This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.mft File: NQzOG50G3M6IVmWVNkmcFgM5E3A.mft (raw, json) Hash identifier: XDGadCX0jybfP/b9cGFk70l+O3fUM01XMHVLq3ExxvI= Subject key identifier: 82:EF:84:84:EB:2D:9A:C3:0D:CE:C0:A0:D0:05:3F:AF:9F:2C:DC:41 Authority key identifier: 35:0C:CE:1B:9D:06:DC:CE:88:56:65:95:36:49:9C:16:03:39:13:70 Certificate issuer: /CN=350cce1b9d06dcce8856659536499c1603391370 Certificate serial: 019B42B79752A8FEF1C153A2952656D7E30D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NQzOG50G3M6IVmWVNkmcFgM5E3A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.mft Manifest number: 178D Signing time: Sun 21 Dec 2025 21:01:26 +0000 Manifest this update: Sun 21 Dec 2025 21:01:26 +0000 Manifest next update: Mon 22 Dec 2025 21:01:26 +0000 Files and hashes: 1: DFk17XzVK0-2LT-y57eUHLqsGoE.roa (hash: dXqY+iE+GyZrGAN3VZSoDHBgCd8KrkAD+zhIs/sw6B0=) 2: InA1Og6sR4YUgU6o-aAa42NlxCE.roa (hash: +mBUSakr5JllZ5ayoZAKPyK7MyouaEc8pwLjmxou6hg=) 3: NQzOG50G3M6IVmWVNkmcFgM5E3A.crl (hash: YqbJs+xeInYEgpAZZ+BPc/5pEWO5lnL0VB3WdVVlXH4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.crl rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.mft rsync://rpki.ripe.net/repository/DEFAULT/NQzOG50G3M6IVmWVNkmcFgM5E3A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 21:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:b7:97:52:a8:fe:f1:c1:53:a2:95:26:56:d7:e3:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=350cce1b9d06dcce8856659536499c1603391370 Validity Not Before: Dec 21 21:01:26 2025 GMT Not After : Dec 22 21:01:26 2025 GMT Subject: CN=82ef8484eb2d9ac30dcec0a0d0053faf9f2cdc41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:00:c9:c5:21:04:58:c1:78:73:c5:0e:60:24: b8:2f:bc:89:8f:4d:9e:8a:ac:fb:ff:75:ae:8e:89: df:27:c4:84:a5:6d:77:55:ad:ae:83:2d:8d:79:72: 68:a0:f6:c0:cd:d2:78:02:a2:ed:90:9a:a0:9c:86: 27:9d:c3:dd:c8:0c:ce:26:8c:0d:cb:87:6e:75:cc: 47:f8:d9:f7:a3:92:e8:fd:09:08:0b:50:63:71:25: f6:85:09:99:2b:ff:28:41:6d:54:e1:ae:5d:48:7c: ad:45:2c:8f:16:ec:59:e8:d9:63:61:7b:0e:0f:2d: 55:ef:dd:0a:4d:dd:17:bd:c6:81:4b:19:13:38:0b: 45:f5:a8:46:93:bc:a5:dd:42:34:68:c2:03:a3:0d: 89:b2:b3:3c:6a:74:95:c6:87:66:42:af:23:be:be: 7a:e8:02:7b:10:0a:af:29:92:3d:19:04:c2:09:69: 06:08:b0:58:93:2b:b2:a0:9c:c8:a3:65:8f:59:18: b2:6a:37:3c:20:f9:cd:4c:cc:0c:9b:84:ba:5f:dc: 55:63:08:89:37:85:ec:03:70:ae:e8:06:fd:ed:2c: e7:dd:0c:92:36:d6:a8:dd:02:a5:f0:ea:0a:ef:65: 5f:fb:29:d8:7b:d9:39:76:43:ba:99:7a:83:e5:b2: 9c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:EF:84:84:EB:2D:9A:C3:0D:CE:C0:A0:D0:05:3F:AF:9F:2C:DC:41 X509v3 Authority Key Identifier: keyid:35:0C:CE:1B:9D:06:DC:CE:88:56:65:95:36:49:9C:16:03:39:13:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NQzOG50G3M6IVmWVNkmcFgM5E3A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:70:7e:c9:0b:a2:c8:41:9f:ac:45:b4:0c:71:3c:36:53:f7: 2f:08:d9:08:32:88:2e:77:4c:17:18:87:13:ac:1f:46:e3:f8: 32:ad:0a:a8:0f:b0:55:03:3d:ae:1e:40:cc:ca:0e:11:20:05: a1:6a:55:91:68:82:d6:7c:57:f7:67:e3:e6:7b:9c:90:a6:1a: d8:4e:2b:f4:da:5a:5d:d0:f5:c2:1f:5c:2b:af:1b:5b:a2:56: 90:c6:33:3f:5f:67:53:68:59:b3:28:77:eb:3c:b4:75:dc:8a: b9:77:68:5b:f3:1b:d7:b4:a4:f8:43:6b:33:44:61:35:46:a0: fd:d8:a5:c0:b4:84:55:1e:24:d8:5b:72:ed:d7:41:43:f8:1b: c9:cb:a8:36:bd:df:06:21:f4:40:09:7a:37:d1:2e:bc:17:07: c4:41:f1:7c:7c:3e:76:3e:71:66:db:ee:7c:1c:07:ac:f6:05: 21:12:8e:c6:bf:81:30:7c:80:33:8c:ba:42:10:0f:5a:c3:60: a2:61:ce:01:0b:66:74:3b:8b:8b:1f:99:f7:76:a6:f4:f3:45: 73:0f:62:49:5e:19:5c:d0:2d:33:79:37:d9:12:33:02:23:a0: 69:4f:1e:1f:25:fb:1f:ba:61:da:a5:0c:75:23:06:94:76:ce: 61:8b:93:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCt5dSqP7xwVOilSZW1+MNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MGNjZTFiOWQwNmRjY2U4ODU2NjU5NTM2NDk5YzE2MDMz OTEzNzAwHhcNMjUxMjIxMjEwMTI2WhcNMjUxMjIyMjEwMTI2WjAzMTEwLwYDVQQD Eyg4MmVmODQ4NGViMmQ5YWMzMGRjZWMwYTBkMDA1M2ZhZjlmMmNkYzQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwDJxSEEWMF4c8UOYCS4L7yJj02e iqz7/3WujonfJ8SEpW13Va2ugy2NeXJooPbAzdJ4AqLtkJqgnIYnncPdyAzOJowN y4dudcxH+Nn3o5Lo/QkIC1BjcSX2hQmZK/8oQW1U4a5dSHytRSyPFuxZ6NljYXsO Dy1V790KTd0XvcaBSxkTOAtF9ahGk7yl3UI0aMIDow2JsrM8anSVxodmQq8jvr56 6AJ7EAqvKZI9GQTCCWkGCLBYkyuyoJzIo2WPWRiyajc8IPnNTMwMm4S6X9xVYwiJ N4XsA3Cu6Ab97Szn3QySNtao3QKl8OoK72Vf+ynYe9k5dkO6mXqD5bKcrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFILvhITrLZrDDc7AoNAFP6+fLNxBMB8GA1UdIwQY MBaAFDUMzhudBtzOiFZllTZJnBYDORNwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlF6T0c1MEczTTZJVm1XVk5rbWNGZ001RTNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9mNTJkYjktOGUyNS00Mjk3LTkzZmQt NTU0MTVhMGJhNzNiLzEvTlF6T0c1MEczTTZJVm1XVk5rbWNGZ001RTNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9mNTJkYjktOGUyNS00Mjk3LTkzZmQtNTU0MTVhMGJhNzNi LzEvTlF6T0c1MEczTTZJVm1XVk5rbWNGZ001RTNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANnB+yQui yEGfrEW0DHE8NlP3LwjZCDKILndMFxiHE6wfRuP4Mq0KqA+wVQM9rh5AzMoOESAF oWpVkWiC1nxX92fj5nuckKYa2E4r9NpaXdD1wh9cK68bW6JWkMYzP19nU2hZsyh3 6zy0ddyKuXdoW/Mb17Sk+ENrM0RhNUag/dilwLSEVR4k2Fty7ddBQ/gbycuoNr3f BiH0QAl6N9EuvBcHxEHxfHw+dj5xZtvufBwHrPYFIRKOxr+BMHyAM4y6QhAPWsNg omHOAQtmdDuLix+Z93am9PNFcw9iSV4ZXNAtM3k32RIzAiOgaU8eHyX7H7ph2qUM dSMGlHbOYYuTyg== -----END CERTIFICATE-----Generated at Mon Dec 22 02:31:24 2025 by rpki-client