This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft File: nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft (raw, json) Hash identifier: RftPyDZqHwrAzKtztCQn/4DqrFlX8FA66V8CWcAjeCI= Subject key identifier: BE:24:CB:25:AF:07:C2:0C:BB:22:F6:ED:F0:C7:CA:46:BD:82:02:53 Authority key identifier: 9D:06:6C:B8:48:8D:AE:7E:42:34:AA:7C:89:24:30:DA:D1:1F:E5:B1 Certificate issuer: /CN=9d066cb8488dae7e4234aa7c892430dad11fe5b1 Certificate serial: 019B3DC80F0172D80EEF0728F8061459A66B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft Manifest number: 179A Signing time: Sat 20 Dec 2025 22:01:19 +0000 Manifest this update: Sat 20 Dec 2025 22:01:19 +0000 Manifest next update: Sun 21 Dec 2025 22:01:19 +0000 Files and hashes: 1: XTN0FV8C4mD4Sc_8vyQmb4SgIPI.roa (hash: BGUozoIWxfNXYZv8C7K/va/x94laPWjXcWXXKyL1Cm4=) 2: ctIdcbAxzlgE61iaJYeLZI-atK4.roa (hash: xe/X44jbVuhNTWtEZLlddMSK0Nf/sdgGvPMIEXHpN6g=) 3: nQZsuEiNrn5CNKp8iSQw2tEf5bE.crl (hash: ZNgxjUjIzDdfinK49vVlJNvm2YlOAoQOY1R1yl9ug48=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.crl rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c8:0f:01:72:d8:0e:ef:07:28:f8:06:14:59:a6:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d066cb8488dae7e4234aa7c892430dad11fe5b1 Validity Not Before: Dec 20 22:01:19 2025 GMT Not After : Dec 21 22:01:19 2025 GMT Subject: CN=be24cb25af07c20cbb22f6edf0c7ca46bd820253 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:77:bc:d4:66:df:93:56:96:58:98:4f:26:48: 3a:fc:0d:04:56:af:d4:0c:87:90:b2:26:a3:b9:28: c9:47:ae:66:b0:4c:6b:06:c7:df:65:ab:a6:81:e7: fe:6a:38:48:18:d5:e8:c3:a1:a7:74:bf:36:68:23: 7a:5b:39:8d:e0:67:e9:6e:8e:e3:90:c0:04:96:a8: 93:1c:c8:ec:6d:15:f9:a2:95:df:2d:31:67:d1:3f: 4b:7a:c2:be:92:60:bc:53:59:13:62:b6:d3:43:e0: 5a:44:2c:fb:2c:9b:19:e9:34:9d:24:b2:03:d1:f3: ef:b0:a7:c7:4e:24:b5:a5:71:84:c9:85:35:bc:bd: 19:f6:25:13:ca:97:9d:05:59:74:b9:19:41:d4:11: 2c:5f:53:5d:1e:66:0c:9c:e2:56:92:30:dc:8c:0c: 64:85:75:5d:26:ef:fd:49:19:b4:23:4b:5b:8b:b1: 89:b2:9a:b2:fd:9d:81:91:c2:08:6f:1f:35:bc:ca: 69:0c:71:5b:18:c3:a8:48:5b:03:95:7c:52:35:ea: 5e:9e:4a:19:cc:b0:35:e1:df:a4:44:6b:0a:14:e6: cd:b0:20:e1:b0:62:e4:b1:8a:13:1d:74:2f:17:fe: f6:a0:ae:75:d4:aa:2e:27:a5:c7:24:34:d1:62:e3: 03:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:24:CB:25:AF:07:C2:0C:BB:22:F6:ED:F0:C7:CA:46:BD:82:02:53 X509v3 Authority Key Identifier: keyid:9D:06:6C:B8:48:8D:AE:7E:42:34:AA:7C:89:24:30:DA:D1:1F:E5:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:9b:63:f6:49:c8:86:ad:e2:8f:80:1e:4c:1e:38:13:be:3a: 6d:dc:47:00:44:a4:04:0e:7c:3e:32:4d:72:db:bb:61:d2:d1: 68:30:ba:23:2e:4a:51:82:76:2e:07:3a:4a:a0:9c:f5:86:27: 85:29:e8:49:e3:ea:d3:a3:f7:9d:54:71:cc:47:b0:48:1f:20: a9:e4:02:db:84:4c:5e:08:fe:b9:06:95:9f:f3:6c:3f:25:37: 70:a3:91:79:7d:7e:f2:6a:dc:23:e9:1a:f7:43:96:02:3b:0a: 85:39:45:34:d3:2b:00:90:2a:05:5a:83:c2:16:e0:00:84:63: 88:7b:57:68:09:8e:f3:9e:78:b8:89:77:61:59:fa:59:fb:cd: fa:51:b5:8a:f3:36:63:33:35:01:ff:28:4d:e2:83:02:d9:12: 09:13:de:dc:b9:11:8f:f8:1f:ce:65:05:98:98:ce:b6:54:49: b8:8e:f9:91:97:a4:ec:2d:8e:4f:3a:bf:43:39:9a:d3:68:12: e9:7a:ce:c0:4e:3a:55:73:14:0e:e6:3b:ab:22:af:63:c4:57: 14:a6:7d:ff:c2:a1:d9:0f:aa:58:7a:4d:fb:19:42:0f:dd:e6: c7:80:c2:f4:a1:4d:d7:76:51:5e:1a:dd:ea:53:4c:f5:96:a4: e8:20:d3:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9yA8BctgO7wco+AYUWaZrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMDY2Y2I4NDg4ZGFlN2U0MjM0YWE3Yzg5MjQzMGRhZDEx ZmU1YjEwHhcNMjUxMjIwMjIwMTE5WhcNMjUxMjIxMjIwMTE5WjAzMTEwLwYDVQQD EyhiZTI0Y2IyNWFmMDdjMjBjYmIyMmY2ZWRmMGM3Y2E0NmJkODIwMjUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3e81Gbfk1aWWJhPJkg6/A0EVq/U DIeQsiajuSjJR65msExrBsffZaumgef+ajhIGNXow6GndL82aCN6WzmN4Gfpbo7j kMAElqiTHMjsbRX5opXfLTFn0T9LesK+kmC8U1kTYrbTQ+BaRCz7LJsZ6TSdJLID 0fPvsKfHTiS1pXGEyYU1vL0Z9iUTypedBVl0uRlB1BEsX1NdHmYMnOJWkjDcjAxk hXVdJu/9SRm0I0tbi7GJspqy/Z2BkcIIbx81vMppDHFbGMOoSFsDlXxSNepenkoZ zLA14d+kRGsKFObNsCDhsGLksYoTHXQvF/72oK511KouJ6XHJDTRYuMDJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL4kyyWvB8IMuyL27fDHyka9ggJTMB8GA1UdIwQY MBaAFJ0GbLhIja5+QjSqfIkkMNrRH+WxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblFac3VFaU5ybjVDTktwOGlTUXcydEVmNWJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9kMGQyZmQtYWE5MC00MjA3LTkxMDQt M2VmMDJkNTE0MGI3LzEvblFac3VFaU5ybjVDTktwOGlTUXcydEVmNWJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC9kMGQyZmQtYWE5MC00MjA3LTkxMDQtM2VmMDJkNTE0MGI3 LzEvblFac3VFaU5ybjVDTktwOGlTUXcydEVmNWJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgJtj9knI hq3ij4AeTB44E746bdxHAESkBA58PjJNctu7YdLRaDC6Iy5KUYJ2Lgc6SqCc9YYn hSnoSePq06P3nVRxzEewSB8gqeQC24RMXgj+uQaVn/NsPyU3cKOReX1+8mrcI+ka 90OWAjsKhTlFNNMrAJAqBVqDwhbgAIRjiHtXaAmO8554uIl3YVn6WfvN+lG1ivM2 YzM1Af8oTeKDAtkSCRPe3LkRj/gfzmUFmJjOtlRJuI75kZek7C2OTzq/Qzma02gS 6XrOwE46VXMUDuY7qyKvY8RXFKZ9/8Kh2Q+qWHpN+xlCD93mx4DC9KFN13ZRXhrd 6lNM9Zak6CDTFg== -----END CERTIFICATE-----Generated at Sun Dec 21 02:45:27 2025 by rpki-client