This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/848fd6-eb80-4e1e-8378-3e46ce35d4e7/1/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.mft File: DQ2_nrg2CFwZ2T9SVCIcM5SOheM.mft (raw, json) Hash identifier: sMU8U1QThSiOJnE8aX2r4QEfjww4vcqIbY5wA+FlFZ4= Subject key identifier: B6:98:22:5D:92:95:97:3A:CC:FD:AE:7A:B0:09:3F:BC:9B:64:CC:4F Authority key identifier: 0D:0D:BF:9E:B8:36:08:5C:19:D9:3F:52:54:22:1C:33:94:8E:85:E3 Certificate issuer: /CN=0d0dbf9eb836085c19d93f5254221c33948e85e3 Certificate serial: 019AF23FDDF7C2ED1AE062A80C79888E8D43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/848fd6-eb80-4e1e-8378-3e46ce35d4e7/1/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.mft Manifest number: 1370 Signing time: Sat 06 Dec 2025 06:01:03 +0000 Manifest this update: Sat 06 Dec 2025 06:01:03 +0000 Manifest next update: Sun 07 Dec 2025 06:01:03 +0000 Files and hashes: 1: DQ2_nrg2CFwZ2T9SVCIcM5SOheM.crl (hash: cjMUFizg+F4eTOhlWSlbC1hoXHIRV2d2+sD8HdZEtO8=) 2: YVf3u5lFieXSo4MA7qYyxZHHzPg.roa (hash: LTVF5N88k7skTnyboglAJr7FjEe2LUwSGTf3pVeiANQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/848fd6-eb80-4e1e-8378-3e46ce35d4e7/1/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.crl rsync://rpki.ripe.net/repository/DEFAULT/89/848fd6-eb80-4e1e-8378-3e46ce35d4e7/1/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.mft rsync://rpki.ripe.net/repository/DEFAULT/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:dd:f7:c2:ed:1a:e0:62:a8:0c:79:88:8e:8d:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d0dbf9eb836085c19d93f5254221c33948e85e3 Validity Not Before: Dec 6 06:01:03 2025 GMT Not After : Dec 7 06:01:03 2025 GMT Subject: CN=b698225d9295973accfdae7ab0093fbc9b64cc4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:85:f4:88:99:dd:a5:44:36:84:c0:a2:b2:74: b5:c9:58:9d:9d:10:23:e7:6d:d2:54:aa:fb:9b:61: d5:32:05:27:18:79:3d:d4:cd:7a:40:8b:1a:9b:10: 34:50:4f:f5:25:b4:8a:26:ac:54:cb:f3:f7:30:d6: 25:b3:d4:c0:56:fa:fb:1c:10:f5:5b:40:06:2a:24: 37:2d:08:38:95:e1:22:4b:69:38:c6:11:2f:96:65: e1:c6:5c:f1:c0:35:17:64:0a:cc:3c:46:91:13:1a: 23:0c:f4:20:7f:19:5c:21:ee:9f:fc:b6:60:6b:ae: bc:ab:e8:08:f3:06:d5:80:66:00:44:af:2d:2a:c1: 17:4f:1e:08:dd:e7:79:fe:cf:a0:7c:48:d5:b2:dc: 6e:ca:96:8c:6c:55:52:28:01:1b:2b:b0:4f:62:ab: fd:e7:f9:6c:56:63:49:5b:5e:fe:19:d4:19:60:d2: 46:96:14:68:c4:30:c0:e2:13:9e:39:38:ed:99:94: 8a:16:a6:4e:b2:20:5a:41:42:16:98:05:97:93:b9: 08:01:53:89:e5:ba:0c:df:f7:d1:79:fa:98:8f:b0: 3e:d4:83:d2:b7:8c:84:c7:bf:49:98:ba:d5:8a:9f: 18:3e:85:5c:e4:57:df:e9:dc:f4:2f:a8:33:df:7b: 5c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:98:22:5D:92:95:97:3A:CC:FD:AE:7A:B0:09:3F:BC:9B:64:CC:4F X509v3 Authority Key Identifier: keyid:0D:0D:BF:9E:B8:36:08:5C:19:D9:3F:52:54:22:1C:33:94:8E:85:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/848fd6-eb80-4e1e-8378-3e46ce35d4e7/1/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/848fd6-eb80-4e1e-8378-3e46ce35d4e7/1/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:d9:d3:51:c5:32:e2:96:f5:96:a3:61:bf:20:9b:c4:d5:9a: 3d:08:cf:ef:52:38:fe:df:1f:85:31:95:c2:3e:f4:4d:cc:56: af:31:49:58:dd:33:ca:f4:bd:11:b6:ce:13:dc:e2:02:30:5c: 34:55:c3:1a:f8:76:5d:c8:47:4f:55:6e:8d:5e:2d:43:05:f9: f1:5a:2e:82:3a:c5:9c:8f:83:e1:6b:25:d7:60:ae:91:8b:e4: 8b:f9:8f:14:d2:fc:cd:64:e2:59:a2:0e:bc:da:31:81:5f:d4: 42:ce:6b:11:3d:ac:1d:7c:7c:85:97:e1:d6:0b:38:b1:67:89: 12:dc:e4:bb:3b:e8:fe:b0:5a:b7:e7:9f:7e:e1:37:e3:7e:d2: dd:4a:65:9f:33:60:8c:41:ad:75:20:17:ee:e1:6b:44:f6:e3: 5d:ba:2b:03:d9:e8:5b:63:61:77:27:62:a7:43:9d:51:d1:b1: 73:e7:3b:37:6f:c2:7a:51:9e:89:bb:e8:60:f0:43:82:ca:b3: 4f:e1:b8:3a:7b:ea:ca:f0:6b:f1:97:3f:e9:97:10:ca:60:55: 7b:a0:64:38:40:30:db:9d:90:ea:da:89:33:43:f7:36:23:c9: 88:6a:36:15:b6:da:8c:4e:9b:31:41:fb:91:2e:06:69:7d:bc: 5d:12:31:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP933wu0a4GKoDHmIjo1DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkMGRiZjllYjgzNjA4NWMxOWQ5M2Y1MjU0MjIxYzMzOTQ4 ZTg1ZTMwHhcNMjUxMjA2MDYwMTAzWhcNMjUxMjA3MDYwMTAzWjAzMTEwLwYDVQQD EyhiNjk4MjI1ZDkyOTU5NzNhY2NmZGFlN2FiMDA5M2ZiYzliNjRjYzRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYX0iJndpUQ2hMCisnS1yVidnRAj 523SVKr7m2HVMgUnGHk91M16QIsamxA0UE/1JbSKJqxUy/P3MNYls9TAVvr7HBD1 W0AGKiQ3LQg4leEiS2k4xhEvlmXhxlzxwDUXZArMPEaRExojDPQgfxlcIe6f/LZg a668q+gI8wbVgGYARK8tKsEXTx4I3ed5/s+gfEjVstxuypaMbFVSKAEbK7BPYqv9 5/lsVmNJW17+GdQZYNJGlhRoxDDA4hOeOTjtmZSKFqZOsiBaQUIWmAWXk7kIAVOJ 5boM3/fRefqYj7A+1IPSt4yEx79JmLrVip8YPoVc5Fff6dz0L6gz33tcHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLaYIl2SlZc6zP2uerAJP7ybZMxPMB8GA1UdIwQY MBaAFA0Nv564NghcGdk/UlQiHDOUjoXjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFEyX25yZzJDRndaMlQ5U1ZDSWNNNVNPaGVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS84NDhmZDYtZWI4MC00ZTFlLTgzNzgt M2U0NmNlMzVkNGU3LzEvRFEyX25yZzJDRndaMlQ5U1ZDSWNNNVNPaGVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS84NDhmZDYtZWI4MC00ZTFlLTgzNzgtM2U0NmNlMzVkNGU3 LzEvRFEyX25yZzJDRndaMlQ5U1ZDSWNNNVNPaGVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEtnTUcUy 4pb1lqNhvyCbxNWaPQjP71I4/t8fhTGVwj70TcxWrzFJWN0zyvS9EbbOE9ziAjBc NFXDGvh2XchHT1VujV4tQwX58VougjrFnI+D4Wsl12CukYvki/mPFNL8zWTiWaIO vNoxgV/UQs5rET2sHXx8hZfh1gs4sWeJEtzkuzvo/rBat+effuE3437S3UplnzNg jEGtdSAX7uFrRPbjXborA9noW2Nhdydip0OdUdGxc+c7N2/CelGeibvoYPBDgsqz T+G4OnvqyvBr8Zc/6ZcQymBVe6BkOEAw252Q6tqJM0P3NiPJiGo2FbbajE6bMUH7 kS4GaX28XRIxjw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:45:24 2025 by rpki-client