This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft File: NrQT5TbZk1PwsFDudG_90k7bWTA.mft (raw, json) Hash identifier: qllUgcoLr8XHYl5a0gaNrc83KCA7Z3NdtUCmVY0aatM= Subject key identifier: DE:EA:83:42:2B:6C:C2:8A:B3:46:73:26:64:CB:EF:01:8E:A3:0C:D3 Authority key identifier: 36:B4:13:E5:36:D9:93:53:F0:B0:50:EE:74:6F:FD:D2:4E:DB:59:30 Certificate issuer: /CN=36b413e536d99353f0b050ee746ffdd24edb5930 Certificate serial: 019B378E6E78FC3BB5F8296C7FAC02C42D3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NrQT5TbZk1PwsFDudG_90k7bWTA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft Manifest number: 178E Signing time: Fri 19 Dec 2025 17:00:39 +0000 Manifest this update: Fri 19 Dec 2025 17:00:39 +0000 Manifest next update: Sat 20 Dec 2025 17:00:39 +0000 Files and hashes: 1: NrQT5TbZk1PwsFDudG_90k7bWTA.crl (hash: Q9wGXz3eDssnbbfXUx+XKIF7jad3w3socTs8T2J83nk=) 2: kkI0VJ623ZMpCKAjZsrxAXz6PWk.roa (hash: wTnvsnp3yJHDHnSTINs0tfqN/DigtBsLrefQ3ls6zYA=) 3: uucUmYI6JsmVzUOd6RM4u1Uvm6c.roa (hash: FHR3fbJwd259J3Jj1zln57qgHYJEZGfouW6MVY+3Iko=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft rsync://rpki.ripe.net/repository/DEFAULT/NrQT5TbZk1PwsFDudG_90k7bWTA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:8e:6e:78:fc:3b:b5:f8:29:6c:7f:ac:02:c4:2d:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36b413e536d99353f0b050ee746ffdd24edb5930 Validity Not Before: Dec 19 17:00:39 2025 GMT Not After : Dec 20 17:00:39 2025 GMT Subject: CN=deea83422b6cc28ab346732664cbef018ea30cd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:dd:de:0f:c9:ab:f6:65:07:c1:2a:7d:fa:10: fb:ec:06:71:12:66:c7:f0:d7:3f:c7:f9:78:56:19: a5:7f:04:cf:07:95:fe:c0:04:89:ef:0f:bc:e7:e1: ae:81:65:93:e8:4b:d2:04:79:4a:58:d3:2b:85:2d: 29:43:ea:2d:c7:0f:18:de:2a:c4:7d:51:df:ac:c1: 5a:e6:44:90:57:80:8e:90:01:32:58:4d:4f:fb:9c: 76:bb:2e:b8:ff:5c:cf:0e:55:90:01:ca:7a:76:94: b0:5f:3b:ac:20:fb:04:bf:d7:f4:13:3b:4e:f6:0c: 59:4b:40:4a:05:b8:72:db:0d:38:de:94:e5:25:e5: 35:b3:84:79:3a:2a:95:6f:d0:08:87:57:17:20:24: 46:1d:76:1c:67:e7:4f:70:e0:f4:d2:fa:1c:6d:67: 51:c3:b4:8e:99:ef:8b:6a:b0:4e:85:15:fc:6b:ba: e5:55:39:86:f8:d8:7c:c2:a9:c5:28:76:e3:08:6a: 55:00:ee:a5:7a:d6:0c:89:0c:ae:86:e4:e7:70:b2: 5d:b9:5b:a9:3e:19:fe:a4:a7:13:81:16:1e:41:d7: 45:cf:b8:df:57:a0:51:9a:03:7b:97:16:15:d2:51: 85:ff:d0:a9:12:73:47:dc:79:11:0d:03:bf:d8:6e: 68:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:EA:83:42:2B:6C:C2:8A:B3:46:73:26:64:CB:EF:01:8E:A3:0C:D3 X509v3 Authority Key Identifier: keyid:36:B4:13:E5:36:D9:93:53:F0:B0:50:EE:74:6F:FD:D2:4E:DB:59:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NrQT5TbZk1PwsFDudG_90k7bWTA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:13:28:98:d1:d4:80:e2:98:04:67:f3:07:d1:67:8c:75:83: 4f:1a:bc:ce:4f:d6:a7:74:25:da:38:58:53:fd:4b:03:4f:63: f3:a8:51:6c:0c:86:4d:31:d8:68:21:c6:ab:65:6d:a7:49:8b: ca:13:26:64:b5:12:0b:5b:ff:a2:87:50:66:b3:b9:45:ed:70: 94:87:0e:97:a0:93:90:dc:33:cd:b6:a7:4b:7c:04:f0:34:cb: 2b:94:d2:a6:b8:74:b0:eb:ee:90:4e:7a:83:18:68:59:da:04: d9:52:36:e4:ab:48:da:92:77:97:df:21:5f:73:ec:60:e3:80: 13:54:df:0e:0f:4a:fe:33:a5:4c:33:dc:3e:bc:7b:f3:90:c0: 94:6a:7d:b0:94:62:94:d3:62:4b:39:a1:8e:6e:84:7a:e1:3e: f8:3f:2e:79:3d:44:48:ad:11:52:21:3e:c8:e6:c0:79:5f:27: 25:e5:9a:23:0b:cd:52:c7:2c:36:f2:5e:32:99:83:73:d0:8b: 0e:48:b3:bc:3e:20:68:94:a6:00:74:4a:e4:35:3b:29:35:17: d0:70:db:a5:8c:94:37:a7:b3:f5:d2:d0:1f:7e:d4:dc:57:40: fa:4f:d8:db:67:26:08:a1:32:0d:c6:68:38:b0:8b:a8:c9:8d: ae:9d:5c:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3jm54/Du1+Clsf6wCxC07MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YjQxM2U1MzZkOTkzNTNmMGIwNTBlZTc0NmZmZGQyNGVk YjU5MzAwHhcNMjUxMjE5MTcwMDM5WhcNMjUxMjIwMTcwMDM5WjAzMTEwLwYDVQQD EyhkZWVhODM0MjJiNmNjMjhhYjM0NjczMjY2NGNiZWYwMThlYTMwY2QzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkN3eD8mr9mUHwSp9+hD77AZxEmbH 8Nc/x/l4VhmlfwTPB5X+wASJ7w+85+GugWWT6EvSBHlKWNMrhS0pQ+otxw8Y3irE fVHfrMFa5kSQV4COkAEyWE1P+5x2uy64/1zPDlWQAcp6dpSwXzusIPsEv9f0EztO 9gxZS0BKBbhy2w043pTlJeU1s4R5OiqVb9AIh1cXICRGHXYcZ+dPcOD00vocbWdR w7SOme+LarBOhRX8a7rlVTmG+Nh8wqnFKHbjCGpVAO6letYMiQyuhuTncLJduVup Phn+pKcTgRYeQddFz7jfV6BRmgN7lxYV0lGF/9CpEnNH3HkRDQO/2G5o0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN7qg0IrbMKKs0ZzJmTL7wGOowzTMB8GA1UdIwQY MBaAFDa0E+U22ZNT8LBQ7nRv/dJO21kwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnJRVDVUYlprMVB3c0ZEdWRHXzkwazdiV1RBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9lNjYyOTYtMDQ3OS00YzUyLTljZWEt YTFmNTczZDA2OWRhLzEvTnJRVDVUYlprMVB3c0ZEdWRHXzkwazdiV1RBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi9lNjYyOTYtMDQ3OS00YzUyLTljZWEtYTFmNTczZDA2OWRh LzEvTnJRVDVUYlprMVB3c0ZEdWRHXzkwazdiV1RBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuBMomNHU gOKYBGfzB9FnjHWDTxq8zk/Wp3Ql2jhYU/1LA09j86hRbAyGTTHYaCHGq2Vtp0mL yhMmZLUSC1v/oodQZrO5Re1wlIcOl6CTkNwzzbanS3wE8DTLK5TSprh0sOvukE56 gxhoWdoE2VI25KtI2pJ3l98hX3PsYOOAE1TfDg9K/jOlTDPcPrx785DAlGp9sJRi lNNiSzmhjm6EeuE++D8ueT1ESK0RUiE+yObAeV8nJeWaIwvNUscsNvJeMpmDc9CL DkizvD4gaJSmAHRK5DU7KTUX0HDbpYyUN6ez9dLQH37U3FdA+k/Y22cmCKEyDcZo OLCLqMmNrp1ckA== -----END CERTIFICATE-----Generated at Fri Dec 19 21:55:15 2025 by rpki-client