This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/2d6237-e584-4bef-9c35-7ef24099db85/1/NqMuFKL_7OVnnz7RF8MP93tFsPQ.mft File: NqMuFKL_7OVnnz7RF8MP93tFsPQ.mft (raw, json) Hash identifier: ty1zGrhM7CSUlK8l8cP6T4fHvxARezyZkr8oKk2qUa8= Subject key identifier: F5:33:34:A4:9C:38:CE:8A:52:1A:10:EA:C2:CD:75:61:B9:0F:46:21 Authority key identifier: 36:A3:2E:14:A2:FF:EC:E5:67:9F:3E:D1:17:C3:0F:F7:7B:45:B0:F4 Certificate issuer: /CN=36a32e14a2ffece5679f3ed117c30ff77b45b0f4 Certificate serial: 019AF1D20DF23BB3449688A69685BD1F155D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NqMuFKL_7OVnnz7RF8MP93tFsPQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/2d6237-e584-4bef-9c35-7ef24099db85/1/NqMuFKL_7OVnnz7RF8MP93tFsPQ.mft Manifest number: 099D Signing time: Sat 06 Dec 2025 04:01:06 +0000 Manifest this update: Sat 06 Dec 2025 04:01:06 +0000 Manifest next update: Sun 07 Dec 2025 04:01:06 +0000 Files and hashes: 1: I4q92VajZXPlw9QYtmNI4uQ6GtM.roa (hash: 1MIUh7t1a8Oi5v6mo6yeYyqi8+Xbxa0dw1T/gUvyI5M=) 2: NqMuFKL_7OVnnz7RF8MP93tFsPQ.crl (hash: DiYB7XLi8ELF+5J/l1aVbvCoAfZe/OmcYsEi0Oxu450=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/2d6237-e584-4bef-9c35-7ef24099db85/1/NqMuFKL_7OVnnz7RF8MP93tFsPQ.crl rsync://rpki.ripe.net/repository/DEFAULT/91/2d6237-e584-4bef-9c35-7ef24099db85/1/NqMuFKL_7OVnnz7RF8MP93tFsPQ.mft rsync://rpki.ripe.net/repository/DEFAULT/NqMuFKL_7OVnnz7RF8MP93tFsPQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:0d:f2:3b:b3:44:96:88:a6:96:85:bd:1f:15:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36a32e14a2ffece5679f3ed117c30ff77b45b0f4 Validity Not Before: Dec 6 04:01:06 2025 GMT Not After : Dec 7 04:01:06 2025 GMT Subject: CN=f53334a49c38ce8a521a10eac2cd7561b90f4621 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:5d:0f:98:14:57:1c:1d:6d:0a:34:a7:5b:35: f8:cc:fb:41:cb:7d:34:f7:f0:34:65:ae:d1:c3:4b: 72:4b:63:a9:4d:44:05:3e:b3:a5:4f:92:71:cd:39: bb:31:63:7d:84:e2:93:d4:7c:e5:c0:2e:c1:9f:dd: 5f:ae:f7:ea:70:4c:e3:42:86:60:e5:34:9d:d2:6b: 8e:3a:6d:47:4e:0b:32:08:f8:2f:a8:7e:cf:87:2e: cf:89:a9:db:84:91:1d:47:c3:3b:e4:bf:0c:e6:1e: bb:b0:36:e4:c6:6c:db:d1:82:d4:e0:50:75:d9:89: 1a:77:51:f0:ee:73:4d:af:e0:a1:39:88:3d:d0:4a: 03:33:65:d5:11:c2:bc:cc:d3:dd:ae:a7:ae:98:47: 19:6c:78:ca:4d:21:aa:94:66:8a:52:b6:2c:dc:5b: be:b0:d7:fc:9b:22:5f:84:dd:4f:9c:1f:94:23:b9: 21:3e:4a:cd:21:29:ef:6e:f7:9b:3c:18:b9:c4:cc: 6e:c5:31:f8:ab:13:eb:92:fc:eb:31:b2:99:b0:65: 08:f6:42:c4:d1:8d:6d:5d:da:6d:a1:5c:a1:c3:6b: 36:61:5c:7b:a2:25:a7:5c:8e:68:e7:70:bf:dc:3a: 42:2e:6e:04:2b:16:71:7c:d8:05:fc:a0:2b:da:3f: 9d:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:33:34:A4:9C:38:CE:8A:52:1A:10:EA:C2:CD:75:61:B9:0F:46:21 X509v3 Authority Key Identifier: keyid:36:A3:2E:14:A2:FF:EC:E5:67:9F:3E:D1:17:C3:0F:F7:7B:45:B0:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NqMuFKL_7OVnnz7RF8MP93tFsPQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/2d6237-e584-4bef-9c35-7ef24099db85/1/NqMuFKL_7OVnnz7RF8MP93tFsPQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/2d6237-e584-4bef-9c35-7ef24099db85/1/NqMuFKL_7OVnnz7RF8MP93tFsPQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:93:72:a4:b2:4f:92:72:45:be:1d:98:e8:54:94:5d:4a:8d: 0c:85:04:3f:4e:cd:bd:84:4f:0d:3b:94:74:20:c8:7d:43:c2: e5:bb:e4:43:d3:6f:e3:4e:e3:fc:4d:b6:1e:60:d8:4d:6f:f4: 85:bf:a7:ff:4c:65:8f:82:48:46:b8:ca:ea:e2:87:67:b3:e3: 64:77:8d:13:2b:69:4c:92:42:5f:ff:10:1c:d1:e1:67:1a:25: e8:d7:2c:f1:e7:a8:b6:ae:55:2b:c6:56:e5:ab:cd:5d:10:50: 18:ae:c5:61:37:0b:b4:28:81:90:36:dc:02:3a:fe:78:67:49: 82:b5:96:77:32:ed:cb:be:30:ca:69:71:31:70:0a:3e:dd:4e: 13:55:52:2d:4a:ea:9a:79:3d:9d:2f:67:c4:e0:6b:4a:e7:c6: ad:a3:d1:0d:2d:a6:f8:d9:e6:88:ea:d5:08:be:cf:f5:f0:f3: 7a:ca:37:a0:3e:f3:7b:de:2e:14:ae:76:05:9d:6b:bb:8f:f6: ad:62:e7:86:60:7e:83:22:09:d6:54:1e:17:86:c6:5c:44:2c: 72:d5:76:8a:2f:92:ec:f4:63:06:f1:d8:2e:a9:fd:74:85:36: 4b:82:f8:5a:6f:c1:57:9b:f6:fd:4e:b6:da:c4:78:e0:99:1b: 30:6e:3c:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0g3yO7NEloimloW9HxVdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YTMyZTE0YTJmZmVjZTU2NzlmM2VkMTE3YzMwZmY3N2I0 NWIwZjQwHhcNMjUxMjA2MDQwMTA2WhcNMjUxMjA3MDQwMTA2WjAzMTEwLwYDVQQD EyhmNTMzMzRhNDljMzhjZThhNTIxYTEwZWFjMmNkNzU2MWI5MGY0NjIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjF0PmBRXHB1tCjSnWzX4zPtBy300 9/A0Za7Rw0tyS2OpTUQFPrOlT5JxzTm7MWN9hOKT1HzlwC7Bn91frvfqcEzjQoZg 5TSd0muOOm1HTgsyCPgvqH7Phy7PianbhJEdR8M75L8M5h67sDbkxmzb0YLU4FB1 2Ykad1Hw7nNNr+ChOYg90EoDM2XVEcK8zNPdrqeumEcZbHjKTSGqlGaKUrYs3Fu+ sNf8myJfhN1PnB+UI7khPkrNISnvbvebPBi5xMxuxTH4qxPrkvzrMbKZsGUI9kLE 0Y1tXdptoVyhw2s2YVx7oiWnXI5o53C/3DpCLm4EKxZxfNgF/KAr2j+dmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPUzNKScOM6KUhoQ6sLNdWG5D0YhMB8GA1UdIwQY MBaAFDajLhSi/+zlZ58+0RfDD/d7RbD0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnFNdUZLTF83T1Zubno3UkY4TVA5M3RGc1BRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS8yZDYyMzctZTU4NC00YmVmLTljMzUt N2VmMjQwOTlkYjg1LzEvTnFNdUZLTF83T1Zubno3UkY4TVA5M3RGc1BRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS8yZDYyMzctZTU4NC00YmVmLTljMzUtN2VmMjQwOTlkYjg1 LzEvTnFNdUZLTF83T1Zubno3UkY4TVA5M3RGc1BRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjZNypLJP knJFvh2Y6FSUXUqNDIUEP07NvYRPDTuUdCDIfUPC5bvkQ9Nv407j/E22HmDYTW/0 hb+n/0xlj4JIRrjK6uKHZ7PjZHeNEytpTJJCX/8QHNHhZxol6Ncs8eeotq5VK8ZW 5avNXRBQGK7FYTcLtCiBkDbcAjr+eGdJgrWWdzLty74wymlxMXAKPt1OE1VSLUrq mnk9nS9nxOBrSufGraPRDS2m+NnmiOrVCL7P9fDzeso3oD7ze94uFK52BZ1ru4/2 rWLnhmB+gyIJ1lQeF4bGXEQsctV2ii+S7PRjBvHYLqn9dIU2S4L4Wm/BV5v2/U62 2sR44JkbMG48/g== -----END CERTIFICATE-----Generated at Sat Dec 6 10:33:06 2025 by rpki-client