This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/745c65-b877-45f2-b898-b30b0e5265a8/1/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.mft File: NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.mft (raw, json) Hash identifier: UcglA/1dF9IWzBUXvrHjX4YgJAgfWTrETmbUOOvp91I= Subject key identifier: 1A:8D:DC:D9:21:AA:05:59:FC:42:17:2D:03:52:99:81:FE:32:1F:14 Authority key identifier: 36:A1:DA:EC:E1:C6:E8:78:54:6D:BD:13:33:DA:09:FE:B8:BF:F0:18 Certificate issuer: /CN=36a1daece1c6e878546dbd1333da09feb8bff018 Certificate serial: 019AF49BF64C412B4A9F8A633F35C86443F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/745c65-b877-45f2-b898-b30b0e5265a8/1/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.mft Manifest number: 047C Signing time: Sat 06 Dec 2025 17:00:53 +0000 Manifest this update: Sat 06 Dec 2025 17:00:53 +0000 Manifest next update: Sun 07 Dec 2025 17:00:53 +0000 Files and hashes: 1: NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.crl (hash: BadnI505KoiJHInUxa+FUDWAtR2mGFZP/R341Jdqysc=) 2: v9WYkBz15RpwA0n7rXgCIDyTPvU.roa (hash: vUv7k6coWvAmWrqVuPUy83SA1mmkmDGBast/PkGxxu4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/745c65-b877-45f2-b898-b30b0e5265a8/1/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/745c65-b877-45f2-b898-b30b0e5265a8/1/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.mft rsync://rpki.ripe.net/repository/DEFAULT/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9b:f6:4c:41:2b:4a:9f:8a:63:3f:35:c8:64:43:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36a1daece1c6e878546dbd1333da09feb8bff018 Validity Not Before: Dec 6 17:00:53 2025 GMT Not After : Dec 7 17:00:53 2025 GMT Subject: CN=1a8ddcd921aa0559fc42172d03529981fe321f14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:71:43:10:dd:0d:e3:57:f0:02:69:b7:dd:5f: 51:0f:a1:a4:be:e3:8a:a3:c8:1d:19:54:f8:a6:56: 5e:bb:a8:c2:8f:60:64:4e:78:ca:0f:fc:05:e7:1e: bb:45:c9:bb:fb:09:8d:53:7e:63:43:50:66:36:8c: 3f:7b:f0:73:a5:26:8c:fe:94:69:f0:01:1c:8a:7d: ae:71:1e:4f:45:1f:52:4e:c4:34:51:c2:67:15:5b: 8d:48:5f:25:20:91:08:67:ce:90:d1:38:e6:84:f2: 54:90:7e:79:b8:39:5f:6b:fa:e8:ef:e7:ae:2c:fe: 88:9f:a1:6d:eb:7a:57:26:5d:75:81:00:c0:97:00: 2c:f2:32:4b:68:e8:d8:be:70:75:eb:79:f6:54:27: 7c:e1:1d:b5:7a:6d:99:de:4f:7b:9e:fa:1d:89:fe: 10:a6:cf:ec:f7:0d:e7:66:6d:50:2f:12:a1:d0:81: 6a:23:6d:90:5d:72:90:7c:5f:cb:c3:99:86:1f:30: 58:c6:54:31:d8:05:ee:d4:99:98:4c:82:59:48:74: 26:6e:f6:80:ba:c6:da:f3:91:fd:37:3a:20:99:d4: 8f:ba:b4:21:8e:c6:7c:e9:3e:bb:b6:6a:06:7f:47: de:0a:7e:68:31:63:e5:fa:df:a8:f1:12:97:ad:9a: 43:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:8D:DC:D9:21:AA:05:59:FC:42:17:2D:03:52:99:81:FE:32:1F:14 X509v3 Authority Key Identifier: keyid:36:A1:DA:EC:E1:C6:E8:78:54:6D:BD:13:33:DA:09:FE:B8:BF:F0:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/745c65-b877-45f2-b898-b30b0e5265a8/1/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/745c65-b877-45f2-b898-b30b0e5265a8/1/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:3f:2e:12:0c:b5:11:6a:79:c8:50:ac:ec:21:0e:ea:34:90: 17:86:12:c4:63:4b:71:e1:4b:d7:8b:3c:62:b2:de:55:29:8e: c0:dd:03:18:ce:45:07:0a:3f:58:67:06:59:27:a5:41:dd:ee: 9e:2b:86:c8:0a:6b:55:bc:14:9b:61:2f:1f:db:17:7c:fe:6f: a4:f2:e5:73:a5:fc:26:7a:39:23:ca:73:66:d4:a4:b0:d9:7c: 58:d1:22:4a:8c:2a:79:8a:43:2e:07:9e:4d:20:bd:da:4c:d2: 84:ae:81:db:f5:76:48:c4:59:60:d4:09:82:28:29:d7:cc:86: 68:49:50:6a:1f:6c:d5:87:40:e4:2b:8e:43:1b:2f:bf:40:32: b0:66:08:92:51:1c:e6:81:a4:b5:ef:79:17:7c:f4:ee:f6:a6: fb:0a:c7:b4:24:44:0c:88:dc:35:35:9f:1d:92:74:2e:62:17: 11:cf:fa:be:35:d9:d3:48:f9:02:31:80:1b:7b:2d:ab:c5:4b: 6c:9b:55:1a:a5:a7:64:fa:5f:d6:9e:f1:92:6c:f2:ae:ad:db: 59:c3:04:29:12:07:8c:82:41:ad:a4:f4:cf:ab:c7:71:04:ca: 8c:83:dc:32:85:71:ed:12:40:97:a5:9b:ff:0c:ad:07:4a:d3: c5:20:e8:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0m/ZMQStKn4pjPzXIZEPwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YTFkYWVjZTFjNmU4Nzg1NDZkYmQxMzMzZGEwOWZlYjhi ZmYwMTgwHhcNMjUxMjA2MTcwMDUzWhcNMjUxMjA3MTcwMDUzWjAzMTEwLwYDVQQD EygxYThkZGNkOTIxYWEwNTU5ZmM0MjE3MmQwMzUyOTk4MWZlMzIxZjE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3FDEN0N41fwAmm33V9RD6GkvuOK o8gdGVT4plZeu6jCj2BkTnjKD/wF5x67Rcm7+wmNU35jQ1BmNow/e/BzpSaM/pRp 8AEcin2ucR5PRR9STsQ0UcJnFVuNSF8lIJEIZ86Q0TjmhPJUkH55uDlfa/ro7+eu LP6In6Ft63pXJl11gQDAlwAs8jJLaOjYvnB163n2VCd84R21em2Z3k97nvodif4Q ps/s9w3nZm1QLxKh0IFqI22QXXKQfF/Lw5mGHzBYxlQx2AXu1JmYTIJZSHQmbvaA usba85H9NzogmdSPurQhjsZ86T67tmoGf0feCn5oMWPl+t+o8RKXrZpDHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBqN3NkhqgVZ/EIXLQNSmYH+Mh8UMB8GA1UdIwQY MBaAFDah2uzhxuh4VG29EzPaCf64v/AYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnFIYTdPSEc2SGhVYmIwVE05b0pfcmlfOEJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS83NDVjNjUtYjg3Ny00NWYyLWI4OTgt YjMwYjBlNTI2NWE4LzEvTnFIYTdPSEc2SGhVYmIwVE05b0pfcmlfOEJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS83NDVjNjUtYjg3Ny00NWYyLWI4OTgtYjMwYjBlNTI2NWE4 LzEvTnFIYTdPSEc2SGhVYmIwVE05b0pfcmlfOEJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGD8uEgy1 EWp5yFCs7CEO6jSQF4YSxGNLceFL14s8YrLeVSmOwN0DGM5FBwo/WGcGWSelQd3u niuGyAprVbwUm2EvH9sXfP5vpPLlc6X8Jno5I8pzZtSksNl8WNEiSowqeYpDLgee TSC92kzShK6B2/V2SMRZYNQJgigp18yGaElQah9s1YdA5CuOQxsvv0AysGYIklEc 5oGkte95F3z07vam+wrHtCREDIjcNTWfHZJ0LmIXEc/6vjXZ00j5AjGAG3stq8VL bJtVGqWnZPpf1p7xkmzyrq3bWcMEKRIHjIJBraT0z6vHcQTKjIPcMoVx7RJAl6Wb /wytB0rTxSDovg== -----END CERTIFICATE-----Generated at Sun Dec 7 00:35:48 2025 by rpki-client