This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft File: 1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft (raw, json) Hash identifier: vxpCFqMGOjW4/B//SSxt0UddjUszo8NiLONIdn/Ktbo= Subject key identifier: C5:C9:F0:D4:E9:CA:F5:2C:36:4E:CF:A6:E8:1C:D0:D0:C4:46:71:CF Authority key identifier: F8:D4:0A:2A:13:89:F5:4C:23:E7:87:1B:5A:E8:7F:65:3F:65:90:08 Certificate issuer: /CN=f8d40a2a1389f54c23e7871b5ae87f653f659008 Certificate serial: 019B3A9027855698F6F4CF68631B7EFE0C4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft Manifest number: 0F7C Signing time: Sat 20 Dec 2025 07:01:24 +0000 Manifest this update: Sat 20 Dec 2025 07:01:24 +0000 Manifest next update: Sun 21 Dec 2025 07:01:24 +0000 Files and hashes: 1: 1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.crl (hash: CpcJhy0/9o2EgF5PtXudiR8K6hfsk8j2YU7p/s0GABc=) 2: C3CtZTgV6FhDx8jPsObo2L6FO8k.roa (hash: NvkBnoMHiuCQDQqP9VPXNRtC0nvpW5lhq9MDa3+jS9A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.crl rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft rsync://rpki.ripe.net/repository/DEFAULT/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:90:27:85:56:98:f6:f4:cf:68:63:1b:7e:fe:0c:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8d40a2a1389f54c23e7871b5ae87f653f659008 Validity Not Before: Dec 20 07:01:24 2025 GMT Not After : Dec 21 07:01:24 2025 GMT Subject: CN=c5c9f0d4e9caf52c364ecfa6e81cd0d0c44671cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5a:cb:5b:ac:a9:05:76:ea:5c:32:67:55:42: 41:e9:32:5c:43:5d:51:63:3a:a9:e1:7b:48:e8:f0: be:51:75:09:b7:f8:db:f0:4f:1b:5b:07:cf:76:ef: 0c:67:34:ca:bb:8a:7b:27:03:3a:10:6a:ad:cd:27: 6e:f7:29:89:9c:3e:55:32:b8:f2:3f:f6:e7:4d:e4: 20:95:41:0e:c7:c2:ed:67:7d:a4:c0:74:05:d1:fe: ce:d4:8f:a3:62:85:05:3c:e9:fe:d6:70:00:b0:93: f9:42:54:44:e3:00:32:58:f9:91:c7:c0:cd:7b:12: da:f1:1b:1a:c8:c7:4b:2c:19:a4:3d:92:d1:37:28: 70:bd:81:b0:ad:f6:c1:a9:6f:a2:7b:0d:df:a4:69: 4e:a6:4a:20:13:36:e9:af:8f:b6:e0:ce:f1:ca:b3: 5a:f1:66:f3:c8:77:d2:80:49:f7:e5:28:45:c5:66: e8:ce:d5:25:1d:64:c5:5a:a7:f4:c9:d1:f9:09:4c: 33:99:38:e8:11:8d:d8:6e:52:ab:f3:c8:3e:e0:e3: 78:02:a0:86:17:cc:1f:c9:0c:65:bf:a7:44:9d:70: 00:49:cf:09:78:d1:bc:9c:3b:d7:13:02:1b:e2:e0: fb:0d:1f:4d:7a:04:1d:fb:ab:84:57:ea:32:89:6e: b0:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:C9:F0:D4:E9:CA:F5:2C:36:4E:CF:A6:E8:1C:D0:D0:C4:46:71:CF X509v3 Authority Key Identifier: keyid:F8:D4:0A:2A:13:89:F5:4C:23:E7:87:1B:5A:E8:7F:65:3F:65:90:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:5d:4e:56:ac:f3:db:94:72:13:88:47:db:3c:32:d6:cb:04: d4:06:19:ce:da:79:13:e3:0e:b6:a1:ef:37:a6:b9:be:c4:31: cb:53:bd:76:d9:ed:5c:d6:ac:a2:71:7c:be:a0:96:84:2d:b3: d7:20:83:c5:2c:0d:ac:38:c6:45:ff:d6:5e:96:8f:03:44:df: 67:93:d4:26:57:d8:65:74:9b:91:2f:a1:90:66:6c:6f:df:6e: e0:04:d9:bf:fc:8a:92:e8:af:18:eb:fe:04:6f:87:76:e2:80: 30:c1:16:ba:7b:3e:ea:b9:0e:1e:20:58:40:f4:cd:40:a2:04: 0e:17:4b:a0:eb:45:97:28:d8:b5:9a:17:3c:e6:00:a1:69:f9: f4:ab:0b:71:05:78:21:5b:73:6c:68:31:89:b8:75:50:35:b8: d6:41:86:e8:e7:5c:68:61:35:a9:66:48:65:a1:02:a8:b5:46: 26:9c:d5:eb:63:a6:f7:2b:26:35:64:b0:4a:53:8d:6d:d5:dc: a4:f2:62:57:2a:9e:89:29:61:62:0d:e9:99:4a:78:4d:3c:66: c0:06:68:8d:9b:ac:9f:0d:f7:19:a0:b2:6d:00:b9:3f:c4:e3: 87:37:dc:f0:41:00:f8:71:65:44:7c:93:51:85:ed:fb:39:f4: 9a:54:88:e3 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZs6kCeFVpj29M9oYxt+/gxOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ZDQwYTJhMTM4OWY1NGMyM2U3ODcxYjVhZTg3ZjY1M2Y2 NTkwMDgwHhcNMjUxMjIwMDcwMTI0WhcNMjUxMjIxMDcwMTI0WjAzMTEwLwYDVQQD EyhjNWM5ZjBkNGU5Y2FmNTJjMzY0ZWNmYTZlODFjZDBkMGM0NDY3MWNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1rLW6ypBXbqXDJnVUJB6TJcQ11R Yzqp4XtI6PC+UXUJt/jb8E8bWwfPdu8MZzTKu4p7JwM6EGqtzSdu9ymJnD5VMrjy P/bnTeQglUEOx8LtZ32kwHQF0f7O1I+jYoUFPOn+1nAAsJP5QlRE4wAyWPmRx8DN exLa8RsayMdLLBmkPZLRNyhwvYGwrfbBqW+iew3fpGlOpkogEzbpr4+24M7xyrNa 8WbzyHfSgEn35ShFxWboztUlHWTFWqf0ydH5CUwzmTjoEY3YblKr88g+4ON4AqCG F8wfyQxlv6dEnXAASc8JeNG8nDvXEwIb4uD7DR9NegQd+6uEV+oyiW6wfQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFMXJ8NTpyvUsNk7Ppugc0NDERnHPMB8GA1UdIwQY MBaAFPjUCioTifVMI+eHG1rof2U/ZZAIMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1OUUtLaE9KOVV3ajU0Y2JXdWhfWlQ5bGtBZy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDQvN2JjNWYwLWUyMWItNDIzZS1iZTFj LTJkNDYwZTA3MjZmYS8xLzEtTlFLS2hPSjlVd2o1NGNiV3VoX1pUOWxrQWcubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzA0LzdiYzVmMC1lMjFiLTQyM2UtYmUxYy0yZDQ2MGUwNzI2 ZmEvMS8xLU5RS0toT0o5VXdqNTRjYld1aF9aVDlsa0FnLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhV1O Vqzz25RyE4hH2zwy1ssE1AYZztp5E+MOtqHvN6a5vsQxy1O9dtntXNasonF8vqCW hC2z1yCDxSwNrDjGRf/WXpaPA0TfZ5PUJlfYZXSbkS+hkGZsb99u4ATZv/yKkuiv GOv+BG+HduKAMMEWuns+6rkOHiBYQPTNQKIEDhdLoOtFlyjYtZoXPOYAoWn59KsL cQV4IVtzbGgxibh1UDW41kGG6OdcaGE1qWZIZaECqLVGJpzV62Om9ysmNWSwSlON bdXcpPJiVyqeiSlhYg3pmUp4TTxmwAZojZusnw33GaCybQC5P8Tjhzfc8EEA+HFl RHyTUYXt+zn0mlSI4w== -----END CERTIFICATE-----Generated at Sat Dec 20 13:59:06 2025 by rpki-client