This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.mft File: NLQZ-koKFgUYgxjN9KIESZKFO5U.mft (raw, json) Hash identifier: c9w8zHEDMs8htZFyOccuwOUqMeNDAhbB3DbvuueKxuw= Subject key identifier: 25:04:76:05:B2:25:CC:54:47:11:76:54:47:C6:E5:AA:D2:C4:36:4A Authority key identifier: 34:B4:19:FA:4A:0A:16:05:18:83:18:CD:F4:A2:04:49:92:85:3B:95 Certificate issuer: /CN=34b419fa4a0a1605188318cdf4a2044992853b95 Certificate serial: 019AF65310FD34412F9AD7C67C09D7B48485 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLQZ-koKFgUYgxjN9KIESZKFO5U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.mft Manifest number: 1027 Signing time: Sun 07 Dec 2025 01:00:30 +0000 Manifest this update: Sun 07 Dec 2025 01:00:30 +0000 Manifest next update: Mon 08 Dec 2025 01:00:30 +0000 Files and hashes: 1: CNQCSVKEMGXZWYhuFwFlfeJh3Us.roa (hash: HUYQM19IzL3twBwaH+2KXeSqoub/kejTXefcV/fEL14=) 2: CNv0NdNZKIhaMEB-_zcwx5XHpgI.roa (hash: jSc4O0ONF5PwUEe8AoTXbFWewQ1vQ1toZjhU7yhjZAU=) 3: NLQZ-koKFgUYgxjN9KIESZKFO5U.crl (hash: 2S2EsQ2r2APljzwp56TsZUWOGor7JRAgQQ5GOrWezX4=) 4: wig6KC4gSVw0HyIKRBc2xTnuVN4.roa (hash: EHt3EBj8Qls7cfEcrr19uaUc9VJjWJHcYHVlVYE7DsU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.mft rsync://rpki.ripe.net/repository/DEFAULT/NLQZ-koKFgUYgxjN9KIESZKFO5U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:53:10:fd:34:41:2f:9a:d7:c6:7c:09:d7:b4:84:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34b419fa4a0a1605188318cdf4a2044992853b95 Validity Not Before: Dec 7 01:00:30 2025 GMT Not After : Dec 8 01:00:30 2025 GMT Subject: CN=25047605b225cc544711765447c6e5aad2c4364a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:6d:77:5f:64:b6:2d:d0:c3:77:32:56:94:f5: 25:d7:8d:33:eb:c0:4c:c6:8b:d1:0e:69:74:a6:80: 89:7f:22:a6:06:c0:a5:62:24:3c:7b:42:d1:0f:b5: 92:ed:ca:29:cc:01:f8:3f:c6:91:1b:cc:51:c6:81: df:89:2c:39:60:ab:83:e7:f3:a7:26:11:8a:00:dd: 27:7f:08:fd:1a:92:65:46:46:4c:b0:66:f5:09:6c: 10:0a:d7:db:66:af:a8:56:a5:5f:c3:25:c9:b9:77: 53:8c:ea:a7:67:6f:b0:4d:11:fe:6e:42:7e:e5:e6: f0:28:e4:d0:cf:ae:41:ce:e8:d5:c9:54:2e:1f:4a: f1:cd:e9:51:ca:df:f7:4a:7a:4e:1a:a2:84:6e:cc: fe:01:de:61:7f:08:68:8a:9a:8d:17:97:af:44:a8: 94:3a:d3:6b:7d:99:e5:6d:ca:56:38:f1:aa:be:ad: 2a:13:e4:36:17:cb:c6:9b:77:2d:e8:05:e5:e8:0c: 31:c3:0e:e6:47:47:b3:2c:2a:c7:ef:c0:c5:ed:bb: 10:6c:2b:ca:7b:4e:e7:54:ba:5a:1d:cb:f7:a5:34: df:91:dc:a6:d7:2d:f0:0b:51:e5:32:7d:4a:6d:2e: 3e:3c:05:8e:43:b3:e6:a1:97:03:48:48:e2:af:80: d0:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:04:76:05:B2:25:CC:54:47:11:76:54:47:C6:E5:AA:D2:C4:36:4A X509v3 Authority Key Identifier: keyid:34:B4:19:FA:4A:0A:16:05:18:83:18:CD:F4:A2:04:49:92:85:3B:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLQZ-koKFgUYgxjN9KIESZKFO5U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:0c:b6:83:76:af:a0:ec:33:d2:d6:0a:db:a2:e6:47:94:1d: 76:34:84:07:be:02:5b:63:a9:dc:17:6f:23:7e:21:9c:15:d2: e0:a7:97:b4:21:bb:c2:52:11:34:79:cc:29:ce:68:e0:a4:ae: 0a:c1:12:11:d4:88:e0:e4:1c:25:f7:43:f2:9b:71:14:19:59: 57:25:18:46:e1:21:ab:9a:e3:d5:b5:dd:5b:8d:d9:04:ca:df: 99:12:ab:6e:13:fd:c7:96:95:76:ef:e2:fd:41:e6:cf:eb:a3: 9e:5a:13:72:10:56:b0:a1:3c:ea:e5:df:55:4a:2f:45:8b:4c: 5e:c6:b9:18:82:7f:f5:d5:c5:cc:00:0d:6e:ae:63:0d:69:8e: 95:02:b4:87:7f:14:c3:f3:05:12:01:e7:a0:79:ce:12:c4:12: 70:23:9c:e9:8b:f6:88:ad:bb:15:33:36:73:87:4f:3c:a6:43: cf:61:ae:df:91:a0:82:9e:e3:71:d7:9b:00:43:72:65:4a:17: 83:79:1e:60:c9:2c:e4:6e:82:91:0b:b1:67:2f:02:21:1b:6d: 43:bb:a3:4e:ae:14:b2:7c:f1:de:00:87:e1:d2:9f:1b:63:94: f4:56:6e:79:4f:38:9e:1a:fd:53:17:49:6e:00:60:37:74:33: 90:96:35:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2UxD9NEEvmtfGfAnXtISFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0YjQxOWZhNGEwYTE2MDUxODgzMThjZGY0YTIwNDQ5OTI4 NTNiOTUwHhcNMjUxMjA3MDEwMDMwWhcNMjUxMjA4MDEwMDMwWjAzMTEwLwYDVQQD EygyNTA0NzYwNWIyMjVjYzU0NDcxMTc2NTQ0N2M2ZTVhYWQyYzQzNjRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6m13X2S2LdDDdzJWlPUl140z68BM xovRDml0poCJfyKmBsClYiQ8e0LRD7WS7copzAH4P8aRG8xRxoHfiSw5YKuD5/On JhGKAN0nfwj9GpJlRkZMsGb1CWwQCtfbZq+oVqVfwyXJuXdTjOqnZ2+wTRH+bkJ+ 5ebwKOTQz65BzujVyVQuH0rxzelRyt/3SnpOGqKEbsz+Ad5hfwhoipqNF5evRKiU OtNrfZnlbcpWOPGqvq0qE+Q2F8vGm3ct6AXl6Awxww7mR0ezLCrH78DF7bsQbCvK e07nVLpaHcv3pTTfkdym1y3wC1HlMn1KbS4+PAWOQ7PmoZcDSEjir4DQ1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCUEdgWyJcxURxF2VEfG5arSxDZKMB8GA1UdIwQY MBaAFDS0GfpKChYFGIMYzfSiBEmShTuVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkxRWi1rb0tGZ1VZZ3hqTjlLSUVTWktGTzVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi84Yzc5ZmItN2E1Ny00MjlkLTljMzMt ODc3NzU0NGM5Mjc1LzEvTkxRWi1rb0tGZ1VZZ3hqTjlLSUVTWktGTzVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi84Yzc5ZmItN2E1Ny00MjlkLTljMzMtODc3NzU0NGM5Mjc1 LzEvTkxRWi1rb0tGZ1VZZ3hqTjlLSUVTWktGTzVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASgy2g3av oOwz0tYK26LmR5QddjSEB74CW2Op3BdvI34hnBXS4KeXtCG7wlIRNHnMKc5o4KSu CsESEdSI4OQcJfdD8ptxFBlZVyUYRuEhq5rj1bXdW43ZBMrfmRKrbhP9x5aVdu/i /UHmz+ujnloTchBWsKE86uXfVUovRYtMXsa5GIJ/9dXFzAANbq5jDWmOlQK0h38U w/MFEgHnoHnOEsQScCOc6Yv2iK27FTM2c4dPPKZDz2Gu35Gggp7jcdebAENyZUoX g3keYMks5G6CkQuxZy8CIRttQ7ujTq4Usnzx3gCH4dKfG2OU9FZueU84nhr9UxdJ bgBgN3QzkJY1Hw== -----END CERTIFICATE-----Generated at Sun Dec 7 07:00:12 2025 by rpki-client