This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/cb9493-e834-4f0e-8abb-1a92fb0dc1c7/1/nqeCd0gM8trWyesKUr5I33q2Z1o.mft File: nqeCd0gM8trWyesKUr5I33q2Z1o.mft (raw, json) Hash identifier: yU+lm4eChKieVQfkX/oYSOlw308fB5ZDRhtnx5Zkmfw= Subject key identifier: 5D:67:B4:EA:98:5E:EB:38:E0:64:45:4C:52:20:E0:AC:14:30:8C:C3 Authority key identifier: 9E:A7:82:77:48:0C:F2:DA:D6:C9:EB:0A:52:BE:48:DF:7A:B6:67:5A Certificate issuer: /CN=9ea78277480cf2dad6c9eb0a52be48df7ab6675a Certificate serial: 019AF509AE865A935D8CB49801C7589C8EB4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nqeCd0gM8trWyesKUr5I33q2Z1o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/cb9493-e834-4f0e-8abb-1a92fb0dc1c7/1/nqeCd0gM8trWyesKUr5I33q2Z1o.mft Manifest number: 1067 Signing time: Sat 06 Dec 2025 19:00:43 +0000 Manifest this update: Sat 06 Dec 2025 19:00:43 +0000 Manifest next update: Sun 07 Dec 2025 19:00:43 +0000 Files and hashes: 1: iSQJ7oUwp5EtejUI-66sGk-h7cQ.roa (hash: mpF7huYV9n/9/29y0+6CrRWd+U+y7E7ycfKNR3SN4Do=) 2: nqeCd0gM8trWyesKUr5I33q2Z1o.crl (hash: Y3+GQ3mS+OuanP5RjbsLCYowT1A0g0KvdPh2+31/PUM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/cb9493-e834-4f0e-8abb-1a92fb0dc1c7/1/nqeCd0gM8trWyesKUr5I33q2Z1o.crl rsync://rpki.ripe.net/repository/DEFAULT/97/cb9493-e834-4f0e-8abb-1a92fb0dc1c7/1/nqeCd0gM8trWyesKUr5I33q2Z1o.mft rsync://rpki.ripe.net/repository/DEFAULT/nqeCd0gM8trWyesKUr5I33q2Z1o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:ae:86:5a:93:5d:8c:b4:98:01:c7:58:9c:8e:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ea78277480cf2dad6c9eb0a52be48df7ab6675a Validity Not Before: Dec 6 19:00:43 2025 GMT Not After : Dec 7 19:00:43 2025 GMT Subject: CN=5d67b4ea985eeb38e064454c5220e0ac14308cc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:60:19:58:f9:dc:0e:e5:cd:59:a6:d0:be:d8: a5:e0:cb:a2:e6:88:4f:3e:0d:a5:7a:0f:53:95:56: 86:3f:e5:69:72:9d:84:95:77:0f:4c:cc:06:5c:b5: 5d:2a:61:17:2a:f5:b4:79:28:11:98:18:4b:ac:48: bd:ca:00:06:b6:73:65:20:25:f2:c0:1c:4f:26:c3: 8e:10:6e:d5:e6:94:18:97:79:6e:8d:39:ab:1b:86: 1d:10:55:e4:5f:89:b3:96:f2:85:fe:56:2f:d3:84: 2f:45:cf:c2:1d:27:1f:a7:b7:49:96:99:e4:a6:b7: 64:85:5c:52:d3:b4:a5:46:8c:e6:25:43:2a:73:29: 24:48:4c:8f:89:11:2b:89:00:ff:87:c6:2f:92:3f: 63:75:8d:e0:7c:ec:12:31:88:40:c3:92:b8:85:95: 7e:50:48:54:61:dd:8b:b7:e8:89:a1:02:98:20:cd: 6d:42:bf:0a:56:6a:41:be:d6:c1:c8:55:89:09:00: 2a:e7:09:47:b3:30:65:1c:fd:04:7b:ee:a1:85:bf: c0:ef:63:44:40:99:10:65:6e:22:60:39:ff:be:f6: 76:4e:4a:61:e8:d3:f5:db:40:b7:bd:58:3b:71:ee: f5:88:fe:02:53:79:95:1d:2a:51:94:72:06:4a:bf: 7d:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:67:B4:EA:98:5E:EB:38:E0:64:45:4C:52:20:E0:AC:14:30:8C:C3 X509v3 Authority Key Identifier: keyid:9E:A7:82:77:48:0C:F2:DA:D6:C9:EB:0A:52:BE:48:DF:7A:B6:67:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nqeCd0gM8trWyesKUr5I33q2Z1o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/cb9493-e834-4f0e-8abb-1a92fb0dc1c7/1/nqeCd0gM8trWyesKUr5I33q2Z1o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/cb9493-e834-4f0e-8abb-1a92fb0dc1c7/1/nqeCd0gM8trWyesKUr5I33q2Z1o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:73:54:44:15:64:76:62:02:ff:00:d4:c4:b5:8e:42:0a:09: a3:98:dc:53:7d:32:51:1b:d5:6b:f1:b9:31:5b:76:48:d5:03: 21:ca:38:71:01:e1:6f:b6:e0:3a:63:b4:e7:73:a4:89:fb:eb: 93:ea:85:1d:1d:dd:d3:c6:8e:b2:cd:35:e4:eb:54:fb:82:63: 38:2c:b3:d5:58:5c:56:9b:5a:ff:c5:9c:3c:6b:75:71:df:65: 04:55:71:f5:9a:72:48:bb:a4:da:8b:24:03:e5:c9:e4:96:62: 92:4a:4f:d4:0f:36:6a:f9:46:67:fb:d0:1e:f6:6c:99:a0:44: 5e:11:23:bf:b8:e9:2c:15:9d:13:8a:4e:fa:2a:95:85:d9:45: 00:d0:0c:d2:21:d8:c6:16:d0:13:12:f3:48:c1:2d:9d:cf:7f: 8e:0f:a7:da:69:a1:c6:17:5b:76:e3:47:18:56:3e:8a:da:7b: 01:69:36:96:52:0e:c2:0c:cc:c8:05:d2:2c:87:9a:66:c5:63: 07:07:45:fc:42:97:8d:73:c4:49:2a:f7:05:cb:ee:51:41:35: 57:70:23:01:14:73:24:5d:b3:44:3a:fb:f6:ee:83:ca:cb:e0: c1:30:8f:d8:c7:7e:fe:4b:bc:9d:db:6b:dc:5b:5c:27:1f:45: 1f:ee:1b:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Ca6GWpNdjLSYAcdYnI60MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllYTc4Mjc3NDgwY2YyZGFkNmM5ZWIwYTUyYmU0OGRmN2Fi NjY3NWEwHhcNMjUxMjA2MTkwMDQzWhcNMjUxMjA3MTkwMDQzWjAzMTEwLwYDVQQD Eyg1ZDY3YjRlYTk4NWVlYjM4ZTA2NDQ1NGM1MjIwZTBhYzE0MzA4Y2MzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7WAZWPncDuXNWabQvtil4Mui5ohP Pg2leg9TlVaGP+Vpcp2ElXcPTMwGXLVdKmEXKvW0eSgRmBhLrEi9ygAGtnNlICXy wBxPJsOOEG7V5pQYl3lujTmrG4YdEFXkX4mzlvKF/lYv04QvRc/CHScfp7dJlpnk prdkhVxS07SlRozmJUMqcykkSEyPiREriQD/h8Yvkj9jdY3gfOwSMYhAw5K4hZV+ UEhUYd2Lt+iJoQKYIM1tQr8KVmpBvtbByFWJCQAq5wlHszBlHP0Ee+6hhb/A72NE QJkQZW4iYDn/vvZ2Tkph6NP120C3vVg7ce71iP4CU3mVHSpRlHIGSr99DwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF1ntOqYXus44GRFTFIg4KwUMIzDMB8GA1UdIwQY MBaAFJ6ngndIDPLa1snrClK+SN96tmdaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnFlQ2QwZ004dHJXeWVzS1VyNUkzM3EyWjFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9jYjk0OTMtZTgzNC00ZjBlLThhYmIt MWE5MmZiMGRjMWM3LzEvbnFlQ2QwZ004dHJXeWVzS1VyNUkzM3EyWjFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny9jYjk0OTMtZTgzNC00ZjBlLThhYmItMWE5MmZiMGRjMWM3 LzEvbnFlQ2QwZ004dHJXeWVzS1VyNUkzM3EyWjFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAinNURBVk dmIC/wDUxLWOQgoJo5jcU30yURvVa/G5MVt2SNUDIco4cQHhb7bgOmO053Okifvr k+qFHR3d08aOss015OtU+4JjOCyz1VhcVpta/8WcPGt1cd9lBFVx9ZpySLuk2osk A+XJ5JZikkpP1A82avlGZ/vQHvZsmaBEXhEjv7jpLBWdE4pO+iqVhdlFANAM0iHY xhbQExLzSMEtnc9/jg+n2mmhxhdbduNHGFY+itp7AWk2llIOwgzMyAXSLIeaZsVj BwdF/EKXjXPESSr3BcvuUUE1V3AjARRzJF2zRDr79u6DysvgwTCP2Md+/ku8ndtr 3FtcJx9FH+4b7Q== -----END CERTIFICATE-----Generated at Sat Dec 6 21:55:27 2025 by rpki-client