This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/ae8e47-14b4-4914-826f-413a5958a7f3/1/NQa7fsBmYCLwPAvZ9V94wKfq2p8.mft File: NQa7fsBmYCLwPAvZ9V94wKfq2p8.mft (raw, json) Hash identifier: ksN0Fk1vg2tbD+v2UQwKkiA1Jy8+embFSNCVs1cUoAQ= Subject key identifier: 06:B4:CA:B1:66:3A:C8:0B:88:98:1B:B4:47:BA:77:9E:11:03:3E:0F Authority key identifier: 35:06:BB:7E:C0:66:60:22:F0:3C:0B:D9:F5:5F:78:C0:A7:EA:DA:9F Certificate issuer: /CN=3506bb7ec0666022f03c0bd9f55f78c0a7eada9f Certificate serial: 019AF12E7EBD186B91BA1878BA20BC13D772 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NQa7fsBmYCLwPAvZ9V94wKfq2p8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/ae8e47-14b4-4914-826f-413a5958a7f3/1/NQa7fsBmYCLwPAvZ9V94wKfq2p8.mft Manifest number: 0A0F Signing time: Sat 06 Dec 2025 01:02:27 +0000 Manifest this update: Sat 06 Dec 2025 01:02:27 +0000 Manifest next update: Sun 07 Dec 2025 01:02:27 +0000 Files and hashes: 1: NQa7fsBmYCLwPAvZ9V94wKfq2p8.crl (hash: WRkx7/v+9qftskzK3p8PXCa93G9zYUa6Qi+DD6DqhSc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/ae8e47-14b4-4914-826f-413a5958a7f3/1/NQa7fsBmYCLwPAvZ9V94wKfq2p8.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/ae8e47-14b4-4914-826f-413a5958a7f3/1/NQa7fsBmYCLwPAvZ9V94wKfq2p8.mft rsync://rpki.ripe.net/repository/DEFAULT/NQa7fsBmYCLwPAvZ9V94wKfq2p8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:7e:bd:18:6b:91:ba:18:78:ba:20:bc:13:d7:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3506bb7ec0666022f03c0bd9f55f78c0a7eada9f Validity Not Before: Dec 6 01:02:27 2025 GMT Not After : Dec 7 01:02:27 2025 GMT Subject: CN=06b4cab1663ac80b88981bb447ba779e11033e0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:cd:2b:6e:fd:7a:a5:c4:19:ee:19:6f:5b:bc: 07:fc:a8:b2:ff:8b:79:6d:7e:28:de:dc:7a:84:47: 50:86:7d:11:08:a7:4c:19:18:fd:db:33:9c:0b:df: c6:ab:e1:e0:48:ca:84:8d:d5:ac:b4:4b:cb:4d:5e: 94:32:26:9b:18:6a:1c:7c:16:77:a9:ec:14:24:2c: 9a:e2:e6:40:80:38:bc:22:c5:ad:fa:50:b1:8a:1f: c6:39:51:3b:81:3f:25:fe:40:cc:7e:ca:e7:88:f2: 2e:b8:84:3d:b8:d4:f5:70:85:07:86:ea:d5:45:a4: 80:2d:75:aa:25:91:b4:88:fc:89:93:9c:c2:7f:57: 94:82:df:f7:b6:d1:24:50:0d:bf:66:bd:af:8d:04: e7:b1:33:e4:f3:bd:60:cc:0d:fc:8f:e4:b5:dc:f2: de:87:e0:cb:a2:08:49:cd:41:a4:3f:6b:f3:c5:77: 7a:f6:49:ab:bd:33:e6:1c:2a:94:fe:1e:df:8a:87: 08:be:94:2a:98:57:36:74:f9:70:16:70:ba:68:fa: 13:b7:d3:88:a1:42:e5:39:2e:ef:57:d1:44:8c:37: f7:09:d6:eb:2c:74:57:ab:8f:e9:fc:27:1b:31:86: 34:cb:8d:a0:01:59:b5:14:5d:8f:48:ca:68:24:85: 75:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:B4:CA:B1:66:3A:C8:0B:88:98:1B:B4:47:BA:77:9E:11:03:3E:0F X509v3 Authority Key Identifier: keyid:35:06:BB:7E:C0:66:60:22:F0:3C:0B:D9:F5:5F:78:C0:A7:EA:DA:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NQa7fsBmYCLwPAvZ9V94wKfq2p8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/ae8e47-14b4-4914-826f-413a5958a7f3/1/NQa7fsBmYCLwPAvZ9V94wKfq2p8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/ae8e47-14b4-4914-826f-413a5958a7f3/1/NQa7fsBmYCLwPAvZ9V94wKfq2p8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:a4:d3:ec:0e:27:b4:a3:0f:a0:fa:6e:89:5c:08:47:73:e1: 00:a5:5e:d3:fd:d9:b1:b7:02:c9:5b:7c:ef:df:e2:c9:3c:09: c6:a9:90:9f:27:3a:70:bd:d4:dc:8e:78:83:45:34:3b:ee:c0: 3e:67:3c:89:64:fa:d2:03:8f:02:5d:36:a8:40:90:21:39:b5: 91:bc:1d:ad:2d:3b:67:6f:30:c1:39:5f:62:f4:64:01:ec:d5: b2:ff:d7:c3:24:2f:f9:e2:db:17:14:06:f7:60:1e:c3:ff:ec: 10:59:fa:ba:9d:e2:d3:48:70:6e:67:f2:7e:98:b9:3c:37:a7: 3e:ec:28:a2:46:c7:70:51:83:f4:4f:1e:44:b6:dc:75:ff:d0: 8f:e6:03:88:07:7a:0a:8f:12:15:dc:f8:3b:0c:55:f4:ce:8b: 6c:92:ef:0d:5c:88:ff:32:9e:b1:b7:bf:a7:15:18:8b:d0:86: b4:ea:73:70:f8:a7:d9:ad:fa:86:d5:af:4e:c6:3a:3d:de:94: 60:3e:c3:6b:43:95:a3:94:d9:94:c1:e7:f5:d8:43:ce:a7:15: 62:e9:6c:3c:23:8b:80:ab:5a:17:83:cc:fe:24:f6:a5:e8:49: 18:65:b8:78:70:a6:b9:1d:3c:27:0b:1b:5a:63:bd:86:83:6a: ec:10:90:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLn69GGuRuhh4uiC8E9dyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MDZiYjdlYzA2NjYwMjJmMDNjMGJkOWY1NWY3OGMwYTdl YWRhOWYwHhcNMjUxMjA2MDEwMjI3WhcNMjUxMjA3MDEwMjI3WjAzMTEwLwYDVQQD EygwNmI0Y2FiMTY2M2FjODBiODg5ODFiYjQ0N2JhNzc5ZTExMDMzZTBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkc0rbv16pcQZ7hlvW7wH/Kiy/4t5 bX4o3tx6hEdQhn0RCKdMGRj92zOcC9/Gq+HgSMqEjdWstEvLTV6UMiabGGocfBZ3 qewUJCya4uZAgDi8IsWt+lCxih/GOVE7gT8l/kDMfsrniPIuuIQ9uNT1cIUHhurV RaSALXWqJZG0iPyJk5zCf1eUgt/3ttEkUA2/Zr2vjQTnsTPk871gzA38j+S13PLe h+DLoghJzUGkP2vzxXd69kmrvTPmHCqU/h7fiocIvpQqmFc2dPlwFnC6aPoTt9OI oULlOS7vV9FEjDf3CdbrLHRXq4/p/CcbMYY0y42gAVm1FF2PSMpoJIV1QQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAa0yrFmOsgLiJgbtEe6d54RAz4PMB8GA1UdIwQY MBaAFDUGu37AZmAi8DwL2fVfeMCn6tqfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlFhN2ZzQm1ZQ0x3UEF2WjlWOTR3S2ZxMnA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9hZThlNDctMTRiNC00OTE0LTgyNmYt NDEzYTU5NThhN2YzLzEvTlFhN2ZzQm1ZQ0x3UEF2WjlWOTR3S2ZxMnA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC9hZThlNDctMTRiNC00OTE0LTgyNmYtNDEzYTU5NThhN2Yz LzEvTlFhN2ZzQm1ZQ0x3UEF2WjlWOTR3S2ZxMnA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlKTT7A4n tKMPoPpuiVwIR3PhAKVe0/3ZsbcCyVt879/iyTwJxqmQnyc6cL3U3I54g0U0O+7A Pmc8iWT60gOPAl02qECQITm1kbwdrS07Z28wwTlfYvRkAezVsv/XwyQv+eLbFxQG 92Aew//sEFn6up3i00hwbmfyfpi5PDenPuwookbHcFGD9E8eRLbcdf/Qj+YDiAd6 Co8SFdz4OwxV9M6LbJLvDVyI/zKesbe/pxUYi9CGtOpzcPin2a36htWvTsY6Pd6U YD7Da0OVo5TZlMHn9dhDzqcVYulsPCOLgKtaF4PM/iT2pehJGGW4eHCmuR08Jwsb WmO9hoNq7BCQ/g== -----END CERTIFICATE-----Generated at Sat Dec 6 08:01:25 2025 by rpki-client