This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.mft File: nnQTW7B8ZUDNMHvaCMoGdLyEyTk.mft (raw, json) Hash identifier: uFG1rX2AJwyvAHhYy6K7o+3uQ/kdUElQ2KiMWsjQnBE= Subject key identifier: D5:25:DC:CF:86:43:B2:04:EA:3E:2A:23:A1:E2:6D:A1:4F:44:EF:26 Authority key identifier: 9E:74:13:5B:B0:7C:65:40:CD:30:7B:DA:08:CA:06:74:BC:84:C9:39 Certificate issuer: /CN=9e74135bb07c6540cd307bda08ca0674bc84c939 Certificate serial: 019B40FF8BE136964C9991FE58B50806D090 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.mft Manifest number: 178D Signing time: Sun 21 Dec 2025 13:00:47 +0000 Manifest this update: Sun 21 Dec 2025 13:00:47 +0000 Manifest next update: Mon 22 Dec 2025 13:00:47 +0000 Files and hashes: 1: 1-T1wzl3TUKiA8m5iaH9QZh9hjp0.roa (hash: JRA15qBJeMepq09VmhJeTzptT8oyDdYWsjobeMnNOAk=) 2: nnQTW7B8ZUDNMHvaCMoGdLyEyTk.crl (hash: Uamc1RIqkwTD0oIE9HtRPV0emhntvEVVOl2wb2xCpVc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.crl rsync://rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.mft rsync://rpki.ripe.net/repository/DEFAULT/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:ff:8b:e1:36:96:4c:99:91:fe:58:b5:08:06:d0:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e74135bb07c6540cd307bda08ca0674bc84c939 Validity Not Before: Dec 21 13:00:47 2025 GMT Not After : Dec 22 13:00:47 2025 GMT Subject: CN=d525dccf8643b204ea3e2a23a1e26da14f44ef26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:df:e8:8a:ec:05:84:82:b1:52:e0:b7:86:ca: af:f2:b9:05:13:ac:09:da:bb:1e:05:3e:53:b9:9c: 78:05:3d:b8:48:16:b0:c1:4a:17:1e:3a:b5:c2:be: 7c:c4:d9:78:bc:99:78:a0:63:16:7e:f3:45:63:e1: 96:07:50:fa:05:4e:7a:0e:82:f6:e2:ce:fa:77:6c: 50:5f:04:6b:ec:e8:ea:e4:f8:47:8a:bd:bd:56:fc: fa:b8:58:08:3a:93:8a:b5:69:4d:3c:24:9e:a0:32: 35:c6:ea:2e:6d:8f:ef:df:a2:8e:86:9c:2c:e0:9a: e9:a9:7f:22:60:0f:13:b6:93:df:6d:ed:f1:f7:29: 1c:fb:98:a3:41:5a:9b:45:0b:31:e5:6f:51:c9:0b: d6:21:00:80:9e:ee:11:e7:cc:6a:5c:bf:23:8b:8a: 43:f6:20:05:73:33:1f:d3:fb:9e:4a:e6:4f:0e:00: ea:c5:0a:a9:7d:97:d1:82:a0:8e:be:22:24:0b:fa: 9a:19:a7:66:8d:89:74:c1:18:e8:35:42:72:0c:7c: e1:67:c0:ed:8d:b9:22:17:80:79:b4:eb:38:f7:bf: 61:56:5f:88:27:5e:7e:90:8e:a4:20:83:5b:5e:dc: 30:c4:9e:33:ca:ef:3c:ca:d6:ce:d9:35:13:90:d2: 2c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:25:DC:CF:86:43:B2:04:EA:3E:2A:23:A1:E2:6D:A1:4F:44:EF:26 X509v3 Authority Key Identifier: keyid:9E:74:13:5B:B0:7C:65:40:CD:30:7B:DA:08:CA:06:74:BC:84:C9:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:ad:36:d9:4b:2e:79:59:57:ea:bb:b4:63:90:8e:26:08:43: 66:bf:17:25:7e:38:54:98:0e:1b:90:68:0c:f6:fa:4d:23:25: 77:ea:01:31:df:50:24:6e:5f:cb:10:e5:15:c7:09:c3:d9:9c: 84:29:d3:63:7b:11:a2:70:22:37:97:2d:e3:56:0a:b4:5e:ae: 23:6a:4b:ef:10:8b:9d:24:82:f7:0a:8e:d3:43:05:c6:5a:37: 3e:72:30:fd:8b:9a:15:7a:65:30:a8:54:62:46:85:03:35:c6: 78:82:de:d2:cf:f4:58:0e:5c:56:3a:a2:d9:ed:d9:00:23:9d: 06:d4:4d:e9:e0:e2:a1:cf:f8:a2:b8:5d:95:b1:c6:c4:73:49: 85:ba:5e:26:7f:be:8a:55:60:21:62:a5:de:ff:c4:08:4d:30: 67:73:40:63:79:57:e2:d6:e6:cf:23:42:0e:5f:93:7c:98:0f: 7d:90:34:9c:ee:e1:69:b6:60:e9:26:5c:e6:8f:85:c7:25:32: 3f:ed:19:1e:7a:84:37:5f:8b:15:97:d3:62:61:fb:8e:eb:a9: da:4a:c2:5a:1b:55:6a:95:29:cb:94:a5:40:ff:6e:04:1d:03: 88:36:79:ab:2b:7c:e1:f5:0d:30:43:b9:1f:19:dc:47:d1:04: d8:a8:b2:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtA/4vhNpZMmZH+WLUIBtCQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNzQxMzViYjA3YzY1NDBjZDMwN2JkYTA4Y2EwNjc0YmM4 NGM5MzkwHhcNMjUxMjIxMTMwMDQ3WhcNMjUxMjIyMTMwMDQ3WjAzMTEwLwYDVQQD EyhkNTI1ZGNjZjg2NDNiMjA0ZWEzZTJhMjNhMWUyNmRhMTRmNDRlZjI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmt/oiuwFhIKxUuC3hsqv8rkFE6wJ 2rseBT5TuZx4BT24SBawwUoXHjq1wr58xNl4vJl4oGMWfvNFY+GWB1D6BU56DoL2 4s76d2xQXwRr7Ojq5PhHir29Vvz6uFgIOpOKtWlNPCSeoDI1xuoubY/v36KOhpws 4JrpqX8iYA8TtpPfbe3x9ykc+5ijQVqbRQsx5W9RyQvWIQCAnu4R58xqXL8ji4pD 9iAFczMf0/ueSuZPDgDqxQqpfZfRgqCOviIkC/qaGadmjYl0wRjoNUJyDHzhZ8Dt jbkiF4B5tOs4979hVl+IJ15+kI6kIINbXtwwxJ4zyu88ytbO2TUTkNIszQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNUl3M+GQ7IE6j4qI6HibaFPRO8mMB8GA1UdIwQY MBaAFJ50E1uwfGVAzTB72gjKBnS8hMk5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbm5RVFc3QjhaVUROTUh2YUNNb0dkTHlFeVRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS81ZTc4ZjYtMjUzYS00MTE1LWFlNWQt NWRjODBmYWVkMmRjLzEvbm5RVFc3QjhaVUROTUh2YUNNb0dkTHlFeVRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS81ZTc4ZjYtMjUzYS00MTE1LWFlNWQtNWRjODBmYWVkMmRj LzEvbm5RVFc3QjhaVUROTUh2YUNNb0dkTHlFeVRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAka022Usu eVlX6ru0Y5COJghDZr8XJX44VJgOG5BoDPb6TSMld+oBMd9QJG5fyxDlFccJw9mc hCnTY3sRonAiN5ct41YKtF6uI2pL7xCLnSSC9wqO00MFxlo3PnIw/YuaFXplMKhU YkaFAzXGeILe0s/0WA5cVjqi2e3ZACOdBtRN6eDioc/4orhdlbHGxHNJhbpeJn++ ilVgIWKl3v/ECE0wZ3NAY3lX4tbmzyNCDl+TfJgPfZA0nO7habZg6SZc5o+FxyUy P+0ZHnqEN1+LFZfTYmH7juup2krCWhtVapUpy5SlQP9uBB0DiDZ5qyt84fUNMEO5 HxncR9EE2Kiy1A== -----END CERTIFICATE-----Generated at Sun Dec 21 17:25:15 2025 by rpki-client