This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.mft File: NE_a0Q7lWzKCpkJGpB3GGoki0l0.mft (raw, json) Hash identifier: tlduDLjEu1me0vkcSHBFUwFa77BcgXbpymMcgAI79ps= Subject key identifier: 1B:A4:77:0C:C1:10:77:09:36:CA:C1:44:CD:9F:95:64:48:55:15:C6 Authority key identifier: 34:4F:DA:D1:0E:E5:5B:32:82:A6:42:46:A4:1D:C6:1A:89:22:D2:5D Certificate issuer: /CN=344fdad10ee55b3282a64246a41dc61a8922d25d Certificate serial: 019AF12DF80AB873472523CBD13A72197CCD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NE_a0Q7lWzKCpkJGpB3GGoki0l0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.mft Manifest number: 1465 Signing time: Sat 06 Dec 2025 01:01:52 +0000 Manifest this update: Sat 06 Dec 2025 01:01:52 +0000 Manifest next update: Sun 07 Dec 2025 01:01:52 +0000 Files and hashes: 1: GHI5fKOLnVPTORGJ-8HvgMn5I8g.roa (hash: tTyvweQSG7PSV/1T7+CqEyju3wttfhrfn44tpkM7ENI=) 2: NE_a0Q7lWzKCpkJGpB3GGoki0l0.crl (hash: vCH2zk+cJIHlKjkUgVFAp64K0WE62ktx3RvELkjyozM=) 3: xHwvN6-vM3aYD0WFb7ooENGYbZk.roa (hash: iMOiUeIxNdKNrUiqdP5pHSRFVDIEoaVwDT8Frv9xIdQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.crl rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.mft rsync://rpki.ripe.net/repository/DEFAULT/NE_a0Q7lWzKCpkJGpB3GGoki0l0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:f8:0a:b8:73:47:25:23:cb:d1:3a:72:19:7c:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=344fdad10ee55b3282a64246a41dc61a8922d25d Validity Not Before: Dec 6 01:01:52 2025 GMT Not After : Dec 7 01:01:52 2025 GMT Subject: CN=1ba4770cc110770936cac144cd9f9564485515c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:68:16:22:23:96:95:7a:d0:84:42:a8:12:53: f5:62:9b:a4:2d:7b:81:f9:f7:e9:60:b4:64:be:17: 10:32:bd:d1:45:e5:c5:5a:e0:90:ad:a0:e7:65:05: 74:a3:22:94:03:eb:1d:c4:26:2b:b2:c3:8d:32:e4: 00:ee:48:2b:5e:5a:fe:ec:b1:cc:25:af:70:78:1e: 85:23:7d:49:45:22:47:a0:a9:35:a9:7d:ba:6a:13: 1e:af:8a:c8:6b:3d:fe:11:25:f3:c6:41:29:73:ba: b6:53:89:c2:e3:73:99:7b:56:92:3e:6d:68:38:32: 19:b0:e6:24:93:d4:d3:12:ff:66:8f:69:c6:ef:35: 43:9f:da:c4:27:40:38:ee:33:8f:0a:95:da:4d:eb: 21:9c:52:97:fc:c5:97:a7:27:a4:76:f6:28:5b:66: 52:35:97:67:65:a8:24:e2:74:b4:f5:f1:0c:03:7a: 61:b4:fd:2a:e0:00:df:d6:fa:03:2e:ed:a4:ee:df: 17:e5:cd:2f:13:aa:aa:34:eb:a6:67:3c:ee:33:66: 78:34:6b:72:fc:51:92:60:ec:81:54:9b:72:3f:7f: 68:44:b5:fc:cd:5f:c3:8a:eb:10:17:8d:1e:99:92: f9:18:f4:b6:28:05:86:61:06:12:62:18:91:87:f6: 9b:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:A4:77:0C:C1:10:77:09:36:CA:C1:44:CD:9F:95:64:48:55:15:C6 X509v3 Authority Key Identifier: keyid:34:4F:DA:D1:0E:E5:5B:32:82:A6:42:46:A4:1D:C6:1A:89:22:D2:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NE_a0Q7lWzKCpkJGpB3GGoki0l0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:13:55:f9:ab:b6:f4:fb:d7:e9:78:4e:34:24:a0:c1:75:30: 5b:6c:4a:9b:7d:a8:a3:3b:9e:fd:50:6f:17:9b:48:e0:9a:81: b1:bb:22:60:9d:60:b7:f8:a5:42:b3:47:79:5f:eb:bf:75:6f: 71:2b:dc:77:0e:05:6a:b4:0e:0c:e1:f7:86:10:67:12:96:15: 67:a3:0c:ed:28:52:31:a6:98:ef:70:87:4d:b4:b9:f5:15:a8: 09:1a:3c:7f:54:d1:8e:76:55:e6:80:08:b7:75:fb:b7:8b:8c: 0c:b4:88:2e:a9:e2:59:3e:4d:1b:9e:7c:8f:ab:ef:ce:88:1f: 22:82:2e:61:20:bb:ea:62:54:79:eb:1e:5f:0f:58:00:5b:81: 78:e9:96:27:60:de:38:c6:f2:32:f5:f9:4d:5e:c3:15:b4:ec: 5a:1e:63:7e:b3:e3:7f:23:c8:bd:66:db:8f:eb:8a:ff:9d:a2: 8d:21:61:1c:7d:39:b0:dc:b4:88:29:5e:63:f9:a6:ad:f2:c2: 48:fb:93:80:b7:58:7b:2e:f1:d9:2e:d0:d8:d0:5f:5b:a3:57: 34:69:8c:ad:ac:bc:e4:80:b6:f9:d5:21:06:38:26:fe:2a:71: b8:ae:7f:ad:25:92:1b:d8:04:4b:48:c3:5f:bf:5b:52:2a:35: 2e:94:a7:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLfgKuHNHJSPL0TpyGXzNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0NGZkYWQxMGVlNTViMzI4MmE2NDI0NmE0MWRjNjFhODky MmQyNWQwHhcNMjUxMjA2MDEwMTUyWhcNMjUxMjA3MDEwMTUyWjAzMTEwLwYDVQQD EygxYmE0NzcwY2MxMTA3NzA5MzZjYWMxNDRjZDlmOTU2NDQ4NTUxNWM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmgWIiOWlXrQhEKoElP1YpukLXuB +ffpYLRkvhcQMr3RReXFWuCQraDnZQV0oyKUA+sdxCYrssONMuQA7kgrXlr+7LHM Ja9weB6FI31JRSJHoKk1qX26ahMer4rIaz3+ESXzxkEpc7q2U4nC43OZe1aSPm1o ODIZsOYkk9TTEv9mj2nG7zVDn9rEJ0A47jOPCpXaTeshnFKX/MWXpyekdvYoW2ZS NZdnZagk4nS09fEMA3phtP0q4ADf1voDLu2k7t8X5c0vE6qqNOumZzzuM2Z4NGty /FGSYOyBVJtyP39oRLX8zV/DiusQF40emZL5GPS2KAWGYQYSYhiRh/abEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBukdwzBEHcJNsrBRM2flWRIVRXGMB8GA1UdIwQY MBaAFDRP2tEO5VsygqZCRqQdxhqJItJdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkVfYTBRN2xXektDcGtKR3BCM0dHb2tpMGwwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8wNjc2MzAtMzA2ZS00YzM3LThiY2Mt NGYwMjFjNzNlZjc0LzEvTkVfYTBRN2xXektDcGtKR3BCM0dHb2tpMGwwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS8wNjc2MzAtMzA2ZS00YzM3LThiY2MtNGYwMjFjNzNlZjc0 LzEvTkVfYTBRN2xXektDcGtKR3BCM0dHb2tpMGwwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABxNV+au2 9PvX6XhONCSgwXUwW2xKm32oozue/VBvF5tI4JqBsbsiYJ1gt/ilQrNHeV/rv3Vv cSvcdw4FarQODOH3hhBnEpYVZ6MM7ShSMaaY73CHTbS59RWoCRo8f1TRjnZV5oAI t3X7t4uMDLSILqniWT5NG558j6vvzogfIoIuYSC76mJUeeseXw9YAFuBeOmWJ2De OMbyMvX5TV7DFbTsWh5jfrPjfyPIvWbbj+uK/52ijSFhHH05sNy0iCleY/mmrfLC SPuTgLdYey7x2S7Q2NBfW6NXNGmMray85IC2+dUhBjgm/ipxuK5/rSWSG9gES0jD X79bUio1LpSnyQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:29:20 2025 by rpki-client