This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/221fcd-61e5-4b45-a359-72f6ca757a08/1/NQtAztNuMfkF4abo4DxiHp-_yyk.mft File: NQtAztNuMfkF4abo4DxiHp-_yyk.mft (raw, json) Hash identifier: 48lRJMYenFoeiGfNVy2TAaTPwBMJz1mKnZVUyGQB86Q= Subject key identifier: 47:7B:8D:39:FA:09:4B:37:9E:5D:F3:73:18:51:C0:39:08:14:EA:AB Authority key identifier: 35:0B:40:CE:D3:6E:31:F9:05:E1:A6:E8:E0:3C:62:1E:9F:BF:CB:29 Certificate issuer: /CN=350b40ced36e31f905e1a6e8e03c621e9fbfcb29 Certificate serial: 019AF12E87D2C0F648FB46F9302D4BF41BAE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NQtAztNuMfkF4abo4DxiHp-_yyk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/221fcd-61e5-4b45-a359-72f6ca757a08/1/NQtAztNuMfkF4abo4DxiHp-_yyk.mft Manifest number: 149E Signing time: Sat 06 Dec 2025 01:02:29 +0000 Manifest this update: Sat 06 Dec 2025 01:02:29 +0000 Manifest next update: Sun 07 Dec 2025 01:02:29 +0000 Files and hashes: 1: NQtAztNuMfkF4abo4DxiHp-_yyk.crl (hash: xKaj30bsGsTBjb1w2pxrkKmR9t2gcH6gEzMWzz171CY=) 2: u7-gL9wSp2bGW7DIF24NVuhmOKc.roa (hash: tP75Wdne3vqUbGN0hrtXpkGNXdZlPHZwjnI3xiXFlak=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/221fcd-61e5-4b45-a359-72f6ca757a08/1/NQtAztNuMfkF4abo4DxiHp-_yyk.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/221fcd-61e5-4b45-a359-72f6ca757a08/1/NQtAztNuMfkF4abo4DxiHp-_yyk.mft rsync://rpki.ripe.net/repository/DEFAULT/NQtAztNuMfkF4abo4DxiHp-_yyk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:87:d2:c0:f6:48:fb:46:f9:30:2d:4b:f4:1b:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=350b40ced36e31f905e1a6e8e03c621e9fbfcb29 Validity Not Before: Dec 6 01:02:29 2025 GMT Not After : Dec 7 01:02:29 2025 GMT Subject: CN=477b8d39fa094b379e5df3731851c0390814eaab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:61:34:35:41:14:ca:e7:c4:11:04:4f:29:d2: 55:65:83:1b:aa:ae:48:bb:35:7f:25:12:21:19:36: 20:84:28:08:93:a5:62:4e:da:79:7d:c9:4d:04:ec: 3a:07:dd:0e:65:99:24:39:c4:ac:20:cd:a6:ad:a2: da:c3:3b:c4:e4:58:3b:92:97:f9:73:78:8c:0e:dd: 4a:36:66:57:ae:66:d7:18:ff:80:9d:41:69:4d:d0: 4c:f5:a6:c9:e6:f1:04:66:d8:38:35:66:1b:9f:c5: 3f:24:e3:46:bb:16:b9:e9:51:9e:6f:c7:42:6f:41: f6:75:2b:8b:0c:88:8d:22:5c:c3:2c:08:bf:b3:9e: e3:6c:e5:a7:f1:eb:45:fc:ae:21:39:38:16:4f:6a: 1d:47:20:32:4e:e9:7f:2c:1c:cb:92:ff:8d:de:73: cb:12:6e:67:37:43:93:3c:7e:11:71:26:20:bb:b5: 15:9c:fa:a6:fc:e5:d1:36:8b:d5:bc:d9:67:1b:05: 1b:5a:10:30:91:45:0b:eb:2b:38:cb:e7:e1:06:8c: e4:2e:7b:ec:3a:e3:5a:c5:1d:d3:b9:14:23:b6:7f: cc:ae:ea:80:ae:13:ae:f0:2e:90:b9:e0:df:b3:6c: a6:19:9a:e6:35:80:61:61:44:df:a9:84:f1:44:b2: e0:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:7B:8D:39:FA:09:4B:37:9E:5D:F3:73:18:51:C0:39:08:14:EA:AB X509v3 Authority Key Identifier: keyid:35:0B:40:CE:D3:6E:31:F9:05:E1:A6:E8:E0:3C:62:1E:9F:BF:CB:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NQtAztNuMfkF4abo4DxiHp-_yyk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/221fcd-61e5-4b45-a359-72f6ca757a08/1/NQtAztNuMfkF4abo4DxiHp-_yyk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/221fcd-61e5-4b45-a359-72f6ca757a08/1/NQtAztNuMfkF4abo4DxiHp-_yyk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:72:b4:36:26:23:55:9e:37:cb:12:44:ed:9a:d5:d0:cf:35: 23:88:f6:83:e9:7a:f4:a1:33:dd:38:d0:9d:84:d6:e8:51:8c: f0:54:a5:cc:bc:3d:65:4d:2e:f3:94:b8:41:48:f7:28:39:07: f3:e5:a6:9a:df:cb:24:35:94:7f:ac:c1:3f:04:a7:55:66:18: 9f:f4:09:32:d3:6a:e0:ba:1b:ba:27:fd:56:bc:88:9b:f0:fa: f3:60:b2:e7:18:4c:b3:8b:f3:74:a9:26:8e:7c:53:b6:63:a0: 85:80:d6:23:59:09:2c:2b:70:a4:de:2e:98:27:cf:4f:e8:59: 5f:69:37:92:66:51:dd:4b:df:9e:8f:d2:28:4b:a3:5f:59:c2: c7:8b:fe:0d:39:b0:08:84:9e:16:0f:03:58:5f:c1:82:57:0c: e4:7d:b6:08:8f:2d:15:7c:8b:42:b8:ef:7d:06:3c:4d:4d:21: d4:82:66:cc:48:12:57:f1:ef:4f:7e:36:63:05:04:4c:b3:3b: 7a:1d:cc:2c:14:2a:cc:d5:ee:e5:6e:e2:5a:f9:41:b1:d8:10: 67:d2:3c:b6:1b:51:8f:8a:df:24:56:95:b9:b1:6e:c3:42:3a: 93:c9:60:12:ba:9a:be:4c:aa:94:c9:1d:65:c4:4f:e6:ae:e7: 62:62:8f:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLofSwPZI+0b5MC1L9BuuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MGI0MGNlZDM2ZTMxZjkwNWUxYTZlOGUwM2M2MjFlOWZi ZmNiMjkwHhcNMjUxMjA2MDEwMjI5WhcNMjUxMjA3MDEwMjI5WjAzMTEwLwYDVQQD Eyg0NzdiOGQzOWZhMDk0YjM3OWU1ZGYzNzMxODUxYzAzOTA4MTRlYWFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmE0NUEUyufEEQRPKdJVZYMbqq5I uzV/JRIhGTYghCgIk6ViTtp5fclNBOw6B90OZZkkOcSsIM2mraLawzvE5Fg7kpf5 c3iMDt1KNmZXrmbXGP+AnUFpTdBM9abJ5vEEZtg4NWYbn8U/JONGuxa56VGeb8dC b0H2dSuLDIiNIlzDLAi/s57jbOWn8etF/K4hOTgWT2odRyAyTul/LBzLkv+N3nPL Em5nN0OTPH4RcSYgu7UVnPqm/OXRNovVvNlnGwUbWhAwkUUL6ys4y+fhBozkLnvs OuNaxR3TuRQjtn/MruqArhOu8C6QueDfs2ymGZrmNYBhYUTfqYTxRLLglQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEd7jTn6CUs3nl3zcxhRwDkIFOqrMB8GA1UdIwQY MBaAFDULQM7TbjH5BeGm6OA8Yh6fv8spMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlF0QXp0TnVNZmtGNGFibzREeGlIcC1feXlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS8yMjFmY2QtNjFlNS00YjQ1LWEzNTkt NzJmNmNhNzU3YTA4LzEvTlF0QXp0TnVNZmtGNGFibzREeGlIcC1feXlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS8yMjFmY2QtNjFlNS00YjQ1LWEzNTktNzJmNmNhNzU3YTA4 LzEvTlF0QXp0TnVNZmtGNGFibzREeGlIcC1feXlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp3K0NiYj VZ43yxJE7ZrV0M81I4j2g+l69KEz3TjQnYTW6FGM8FSlzLw9ZU0u85S4QUj3KDkH 8+Wmmt/LJDWUf6zBPwSnVWYYn/QJMtNq4Lobuif9VryIm/D682Cy5xhMs4vzdKkm jnxTtmOghYDWI1kJLCtwpN4umCfPT+hZX2k3kmZR3Uvfno/SKEujX1nCx4v+DTmw CISeFg8DWF/BglcM5H22CI8tFXyLQrjvfQY8TU0h1IJmzEgSV/HvT342YwUETLM7 eh3MLBQqzNXu5W7iWvlBsdgQZ9I8thtRj4rfJFaVubFuw0I6k8lgErqavkyqlMkd ZcRP5q7nYmKPAg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:07:49 2025 by rpki-client