This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/ba3577-ccb3-4ea6-8368-7458608f8d99/1/nqHn4vjzF3WfNGj9gVvxTrNuIcg.mft File: nqHn4vjzF3WfNGj9gVvxTrNuIcg.mft (raw, json) Hash identifier: GgoM5mo/LbP0mOuiV/3snkx+U6m7EBzgNLamdUpgu8w= Subject key identifier: CF:5F:AD:BD:FA:3D:71:41:52:92:26:36:29:BD:88:F3:64:02:42:81 Authority key identifier: 9E:A1:E7:E2:F8:F3:17:75:9F:34:68:FD:81:5B:F1:4E:B3:6E:21:C8 Certificate issuer: /CN=9ea1e7e2f8f317759f3468fd815bf14eb36e21c8 Certificate serial: 019B68E932129ED2EB0EBDB5F42D3348F358 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nqHn4vjzF3WfNGj9gVvxTrNuIcg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/ba3577-ccb3-4ea6-8368-7458608f8d99/1/nqHn4vjzF3WfNGj9gVvxTrNuIcg.mft Manifest number: 12BD Signing time: Mon 29 Dec 2025 07:01:11 +0000 Manifest this update: Mon 29 Dec 2025 07:01:11 +0000 Manifest next update: Tue 30 Dec 2025 07:01:11 +0000 Files and hashes: 1: nqHn4vjzF3WfNGj9gVvxTrNuIcg.crl (hash: wOqefRnfZeV1+5vnG40LgpJNO8ZmtDu8z6jFlQZft/E=) 2: vMWejL_WfAw5UGYBVG882HdQDVU.roa (hash: UfokJ9esFOS4de6evRWO+CcRCXAegKzSyR2ErWU1fPQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/ba3577-ccb3-4ea6-8368-7458608f8d99/1/nqHn4vjzF3WfNGj9gVvxTrNuIcg.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/ba3577-ccb3-4ea6-8368-7458608f8d99/1/nqHn4vjzF3WfNGj9gVvxTrNuIcg.mft rsync://rpki.ripe.net/repository/DEFAULT/nqHn4vjzF3WfNGj9gVvxTrNuIcg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 07:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:68:e9:32:12:9e:d2:eb:0e:bd:b5:f4:2d:33:48:f3:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ea1e7e2f8f317759f3468fd815bf14eb36e21c8 Validity Not Before: Dec 29 07:01:11 2025 GMT Not After : Dec 30 07:01:11 2025 GMT Subject: CN=cf5fadbdfa3d71415292263629bd88f364024281 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a4:43:81:e2:8b:b7:28:34:a2:55:97:12:b3: 40:a6:55:c7:7b:bf:a4:c6:89:2d:9d:f5:72:a2:de: 0a:41:71:9c:be:0d:f4:3f:3d:12:54:83:44:da:a6: 5e:d4:2a:5d:e3:ae:a4:d2:4f:12:c5:b8:19:92:50: 90:31:90:73:1a:ce:0a:5e:ea:87:75:6c:4b:40:37: db:49:17:b5:9a:c1:ad:5d:fe:b2:24:27:55:b3:0e: 69:7d:91:e1:39:8c:53:80:48:82:30:45:be:d2:08: da:aa:2b:fe:3d:88:42:12:65:66:ed:af:a3:cf:8d: b1:73:bd:94:6b:b5:10:89:5b:63:6b:45:f4:38:04: 8f:4f:b4:88:ba:99:bc:6f:69:e7:c4:58:ad:1d:94: e4:f3:8a:ed:97:f6:7e:9a:70:50:39:68:76:a0:74: 79:60:0f:dc:95:b5:90:ef:35:09:a6:2c:22:80:16: 91:c5:bc:d6:95:61:85:9a:fd:95:19:8a:14:61:87: 0f:7b:22:90:15:22:cb:cd:a3:4b:fb:00:e1:80:e4: 4d:cb:f7:36:c3:0a:8b:7a:04:34:5d:ae:96:b6:13: de:cb:29:40:db:3b:2e:45:e8:d9:de:b9:af:3a:9f: ee:c4:54:5c:1b:95:18:86:b6:10:8c:e0:f5:f7:96: 4f:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:5F:AD:BD:FA:3D:71:41:52:92:26:36:29:BD:88:F3:64:02:42:81 X509v3 Authority Key Identifier: keyid:9E:A1:E7:E2:F8:F3:17:75:9F:34:68:FD:81:5B:F1:4E:B3:6E:21:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nqHn4vjzF3WfNGj9gVvxTrNuIcg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ba3577-ccb3-4ea6-8368-7458608f8d99/1/nqHn4vjzF3WfNGj9gVvxTrNuIcg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ba3577-ccb3-4ea6-8368-7458608f8d99/1/nqHn4vjzF3WfNGj9gVvxTrNuIcg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:82:bc:c2:56:be:b7:e8:dd:c6:9b:04:98:99:5c:62:0a:3b: 28:42:54:07:f5:96:94:46:79:14:24:42:68:c3:d2:66:b0:c1: 8b:a3:39:93:0c:77:1b:f5:02:a5:9d:07:73:78:19:f6:b5:31: b6:83:82:29:d0:c1:74:3c:da:01:d2:7e:5d:53:a0:98:b4:97: cd:9f:46:2b:be:cf:a3:5d:3d:1a:22:e0:b7:59:fd:2e:53:5b: 1c:66:24:a0:3f:8c:59:27:f4:10:82:f9:57:62:6e:62:ba:e8: a9:ad:31:ef:f7:9f:cb:97:93:c8:80:e5:84:bf:76:f8:c0:e1: 0b:06:5d:a1:3d:a0:53:99:21:43:c8:c4:f8:c2:34:f4:6f:95: c7:6e:06:da:cd:3d:ea:53:dc:2c:05:95:65:e1:46:a6:71:79: 19:63:f4:c0:e1:b8:4c:c5:c0:8d:97:a1:db:ef:7f:7d:a6:31: e2:bd:3c:15:74:f6:2c:9f:cb:fb:33:d8:c9:19:e3:d1:2d:cb: 4e:f1:d7:56:d8:7c:ff:7a:51:27:90:b8:11:4d:cc:c3:34:b9: c2:47:8e:8b:06:53:05:92:b8:3b:0d:64:0b:bc:a4:f2:1d:03: d4:1b:fc:cb:6c:1d:3c:9e:9c:45:dc:fa:9a:eb:bc:65:7f:60: 5b:f7:10:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZto6TISntLrDr219C0zSPNYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllYTFlN2UyZjhmMzE3NzU5ZjM0NjhmZDgxNWJmMTRlYjM2 ZTIxYzgwHhcNMjUxMjI5MDcwMTExWhcNMjUxMjMwMDcwMTExWjAzMTEwLwYDVQQD EyhjZjVmYWRiZGZhM2Q3MTQxNTI5MjI2MzYyOWJkODhmMzY0MDI0MjgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqRDgeKLtyg0olWXErNAplXHe7+k xoktnfVyot4KQXGcvg30Pz0SVINE2qZe1Cpd466k0k8SxbgZklCQMZBzGs4KXuqH dWxLQDfbSRe1msGtXf6yJCdVsw5pfZHhOYxTgEiCMEW+0gjaqiv+PYhCEmVm7a+j z42xc72Ua7UQiVtja0X0OASPT7SIupm8b2nnxFitHZTk84rtl/Z+mnBQOWh2oHR5 YA/clbWQ7zUJpiwigBaRxbzWlWGFmv2VGYoUYYcPeyKQFSLLzaNL+wDhgORNy/c2 wwqLegQ0Xa6WthPeyylA2zsuRejZ3rmvOp/uxFRcG5UYhrYQjOD195ZP4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM9frb36PXFBUpImNim9iPNkAkKBMB8GA1UdIwQY MBaAFJ6h5+L48xd1nzRo/YFb8U6zbiHIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnFIbjR2anpGM1dmTkdqOWdWdnhUck51SWNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9iYTM1NzctY2NiMy00ZWE2LTgzNjgt NzQ1ODYwOGY4ZDk5LzEvbnFIbjR2anpGM1dmTkdqOWdWdnhUck51SWNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9iYTM1NzctY2NiMy00ZWE2LTgzNjgtNzQ1ODYwOGY4ZDk5 LzEvbnFIbjR2anpGM1dmTkdqOWdWdnhUck51SWNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACYK8wla+ t+jdxpsEmJlcYgo7KEJUB/WWlEZ5FCRCaMPSZrDBi6M5kwx3G/UCpZ0Hc3gZ9rUx toOCKdDBdDzaAdJ+XVOgmLSXzZ9GK77Po109GiLgt1n9LlNbHGYkoD+MWSf0EIL5 V2JuYrroqa0x7/efy5eTyIDlhL92+MDhCwZdoT2gU5khQ8jE+MI09G+Vx24G2s09 6lPcLAWVZeFGpnF5GWP0wOG4TMXAjZeh2+9/faYx4r08FXT2LJ/L+zPYyRnj0S3L TvHXVth8/3pRJ5C4EU3MwzS5wkeOiwZTBZK4Ow1kC7yk8h0D1Bv8y2wdPJ6cRdz6 muu8ZX9gW/cQXQ== -----END CERTIFICATE-----Generated at Mon Dec 29 13:23:54 2025 by rpki-client