This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.mft File: Nq8EHRLErbZvjBYRPJphR9AjiNk.mft (raw, json) Hash identifier: 7WN5RdG3tusGkJ1O2M3IXqIqqJPHWOreaad6dgy2FYo= Subject key identifier: FB:3D:1C:EB:DC:16:44:7B:8F:F4:F6:8A:0E:C0:7D:C1:CD:62:A3:B4 Authority key identifier: 36:AF:04:1D:12:C4:AD:B6:6F:8C:16:11:3C:9A:61:47:D0:23:88:D9 Certificate issuer: /CN=36af041d12c4adb66f8c16113c9a6147d02388d9 Certificate serial: 019AF1D1C4F7AAFC2EDDBBAE720BD5151452 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nq8EHRLErbZvjBYRPJphR9AjiNk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.mft Manifest number: 10B0 Signing time: Sat 06 Dec 2025 04:00:47 +0000 Manifest this update: Sat 06 Dec 2025 04:00:47 +0000 Manifest next update: Sun 07 Dec 2025 04:00:47 +0000 Files and hashes: 1: Nq8EHRLErbZvjBYRPJphR9AjiNk.crl (hash: Hg0eroqwUwzDfJ1xWL+BE7Tamu+d7GXkMxml5XcqXR4=) 2: nxVkwWxp31G9Nhk5RnHhT1dH-NE.roa (hash: dlhfhOwY+Ae+4z4M/Srqh6E06sqatloTn5dl72qTwng=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.crl rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.mft rsync://rpki.ripe.net/repository/DEFAULT/Nq8EHRLErbZvjBYRPJphR9AjiNk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:c4:f7:aa:fc:2e:dd:bb:ae:72:0b:d5:15:14:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36af041d12c4adb66f8c16113c9a6147d02388d9 Validity Not Before: Dec 6 04:00:47 2025 GMT Not After : Dec 7 04:00:47 2025 GMT Subject: CN=fb3d1cebdc16447b8ff4f68a0ec07dc1cd62a3b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7c:65:dd:f3:31:16:7f:9d:31:3b:fb:a8:63: fd:53:cb:f4:a9:ee:7f:c3:6b:40:26:f5:30:f2:de: 83:87:1d:f9:e2:f9:89:50:98:f5:79:4b:b0:b3:fe: f9:24:f5:71:a2:0d:ae:6b:f1:85:4e:d9:4a:99:8a: b7:72:2a:3f:f6:d8:97:68:af:4e:a9:be:c7:a2:15: 39:ec:5d:10:b9:22:09:fe:87:5b:d4:c2:07:29:02: 0d:df:55:52:e7:c5:8c:22:d9:90:7b:44:fe:36:e8: 9e:8e:b5:0f:43:eb:0e:40:42:fa:bf:3b:43:1e:ac: 72:05:bb:0d:f0:ff:b0:e8:db:94:9e:59:7e:f0:91: 56:1b:c4:9d:45:6b:48:73:f0:27:13:cd:44:2b:7c: 50:3e:58:ea:cd:07:ab:e2:f1:3d:4a:57:b8:ec:d5: ea:06:dc:7c:a4:63:b3:96:0b:42:99:9e:e6:4c:3e: 1f:1d:5e:a4:72:70:14:93:ed:49:73:d5:0e:bc:bc: 5c:95:f7:e1:94:47:3a:01:a2:f5:eb:1f:fe:a8:5c: 9b:18:dd:7d:ac:a9:d8:50:d3:fa:0d:f5:db:01:db: c0:2a:61:3d:3e:2c:95:da:ef:21:b9:46:c4:70:d6: af:a4:bd:df:fe:84:d2:b9:13:57:ac:2e:97:71:39: fd:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:3D:1C:EB:DC:16:44:7B:8F:F4:F6:8A:0E:C0:7D:C1:CD:62:A3:B4 X509v3 Authority Key Identifier: keyid:36:AF:04:1D:12:C4:AD:B6:6F:8C:16:11:3C:9A:61:47:D0:23:88:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nq8EHRLErbZvjBYRPJphR9AjiNk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:cb:ec:21:00:aa:c2:b4:f6:b9:a6:6e:50:f1:0e:37:90:8a: 1f:ba:c0:f3:5e:61:7f:dd:e8:7a:13:ce:2f:99:d5:64:81:21: df:67:d1:12:4b:87:6f:5a:13:31:e6:f8:28:fe:4f:d3:f0:c0: d7:a1:03:6f:2e:80:bc:b4:67:a9:26:67:da:fe:34:27:c5:7a: 1f:af:45:cf:db:51:3c:59:62:80:c9:65:38:5d:69:80:c3:1a: d0:4d:65:1b:ac:4b:c7:25:65:7b:ce:88:52:3b:ac:76:33:94: b6:4e:51:34:94:4e:0c:3f:71:ff:29:3c:77:c6:6f:b8:0c:4d: 39:90:6a:81:5c:7d:70:52:a1:04:d3:19:0c:76:38:41:a8:00: e2:29:de:1b:4f:3a:16:63:23:e7:38:7c:0d:7c:c9:24:55:aa: 25:41:fb:9b:73:66:ae:3b:d4:7a:6b:1d:38:4b:02:27:d3:6c: bd:f2:c0:99:bf:90:9d:6a:d4:b8:02:cf:14:99:89:58:f0:fb: b8:86:5f:04:e4:6f:f6:e7:31:76:70:d0:bb:9a:59:f9:5c:50: dc:a5:10:be:43:3b:e0:40:bb:a5:91:99:67:57:ce:dc:9c:81: 7c:be:df:72:92:19:c5:ec:59:61:ac:99:14:a5:67:5b:6f:b3: 03:b6:77:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0cT3qvwu3buucgvVFRRSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YWYwNDFkMTJjNGFkYjY2ZjhjMTYxMTNjOWE2MTQ3ZDAy Mzg4ZDkwHhcNMjUxMjA2MDQwMDQ3WhcNMjUxMjA3MDQwMDQ3WjAzMTEwLwYDVQQD EyhmYjNkMWNlYmRjMTY0NDdiOGZmNGY2OGEwZWMwN2RjMWNkNjJhM2I0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHxl3fMxFn+dMTv7qGP9U8v0qe5/ w2tAJvUw8t6Dhx354vmJUJj1eUuws/75JPVxog2ua/GFTtlKmYq3cio/9tiXaK9O qb7HohU57F0QuSIJ/odb1MIHKQIN31VS58WMItmQe0T+NuiejrUPQ+sOQEL6vztD HqxyBbsN8P+w6NuUnll+8JFWG8SdRWtIc/AnE81EK3xQPljqzQer4vE9Sle47NXq Btx8pGOzlgtCmZ7mTD4fHV6kcnAUk+1Jc9UOvLxclffhlEc6AaL16x/+qFybGN19 rKnYUNP6DfXbAdvAKmE9PiyV2u8huUbEcNavpL3f/oTSuRNXrC6XcTn9QwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPs9HOvcFkR7j/T2ig7AfcHNYqO0MB8GA1UdIwQY MBaAFDavBB0SxK22b4wWETyaYUfQI4jZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnE4RUhSTEVyYlp2akJZUlBKcGhSOUFqaU5rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC83YTU0MmQtNzE5ZS00NmQwLWE1Y2Mt MDYxZGQ2ODEzMzJjLzEvTnE4RUhSTEVyYlp2akJZUlBKcGhSOUFqaU5rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC83YTU0MmQtNzE5ZS00NmQwLWE1Y2MtMDYxZGQ2ODEzMzJj LzEvTnE4RUhSTEVyYlp2akJZUlBKcGhSOUFqaU5rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcMvsIQCq wrT2uaZuUPEON5CKH7rA815hf93oehPOL5nVZIEh32fREkuHb1oTMeb4KP5P0/DA 16EDby6AvLRnqSZn2v40J8V6H69Fz9tRPFligMllOF1pgMMa0E1lG6xLxyVle86I UjusdjOUtk5RNJRODD9x/yk8d8ZvuAxNOZBqgVx9cFKhBNMZDHY4QagA4ineG086 FmMj5zh8DXzJJFWqJUH7m3NmrjvUemsdOEsCJ9NsvfLAmb+QnWrUuALPFJmJWPD7 uIZfBORv9ucxdnDQu5pZ+VxQ3KUQvkM74EC7pZGZZ1fO3JyBfL7fcpIZxexZYayZ FKVnW2+zA7Z3sQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:13:26 2025 by rpki-client