This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft File: 1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft (raw, json) Hash identifier: 8egpFBP4MNGJRx/9WsoTBFxcMzoFoPAMjlfsiI5aPjc= Subject key identifier: A4:E3:8C:49:BD:67:99:35:FA:57:2E:44:2A:FF:96:C9:FA:EB:FE:0C Authority key identifier: F8:D4:0A:2A:13:89:F5:4C:23:E7:87:1B:5A:E8:7F:65:3F:65:90:08 Certificate issuer: /CN=f8d40a2a1389f54c23e7871b5ae87f653f659008 Certificate serial: 019B70A1F4DA375C4465192E2DBAC8603968 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft Manifest number: 0F98 Signing time: Tue 30 Dec 2025 19:00:20 +0000 Manifest this update: Tue 30 Dec 2025 19:00:20 +0000 Manifest next update: Wed 31 Dec 2025 19:00:20 +0000 Files and hashes: 1: 1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.crl (hash: dCipZflf3R5QOcLjlh/i+urB2qNO/46uGSgTr/dpYGk=) 2: C3CtZTgV6FhDx8jPsObo2L6FO8k.roa (hash: NvkBnoMHiuCQDQqP9VPXNRtC0nvpW5lhq9MDa3+jS9A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.crl rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft rsync://rpki.ripe.net/repository/DEFAULT/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 15:21:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:70:a1:f4:da:37:5c:44:65:19:2e:2d:ba:c8:60:39:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8d40a2a1389f54c23e7871b5ae87f653f659008 Validity Not Before: Dec 30 19:00:20 2025 GMT Not After : Dec 31 19:00:20 2025 GMT Subject: CN=a4e38c49bd679935fa572e442aff96c9faebfe0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:99:b9:b7:e1:6e:e4:c9:c5:be:32:39:c0:bb: ee:5e:2a:32:7b:cf:5f:95:b0:62:47:32:89:c6:6e: 90:66:03:d5:d2:0f:14:73:6d:e7:7b:2f:71:b8:d5: 58:17:ba:8a:77:83:cf:d0:dc:7b:f6:2b:ad:4d:35: 37:2b:a7:b5:72:63:a8:4c:7c:04:77:17:15:f1:28: ea:f5:51:22:e1:de:3d:e6:9a:cc:a0:ec:96:20:13: 77:df:29:dc:20:78:68:19:71:c3:b3:cd:2a:c1:f4: 05:43:7c:f7:4a:0d:39:9a:b4:5f:cf:d9:32:e3:e5: 83:79:07:4c:d6:4d:a9:55:09:28:b3:05:08:37:5b: fd:b5:cf:c3:25:e1:4e:d0:a6:ac:0a:2a:22:d2:51: 4a:1a:64:aa:1a:24:eb:6b:c4:80:ea:d3:bd:ac:73: 22:08:1e:1a:6f:05:e1:5f:2f:55:f9:79:3c:e6:8b: 1d:f2:ad:8f:7d:32:e8:01:a4:a0:ad:9c:9b:3c:c9: 86:6f:54:fa:98:5f:1c:d9:cb:4b:cd:4b:61:e6:e0: e7:81:b7:44:a6:b7:36:d1:b0:69:06:c8:80:57:ca: b5:fc:4c:ce:c9:5a:95:1b:40:58:b0:95:29:c0:ff: aa:ca:1b:86:a0:e4:85:ed:89:87:f6:84:2b:38:ab: e2:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:E3:8C:49:BD:67:99:35:FA:57:2E:44:2A:FF:96:C9:FA:EB:FE:0C X509v3 Authority Key Identifier: keyid:F8:D4:0A:2A:13:89:F5:4C:23:E7:87:1B:5A:E8:7F:65:3F:65:90:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:8b:ff:c6:21:d7:7e:d6:ec:9e:9a:38:50:1a:05:41:fd:ee: 0b:d2:58:1b:27:24:46:cf:c7:5f:7a:5d:46:b8:e2:a0:0b:06: 6b:5e:53:00:cb:77:13:ff:9e:9d:38:6f:a0:b8:d0:b0:e9:3e: 7e:9b:7a:3c:31:22:fe:0e:2b:8c:af:b7:62:2d:e7:3a:d6:10: 44:72:da:1e:93:3d:2c:99:2f:26:81:31:29:86:43:fb:a3:d9: 2a:0d:de:49:0e:1e:08:2c:f3:f8:27:dd:26:b9:73:32:1e:8b: e0:2a:fa:70:44:f4:c4:c2:02:bb:f6:3d:d5:e4:e6:6c:98:73: 5b:dd:58:9c:14:47:7a:b3:83:da:3b:f1:ff:6b:2b:e8:98:35: 42:a6:d8:2b:c0:06:e9:f5:15:b9:12:b9:fa:48:50:60:92:23: 77:31:27:85:eb:f6:0e:f9:71:91:81:1f:22:b4:d3:e9:15:24: bf:24:26:77:0d:ac:25:f0:f6:f6:6d:04:6e:93:65:1e:d5:6a: f4:d1:46:5e:5c:47:a5:30:96:eb:36:64:a2:f0:52:42:52:c4: 29:e7:d6:d0:f4:03:68:dc:00:67:08:aa:a7:e5:a0:44:c0:06: c1:fb:d6:7c:f4:8f:ae:f5:3c:c5:1b:d5:94:40:da:fb:4e:5e: a2:cc:1b:aa -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtwofTaN1xEZRkuLbrIYDloMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ZDQwYTJhMTM4OWY1NGMyM2U3ODcxYjVhZTg3ZjY1M2Y2 NTkwMDgwHhcNMjUxMjMwMTkwMDIwWhcNMjUxMjMxMTkwMDIwWjAzMTEwLwYDVQQD EyhhNGUzOGM0OWJkNjc5OTM1ZmE1NzJlNDQyYWZmOTZjOWZhZWJmZTBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZm5t+Fu5MnFvjI5wLvuXioye89f lbBiRzKJxm6QZgPV0g8Uc23ney9xuNVYF7qKd4PP0Nx79iutTTU3K6e1cmOoTHwE dxcV8Sjq9VEi4d495prMoOyWIBN33yncIHhoGXHDs80qwfQFQ3z3Sg05mrRfz9ky 4+WDeQdM1k2pVQkoswUIN1v9tc/DJeFO0KasCioi0lFKGmSqGiTra8SA6tO9rHMi CB4abwXhXy9V+Xk85osd8q2PfTLoAaSgrZybPMmGb1T6mF8c2ctLzUth5uDngbdE prc20bBpBsiAV8q1/EzOyVqVG0BYsJUpwP+qyhuGoOSF7YmH9oQrOKviZQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFKTjjEm9Z5k1+lcuRCr/lsn66/4MMB8GA1UdIwQY MBaAFPjUCioTifVMI+eHG1rof2U/ZZAIMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1OUUtLaE9KOVV3ajU0Y2JXdWhfWlQ5bGtBZy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDQvN2JjNWYwLWUyMWItNDIzZS1iZTFj LTJkNDYwZTA3MjZmYS8xLzEtTlFLS2hPSjlVd2o1NGNiV3VoX1pUOWxrQWcubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzA0LzdiYzVmMC1lMjFiLTQyM2UtYmUxYy0yZDQ2MGUwNzI2 ZmEvMS8xLU5RS0toT0o5VXdqNTRjYld1aF9aVDlsa0FnLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO4v/ xiHXftbsnpo4UBoFQf3uC9JYGyckRs/HX3pdRrjioAsGa15TAMt3E/+enThvoLjQ sOk+fpt6PDEi/g4rjK+3Yi3nOtYQRHLaHpM9LJkvJoExKYZD+6PZKg3eSQ4eCCzz +CfdJrlzMh6L4Cr6cET0xMICu/Y91eTmbJhzW91YnBRHerOD2jvx/2sr6Jg1QqbY K8AG6fUVuRK5+khQYJIjdzEnhev2DvlxkYEfIrTT6RUkvyQmdw2sJfD29m0EbpNl HtVq9NFGXlxHpTCW6zZkovBSQlLEKefW0PQDaNwAZwiqp+WgRMAGwfvWfPSPrvU8 xRvVlEDa+05eoswbqg== -----END CERTIFICATE-----Generated at Wed Dec 31 00:01:55 2025 by rpki-client