:1F:22:AF:DA:F4:D1:78 Authority key identifier: 36:EA:A0:0E:A7:77:09:8B:1B:F0:36:75:6D:64:0E:9D:31:D6:3B:3B Certificate issuer: /CN=36eaa00ea777098b1bf036756d640e9d31d63b3b Certificate serial: 019AF19ADAD4297CD425A04711529F373F71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 03:00:48 +0000 Manifest this update: Sat 06 Dec 2025 03:00:48 +0000 Manifest next update: Sun 07 Dec 2025 03:00:48 +0000 Files and hashes: 1: NuqgDqd3CYsb8DZ1bWQOnTHWOzs.crl (hash: qi1uYT7uHwMSUe5YoejzKwL2Fd39ghY5Fe7PxLDgzQQ=) 2: _g5I57Jrtat3c0sUXQvZ3nqFfuc.roa (hash: grBe56vRIljL0qbICiVpYCBgfKjQkIm+ss1oa9xOZxk=) 3: nyb0R-h__Mic6GDdyNWGNxBzot4.roa (hash: fgTFT13/lPyU/NB1je1ug0Uwy5bGAtYnZFu7LeFmdpg=) 4: pi0m8ItGQU_1KUziIzWipbWTZ1U.roa (hash: dNmRlkGp5JHgq9te/3UnftdEhJnuqvrIk2cLoA0C8Mo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft rsync://rpki.ripe.net/repository/DEFAULT/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:da:d4:29:7c:d4:25:a0:47:11:52:9f:37:3f:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36eaa00ea777098b1bf036756d640e9d31d63b3b Validity Not Before: Dec 6 03:00:48 2025 GMT Not After : Dec 7 03:00:48 2025 GMT Subject: CN=8c70624b72f7b6fd13c76e22891f22afdaf4d178 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:55:e2:ed:d7:e1:46:df:96:2c:86:94:e0:ba: 7c:3d:51:0d:0b:54:65:20:67:c7:21:e4:88:02:e6: 9d:03:f3:7c:1f:a0:7d:c7:05:61:98:7b:cd:df:1c: 60:62:94:69:ea:29:e0:6f:01:a0:2a:c5:69:6b:32: 74:90:f5:e1:c4:ef:70:fa:d1:47:9a:71:e7:9c:9b: 20:1a:9d:0e:cb:3a:43:c6:97:a2:4c:d9:5f:91:3e: 34:a3:79:9c:5c:5d:64:14:44:54:88:0d:2f:15:23: cd:23:66:cb:e1:1b:1c:0e:e6:c1:79:35:d2:55:7f: 12:f7:35:ce:b0:4b:c8:28:82:de:0f:7d:95:c7:93: 9d:57:20:c9:11:c6:c1:f1:3e:d5:86:92:75:e8:6e: e1:12:75:17:5d:03:31:2a:64:60:87:1c:29:57:7a: 33:10:c6:55:1b:fc:74:b1:d8:9e:81:2f:fa:c3:19: 04:57:64:c8:f3:6f:c1:df:10:86:5e:15:62:78:f1: 2f:7b:44:13:1e:46:56:a6:12:8b:e4:1d:09:85:65: 87:ec:9d:ff:b2:1c:eb:86:fb:e2:fb:3f:3e:f4:78: c7:f6:09:d1:c0:29:eb:03:f9:06:8d:57:2b:c6:39: 80:de:1b:80:e8:8f:0a:b4:e9:64:e4:26:72:0f:b8: fc:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:70:62:4B:72:F7:B6:FD:13:C7:6E:22:89:1F:22:AF:DA:F4:D1:78 X509v3 Authority Key Identifier: keyid:36:EA:A0:0E:A7:77:09:8B:1B:F0:36:75:6D:64:0E:9D:31:D6:3B:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:3f:27:f6:aa:bc:f0:1f:4f:2e:7b:2b:be:71:3e:db:a3:f4: a8:79:c7:49:2b:eb:28:0c:75:6b:cd:1a:b5:4a:41:72:54:79: 2c:d7:b7:46:d7:8d:22:9d:2a:5a:13:1e:df:aa:15:62:6c:18: 7f:66:10:d9:a7:d2:c6:d5:46:1d:38:5d:90:2d:0c:87:7d:89: 6f:15:ca:98:a4:9e:20:d6:b8:bb:49:dd:50:cf:bf:90:cc:66: f4:7e:64:30:87:40:43:27:af:12:bc:2c:27:51:77:a3:6a:4e: 99:bb:df:b9:f2:db:d6:be:ad:d8:ca:d6:88:5c:ad:b7:2e:4a: c8:f6:66:08:9d:cf:48:3f:38:34:4e:ef:93:d6:56:85:65:3f: bf:b5:a1:b5:7c:0a:66:5d:f6:e5:6d:e4:fb:c9:23:6b:5e:26: bf:7e:d7:99:30:5d:a9:ba:4f:b3:60:96:ee:72:30:a0:05:6a: 9e:9a:cc:bc:3f:fb:47:03:36:55:56:a8:a5:1c:11:ef:d3:3a: f3:7d:29:6f:1a:8c:d4:8c:d5:ca:0c:67:41:d7:f7:1f:28:34: ee:4f:d8:ad:87:75:3b:a4:6f:43:86:ca:e0:eb:76:96:70:60: df:91:5f:fb:90:57:43:c2:a5:d0:58:b4:6d:27:a6:5e:1e:32: e6:6d:a8:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmtrUKXzUJaBHEVKfNz9xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2ZWFhMDBlYTc3NzA5OGIxYmYwMzY3NTZkNjQwZTlkMzFk NjNiM2IwHhcNMjUxMjA2MDMwMDQ4WhcNMjUxMjA3MDMwMDQ4WjAzMTEwLwYDVQQD Eyg4YzcwNjI0YjcyZjdiNmZkMTNjNzZlMjI4OTFmMjJhZmRhZjRkMTc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1Xi7dfhRt+WLIaU4Lp8PVENC1Rl IGfHIeSIAuadA/N8H6B9xwVhmHvN3xxgYpRp6ingbwGgKsVpazJ0kPXhxO9w+tFH mnHnnJsgGp0OyzpDxpeiTNlfkT40o3mcXF1kFERUiA0vFSPNI2bL4RscDubBeTXS VX8S9zXOsEvIKILeD32Vx5OdVyDJEcbB8T7VhpJ16G7hEnUXXQMxKmRghxwpV3oz EMZVG/x0sdiegS/6wxkEV2TI82/B3xCGXhViePEve0QTHkZWphKL5B0JhWWH7J3/ shzrhvvi+z8+9HjH9gnRwCnrA/kGjVcrxjmA3huA6I8KtOlk5CZyD7j8BQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIxwYkty97b9E8duIokfIq/a9NF4MB8GA1UdIwQY MBaAFDbqoA6ndwmLG/A2dW1kDp0x1js7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnVxZ0RxZDNDWXNiOERaMWJXUU9uVEhXT3pzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS80MTAyMzItYjFmZC00MTM3LTgzMmQt YmRiMjEzMTNjM2VjLzEvTnVxZ0RxZDNDWXNiOERaMWJXUU9uVEhXT3pzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS80MTAyMzItYjFmZC00MTM3LTgzMmQtYmRiMjEzMTNjM2Vj LzEvTnVxZ0RxZDNDWXNiOERaMWJXUU9uVEhXT3pzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADj8n9qq8 8B9PLnsrvnE+26P0qHnHSSvrKAx1a80atUpBclR5LNe3RteNIp0qWhMe36oVYmwY f2YQ2afSxtVGHThdkC0Mh32JbxXKmKSeINa4u0ndUM+/kMxm9H5kMIdAQyevErws J1F3o2pOmbvfufLb1r6t2MrWiFytty5KyPZmCJ3PSD84NE7vk9ZWhWU/v7WhtXwK Zl325W3k+8kja14mv37XmTBdqbpPs2CW7nIwoAVqnprMvD/7RwM2VVaopRwR79M6 830pbxqM1IzVygxnQdf3Hyg07k/YrYd1O6RvQ4bK4Ot2lnBg35Ff+5BXQ8Kl0Fi0 bSemXh4y5m2oWQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:46:50 2025 by rpki-client