This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft File: nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft (raw, json) Hash identifier: 6Z8Zw4TCdPegsKRkN5vRBpTNZX8LtDptmS8sNhx1St0= Subject key identifier: 1C:AA:EA:76:BA:6A:2D:38:C9:36:A2:34:DD:71:FF:8E:B1:F1:9E:2C Authority key identifier: 9E:74:0C:D3:B6:6B:60:E1:8B:3D:96:FF:B3:F4:21:8D:79:B5:B7:70 Certificate issuer: /CN=9e740cd3b66b60e18b3d96ffb3f4218d79b5b770 Certificate serial: 019B2F673BB36305466E1DAF7B96C3CDA08E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nnQM07ZrYOGLPZb_s_QhjXm1t3A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft Manifest number: 1713 Signing time: Thu 18 Dec 2025 03:00:53 +0000 Manifest this update: Thu 18 Dec 2025 03:00:53 +0000 Manifest next update: Fri 19 Dec 2025 03:00:53 +0000 Files and hashes: 1: P4xtR7feyaz6xolJASFQCzKsZ5I.roa (hash: 8akLt+kVG21bECUmJhi7RKtZ33RFaJwb4cW+qtXYRks=) 2: nnQM07ZrYOGLPZb_s_QhjXm1t3A.crl (hash: DmZs577DHDVazvPytAvLRapMbWyGQFjEPg9Cuvsc1n0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft rsync://rpki.ripe.net/repository/DEFAULT/nnQM07ZrYOGLPZb_s_QhjXm1t3A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:67:3b:b3:63:05:46:6e:1d:af:7b:96:c3:cd:a0:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e740cd3b66b60e18b3d96ffb3f4218d79b5b770 Validity Not Before: Dec 18 03:00:53 2025 GMT Not After : Dec 19 03:00:53 2025 GMT Subject: CN=1caaea76ba6a2d38c936a234dd71ff8eb1f19e2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:ea:cd:13:e0:78:53:98:20:c4:00:02:73:c3: 5d:16:2b:42:24:e5:f4:d4:d9:1c:10:71:dd:ee:08: 28:8e:20:8e:d8:c5:2c:bc:d8:46:20:dc:36:c7:c1: f0:c7:4f:5a:82:97:ed:d9:db:c1:06:de:61:99:89: 59:e5:1b:cf:79:ac:fe:c1:ee:a1:84:8d:40:dc:9d: dc:d5:97:97:ab:13:bd:c6:d7:be:5f:5e:90:c4:e3: a0:3d:85:78:5a:80:64:cc:49:62:32:78:b8:90:90: 6d:bc:68:5a:f9:47:2e:dc:d5:57:33:b8:15:fd:27: be:7b:ac:c5:81:e5:a2:09:c2:70:14:a9:f1:70:94: b5:c2:e4:48:ba:74:81:e5:2c:5b:4f:33:52:2f:0a: 16:4f:0b:83:d9:2c:ce:ac:68:dc:11:dc:82:47:90: 10:b2:4a:fd:eb:d4:cc:b3:c5:6a:55:83:25:3e:72: 98:5d:bf:66:e0:f2:78:6b:ce:e8:22:41:73:f8:2f: 10:2b:5a:4d:45:ae:78:d0:8c:1d:68:0c:fb:15:3e: 67:1b:3e:31:85:24:b5:fe:13:4f:a8:c5:89:48:10: ea:23:76:b7:8f:d3:4e:2b:4d:78:b3:d8:8a:36:cf: 18:bb:8d:f3:bb:08:b1:9a:84:42:e2:72:0c:81:9b: e8:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:AA:EA:76:BA:6A:2D:38:C9:36:A2:34:DD:71:FF:8E:B1:F1:9E:2C X509v3 Authority Key Identifier: keyid:9E:74:0C:D3:B6:6B:60:E1:8B:3D:96:FF:B3:F4:21:8D:79:B5:B7:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nnQM07ZrYOGLPZb_s_QhjXm1t3A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:a2:df:83:96:24:a3:ed:56:f0:67:3a:07:43:bb:bb:68:1c: 24:a0:c6:a4:7a:b8:24:c9:84:04:97:2f:b8:b7:c6:4d:fc:32: 07:08:dd:9c:8f:23:6f:07:84:54:48:d9:65:90:1b:6a:0b:b0: 78:73:e8:7d:a7:d2:d7:d6:d5:3a:8c:02:48:a1:d4:60:67:03: dd:c3:40:6f:54:ee:a1:83:f2:02:d3:92:65:fe:0e:8a:c3:9f: 1a:a8:0a:fb:b1:79:32:63:08:9e:d9:07:e0:af:24:04:ce:61: 4f:10:95:f6:cc:5f:23:ae:9d:43:af:8c:56:f8:ce:bd:94:25: b8:30:59:82:31:df:09:3f:73:af:60:33:0a:cd:8f:98:4a:8b: e8:91:cd:f1:95:f6:30:51:b0:34:03:21:96:93:08:10:54:6c: 9d:d3:13:0e:db:cb:fb:86:52:c2:8a:13:38:b0:80:c3:ba:b4: c6:9c:4a:67:8b:6c:dd:0a:27:4a:46:31:cb:34:a6:50:4c:67: cf:a6:51:3a:f2:ba:12:3c:18:44:d0:5d:d6:39:b1:63:e8:3c: dd:39:6b:e0:3d:22:2a:5a:39:f3:42:ed:57:d9:ff:9a:f5:e8: b0:31:1e:b9:a7:98:7b:85:c9:9c:d6:7d:7b:13:f2:2d:12:48: da:99:97:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvZzuzYwVGbh2ve5bDzaCOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNzQwY2QzYjY2YjYwZTE4YjNkOTZmZmIzZjQyMThkNzli NWI3NzAwHhcNMjUxMjE4MDMwMDUzWhcNMjUxMjE5MDMwMDUzWjAzMTEwLwYDVQQD EygxY2FhZWE3NmJhNmEyZDM4YzkzNmEyMzRkZDcxZmY4ZWIxZjE5ZTJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4OrNE+B4U5ggxAACc8NdFitCJOX0 1NkcEHHd7ggojiCO2MUsvNhGINw2x8Hwx09agpft2dvBBt5hmYlZ5RvPeaz+we6h hI1A3J3c1ZeXqxO9xte+X16QxOOgPYV4WoBkzEliMni4kJBtvGha+Ucu3NVXM7gV /Se+e6zFgeWiCcJwFKnxcJS1wuRIunSB5SxbTzNSLwoWTwuD2SzOrGjcEdyCR5AQ skr969TMs8VqVYMlPnKYXb9m4PJ4a87oIkFz+C8QK1pNRa540IwdaAz7FT5nGz4x hSS1/hNPqMWJSBDqI3a3j9NOK014s9iKNs8Yu43zuwixmoRC4nIMgZvoVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFByq6na6ai04yTaiNN1x/46x8Z4sMB8GA1UdIwQY MBaAFJ50DNO2a2Dhiz2W/7P0IY15tbdwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbm5RTTA3WnJZT0dMUFpiX3NfUWhqWG0xdDNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8xZGU2MTMtNjFiOS00YjA3LWFkNDct NTBlNGIwNTA0ZjQ4LzEvbm5RTTA3WnJZT0dMUFpiX3NfUWhqWG0xdDNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC8xZGU2MTMtNjFiOS00YjA3LWFkNDctNTBlNGIwNTA0ZjQ4 LzEvbm5RTTA3WnJZT0dMUFpiX3NfUWhqWG0xdDNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl6Lfg5Yk o+1W8Gc6B0O7u2gcJKDGpHq4JMmEBJcvuLfGTfwyBwjdnI8jbweEVEjZZZAbaguw eHPofafS19bVOowCSKHUYGcD3cNAb1TuoYPyAtOSZf4OisOfGqgK+7F5MmMIntkH 4K8kBM5hTxCV9sxfI66dQ6+MVvjOvZQluDBZgjHfCT9zr2AzCs2PmEqL6JHN8ZX2 MFGwNAMhlpMIEFRsndMTDtvL+4ZSwooTOLCAw7q0xpxKZ4ts3QonSkYxyzSmUExn z6ZROvK6EjwYRNBd1jmxY+g83Tlr4D0iKlo580LtV9n/mvXosDEeuaeYe4XJnNZ9 exPyLRJI2pmXPA== -----END CERTIFICATE-----Generated at Thu Dec 18 05:01:03 2025 by rpki-client