This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/c2ec61-37ab-405b-a6c2-13ee4c8d3082/1/NLqcIjJB64DivHGFO7fS5YKGvdM.mft File: NLqcIjJB64DivHGFO7fS5YKGvdM.mft (raw, json) Hash identifier: BZ6jCxf0rYO5naYw1L3sEv4gj0uf0nVVSgyeiQGpV3g= Subject key identifier: 3F:64:21:66:4A:40:8E:B6:07:83:65:92:4F:58:EB:BA:24:2D:4F:CA Authority key identifier: 34:BA:9C:22:32:41:EB:80:E2:BC:71:85:3B:B7:D2:E5:82:86:BD:D3 Certificate issuer: /CN=34ba9c223241eb80e2bc71853bb7d2e58286bdd3 Certificate serial: 019AF19B1DF0EF352EF87D14C13806ACBCCD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLqcIjJB64DivHGFO7fS5YKGvdM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/c2ec61-37ab-405b-a6c2-13ee4c8d3082/1/NLqcIjJB64DivHGFO7fS5YKGvdM.mft Manifest number: 1769 Signing time: Sat 06 Dec 2025 03:01:06 +0000 Manifest this update: Sat 06 Dec 2025 03:01:06 +0000 Manifest next update: Sun 07 Dec 2025 03:01:06 +0000 Files and hashes: 1: NLqcIjJB64DivHGFO7fS5YKGvdM.crl (hash: ckpawIB1RR7yjyyGNgda6YFUydxPhyBSzBFiTawoCMU=) 2: fLquejxATIKeZ_Omgco482qTWPw.roa (hash: kp7xeLg7/f6lZ1aJQqZqJ9ZG54b9dQgMXma+xU2orkM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/c2ec61-37ab-405b-a6c2-13ee4c8d3082/1/NLqcIjJB64DivHGFO7fS5YKGvdM.crl rsync://rpki.ripe.net/repository/DEFAULT/de/c2ec61-37ab-405b-a6c2-13ee4c8d3082/1/NLqcIjJB64DivHGFO7fS5YKGvdM.mft rsync://rpki.ripe.net/repository/DEFAULT/NLqcIjJB64DivHGFO7fS5YKGvdM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:1d:f0:ef:35:2e:f8:7d:14:c1:38:06:ac:bc:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34ba9c223241eb80e2bc71853bb7d2e58286bdd3 Validity Not Before: Dec 6 03:01:06 2025 GMT Not After : Dec 7 03:01:06 2025 GMT Subject: CN=3f6421664a408eb6078365924f58ebba242d4fca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:80:4e:cc:1d:60:d5:78:fd:d4:d1:27:24:66: 1c:fc:f7:68:c2:4c:19:c3:6f:62:bb:fe:f4:d7:87: cf:d5:5c:8c:8a:ae:d4:9d:57:17:90:6e:58:ed:63: 51:0d:a6:30:4c:a0:72:9f:f0:f2:49:7c:10:a2:4d: 46:78:4e:c7:66:0a:1b:79:fe:59:13:ff:36:ea:e0: ce:58:bc:ea:a9:8c:66:47:52:2f:59:c7:d2:79:15: 23:f9:a0:a6:42:95:d2:aa:67:f2:9b:c4:7e:cc:89: 1f:a8:0d:45:2b:4a:ae:43:bf:09:4e:d9:b3:e3:b7: fc:89:b2:ab:c6:99:68:68:3a:a5:4b:6f:f1:b8:2f: 18:d1:51:b4:11:ba:6c:ec:cd:ca:15:06:ac:58:00: bf:73:45:9a:6f:fc:e6:3c:2e:ce:ee:0c:69:e3:a6: e3:d5:50:9f:ed:7b:d4:c6:e2:62:ab:7c:6a:4d:45: 6e:96:37:cf:d8:6f:c6:0b:0b:81:5d:6f:55:ae:51: 3b:8b:8e:73:43:12:a5:51:d8:af:14:19:d4:d8:78: af:0a:63:ba:84:7e:1c:1e:0f:7a:84:60:03:86:83: 8f:a7:e4:18:c4:c8:cf:1a:69:9e:9a:72:a9:a1:4f: b3:c7:53:7d:8e:2d:ee:47:c4:cc:b5:9c:63:22:32: 41:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:64:21:66:4A:40:8E:B6:07:83:65:92:4F:58:EB:BA:24:2D:4F:CA X509v3 Authority Key Identifier: keyid:34:BA:9C:22:32:41:EB:80:E2:BC:71:85:3B:B7:D2:E5:82:86:BD:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLqcIjJB64DivHGFO7fS5YKGvdM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c2ec61-37ab-405b-a6c2-13ee4c8d3082/1/NLqcIjJB64DivHGFO7fS5YKGvdM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c2ec61-37ab-405b-a6c2-13ee4c8d3082/1/NLqcIjJB64DivHGFO7fS5YKGvdM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:a4:0a:29:01:b5:46:05:74:e2:a5:31:37:ea:4d:4b:4a:77: 61:c2:9f:93:ea:14:5a:9a:a3:6a:30:4b:8a:90:49:4b:f3:df: 1d:94:61:bf:f1:16:11:fe:d9:bd:41:57:00:ad:3d:d7:7d:8b: 60:cb:aa:be:3d:45:47:74:dc:65:4d:ae:6b:72:02:ba:37:28: 2a:76:0b:71:fe:74:b5:0d:b7:43:ce:84:04:40:39:7e:f1:c4: 45:00:46:a9:5e:6a:5b:ba:b4:23:00:b0:48:46:e4:1e:3f:d4: 4e:55:1b:2e:e4:ac:0a:c9:c3:53:76:7b:b6:92:10:b7:fe:ae: 81:8f:4d:67:ee:9a:08:16:71:92:19:f7:ce:c1:24:d2:2a:dd: 96:03:2f:d9:49:a8:91:1c:a7:ad:8a:87:b2:87:de:97:8c:3b: 03:0f:3e:c1:86:c7:12:38:85:0a:39:bb:68:2b:a1:f5:02:16: 78:ef:cc:1b:13:7d:46:7b:0a:5a:2a:57:ce:2c:af:c8:17:40: 2c:c7:61:3d:16:73:ae:f4:75:84:25:31:77:89:9a:7b:26:04: cb:d1:46:47:dc:33:4a:b8:bb:1c:e3:2c:ed:ef:5b:1c:c4:ed: 54:a9:e8:22:bf:e9:e3:f4:ac:64:1c:87:51:a0:4d:df:dd:87: 70:3d:c5:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmx3w7zUu+H0UwTgGrLzNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0YmE5YzIyMzI0MWViODBlMmJjNzE4NTNiYjdkMmU1ODI4 NmJkZDMwHhcNMjUxMjA2MDMwMTA2WhcNMjUxMjA3MDMwMTA2WjAzMTEwLwYDVQQD EygzZjY0MjE2NjRhNDA4ZWI2MDc4MzY1OTI0ZjU4ZWJiYTI0MmQ0ZmNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1IBOzB1g1Xj91NEnJGYc/PdowkwZ w29iu/7014fP1VyMiq7UnVcXkG5Y7WNRDaYwTKByn/DySXwQok1GeE7HZgobef5Z E/826uDOWLzqqYxmR1IvWcfSeRUj+aCmQpXSqmfym8R+zIkfqA1FK0quQ78JTtmz 47f8ibKrxploaDqlS2/xuC8Y0VG0Ebps7M3KFQasWAC/c0Wab/zmPC7O7gxp46bj 1VCf7XvUxuJiq3xqTUVuljfP2G/GCwuBXW9VrlE7i45zQxKlUdivFBnU2HivCmO6 hH4cHg96hGADhoOPp+QYxMjPGmmemnKpoU+zx1N9ji3uR8TMtZxjIjJBXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD9kIWZKQI62B4Nlkk9Y67okLU/KMB8GA1UdIwQY MBaAFDS6nCIyQeuA4rxxhTu30uWChr3TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkxxY0lqSkI2NERpdkhHRk83ZlM1WUtHdmRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9jMmVjNjEtMzdhYi00MDViLWE2YzIt MTNlZTRjOGQzMDgyLzEvTkxxY0lqSkI2NERpdkhHRk83ZlM1WUtHdmRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS9jMmVjNjEtMzdhYi00MDViLWE2YzItMTNlZTRjOGQzMDgy LzEvTkxxY0lqSkI2NERpdkhHRk83ZlM1WUtHdmRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdaQKKQG1 RgV04qUxN+pNS0p3YcKfk+oUWpqjajBLipBJS/PfHZRhv/EWEf7ZvUFXAK09132L YMuqvj1FR3TcZU2ua3ICujcoKnYLcf50tQ23Q86EBEA5fvHERQBGqV5qW7q0IwCw SEbkHj/UTlUbLuSsCsnDU3Z7tpIQt/6ugY9NZ+6aCBZxkhn3zsEk0irdlgMv2Umo kRynrYqHsofel4w7Aw8+wYbHEjiFCjm7aCuh9QIWeO/MGxN9RnsKWipXziyvyBdA LMdhPRZzrvR1hCUxd4maeyYEy9FGR9wzSri7HOMs7e9bHMTtVKnoIr/p4/SsZByH UaBN392HcD3FVQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:11:32 2025 by rpki-client