This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/ba3577-ccb3-4ea6-8368-7458608f8d99/1/nqHn4vjzF3WfNGj9gVvxTrNuIcg.mft File: nqHn4vjzF3WfNGj9gVvxTrNuIcg.mft (raw, json) Hash identifier: ExtZmah/x96OglMJh91nORsaCXFfUFtlMGtFmRRCTqQ= Subject key identifier: 95:40:7B:9F:90:68:57:BA:E9:75:B9:E5:26:C5:AA:74:ED:97:AC:A6 Authority key identifier: 9E:A1:E7:E2:F8:F3:17:75:9F:34:68:FD:81:5B:F1:4E:B3:6E:21:C8 Certificate issuer: /CN=9ea1e7e2f8f317759f3468fd815bf14eb36e21c8 Certificate serial: 019B66FB181EAD83299016B0F83829D56B18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nqHn4vjzF3WfNGj9gVvxTrNuIcg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/ba3577-ccb3-4ea6-8368-7458608f8d99/1/nqHn4vjzF3WfNGj9gVvxTrNuIcg.mft Manifest number: 12BC Signing time: Sun 28 Dec 2025 22:01:30 +0000 Manifest this update: Sun 28 Dec 2025 22:01:30 +0000 Manifest next update: Mon 29 Dec 2025 22:01:30 +0000 Files and hashes: 1: nqHn4vjzF3WfNGj9gVvxTrNuIcg.crl (hash: E5fVNzNDjpNButmzDp4Dv7PON986Qh6FkoY3Oe5vU8o=) 2: vMWejL_WfAw5UGYBVG882HdQDVU.roa (hash: UfokJ9esFOS4de6evRWO+CcRCXAegKzSyR2ErWU1fPQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/ba3577-ccb3-4ea6-8368-7458608f8d99/1/nqHn4vjzF3WfNGj9gVvxTrNuIcg.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/ba3577-ccb3-4ea6-8368-7458608f8d99/1/nqHn4vjzF3WfNGj9gVvxTrNuIcg.mft rsync://rpki.ripe.net/repository/DEFAULT/nqHn4vjzF3WfNGj9gVvxTrNuIcg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 20:59:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:66:fb:18:1e:ad:83:29:90:16:b0:f8:38:29:d5:6b:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ea1e7e2f8f317759f3468fd815bf14eb36e21c8 Validity Not Before: Dec 28 22:01:30 2025 GMT Not After : Dec 29 22:01:30 2025 GMT Subject: CN=95407b9f906857bae975b9e526c5aa74ed97aca6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:50:c8:fe:e6:48:d0:b5:8e:7e:cd:89:7d:a1: 9e:3d:1b:ac:57:4e:d3:b0:55:e4:75:9d:87:e4:48: 1e:5c:f2:c0:b0:ca:46:a8:4a:f2:ee:a7:dd:7c:fa: 46:23:43:a0:22:22:77:03:11:4f:73:10:6b:d1:63: 98:0a:90:4b:a0:4e:8b:f8:ed:16:8a:4a:ce:21:d3: d6:50:1f:ff:e7:f1:68:4a:08:20:0c:e3:76:7a:4e: ed:b1:19:31:62:7b:52:62:c9:90:f4:bc:36:01:55: 7d:3b:b0:b7:1a:aa:1f:55:7f:69:aa:29:8f:d5:f8: 78:63:fe:4f:42:76:50:91:f8:00:b8:49:15:6f:f3: 2b:ef:22:e2:58:b1:c5:a9:0b:0c:c5:ec:b2:d2:27: 85:ff:2c:e6:03:c1:e6:93:31:b4:04:26:d6:66:c7: 01:f7:84:da:f1:29:a1:f8:79:0a:a8:86:7a:6c:ad: 3b:65:11:5a:2c:05:81:fa:f9:00:15:90:46:b2:ac: c9:33:c7:a1:6f:fc:d3:9e:4e:a6:25:0f:90:1d:24: 0b:50:86:56:de:be:3d:ea:0b:9d:83:83:8f:75:ed: f1:bb:70:ee:fa:ef:46:15:10:30:1a:f3:09:b0:7e: 6d:e8:bf:66:8b:db:4a:98:2a:00:35:5f:bd:1f:bf: 16:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:40:7B:9F:90:68:57:BA:E9:75:B9:E5:26:C5:AA:74:ED:97:AC:A6 X509v3 Authority Key Identifier: keyid:9E:A1:E7:E2:F8:F3:17:75:9F:34:68:FD:81:5B:F1:4E:B3:6E:21:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nqHn4vjzF3WfNGj9gVvxTrNuIcg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ba3577-ccb3-4ea6-8368-7458608f8d99/1/nqHn4vjzF3WfNGj9gVvxTrNuIcg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ba3577-ccb3-4ea6-8368-7458608f8d99/1/nqHn4vjzF3WfNGj9gVvxTrNuIcg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:e6:87:ac:24:e5:db:e4:03:6a:ba:29:5e:e8:e2:e5:d4:65: ec:89:fe:86:48:bc:23:0b:d8:32:5b:ff:ad:ee:c5:ad:14:bb: 5a:fd:50:d0:0a:e0:8d:bc:20:96:8d:d2:02:65:c3:e6:2d:a0: 73:57:f7:6e:95:53:14:83:11:4c:e9:ff:ea:f9:85:26:c7:60: 7f:37:04:8b:57:9a:cc:26:fb:01:7c:2f:db:54:b5:e1:5b:a3: b5:7f:14:16:78:73:c1:cc:70:64:5a:10:43:a7:19:93:46:b9: ed:d0:60:99:c3:a4:1e:f0:b8:5d:79:99:7f:ce:19:8c:da:d5: d0:b5:6c:90:63:50:98:5c:8c:e7:d8:ff:a7:66:eb:15:79:cf: bb:37:cd:af:02:47:73:e1:33:25:d8:30:8c:6b:4a:88:83:64: ab:94:2b:4a:6b:04:3e:8c:dd:c0:0f:47:38:79:43:4b:de:cc: c6:ea:84:62:b7:dc:98:5a:d1:d1:a4:35:82:4c:13:7a:a5:d8: 2f:a5:c1:8d:c1:cc:17:e1:b9:c4:cc:fd:3c:a9:e1:74:e7:c4: 5a:48:a1:83:74:7c:1f:f5:eb:d2:0a:a1:40:1c:8d:e3:f5:bd: bd:38:cd:b9:2f:a9:bd:35:9e:33:92:be:78:ad:9b:8f:c0:4f: a8:1f:f6:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtm+xgerYMpkBaw+Dgp1WsYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllYTFlN2UyZjhmMzE3NzU5ZjM0NjhmZDgxNWJmMTRlYjM2 ZTIxYzgwHhcNMjUxMjI4MjIwMTMwWhcNMjUxMjI5MjIwMTMwWjAzMTEwLwYDVQQD Eyg5NTQwN2I5ZjkwNjg1N2JhZTk3NWI5ZTUyNmM1YWE3NGVkOTdhY2E2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9lDI/uZI0LWOfs2JfaGePRusV07T sFXkdZ2H5EgeXPLAsMpGqEry7qfdfPpGI0OgIiJ3AxFPcxBr0WOYCpBLoE6L+O0W ikrOIdPWUB//5/FoSgggDON2ek7tsRkxYntSYsmQ9Lw2AVV9O7C3GqofVX9pqimP 1fh4Y/5PQnZQkfgAuEkVb/Mr7yLiWLHFqQsMxeyy0ieF/yzmA8HmkzG0BCbWZscB 94Ta8Smh+HkKqIZ6bK07ZRFaLAWB+vkAFZBGsqzJM8ehb/zTnk6mJQ+QHSQLUIZW 3r496gudg4OPde3xu3Du+u9GFRAwGvMJsH5t6L9mi9tKmCoANV+9H78WeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJVAe5+QaFe66XW55SbFqnTtl6ymMB8GA1UdIwQY MBaAFJ6h5+L48xd1nzRo/YFb8U6zbiHIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnFIbjR2anpGM1dmTkdqOWdWdnhUck51SWNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9iYTM1NzctY2NiMy00ZWE2LTgzNjgt NzQ1ODYwOGY4ZDk5LzEvbnFIbjR2anpGM1dmTkdqOWdWdnhUck51SWNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9iYTM1NzctY2NiMy00ZWE2LTgzNjgtNzQ1ODYwOGY4ZDk5 LzEvbnFIbjR2anpGM1dmTkdqOWdWdnhUck51SWNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADeaHrCTl 2+QDaropXuji5dRl7In+hki8IwvYMlv/re7FrRS7Wv1Q0Argjbwglo3SAmXD5i2g c1f3bpVTFIMRTOn/6vmFJsdgfzcEi1eazCb7AXwv21S14VujtX8UFnhzwcxwZFoQ Q6cZk0a57dBgmcOkHvC4XXmZf84ZjNrV0LVskGNQmFyM59j/p2brFXnPuzfNrwJH c+EzJdgwjGtKiINkq5QrSmsEPozdwA9HOHlDS97MxuqEYrfcmFrR0aQ1gkwTeqXY L6XBjcHMF+G5xMz9PKnhdOfEWkihg3R8H/Xr0gqhQByN4/W9vTjNuS+pvTWeM5K+ eK2bj8BPqB/2Hg== -----END CERTIFICATE-----Generated at Mon Dec 29 05:26:31 2025 by rpki-client