This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/NuoqvtiQjzJ_huKwrxXUgxBJzqo.mft File: NuoqvtiQjzJ_huKwrxXUgxBJzqo.mft (raw, json) Hash identifier: TJgSYXaYzXOiIHhvyi/EmrU4fRz1DlH4quQbc+B7X+c= Subject key identifier: E6:8B:9A:E0:0A:9F:CD:BB:5B:BE:12:9B:16:5D:5D:55:83:A7:5C:C4 Authority key identifier: 36:EA:2A:BE:D8:90:8F:32:7F:86:E2:B0:AF:15:D4:83:10:49:CE:AA Certificate issuer: /CN=36ea2abed8908f327f86e2b0af15d4831049ceaa Certificate serial: 019AF38A0BDDA5A7DEB6694AF6848A1D1E24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NuoqvtiQjzJ_huKwrxXUgxBJzqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/NuoqvtiQjzJ_huKwrxXUgxBJzqo.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 12:01:41 +0000 Manifest this update: Sat 06 Dec 2025 12:01:41 +0000 Manifest next update: Sun 07 Dec 2025 12:01:41 +0000 Files and hashes: 1: NuoqvtiQjzJ_huKwrxXUgxBJzqo.crl (hash: p9afGlieAzajePUA1RbDT/LymG6OCXbVtzWqeGkFV80=) 2: jyQjff39PkjIcb2c4y6sicxo6PU.roa (hash: NTGQ8Vsi7SBxb0wiOjPR2Eb0JAGTh/a1kL30gt2n6ww=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/NuoqvtiQjzJ_huKwrxXUgxBJzqo.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/NuoqvtiQjzJ_huKwrxXUgxBJzqo.mft rsync://rpki.ripe.net/repository/DEFAULT/NuoqvtiQjzJ_huKwrxXUgxBJzqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:8a:0b:dd:a5:a7:de:b6:69:4a:f6:84:8a:1d:1e:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36ea2abed8908f327f86e2b0af15d4831049ceaa Validity Not Before: Dec 6 12:01:41 2025 GMT Not After : Dec 7 12:01:41 2025 GMT Subject: CN=e68b9ae00a9fcdbb5bbe129b165d5d5583a75cc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:a8:42:d5:d8:72:ac:9d:92:b3:76:76:65:4d: 93:a0:e9:72:13:3c:11:14:a4:89:ad:7a:81:f4:92: c5:4a:24:40:6e:79:bd:f3:46:c6:d3:fa:59:3e:8e: ec:cb:cf:02:bc:f9:c5:9e:18:14:eb:22:1a:df:5b: 49:0d:ce:86:ed:96:6c:6f:df:c0:37:66:33:0b:31: 73:7a:b1:3a:c4:7f:19:44:42:61:72:c7:fa:dc:c5: 8e:6a:c0:86:a7:c8:ac:0a:4f:df:22:4f:da:57:23: 31:b3:95:df:51:02:52:7b:db:be:71:31:9f:f0:a1: dd:40:bd:df:f8:6c:ec:9e:d5:13:44:d4:e5:26:91: 84:c8:ec:bd:24:66:bb:df:d1:76:a9:d0:39:8f:42: ad:9b:a7:99:42:5a:3c:a8:fe:1e:b6:50:a3:19:b5: e9:61:d7:be:13:79:bf:b3:b4:15:18:88:da:95:36: a6:4a:8f:0a:ec:f2:63:d6:8c:40:3a:72:0e:03:1a: 5b:81:0f:a6:81:6a:2b:c2:e4:ae:70:90:43:1a:ed: 68:e0:a4:c9:72:f2:97:a0:3a:52:a3:b3:93:bf:ae: 33:db:1e:9e:4b:e8:6a:87:39:90:54:f6:d6:0f:f9: fe:84:b6:b6:7e:29:ed:4f:d0:60:6b:a8:4a:ce:a9: e4:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:8B:9A:E0:0A:9F:CD:BB:5B:BE:12:9B:16:5D:5D:55:83:A7:5C:C4 X509v3 Authority Key Identifier: keyid:36:EA:2A:BE:D8:90:8F:32:7F:86:E2:B0:AF:15:D4:83:10:49:CE:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NuoqvtiQjzJ_huKwrxXUgxBJzqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/NuoqvtiQjzJ_huKwrxXUgxBJzqo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/NuoqvtiQjzJ_huKwrxXUgxBJzqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:ca:08:42:32:db:9a:57:2b:fe:bb:44:fd:75:87:a7:c0:f8: 64:0c:d0:8a:31:8f:7b:b3:4e:b7:50:3e:4d:cd:29:31:62:0a: 0b:55:ab:13:e8:6c:75:07:53:95:d8:89:ee:ba:82:b6:84:05: fa:ef:1b:55:99:fd:a7:60:4b:6b:51:27:25:d7:19:3e:2d:35: 7c:c5:98:1b:b5:2a:bb:be:cd:f2:5a:2b:df:3e:29:44:ca:44: bf:d1:50:6d:96:18:57:04:6d:de:ea:75:2b:a2:89:fe:9d:6c: 96:67:90:2c:9a:3c:08:72:70:91:ff:04:88:a1:ee:ef:0a:71: 57:2c:9a:1c:28:bf:83:6f:41:26:5c:2a:73:7e:f4:e2:b8:d9: 7e:5a:a7:bc:75:05:e9:ef:10:4a:6a:f9:a4:30:59:cd:d2:a3: a0:ca:26:eb:8d:e0:71:3e:9d:90:96:92:1d:5d:f4:51:af:30: 0b:8f:4c:bc:52:bf:17:2f:63:fd:24:9f:b8:43:a4:7e:49:bf: 93:a3:76:45:ff:ee:bf:45:a6:ee:ed:32:52:6e:00:5f:0c:6b: df:ba:e0:b2:52:9f:47:ba:26:9f:ce:2f:fa:53:11:1c:4f:d8: e1:91:38:a3:e4:6e:0a:f2:6d:1f:f5:3d:18:38:56:65:73:8a: da:da:e7:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzigvdpafetmlK9oSKHR4kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2ZWEyYWJlZDg5MDhmMzI3Zjg2ZTJiMGFmMTVkNDgzMTA0 OWNlYWEwHhcNMjUxMjA2MTIwMTQxWhcNMjUxMjA3MTIwMTQxWjAzMTEwLwYDVQQD EyhlNjhiOWFlMDBhOWZjZGJiNWJiZTEyOWIxNjVkNWQ1NTgzYTc1Y2M0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6hC1dhyrJ2Ss3Z2ZU2ToOlyEzwR FKSJrXqB9JLFSiRAbnm980bG0/pZPo7sy88CvPnFnhgU6yIa31tJDc6G7ZZsb9/A N2YzCzFzerE6xH8ZREJhcsf63MWOasCGp8isCk/fIk/aVyMxs5XfUQJSe9u+cTGf 8KHdQL3f+GzsntUTRNTlJpGEyOy9JGa739F2qdA5j0Ktm6eZQlo8qP4etlCjGbXp Yde+E3m/s7QVGIjalTamSo8K7PJj1oxAOnIOAxpbgQ+mgWorwuSucJBDGu1o4KTJ cvKXoDpSo7OTv64z2x6eS+hqhzmQVPbWD/n+hLa2fintT9Bga6hKzqnkRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOaLmuAKn827W74SmxZdXVWDp1zEMB8GA1UdIwQY MBaAFDbqKr7YkI8yf4bisK8V1IMQSc6qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnVvcXZ0aVFqekpfaHVLd3J4WFVneEJKenFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy8xMTQ2ZWMtMDNlZC00MDI1LThhYTYt N2E2MzU5MGEwNmJkLzEvTnVvcXZ0aVFqekpfaHVLd3J4WFVneEJKenFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy8xMTQ2ZWMtMDNlZC00MDI1LThhYTYtN2E2MzU5MGEwNmJk LzEvTnVvcXZ0aVFqekpfaHVLd3J4WFVneEJKenFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEcoIQjLb mlcr/rtE/XWHp8D4ZAzQijGPe7NOt1A+Tc0pMWIKC1WrE+hsdQdTldiJ7rqCtoQF +u8bVZn9p2BLa1EnJdcZPi01fMWYG7Uqu77N8lor3z4pRMpEv9FQbZYYVwRt3up1 K6KJ/p1slmeQLJo8CHJwkf8EiKHu7wpxVyyaHCi/g29BJlwqc3704rjZflqnvHUF 6e8QSmr5pDBZzdKjoMom643gcT6dkJaSHV30Ua8wC49MvFK/Fy9j/SSfuEOkfkm/ k6N2Rf/uv0Wm7u0yUm4AXwxr37rgslKfR7omn84v+lMRHE/Y4ZE4o+RuCvJtH/U9 GDhWZXOK2trnhw== -----END CERTIFICATE-----Generated at Sat Dec 6 22:28:29 2025 by rpki-client