This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/3059de-bafc-4a4b-86b6-f28d972c8808/1/Nq6kWA8QexEmjJbqMYko1O11_5M.mft File: Nq6kWA8QexEmjJbqMYko1O11_5M.mft (raw, json) Hash identifier: moenxS7+YL68wqhX/AxgWe9GwC7hKiMA6yK71D3bnoA= Subject key identifier: 03:AB:7A:D3:11:CB:C2:16:4F:48:22:8A:FD:38:47:81:02:5C:AD:F8 Authority key identifier: 36:AE:A4:58:0F:10:7B:11:26:8C:96:EA:31:89:28:D4:ED:75:FF:93 Certificate issuer: /CN=36aea4580f107b11268c96ea318928d4ed75ff93 Certificate serial: 019B5CAD798C3D379ECA6C85B7A9A9A0B781 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nq6kWA8QexEmjJbqMYko1O11_5M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/3059de-bafc-4a4b-86b6-f28d972c8808/1/Nq6kWA8QexEmjJbqMYko1O11_5M.mft Manifest number: 0650 Signing time: Fri 26 Dec 2025 22:00:31 +0000 Manifest this update: Fri 26 Dec 2025 22:00:31 +0000 Manifest next update: Sat 27 Dec 2025 22:00:31 +0000 Files and hashes: 1: Nq6kWA8QexEmjJbqMYko1O11_5M.crl (hash: MCHgzInIqRQi0S4EkV8K/0SsGn+rOHvwsq/fwISKVWg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/3059de-bafc-4a4b-86b6-f28d972c8808/1/Nq6kWA8QexEmjJbqMYko1O11_5M.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/3059de-bafc-4a4b-86b6-f28d972c8808/1/Nq6kWA8QexEmjJbqMYko1O11_5M.mft rsync://rpki.ripe.net/repository/DEFAULT/Nq6kWA8QexEmjJbqMYko1O11_5M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5c:ad:79:8c:3d:37:9e:ca:6c:85:b7:a9:a9:a0:b7:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36aea4580f107b11268c96ea318928d4ed75ff93 Validity Not Before: Dec 26 22:00:31 2025 GMT Not After : Dec 27 22:00:31 2025 GMT Subject: CN=03ab7ad311cbc2164f48228afd384781025cadf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:52:35:15:f3:d3:d5:91:bf:96:94:72:b8:5c: 03:42:b1:52:72:02:98:4e:30:96:b4:af:d7:4a:f9: 5d:da:d0:46:7e:8d:b8:59:77:b8:a0:b3:ec:71:5b: 0f:b0:31:15:9e:ca:ef:42:2b:ea:1f:bf:7f:38:22: 61:a4:c1:30:c4:7b:3d:a1:32:b7:8b:f0:18:68:9a: 88:0a:8f:a9:24:37:b9:fd:5b:7b:6e:d0:9b:15:50: 88:83:d5:41:07:b6:ca:c4:ee:b9:4e:c3:b9:ed:db: 35:bb:a9:16:c4:37:d3:cd:ab:9a:ac:31:a8:75:62: 68:89:17:9c:53:a3:ad:ae:42:89:c5:b3:4f:84:db: 44:a2:44:ce:d6:0b:ce:e1:d9:74:f0:06:ee:d9:94: ee:51:dd:07:c8:a5:82:c5:6b:9a:44:12:93:ad:fa: 32:e7:3d:43:eb:71:b7:14:aa:20:e7:81:b4:db:14: 20:9c:88:53:bd:c4:b1:87:b1:62:b1:dd:5a:71:5c: 92:98:ab:9c:81:8c:da:e8:9f:6a:a4:f8:1a:90:bb: e0:b5:d2:83:8c:c0:27:f9:0b:bf:a2:5f:37:68:33: a1:a0:bf:1e:8d:4b:e4:7f:7c:69:66:0b:cf:98:b3: 33:9a:28:35:19:32:fb:35:ca:bf:4f:2c:db:70:d7: c6:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:AB:7A:D3:11:CB:C2:16:4F:48:22:8A:FD:38:47:81:02:5C:AD:F8 X509v3 Authority Key Identifier: keyid:36:AE:A4:58:0F:10:7B:11:26:8C:96:EA:31:89:28:D4:ED:75:FF:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nq6kWA8QexEmjJbqMYko1O11_5M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/3059de-bafc-4a4b-86b6-f28d972c8808/1/Nq6kWA8QexEmjJbqMYko1O11_5M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/3059de-bafc-4a4b-86b6-f28d972c8808/1/Nq6kWA8QexEmjJbqMYko1O11_5M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:f7:38:f5:1c:cf:89:c8:8a:ea:de:76:82:76:b5:44:52:53: 50:68:4f:9c:b9:cc:e2:6a:41:c2:84:e5:06:27:70:71:84:de: 73:c1:e4:18:eb:3a:02:a4:2b:d4:61:6d:71:bf:61:e1:1a:87: cc:40:fa:50:81:a3:c0:ca:c9:f3:e0:8f:1f:4b:3f:0e:e6:66: 11:54:fc:4e:7c:af:69:c7:27:84:19:8c:61:d4:92:f2:44:7b: 92:43:e6:56:1e:20:7a:72:61:7c:e0:3d:bf:11:d6:e5:66:08: d1:af:49:10:7c:38:a2:31:8f:03:de:ed:66:fd:ea:2d:58:7f: 0b:b9:4a:07:0b:c7:18:64:ee:3d:4f:7c:02:b0:6b:40:c8:96: 5c:e9:de:c6:c3:e4:8a:dd:5e:1f:34:5a:36:e0:2b:5f:f2:7e: f8:9c:ef:52:f6:70:a1:7b:52:96:91:8e:39:43:93:18:29:71: 6d:c8:8c:fc:15:f8:b6:db:39:85:10:fc:25:75:7e:80:51:83: fd:fb:24:d4:df:3f:6f:fa:48:c0:ff:c1:7a:e4:06:0f:ad:33: fe:c7:ea:58:71:a4:04:aa:e6:e2:fd:85:fb:b5:0e:5b:64:80: b0:16:3e:31:f5:c1:6e:19:4e:aa:cf:11:17:a4:2f:3e:96:be: 4a:07:e1:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtcrXmMPTeeymyFt6mpoLeBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YWVhNDU4MGYxMDdiMTEyNjhjOTZlYTMxODkyOGQ0ZWQ3 NWZmOTMwHhcNMjUxMjI2MjIwMDMxWhcNMjUxMjI3MjIwMDMxWjAzMTEwLwYDVQQD EygwM2FiN2FkMzExY2JjMjE2NGY0ODIyOGFmZDM4NDc4MTAyNWNhZGY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklI1FfPT1ZG/lpRyuFwDQrFScgKY TjCWtK/XSvld2tBGfo24WXe4oLPscVsPsDEVnsrvQivqH79/OCJhpMEwxHs9oTK3 i/AYaJqICo+pJDe5/Vt7btCbFVCIg9VBB7bKxO65TsO57ds1u6kWxDfTzauarDGo dWJoiRecU6OtrkKJxbNPhNtEokTO1gvO4dl08Abu2ZTuUd0HyKWCxWuaRBKTrfoy 5z1D63G3FKog54G02xQgnIhTvcSxh7Fisd1acVySmKucgYza6J9qpPgakLvgtdKD jMAn+Qu/ol83aDOhoL8ejUvkf3xpZgvPmLMzmig1GTL7Ncq/TyzbcNfGPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAOretMRy8IWT0giiv04R4ECXK34MB8GA1UdIwQY MBaAFDaupFgPEHsRJoyW6jGJKNTtdf+TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnE2a1dBOFFleEVtakpicU1Za28xTzExXzVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8zMDU5ZGUtYmFmYy00YTRiLTg2YjYt ZjI4ZDk3MmM4ODA4LzEvTnE2a1dBOFFleEVtakpicU1Za28xTzExXzVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi8zMDU5ZGUtYmFmYy00YTRiLTg2YjYtZjI4ZDk3MmM4ODA4 LzEvTnE2a1dBOFFleEVtakpicU1Za28xTzExXzVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlfc49RzP iciK6t52gna1RFJTUGhPnLnM4mpBwoTlBidwcYTec8HkGOs6AqQr1GFtcb9h4RqH zED6UIGjwMrJ8+CPH0s/DuZmEVT8TnyvaccnhBmMYdSS8kR7kkPmVh4genJhfOA9 vxHW5WYI0a9JEHw4ojGPA97tZv3qLVh/C7lKBwvHGGTuPU98ArBrQMiWXOnexsPk it1eHzRaNuArX/J++JzvUvZwoXtSlpGOOUOTGClxbciM/BX4tts5hRD8JXV+gFGD /fsk1N8/b/pIwP/BeuQGD60z/sfqWHGkBKrm4v2F+7UOW2SAsBY+MfXBbhlOqs8R F6QvPpa+Sgfh3Q== -----END CERTIFICATE-----Generated at Sat Dec 27 02:18:20 2025 by rpki-client