This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/NmqdVCKXV3s3qgxCMZWv4qmOE10.mft File: NmqdVCKXV3s3qgxCMZWv4qmOE10.mft (raw, json) Hash identifier: UzbLp4vVh2jLOo6oO8TtqJCfiv4kSpm+1mFCh3PCLtc= Subject key identifier: A0:4D:30:FC:38:2E:09:ED:22:24:F1:AE:B5:3E:A2:7F:C3:BD:B0:0B Authority key identifier: 36:6A:9D:54:22:97:57:7B:37:AA:0C:42:31:95:AF:E2:A9:8E:13:5D Certificate issuer: /CN=366a9d542297577b37aa0c423195afe2a98e135d Certificate serial: 019B38333AC9AE44117D07158E7D47165322 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NmqdVCKXV3s3qgxCMZWv4qmOE10.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/NmqdVCKXV3s3qgxCMZWv4qmOE10.mft Manifest number: 1789 Signing time: Fri 19 Dec 2025 20:00:40 +0000 Manifest this update: Fri 19 Dec 2025 20:00:40 +0000 Manifest next update: Sat 20 Dec 2025 20:00:40 +0000 Files and hashes: 1: NmqdVCKXV3s3qgxCMZWv4qmOE10.crl (hash: DyAe640yJykpAebv15XehjZoNp3U4lKHT+5oFBIneY4=) 2: bEKsBvD9r6Xyt_P3Ap1ApX4DjcU.roa (hash: 24Br4dwLUP9p+zXB4KMnlxiNc2TbHeks2Jsk87QFi10=) 3: kSQ_R5Z-vsBcuOXx6WhdFdmllY0.roa (hash: OhKVJv+g1lqmaayTLliiukgCHTE/MZNzjIGSTC2Zdcw=) 4: naFGULOSYvt_ys0vvTSfwr2rqtk.roa (hash: b43Uckjczt2PCUz41jkHhIKmF+uwsILXTS5gZeF8UNU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/NmqdVCKXV3s3qgxCMZWv4qmOE10.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/NmqdVCKXV3s3qgxCMZWv4qmOE10.mft rsync://rpki.ripe.net/repository/DEFAULT/NmqdVCKXV3s3qgxCMZWv4qmOE10.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 17:13:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:33:3a:c9:ae:44:11:7d:07:15:8e:7d:47:16:53:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=366a9d542297577b37aa0c423195afe2a98e135d Validity Not Before: Dec 19 20:00:40 2025 GMT Not After : Dec 20 20:00:40 2025 GMT Subject: CN=a04d30fc382e09ed2224f1aeb53ea27fc3bdb00b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:23:d2:9f:eb:37:6e:e4:39:e8:df:39:9c:b4: 14:0d:5f:b9:d8:de:e7:39:18:2b:1a:84:17:16:0b: 7b:04:b7:3c:98:c7:2e:46:5a:07:03:33:93:cd:f9: 54:21:b9:0f:1b:2b:85:be:19:f7:cd:a6:da:86:6d: 03:f3:6a:42:eb:c0:13:1e:7d:1b:68:c8:52:3d:29: 2f:d0:85:45:0e:e4:04:be:01:2c:fa:52:6e:10:f1: 06:83:32:9e:39:97:09:6e:9e:b9:f0:05:19:e8:3a: ca:a4:e8:aa:9b:b9:d1:82:77:ff:61:40:a6:36:bb: 08:32:52:75:68:31:de:da:b6:d3:b0:2c:85:73:6d: 46:99:96:31:9a:1b:ce:81:67:35:24:88:90:04:76: 02:cf:e1:da:d2:5f:24:d9:a9:8a:0d:e9:64:52:74: 69:8e:9a:08:68:e6:03:9d:5d:59:be:7c:8f:17:40: 2e:28:4d:5c:36:44:d4:dd:13:86:97:dc:eb:15:bc: b3:b4:99:e1:5c:d1:50:84:87:69:1a:cf:05:4d:46: d8:44:0e:46:5c:6c:fd:53:65:cb:30:54:cd:a4:df: 42:2b:fb:e2:fe:9e:d2:58:1a:36:c1:b7:19:fe:cf: fc:d8:90:fe:2f:e0:3e:f2:b8:ac:26:19:a4:02:a0: 60:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:4D:30:FC:38:2E:09:ED:22:24:F1:AE:B5:3E:A2:7F:C3:BD:B0:0B X509v3 Authority Key Identifier: keyid:36:6A:9D:54:22:97:57:7B:37:AA:0C:42:31:95:AF:E2:A9:8E:13:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NmqdVCKXV3s3qgxCMZWv4qmOE10.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/NmqdVCKXV3s3qgxCMZWv4qmOE10.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/NmqdVCKXV3s3qgxCMZWv4qmOE10.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:1f:d7:d5:64:0e:b8:c6:ad:74:1f:6c:b0:f9:e1:e9:f5:73: d4:48:0c:2a:da:f2:25:b2:8c:5c:61:71:76:14:1e:64:d2:f1: ed:74:e3:81:14:f1:f8:18:57:07:51:76:01:c0:26:1b:aa:04: e5:47:24:ec:da:6c:32:d9:5e:0e:01:80:69:7a:03:50:f1:54: c9:2b:21:4b:51:04:53:b2:69:df:35:85:13:6e:8e:a8:92:10: e1:64:ef:c9:db:5f:d5:17:39:05:dd:98:ed:b5:cb:14:df:a9: e9:28:ec:26:12:35:c3:01:45:89:86:23:04:e6:6c:1e:29:9b: 1a:24:69:55:20:33:19:b9:57:f9:16:e9:95:2a:f1:38:70:65: 60:71:fc:c8:fa:bd:a5:a1:58:32:24:27:1d:88:46:09:54:a9: a9:66:c3:c8:4e:c8:b0:a6:f7:56:74:0d:71:2e:63:9c:45:38: fa:90:6f:ac:70:3e:b6:21:c7:21:55:17:c5:20:cb:f6:29:37: 8f:30:4f:ff:4c:ce:04:dc:6f:ac:f5:96:c6:bb:6c:d9:87:3f: 6c:57:eb:e8:a7:41:5f:12:24:6b:9a:ff:b1:3f:68:c7:c4:f4: 8d:cf:4d:3c:4e:3b:4b:c5:db:ad:67:2e:90:44:63:10:4f:8e: ac:ba:be:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4MzrJrkQRfQcVjn1HFlMiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2NmE5ZDU0MjI5NzU3N2IzN2FhMGM0MjMxOTVhZmUyYTk4 ZTEzNWQwHhcNMjUxMjE5MjAwMDQwWhcNMjUxMjIwMjAwMDQwWjAzMTEwLwYDVQQD EyhhMDRkMzBmYzM4MmUwOWVkMjIyNGYxYWViNTNlYTI3ZmMzYmRiMDBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9SPSn+s3buQ56N85nLQUDV+52N7n ORgrGoQXFgt7BLc8mMcuRloHAzOTzflUIbkPGyuFvhn3zabahm0D82pC68ATHn0b aMhSPSkv0IVFDuQEvgEs+lJuEPEGgzKeOZcJbp658AUZ6DrKpOiqm7nRgnf/YUCm NrsIMlJ1aDHe2rbTsCyFc21GmZYxmhvOgWc1JIiQBHYCz+Ha0l8k2amKDelkUnRp jpoIaOYDnV1ZvnyPF0AuKE1cNkTU3ROGl9zrFbyztJnhXNFQhIdpGs8FTUbYRA5G XGz9U2XLMFTNpN9CK/vi/p7SWBo2wbcZ/s/82JD+L+A+8risJhmkAqBgXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKBNMPw4LgntIiTxrrU+on/DvbALMB8GA1UdIwQY MBaAFDZqnVQil1d7N6oMQjGVr+KpjhNdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTm1xZFZDS1hWM3MzcWd4Q01aV3Y0cW1PRTEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9mYzc1NDUtYzVmYS00M2JkLTg4Mzkt ZDE4NWRlYzA2MDEyLzEvTm1xZFZDS1hWM3MzcWd4Q01aV3Y0cW1PRTEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS9mYzc1NDUtYzVmYS00M2JkLTg4MzktZDE4NWRlYzA2MDEy LzEvTm1xZFZDS1hWM3MzcWd4Q01aV3Y0cW1PRTEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhR/X1WQO uMatdB9ssPnh6fVz1EgMKtryJbKMXGFxdhQeZNLx7XTjgRTx+BhXB1F2AcAmG6oE 5Uck7NpsMtleDgGAaXoDUPFUySshS1EEU7Jp3zWFE26OqJIQ4WTvydtf1Rc5Bd2Y 7bXLFN+p6SjsJhI1wwFFiYYjBOZsHimbGiRpVSAzGblX+RbplSrxOHBlYHH8yPq9 paFYMiQnHYhGCVSpqWbDyE7IsKb3VnQNcS5jnEU4+pBvrHA+tiHHIVUXxSDL9ik3 jzBP/0zOBNxvrPWWxrts2Yc/bFfr6KdBXxIka5r/sT9ox8T0jc9NPE47S8XbrWcu kERjEE+OrLq+ww== -----END CERTIFICATE-----Generated at Sat Dec 20 02:59:22 2025 by rpki-client