This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/366830-c634-4644-a752-820914022158/1/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.mft File: nqc_uHyHtv-EYgFhR3ZOfk8OrSk.mft (raw, json) Hash identifier: bYacYoV4i3dU5rtaxKoyQbKhcGuI4viVYRW0kpC6QK8= Subject key identifier: 58:8A:EA:9A:18:F5:F3:C7:A9:CA:06:F5:FC:D5:2B:D1:F1:08:DE:E6 Authority key identifier: 9E:A7:3F:B8:7C:87:B6:FF:84:62:01:61:47:76:4E:7E:4F:0E:AD:29 Certificate issuer: /CN=9ea73fb87c87b6ff8462016147764e7e4f0ead29 Certificate serial: 019AF12DA833D1ADE1F782ADF8372FBD16D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/366830-c634-4644-a752-820914022158/1/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.mft Manifest number: 09A3 Signing time: Sat 06 Dec 2025 01:01:32 +0000 Manifest this update: Sat 06 Dec 2025 01:01:32 +0000 Manifest next update: Sun 07 Dec 2025 01:01:32 +0000 Files and hashes: 1: Jc4wKdZujtBQlnsZSGZ-Msh3t-U.roa (hash: yoz3wQ6+m9WewYaNOk0D0h3Hx6RkufI02fLU4g+5owo=) 2: nqc_uHyHtv-EYgFhR3ZOfk8OrSk.crl (hash: ms3n1NfDnmdOnXm+uirFHrxVXflnenOpEuWzJRDGBlU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/366830-c634-4644-a752-820914022158/1/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/366830-c634-4644-a752-820914022158/1/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.mft rsync://rpki.ripe.net/repository/DEFAULT/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:a8:33:d1:ad:e1:f7:82:ad:f8:37:2f:bd:16:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ea73fb87c87b6ff8462016147764e7e4f0ead29 Validity Not Before: Dec 6 01:01:32 2025 GMT Not After : Dec 7 01:01:32 2025 GMT Subject: CN=588aea9a18f5f3c7a9ca06f5fcd52bd1f108dee6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:e1:c3:c7:8d:16:59:86:22:4d:fe:a3:9e:8f: 23:6d:61:f4:23:5c:81:e2:43:e2:00:92:a9:37:bc: 85:d0:2d:3e:27:c7:3e:fc:44:22:5e:52:ed:89:50: 6d:41:07:5d:ab:3e:f1:1b:ee:b1:62:0e:77:64:ed: 12:12:94:45:f6:8e:08:41:f2:6f:bd:0c:e6:fc:57: 7a:1b:b5:a8:e1:60:0a:bc:00:32:93:57:f4:33:90: 70:d7:07:74:a3:0f:34:09:2b:8b:91:1f:a5:93:be: f4:04:5f:c3:3e:76:12:52:b3:f5:89:39:07:be:96: 10:e6:f6:18:7d:5b:87:35:73:d0:db:ea:be:b2:b1: 8e:05:99:4b:d7:23:1d:fc:a8:e6:4c:38:43:df:c6: e2:ca:5f:0d:26:e1:f4:31:75:da:1d:2f:6c:e6:b8: 26:a6:06:c1:60:8a:a4:7b:ab:0f:e7:a4:f4:1d:1a: 43:a1:36:f6:9a:b1:0e:13:0b:10:71:7f:f2:a6:be: 9e:94:c5:c2:ea:37:0c:5c:47:83:71:2b:97:b0:e8: 86:ae:cb:7f:27:bf:b1:6e:18:b0:4a:e3:51:2c:12: 40:0e:56:0f:ac:65:ed:3e:97:46:bc:66:9e:92:b8: b7:4e:45:9b:0b:5a:4f:dd:96:70:b5:39:83:91:8a: 60:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:8A:EA:9A:18:F5:F3:C7:A9:CA:06:F5:FC:D5:2B:D1:F1:08:DE:E6 X509v3 Authority Key Identifier: keyid:9E:A7:3F:B8:7C:87:B6:FF:84:62:01:61:47:76:4E:7E:4F:0E:AD:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/366830-c634-4644-a752-820914022158/1/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/366830-c634-4644-a752-820914022158/1/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:97:b0:20:db:a7:42:8b:34:0f:8f:e9:91:26:25:85:10:9c: 5c:39:e8:54:fd:e4:de:29:0e:eb:34:83:bf:3f:29:ab:5b:86: b2:7b:94:cd:fc:e9:f9:e3:ad:c0:e5:f3:1e:19:51:a0:12:aa: 23:e3:b7:1b:85:e7:18:a3:92:e3:70:6d:84:ce:f5:18:c1:e9: 05:00:25:f4:31:3c:bb:b4:63:32:e8:4f:53:1d:b4:13:52:48: 2f:aa:8f:5a:1f:ba:e7:ab:e8:5c:07:e2:37:f7:8e:a2:81:e0: d3:ed:6b:db:e4:fa:d3:18:38:46:3d:9e:5b:39:ad:83:df:91: 81:53:1c:16:b5:ee:e8:4c:0c:80:a8:92:4c:92:56:bc:24:91: c0:6c:11:90:e4:f7:69:29:91:a4:9a:da:18:25:58:ee:59:81: fb:93:d8:8f:92:64:a9:17:39:77:10:6a:60:7f:83:7d:f7:00: 49:e0:22:1f:9c:1f:ab:05:24:ff:2a:b2:e5:37:2a:08:57:43: 6d:a1:b2:eb:e5:a8:8d:92:b0:15:cf:00:3a:df:f7:b1:27:de: 2c:e2:75:9d:30:aa:a4:0d:d6:b0:f8:eb:bc:90:1a:07:c0:6b: d3:8a:b3:8a:47:7b:c3:ac:f2:d1:66:73:98:16:60:b5:eb:ed: 1d:3f:51:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLagz0a3h94Kt+DcvvRbVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllYTczZmI4N2M4N2I2ZmY4NDYyMDE2MTQ3NzY0ZTdlNGYw ZWFkMjkwHhcNMjUxMjA2MDEwMTMyWhcNMjUxMjA3MDEwMTMyWjAzMTEwLwYDVQQD Eyg1ODhhZWE5YTE4ZjVmM2M3YTljYTA2ZjVmY2Q1MmJkMWYxMDhkZWU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4eHDx40WWYYiTf6jno8jbWH0I1yB 4kPiAJKpN7yF0C0+J8c+/EQiXlLtiVBtQQddqz7xG+6xYg53ZO0SEpRF9o4IQfJv vQzm/Fd6G7Wo4WAKvAAyk1f0M5Bw1wd0ow80CSuLkR+lk770BF/DPnYSUrP1iTkH vpYQ5vYYfVuHNXPQ2+q+srGOBZlL1yMd/KjmTDhD38biyl8NJuH0MXXaHS9s5rgm pgbBYIqke6sP56T0HRpDoTb2mrEOEwsQcX/ypr6elMXC6jcMXEeDcSuXsOiGrst/ J7+xbhiwSuNRLBJADlYPrGXtPpdGvGaekri3TkWbC1pP3ZZwtTmDkYpg4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFiK6poY9fPHqcoG9fzVK9HxCN7mMB8GA1UdIwQY MBaAFJ6nP7h8h7b/hGIBYUd2Tn5PDq0pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnFjX3VIeUh0di1FWWdGaFIzWk9mazhPclNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8zNjY4MzAtYzYzNC00NjQ0LWE3NTIt ODIwOTE0MDIyMTU4LzEvbnFjX3VIeUh0di1FWWdGaFIzWk9mazhPclNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS8zNjY4MzAtYzYzNC00NjQ0LWE3NTItODIwOTE0MDIyMTU4 LzEvbnFjX3VIeUh0di1FWWdGaFIzWk9mazhPclNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgpewINun Qos0D4/pkSYlhRCcXDnoVP3k3ikO6zSDvz8pq1uGsnuUzfzp+eOtwOXzHhlRoBKq I+O3G4XnGKOS43BthM71GMHpBQAl9DE8u7RjMuhPUx20E1JIL6qPWh+656voXAfi N/eOooHg0+1r2+T60xg4Rj2eWzmtg9+RgVMcFrXu6EwMgKiSTJJWvCSRwGwRkOT3 aSmRpJraGCVY7lmB+5PYj5JkqRc5dxBqYH+DffcASeAiH5wfqwUk/yqy5TcqCFdD baGy6+WojZKwFc8AOt/3sSfeLOJ1nTCqpA3WsPjrvJAaB8Br04qzikd7w6zy0WZz mBZgtevtHT9R3Q== -----END CERTIFICATE-----Generated at Sat Dec 6 10:37:49 2025 by rpki-client