This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/582239-d5ec-4b83-9a51-d42284a702de/1/nGq-Z3nmkFUoxo46qyzgfWIWH2Q.mft File: nGq-Z3nmkFUoxo46qyzgfWIWH2Q.mft (raw, json) Hash identifier: ttmNwQPpb2lTBJQTHNn0uchbA6gcTbIccbpNema99Sw= Subject key identifier: 62:BA:4B:23:F8:62:64:E0:52:70:05:88:68:85:14:D5:2C:70:86:CC Authority key identifier: 9C:6A:BE:67:79:E6:90:55:28:C6:8E:3A:AB:2C:E0:7D:62:16:1F:64 Certificate issuer: /CN=9c6abe6779e6905528c68e3aab2ce07d62161f64 Certificate serial: 019AF5AE9FB403B05F85680DF9134AC4A379 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nGq-Z3nmkFUoxo46qyzgfWIWH2Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/582239-d5ec-4b83-9a51-d42284a702de/1/nGq-Z3nmkFUoxo46qyzgfWIWH2Q.mft Manifest number: 0848 Signing time: Sat 06 Dec 2025 22:00:53 +0000 Manifest this update: Sat 06 Dec 2025 22:00:53 +0000 Manifest next update: Sun 07 Dec 2025 22:00:53 +0000 Files and hashes: 1: nGq-Z3nmkFUoxo46qyzgfWIWH2Q.crl (hash: psttEblMyVl2DbzMgNxJ9yavSrT8BUR/G1nP5FA+p6A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/582239-d5ec-4b83-9a51-d42284a702de/1/nGq-Z3nmkFUoxo46qyzgfWIWH2Q.crl rsync://rpki.ripe.net/repository/DEFAULT/82/582239-d5ec-4b83-9a51-d42284a702de/1/nGq-Z3nmkFUoxo46qyzgfWIWH2Q.mft rsync://rpki.ripe.net/repository/DEFAULT/nGq-Z3nmkFUoxo46qyzgfWIWH2Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 22:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:9f:b4:03:b0:5f:85:68:0d:f9:13:4a:c4:a3:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c6abe6779e6905528c68e3aab2ce07d62161f64 Validity Not Before: Dec 6 22:00:53 2025 GMT Not After : Dec 7 22:00:53 2025 GMT Subject: CN=62ba4b23f86264e052700588688514d52c7086cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a7:24:e1:4b:93:90:3e:5b:bd:b2:4d:e5:1c: 70:06:a8:33:41:c4:a9:fb:08:53:00:e4:54:33:e6: 43:55:d9:ea:f6:79:b5:68:3d:4d:d6:b6:6c:bb:e6: 4c:43:44:b4:5b:75:6b:d1:4f:06:4f:e9:83:98:51: 8c:f1:67:6e:63:a7:07:c4:1c:9c:09:c0:1a:0f:66: ec:a3:12:e6:0f:ba:c3:5a:0c:13:c8:c4:a8:11:ee: c5:87:a4:e3:22:cf:6f:10:0d:aa:d3:e9:d3:03:af: 37:6f:c7:5b:06:9c:0a:fe:37:69:fe:69:f2:c1:db: 56:ed:97:3c:27:a3:73:3a:90:a7:8f:14:d8:26:d5: c9:71:8f:a7:8c:d2:e2:92:b7:72:68:2d:47:4f:df: c6:8f:da:d6:e7:66:32:d5:35:0d:43:26:a6:ee:07: 89:2a:ec:d0:16:ed:07:ea:de:e3:99:d3:99:37:60: d9:38:df:76:05:41:a8:ae:ec:84:d0:b5:ac:dc:d5: 6f:67:c5:ac:18:49:b5:34:3c:6a:d1:b9:d7:04:b5: 7d:41:84:64:4b:7a:60:b3:0a:c2:44:9a:78:6a:00: e0:8f:aa:9e:0f:6b:45:83:e5:b9:e5:4f:4d:9a:8c: e7:ae:79:f3:0e:71:0b:06:48:da:f1:1f:52:09:04: 6a:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:BA:4B:23:F8:62:64:E0:52:70:05:88:68:85:14:D5:2C:70:86:CC X509v3 Authority Key Identifier: keyid:9C:6A:BE:67:79:E6:90:55:28:C6:8E:3A:AB:2C:E0:7D:62:16:1F:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nGq-Z3nmkFUoxo46qyzgfWIWH2Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/582239-d5ec-4b83-9a51-d42284a702de/1/nGq-Z3nmkFUoxo46qyzgfWIWH2Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/582239-d5ec-4b83-9a51-d42284a702de/1/nGq-Z3nmkFUoxo46qyzgfWIWH2Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:70:c2:75:eb:80:bc:2c:17:13:f7:c5:a8:02:cc:ae:56:bf: 4d:ea:3a:c5:ed:09:7f:85:95:00:ca:ba:ee:5f:a8:8a:ff:28: 5a:2b:aa:1a:73:06:91:74:2f:58:8e:0e:b4:8f:aa:7e:1f:96: 59:d8:42:e4:e9:48:1c:3b:6a:1e:5e:25:01:17:3f:b9:e3:40: 3e:87:17:f8:32:ff:94:50:a2:71:b2:11:14:a4:ce:66:4f:c1: f8:c9:f0:96:f9:2d:9b:4c:47:30:00:07:45:3d:a1:56:e9:7c: 24:c9:01:b1:29:bb:e1:d2:77:c5:11:e7:f0:ad:b7:d5:0d:e9: 65:1f:72:83:33:04:27:47:18:e0:48:c2:40:fe:9d:5f:f4:e2: ac:ed:ae:5b:06:2b:75:2e:1c:8f:ad:99:3f:d7:53:a4:ea:c5: 46:2b:96:1c:e3:10:e1:03:1e:ea:99:73:33:a3:3b:ba:0a:0e: 73:ba:64:8b:5f:60:54:65:d3:d5:d5:96:df:c2:73:5a:8d:e1: 50:3e:e3:2b:01:65:dc:1a:fe:b0:83:14:f7:ba:a1:38:e9:ad: d4:2e:5c:3c:94:28:b7:36:f8:51:7c:60:2e:ba:d6:52:50:94: 39:47:ae:41:1b:4d:b8:37:2b:00:3d:dc:56:a5:7b:fe:02:cd: 48:31:07:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rp+0A7BfhWgN+RNKxKN5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljNmFiZTY3NzllNjkwNTUyOGM2OGUzYWFiMmNlMDdkNjIx NjFmNjQwHhcNMjUxMjA2MjIwMDUzWhcNMjUxMjA3MjIwMDUzWjAzMTEwLwYDVQQD Eyg2MmJhNGIyM2Y4NjI2NGUwNTI3MDA1ODg2ODg1MTRkNTJjNzA4NmNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKck4UuTkD5bvbJN5RxwBqgzQcSp +whTAORUM+ZDVdnq9nm1aD1N1rZsu+ZMQ0S0W3Vr0U8GT+mDmFGM8WduY6cHxByc CcAaD2bsoxLmD7rDWgwTyMSoEe7Fh6TjIs9vEA2q0+nTA683b8dbBpwK/jdp/mny wdtW7Zc8J6NzOpCnjxTYJtXJcY+njNLikrdyaC1HT9/Gj9rW52Yy1TUNQyam7geJ KuzQFu0H6t7jmdOZN2DZON92BUGoruyE0LWs3NVvZ8WsGEm1NDxq0bnXBLV9QYRk S3pgswrCRJp4agDgj6qeD2tFg+W55U9NmoznrnnzDnELBkja8R9SCQRqqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGK6SyP4YmTgUnAFiGiFFNUscIbMMB8GA1UdIwQY MBaAFJxqvmd55pBVKMaOOqss4H1iFh9kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkdxLVozbm1rRlVveG80NnF5emdmV0lXSDJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi81ODIyMzktZDVlYy00YjgzLTlhNTEt ZDQyMjg0YTcwMmRlLzEvbkdxLVozbm1rRlVveG80NnF5emdmV0lXSDJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi81ODIyMzktZDVlYy00YjgzLTlhNTEtZDQyMjg0YTcwMmRl LzEvbkdxLVozbm1rRlVveG80NnF5emdmV0lXSDJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE3DCdeuA vCwXE/fFqALMrla/Teo6xe0Jf4WVAMq67l+oiv8oWiuqGnMGkXQvWI4OtI+qfh+W WdhC5OlIHDtqHl4lARc/ueNAPocX+DL/lFCicbIRFKTOZk/B+Mnwlvktm0xHMAAH RT2hVul8JMkBsSm74dJ3xRHn8K231Q3pZR9ygzMEJ0cY4EjCQP6dX/TirO2uWwYr dS4cj62ZP9dTpOrFRiuWHOMQ4QMe6plzM6M7ugoOc7pki19gVGXT1dWW38JzWo3h UD7jKwFl3Br+sIMU97qhOOmt1C5cPJQotzb4UXxgLrrWUlCUOUeuQRtNuDcrAD3c VqV7/gLNSDEHoA== -----END CERTIFICATE-----Generated at Sun Dec 7 07:52:25 2025 by rpki-client