This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/903931-1698-41b7-af34-9dd82735da3d/1/NQF3JFfg-Ce56SCwDNEUgkpfpiE.mft File: NQF3JFfg-Ce56SCwDNEUgkpfpiE.mft (raw, json) Hash identifier: NcA6HUDaohwvGqfz6wswYyDzicfbBlCt6VkujaV4/ag= Subject key identifier: 55:7B:97:A5:09:0C:D4:39:8C:88:ED:6C:E7:08:7B:3A:A0:12:21:14 Authority key identifier: 35:01:77:24:57:E0:F8:27:B9:E9:20:B0:0C:D1:14:82:4A:5F:A6:21 Certificate issuer: /CN=3501772457e0f827b9e920b00cd114824a5fa621 Certificate serial: 019B6CC71D733D9A4E17C01CBE38D973A5FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NQF3JFfg-Ce56SCwDNEUgkpfpiE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/903931-1698-41b7-af34-9dd82735da3d/1/NQF3JFfg-Ce56SCwDNEUgkpfpiE.mft Manifest number: 17A1 Signing time: Tue 30 Dec 2025 01:02:27 +0000 Manifest this update: Tue 30 Dec 2025 01:02:27 +0000 Manifest next update: Wed 31 Dec 2025 01:02:27 +0000 Files and hashes: 1: NQF3JFfg-Ce56SCwDNEUgkpfpiE.crl (hash: UePgxTrrCg0Ms3vbr9KMtR6vpJGE4FpHpz5KQ6MQ+5I=) 2: f-luTA_tx0v0TH5JKilbt6SzcJU.roa (hash: +LXN4TEg0fwtohb1kuvdLScMnEdA9CiLPdalbBVCXxU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/903931-1698-41b7-af34-9dd82735da3d/1/NQF3JFfg-Ce56SCwDNEUgkpfpiE.crl rsync://rpki.ripe.net/repository/DEFAULT/12/903931-1698-41b7-af34-9dd82735da3d/1/NQF3JFfg-Ce56SCwDNEUgkpfpiE.mft rsync://rpki.ripe.net/repository/DEFAULT/NQF3JFfg-Ce56SCwDNEUgkpfpiE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:c7:1d:73:3d:9a:4e:17:c0:1c:be:38:d9:73:a5:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3501772457e0f827b9e920b00cd114824a5fa621 Validity Not Before: Dec 30 01:02:27 2025 GMT Not After : Dec 31 01:02:27 2025 GMT Subject: CN=557b97a5090cd4398c88ed6ce7087b3aa0122114 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b1:9c:f1:66:e5:9f:96:17:dc:33:99:f2:44: 6b:a1:4c:c5:1e:b5:41:2d:bf:13:b1:e2:6c:f9:58: ed:2b:1c:1b:70:38:63:03:1f:06:46:0f:97:f4:ca: 3b:a8:4d:fb:c4:c9:cb:62:46:6d:85:17:dd:b6:18: d1:49:1b:7f:36:84:14:3b:8c:4e:67:86:ef:b1:f2: c2:e7:13:28:36:04:a5:8e:e2:35:d0:60:06:6b:05: 17:fa:36:9a:ed:72:ea:cf:fd:d6:3d:70:d9:07:f4: d1:16:3f:d2:3c:1b:75:77:bd:97:b5:cb:c6:55:08: a3:8d:ef:48:2c:b6:97:e4:08:7f:a6:a1:e4:80:03: b3:c5:15:eb:62:be:22:99:b9:a5:a0:b3:e9:cd:6e: fb:45:b9:dd:26:da:42:df:fd:fa:ca:32:cf:ac:96: c9:98:ec:2f:79:fa:00:f2:be:20:e6:f0:e2:24:71: e8:6b:b0:21:dc:50:29:c5:24:87:42:45:32:7a:e3: 52:50:7e:d2:8c:f1:db:c0:6e:fa:08:4c:2f:a4:31: 48:b4:a9:e1:d1:f9:8a:2f:fe:8d:5c:d4:52:a0:a4: 77:ed:1f:d2:f2:2e:74:c9:36:3b:12:b0:83:9c:61: a5:f6:8f:b2:af:14:4e:76:1e:d1:01:07:10:df:5b: 5c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:7B:97:A5:09:0C:D4:39:8C:88:ED:6C:E7:08:7B:3A:A0:12:21:14 X509v3 Authority Key Identifier: keyid:35:01:77:24:57:E0:F8:27:B9:E9:20:B0:0C:D1:14:82:4A:5F:A6:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NQF3JFfg-Ce56SCwDNEUgkpfpiE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/903931-1698-41b7-af34-9dd82735da3d/1/NQF3JFfg-Ce56SCwDNEUgkpfpiE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/903931-1698-41b7-af34-9dd82735da3d/1/NQF3JFfg-Ce56SCwDNEUgkpfpiE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:2d:cc:05:a7:93:96:3f:64:7a:ae:80:55:38:10:23:78:64: 35:2f:3d:98:90:e8:a6:5c:a3:47:3f:ca:cd:bd:b9:18:9f:fe: 56:44:13:7a:0d:8d:56:f0:f4:0f:b5:e5:07:70:20:a4:e0:51: 99:3a:ea:1d:09:94:44:72:48:79:af:cf:e2:35:46:51:5c:d2: 9e:dd:63:b5:be:f5:d9:10:82:47:0b:a2:cc:80:d0:8d:3d:51: 13:5c:8a:54:42:00:d2:0b:7b:95:6f:75:22:a9:19:51:de:6e: e8:58:e5:35:94:62:90:d3:5a:cb:17:ca:51:fd:42:c5:32:9a: 8d:00:12:94:8a:45:9e:44:1b:ce:59:91:a6:84:3d:0e:71:0f: 7a:0d:5c:8a:20:72:3e:c3:4b:54:b4:e8:3c:a2:23:74:30:40: 09:c1:a4:af:33:e6:a4:86:12:cd:a6:63:f4:cb:83:09:10:02: 69:00:8a:d9:a1:af:6c:bb:ec:ae:78:e2:d2:e1:29:04:76:e4: 1c:ff:a1:1f:3f:88:fb:56:22:73:de:b9:77:18:d3:e3:e6:00: 94:49:cc:fa:92:58:a0:93:fa:64:bd:bb:e4:7a:5b:d2:81:39: 0b:1c:3d:ca:b4:87:13:ad:cf:5c:ce:9d:21:e1:7b:1f:6d:82: b5:c6:89:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtsxx1zPZpOF8AcvjjZc6X/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MDE3NzI0NTdlMGY4MjdiOWU5MjBiMDBjZDExNDgyNGE1 ZmE2MjEwHhcNMjUxMjMwMDEwMjI3WhcNMjUxMjMxMDEwMjI3WjAzMTEwLwYDVQQD Eyg1NTdiOTdhNTA5MGNkNDM5OGM4OGVkNmNlNzA4N2IzYWEwMTIyMTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7Gc8Wbln5YX3DOZ8kRroUzFHrVB Lb8TseJs+VjtKxwbcDhjAx8GRg+X9Mo7qE37xMnLYkZthRfdthjRSRt/NoQUO4xO Z4bvsfLC5xMoNgSljuI10GAGawUX+jaa7XLqz/3WPXDZB/TRFj/SPBt1d72XtcvG VQijje9ILLaX5Ah/pqHkgAOzxRXrYr4imbmloLPpzW77RbndJtpC3/36yjLPrJbJ mOwvefoA8r4g5vDiJHHoa7Ah3FApxSSHQkUyeuNSUH7SjPHbwG76CEwvpDFItKnh 0fmKL/6NXNRSoKR37R/S8i50yTY7ErCDnGGl9o+yrxROdh7RAQcQ31tclQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFV7l6UJDNQ5jIjtbOcIezqgEiEUMB8GA1UdIwQY MBaAFDUBdyRX4PgnuekgsAzRFIJKX6YhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlFGM0pGZmctQ2U1NlNDd0RORVVna3BmcGlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi85MDM5MzEtMTY5OC00MWI3LWFmMzQt OWRkODI3MzVkYTNkLzEvTlFGM0pGZmctQ2U1NlNDd0RORVVna3BmcGlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi85MDM5MzEtMTY5OC00MWI3LWFmMzQtOWRkODI3MzVkYTNk LzEvTlFGM0pGZmctQ2U1NlNDd0RORVVna3BmcGlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPC3MBaeT lj9keq6AVTgQI3hkNS89mJDoplyjRz/Kzb25GJ/+VkQTeg2NVvD0D7XlB3AgpOBR mTrqHQmURHJIea/P4jVGUVzSnt1jtb712RCCRwuizIDQjT1RE1yKVEIA0gt7lW91 IqkZUd5u6FjlNZRikNNayxfKUf1CxTKajQASlIpFnkQbzlmRpoQ9DnEPeg1ciiBy PsNLVLToPKIjdDBACcGkrzPmpIYSzaZj9MuDCRACaQCK2aGvbLvsrnji0uEpBHbk HP+hHz+I+1Yic965dxjT4+YAlEnM+pJYoJP6ZL275Hpb0oE5Cxw9yrSHE63PXM6d IeF7H22CtcaJng== -----END CERTIFICATE-----Generated at Tue Dec 30 10:32:17 2025 by rpki-client