This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft File: nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft (raw, json) Hash identifier: tPv6Rj1aFnCS1UZOKMeRPdApNdfyn+C+DYQoG4WwZiA= Subject key identifier: 5F:3B:0F:95:F9:FA:3A:08:1C:A5:B8:97:F2:A6:39:1F:B4:C2:D1:A3 Authority key identifier: 9E:74:0C:D3:B6:6B:60:E1:8B:3D:96:FF:B3:F4:21:8D:79:B5:B7:70 Certificate issuer: /CN=9e740cd3b66b60e18b3d96ffb3f4218d79b5b770 Certificate serial: 019AF577D68D722C0B9F857DDA92AADD7A13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nnQM07ZrYOGLPZb_s_QhjXm1t3A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft Manifest number: 16F5 Signing time: Sat 06 Dec 2025 21:01:02 +0000 Manifest this update: Sat 06 Dec 2025 21:01:02 +0000 Manifest next update: Sun 07 Dec 2025 21:01:02 +0000 Files and hashes: 1: P4xtR7feyaz6xolJASFQCzKsZ5I.roa (hash: 8akLt+kVG21bECUmJhi7RKtZ33RFaJwb4cW+qtXYRks=) 2: nnQM07ZrYOGLPZb_s_QhjXm1t3A.crl (hash: bn5DiwG0SxeoVbiep94W2oHP9JmySHRKJlJxy2RXH/g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft rsync://rpki.ripe.net/repository/DEFAULT/nnQM07ZrYOGLPZb_s_QhjXm1t3A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:77:d6:8d:72:2c:0b:9f:85:7d:da:92:aa:dd:7a:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e740cd3b66b60e18b3d96ffb3f4218d79b5b770 Validity Not Before: Dec 6 21:01:02 2025 GMT Not After : Dec 7 21:01:02 2025 GMT Subject: CN=5f3b0f95f9fa3a081ca5b897f2a6391fb4c2d1a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c5:39:9f:21:cb:7f:4e:12:19:e3:16:74:34: 63:46:c0:e7:6c:06:13:59:ca:51:84:ed:d4:9d:6f: d4:51:4d:46:ba:6f:7a:a6:c0:b1:1d:70:2a:e0:78: 93:78:23:0f:1f:2f:46:75:99:e5:5c:7d:55:42:ba: c0:94:58:a8:7d:28:5a:b0:72:13:90:26:02:6b:4c: e1:7c:bb:b1:aa:7b:73:bd:71:51:c6:cd:8c:6b:d2: 15:61:8b:8a:c5:60:ae:72:c3:a9:97:4d:b2:78:e6: df:41:48:37:92:54:52:9f:1d:0b:bd:78:04:70:24: ab:7d:4e:58:7f:02:8b:0c:07:32:70:bd:ab:22:2c: 41:3e:99:de:94:5d:1e:45:5b:6c:48:0e:97:a7:d4: 3b:1b:ec:b1:27:e1:3c:7e:ac:64:76:a2:f1:0b:5d: 36:ad:a7:9d:a7:0b:f4:e9:51:fc:69:e7:fa:9b:cd: df:b0:5d:01:d6:64:38:3f:09:66:cb:b0:2f:1d:f8: 97:48:a8:17:80:95:16:3c:4e:67:2a:90:9b:87:af: 81:f4:8c:9c:d6:8f:b7:2e:a3:bf:c6:dd:99:fc:04: 50:16:41:dd:3b:b1:2e:09:da:f8:9d:da:da:33:41: 79:31:96:f4:9d:71:c0:d7:7f:65:7e:20:2a:66:f8: 61:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:3B:0F:95:F9:FA:3A:08:1C:A5:B8:97:F2:A6:39:1F:B4:C2:D1:A3 X509v3 Authority Key Identifier: keyid:9E:74:0C:D3:B6:6B:60:E1:8B:3D:96:FF:B3:F4:21:8D:79:B5:B7:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nnQM07ZrYOGLPZb_s_QhjXm1t3A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:1c:1b:73:24:b9:f3:28:4c:e2:b1:98:a4:b3:1b:0d:43:86: 64:0e:4a:a3:9d:b4:7f:e2:03:80:ee:16:bb:d0:e5:a8:d8:e9: f8:91:92:de:8c:9f:56:94:15:26:8f:ce:25:bb:6b:58:f2:fe: 37:bf:c4:4d:34:4f:f8:36:46:35:8f:3d:14:04:41:63:80:a2: 71:82:f0:e6:22:56:a7:aa:12:ee:97:f3:67:10:e4:18:be:8b: d9:af:a9:56:cf:2b:bd:63:a9:56:52:7a:ab:f2:74:fe:24:c8: 1a:ed:96:b1:42:8c:4f:f4:c5:b4:e1:7e:c0:ac:c4:bd:c7:7d: f4:49:7b:f5:c8:22:ff:0d:73:5d:36:f5:06:e8:b7:a7:d4:81: 57:ef:d7:23:de:3c:53:18:dd:ca:98:35:30:aa:ed:5c:2e:17: 0c:f6:ef:58:63:ea:b3:e0:0c:54:04:42:5f:c2:cf:2c:58:a5: 53:28:1b:1c:07:67:5b:3d:df:c9:4c:dd:c1:ba:80:fa:f4:28: f7:0d:c4:f4:4b:a2:c0:74:b7:b2:a2:d7:da:1a:36:e6:f5:f4: 39:1f:3c:78:70:b8:16:c3:65:a4:c7:27:e9:b4:f8:6a:e9:11: 87:1b:b0:2d:22:41:87:34:52:92:55:9e:b4:aa:ed:f0:8d:86: a7:0f:46:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1d9aNciwLn4V92pKq3XoTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNzQwY2QzYjY2YjYwZTE4YjNkOTZmZmIzZjQyMThkNzli NWI3NzAwHhcNMjUxMjA2MjEwMTAyWhcNMjUxMjA3MjEwMTAyWjAzMTEwLwYDVQQD Eyg1ZjNiMGY5NWY5ZmEzYTA4MWNhNWI4OTdmMmE2MzkxZmI0YzJkMWEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8U5nyHLf04SGeMWdDRjRsDnbAYT WcpRhO3UnW/UUU1Gum96psCxHXAq4HiTeCMPHy9GdZnlXH1VQrrAlFiofShasHIT kCYCa0zhfLuxqntzvXFRxs2Ma9IVYYuKxWCucsOpl02yeObfQUg3klRSnx0LvXgE cCSrfU5YfwKLDAcycL2rIixBPpnelF0eRVtsSA6Xp9Q7G+yxJ+E8fqxkdqLxC102 raedpwv06VH8aef6m83fsF0B1mQ4Pwlmy7AvHfiXSKgXgJUWPE5nKpCbh6+B9Iyc 1o+3LqO/xt2Z/ARQFkHdO7EuCdr4ndraM0F5MZb0nXHA139lfiAqZvhhdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF87D5X5+joIHKW4l/KmOR+0wtGjMB8GA1UdIwQY MBaAFJ50DNO2a2Dhiz2W/7P0IY15tbdwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbm5RTTA3WnJZT0dMUFpiX3NfUWhqWG0xdDNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8xZGU2MTMtNjFiOS00YjA3LWFkNDct NTBlNGIwNTA0ZjQ4LzEvbm5RTTA3WnJZT0dMUFpiX3NfUWhqWG0xdDNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC8xZGU2MTMtNjFiOS00YjA3LWFkNDctNTBlNGIwNTA0ZjQ4 LzEvbm5RTTA3WnJZT0dMUFpiX3NfUWhqWG0xdDNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGhwbcyS5 8yhM4rGYpLMbDUOGZA5Ko520f+IDgO4Wu9DlqNjp+JGS3oyfVpQVJo/OJbtrWPL+ N7/ETTRP+DZGNY89FARBY4CicYLw5iJWp6oS7pfzZxDkGL6L2a+pVs8rvWOpVlJ6 q/J0/iTIGu2WsUKMT/TFtOF+wKzEvcd99El79cgi/w1zXTb1Bui3p9SBV+/XI948 Uxjdypg1MKrtXC4XDPbvWGPqs+AMVARCX8LPLFilUygbHAdnWz3fyUzdwbqA+vQo 9w3E9EuiwHS3sqLX2ho25vX0OR88eHC4FsNlpMcn6bT4aukRhxuwLSJBhzRSklWe tKrt8I2Gpw9Gkw== -----END CERTIFICATE-----Generated at Sun Dec 7 00:28:41 2025 by rpki-client