This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.mft File: NLQZ-koKFgUYgxjN9KIESZKFO5U.mft (raw, json) Hash identifier: xjTpZcc/iqM1Vh61q79YeUY2cSKMwl9w1216ptjDJsg= Subject key identifier: C3:DB:DA:81:B8:55:76:91:6F:5D:13:8F:39:0D:1D:F8:94:1B:91:13 Authority key identifier: 34:B4:19:FA:4A:0A:16:05:18:83:18:CD:F4:A2:04:49:92:85:3B:95 Certificate issuer: /CN=34b419fa4a0a1605188318cdf4a2044992853b95 Certificate serial: 019B39EB49FC545D2593D0ACFC71395F6B97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLQZ-koKFgUYgxjN9KIESZKFO5U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.mft Manifest number: 104A Signing time: Sat 20 Dec 2025 04:01:19 +0000 Manifest this update: Sat 20 Dec 2025 04:01:19 +0000 Manifest next update: Sun 21 Dec 2025 04:01:19 +0000 Files and hashes: 1: CNQCSVKEMGXZWYhuFwFlfeJh3Us.roa (hash: HUYQM19IzL3twBwaH+2KXeSqoub/kejTXefcV/fEL14=) 2: CNv0NdNZKIhaMEB-_zcwx5XHpgI.roa (hash: jSc4O0ONF5PwUEe8AoTXbFWewQ1vQ1toZjhU7yhjZAU=) 3: NLQZ-koKFgUYgxjN9KIESZKFO5U.crl (hash: ynUkAmynU+eo1Ld3VDUHCCqFJLROFVsHX8wjetAtTNU=) 4: wig6KC4gSVw0HyIKRBc2xTnuVN4.roa (hash: EHt3EBj8Qls7cfEcrr19uaUc9VJjWJHcYHVlVYE7DsU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.mft rsync://rpki.ripe.net/repository/DEFAULT/NLQZ-koKFgUYgxjN9KIESZKFO5U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 04:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:eb:49:fc:54:5d:25:93:d0:ac:fc:71:39:5f:6b:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34b419fa4a0a1605188318cdf4a2044992853b95 Validity Not Before: Dec 20 04:01:19 2025 GMT Not After : Dec 21 04:01:19 2025 GMT Subject: CN=c3dbda81b85576916f5d138f390d1df8941b9113 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:91:d2:d6:b0:49:50:e1:53:50:bb:78:4b:a3: ac:6c:13:a0:33:b4:99:7c:34:f0:3a:82:bc:be:28: 29:9f:64:19:27:13:9f:c8:f9:f0:59:d2:f3:63:43: 57:af:8a:a3:8a:cd:20:bd:ef:d7:ea:de:8c:47:62: 92:b6:37:36:43:15:84:ac:73:cc:c3:47:2e:73:53: 01:9f:01:dc:99:14:22:9c:b7:df:65:37:cd:5a:48: 35:18:f1:d6:08:f4:bf:18:22:73:e8:d1:bf:89:3c: ae:05:44:a9:ff:ec:60:c4:87:b6:6f:f7:10:ff:a8: 93:ed:6c:37:0d:d6:26:a5:3c:4f:ab:10:7b:7c:f3: 17:c2:0f:e3:e3:3e:c3:24:a6:f5:0d:a0:ea:43:7e: 5b:3e:35:12:15:d4:67:8c:ed:f7:42:22:ae:8d:fa: 17:71:a8:45:71:97:70:06:3d:a5:c8:64:85:16:b7: f4:cf:bc:6b:b3:14:bf:46:32:1b:3e:4c:2e:b4:f8: bd:06:cd:5e:e1:81:00:73:28:0e:99:02:0d:cb:ad: 12:dd:df:3c:dd:f1:0c:35:b6:fc:88:ea:b9:c6:50: 6d:e0:da:c9:9e:67:e6:c2:f5:28:5e:29:5f:4f:a3: 33:05:2f:ea:6f:d8:43:69:ae:4c:48:b1:b9:7b:20: 56:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:DB:DA:81:B8:55:76:91:6F:5D:13:8F:39:0D:1D:F8:94:1B:91:13 X509v3 Authority Key Identifier: keyid:34:B4:19:FA:4A:0A:16:05:18:83:18:CD:F4:A2:04:49:92:85:3B:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLQZ-koKFgUYgxjN9KIESZKFO5U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:4a:4d:29:4b:76:f1:8b:7c:4a:80:15:6c:11:c5:d8:bc:f6: ba:6a:05:d0:ef:94:e5:99:54:b4:2e:ff:9c:f4:01:f6:bf:20: de:d3:ba:2b:af:05:db:a2:ea:5b:84:4b:67:dd:87:6b:e4:05: 96:d4:0e:86:34:d6:c5:d3:b2:35:85:64:2d:0c:92:7d:ea:5a: 67:87:6d:09:97:38:2f:a2:86:42:d7:cf:23:2a:a3:a8:e9:b7: 71:9f:e7:83:c3:3a:81:b5:ac:24:a6:87:fd:f8:cb:f2:53:9b: 65:e6:86:ce:bd:ec:68:dd:e8:0b:dc:fa:32:7c:6d:b7:c4:36: d0:a4:d3:a4:90:ff:6a:5f:b5:1d:93:b6:92:66:c8:81:9a:b2: bd:b0:80:54:63:8e:b5:54:26:bd:2f:8f:4a:f5:03:d1:ed:3f: ab:86:62:ee:e6:c3:99:81:7b:10:a4:50:82:5f:37:e0:ed:f2: 1e:d8:07:00:fe:83:de:f1:0c:a6:05:53:19:c5:b0:a4:fc:b3: aa:9c:5a:47:8b:08:a6:26:96:51:5c:12:e2:8f:7f:02:b9:70: 23:f6:06:d5:8c:6e:3c:48:f8:51:b1:0e:b2:aa:d9:c7:53:b2: 78:f6:82:41:4a:65:08:4b:c3:46:0d:d7:a3:9f:90:e3:fd:cc: f2:cb:cb:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs560n8VF0lk9Cs/HE5X2uXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0YjQxOWZhNGEwYTE2MDUxODgzMThjZGY0YTIwNDQ5OTI4 NTNiOTUwHhcNMjUxMjIwMDQwMTE5WhcNMjUxMjIxMDQwMTE5WjAzMTEwLwYDVQQD EyhjM2RiZGE4MWI4NTU3NjkxNmY1ZDEzOGYzOTBkMWRmODk0MWI5MTEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ZHS1rBJUOFTULt4S6OsbBOgM7SZ fDTwOoK8vigpn2QZJxOfyPnwWdLzY0NXr4qjis0gve/X6t6MR2KStjc2QxWErHPM w0cuc1MBnwHcmRQinLffZTfNWkg1GPHWCPS/GCJz6NG/iTyuBUSp/+xgxIe2b/cQ /6iT7Ww3DdYmpTxPqxB7fPMXwg/j4z7DJKb1DaDqQ35bPjUSFdRnjO33QiKujfoX cahFcZdwBj2lyGSFFrf0z7xrsxS/RjIbPkwutPi9Bs1e4YEAcygOmQINy60S3d88 3fEMNbb8iOq5xlBt4NrJnmfmwvUoXilfT6MzBS/qb9hDaa5MSLG5eyBW7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMPb2oG4VXaRb10TjzkNHfiUG5ETMB8GA1UdIwQY MBaAFDS0GfpKChYFGIMYzfSiBEmShTuVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkxRWi1rb0tGZ1VZZ3hqTjlLSUVTWktGTzVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi84Yzc5ZmItN2E1Ny00MjlkLTljMzMt ODc3NzU0NGM5Mjc1LzEvTkxRWi1rb0tGZ1VZZ3hqTjlLSUVTWktGTzVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi84Yzc5ZmItN2E1Ny00MjlkLTljMzMtODc3NzU0NGM5Mjc1 LzEvTkxRWi1rb0tGZ1VZZ3hqTjlLSUVTWktGTzVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMUpNKUt2 8Yt8SoAVbBHF2Lz2umoF0O+U5ZlUtC7/nPQB9r8g3tO6K68F26LqW4RLZ92Ha+QF ltQOhjTWxdOyNYVkLQySfepaZ4dtCZc4L6KGQtfPIyqjqOm3cZ/ng8M6gbWsJKaH /fjL8lObZeaGzr3saN3oC9z6Mnxtt8Q20KTTpJD/al+1HZO2kmbIgZqyvbCAVGOO tVQmvS+PSvUD0e0/q4Zi7ubDmYF7EKRQgl834O3yHtgHAP6D3vEMpgVTGcWwpPyz qpxaR4sIpiaWUVwS4o9/ArlwI/YG1YxuPEj4UbEOsqrZx1OyePaCQUplCEvDRg3X o5+Q4/3M8svLVA== -----END CERTIFICATE-----Generated at Sat Dec 20 13:06:16 2025 by rpki-client