This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/925d4a-f5f4-4299-a829-152a59479e69/1/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.mft File: Nqr6XD8vjkoIP4Hwy4e8eupEiR8.mft (raw, json) Hash identifier: 5XHZ3dtlNtC+PFGW10a6eTUqjhwW7/gm5ASMsx9N5yk= Subject key identifier: 32:2E:61:03:F4:4C:73:D5:A5:8C:A7:A8:2F:40:16:7C:1A:32:95:0E Authority key identifier: 36:AA:FA:5C:3F:2F:8E:4A:08:3F:81:F0:CB:87:BC:7A:EA:44:89:1F Certificate issuer: /CN=36aafa5c3f2f8e4a083f81f0cb87bc7aea44891f Certificate serial: 019AF49BE9C8F6748DFDF0C784FB962A345E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/925d4a-f5f4-4299-a829-152a59479e69/1/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 17:00:49 +0000 Manifest this update: Sat 06 Dec 2025 17:00:49 +0000 Manifest next update: Sun 07 Dec 2025 17:00:49 +0000 Files and hashes: 1: Nqr6XD8vjkoIP4Hwy4e8eupEiR8.crl (hash: AYkG2n5VZlGr6FhiWIHQmEsUqsoWFQBD0OLf4DF1t9k=) 2: Tz8QjBgBmzpa68NzWLRe2iAGU-U.roa (hash: juEtxBf0oAaQHOnDE0wzOzsnnb3wMIZXnN/0qajABas=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/925d4a-f5f4-4299-a829-152a59479e69/1/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/925d4a-f5f4-4299-a829-152a59479e69/1/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.mft rsync://rpki.ripe.net/repository/DEFAULT/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9b:e9:c8:f6:74:8d:fd:f0:c7:84:fb:96:2a:34:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36aafa5c3f2f8e4a083f81f0cb87bc7aea44891f Validity Not Before: Dec 6 17:00:49 2025 GMT Not After : Dec 7 17:00:49 2025 GMT Subject: CN=322e6103f44c73d5a58ca7a82f40167c1a32950e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:79:32:6f:bd:30:b6:b4:44:16:48:e0:e2:85: d8:2f:3e:64:ff:1b:47:ee:4d:f2:d3:b2:c5:ed:15: f5:03:fa:f2:f9:fa:14:78:db:a7:10:c8:04:b1:e9: 95:30:69:8d:db:30:a9:ab:97:54:ea:7b:cc:ff:e3: 95:9c:12:d4:86:34:4f:3b:d2:f0:75:d4:9a:27:56: 38:f7:9b:cb:a9:23:41:17:de:d5:0a:ed:e9:d4:48: 5a:da:57:6b:5f:5c:0e:5e:7d:62:27:48:74:9d:26: ef:01:c1:63:5e:58:ff:4b:b9:23:86:e1:f5:23:10: 28:53:54:bb:72:72:a8:19:7a:83:e9:3c:cb:ac:12: 10:f1:a7:d9:f9:69:0c:16:af:54:a5:cd:10:8e:00: e0:4c:0d:b4:d9:13:29:f5:ff:dc:7b:15:4b:10:a6: 05:bd:6a:65:a1:26:46:33:9c:17:1a:05:4a:d9:b1: 05:af:f9:3e:e9:d6:f9:e1:dd:3c:f2:48:19:69:23: ba:b9:7e:62:8b:b5:02:b9:62:ff:e9:0e:70:cd:5b: 85:46:b0:56:c3:1a:ad:b9:0b:9c:f6:95:b5:72:b1: 22:9c:d1:2b:e7:e1:f9:9f:9b:94:c5:ad:6a:23:d4: f8:01:f0:33:a0:0b:71:2f:92:72:a3:8e:7d:a6:df: c6:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:2E:61:03:F4:4C:73:D5:A5:8C:A7:A8:2F:40:16:7C:1A:32:95:0E X509v3 Authority Key Identifier: keyid:36:AA:FA:5C:3F:2F:8E:4A:08:3F:81:F0:CB:87:BC:7A:EA:44:89:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/925d4a-f5f4-4299-a829-152a59479e69/1/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/925d4a-f5f4-4299-a829-152a59479e69/1/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:b8:82:a3:5c:6f:5f:04:67:fa:b3:e6:10:ca:2f:3d:1b:d3: 56:d2:49:a3:d9:11:93:24:f1:7b:ad:93:b4:63:90:54:b3:80: c0:e3:6a:b7:90:53:f7:0b:b5:b7:23:6b:53:6c:ac:54:19:c4: 09:f6:37:d4:ba:7a:b8:cc:1d:ce:da:96:e0:ed:3c:ae:de:4b: d9:e4:1f:ff:a0:ab:df:99:bf:6b:f3:46:1e:44:16:db:ca:27: e1:65:b2:60:80:f5:17:57:59:22:31:1c:43:c4:00:cb:b0:91: e4:6d:f6:ab:9c:99:8d:6f:11:8c:12:be:b6:7b:19:fd:3c:b1: d2:89:76:61:46:0f:3c:32:d9:0b:c1:95:6a:84:33:a3:d6:92: ad:1e:16:ec:94:b4:84:33:9d:66:b2:6e:66:b3:46:a3:bc:3d: e0:c6:62:8a:3e:e3:fa:04:f5:87:37:73:1e:b0:0e:72:19:82: fa:41:a4:9b:ad:82:e8:14:ad:0a:61:8e:d0:85:7e:8b:9d:57: 1f:24:19:17:4b:d1:81:a3:d8:c2:1d:e2:8d:9f:68:03:36:7b: a1:7d:a2:ec:72:68:f0:bc:37:4c:4d:2a:95:93:f0:ae:d3:b6: b6:8a:60:98:2a:9c:e3:93:56:fa:80:1d:fb:8f:83:1d:f4:e2: 68:b5:2f:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0m+nI9nSN/fDHhPuWKjReMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YWFmYTVjM2YyZjhlNGEwODNmODFmMGNiODdiYzdhZWE0 NDg5MWYwHhcNMjUxMjA2MTcwMDQ5WhcNMjUxMjA3MTcwMDQ5WjAzMTEwLwYDVQQD EygzMjJlNjEwM2Y0NGM3M2Q1YTU4Y2E3YTgyZjQwMTY3YzFhMzI5NTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHkyb70wtrREFkjg4oXYLz5k/xtH 7k3y07LF7RX1A/ry+foUeNunEMgEsemVMGmN2zCpq5dU6nvM/+OVnBLUhjRPO9Lw ddSaJ1Y495vLqSNBF97VCu3p1Eha2ldrX1wOXn1iJ0h0nSbvAcFjXlj/S7kjhuH1 IxAoU1S7cnKoGXqD6TzLrBIQ8afZ+WkMFq9Upc0QjgDgTA202RMp9f/cexVLEKYF vWploSZGM5wXGgVK2bEFr/k+6db54d088kgZaSO6uX5ii7UCuWL/6Q5wzVuFRrBW wxqtuQuc9pW1crEinNEr5+H5n5uUxa1qI9T4AfAzoAtxL5Jyo459pt/G+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDIuYQP0THPVpYynqC9AFnwaMpUOMB8GA1UdIwQY MBaAFDaq+lw/L45KCD+B8MuHvHrqRIkfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnFyNlhEOHZqa29JUDRId3k0ZThldXBFaVI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC85MjVkNGEtZjVmNC00Mjk5LWE4Mjkt MTUyYTU5NDc5ZTY5LzEvTnFyNlhEOHZqa29JUDRId3k0ZThldXBFaVI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC85MjVkNGEtZjVmNC00Mjk5LWE4MjktMTUyYTU5NDc5ZTY5 LzEvTnFyNlhEOHZqa29JUDRId3k0ZThldXBFaVI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUriCo1xv XwRn+rPmEMovPRvTVtJJo9kRkyTxe62TtGOQVLOAwONqt5BT9wu1tyNrU2ysVBnE CfY31Lp6uMwdztqW4O08rt5L2eQf/6Cr35m/a/NGHkQW28on4WWyYID1F1dZIjEc Q8QAy7CR5G32q5yZjW8RjBK+tnsZ/Tyx0ol2YUYPPDLZC8GVaoQzo9aSrR4W7JS0 hDOdZrJuZrNGo7w94MZiij7j+gT1hzdzHrAOchmC+kGkm62C6BStCmGO0IV+i51X HyQZF0vRgaPYwh3ijZ9oAzZ7oX2i7HJo8Lw3TE0qlZPwrtO2topgmCqc45NW+oAd +4+DHfTiaLUvJA== -----END CERTIFICATE-----Generated at Sat Dec 6 19:14:52 2025 by rpki-client