This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.mft File: nozX1qQQV1C_iXWn0LlnlMHv5iI.mft (raw, json) Hash identifier: XOlth9z6iVvDETQ7Rvl8+OxTkvmP7GYnJAQ7u05N98I= Subject key identifier: 77:49:F9:83:6D:8B:42:FB:C0:95:F2:10:11:2C:4C:B2:5D:8A:DD:52 Authority key identifier: 9E:8C:D7:D6:A4:10:57:50:BF:89:75:A7:D0:B9:67:94:C1:EF:E6:22 Certificate issuer: /CN=9e8cd7d6a4105750bf8975a7d0b96794c1efe622 Certificate serial: 019B390EE2FB5BCEA69E25D56F4EAA2C139E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nozX1qQQV1C_iXWn0LlnlMHv5iI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.mft Manifest number: 10C9 Signing time: Sat 20 Dec 2025 00:00:35 +0000 Manifest this update: Sat 20 Dec 2025 00:00:35 +0000 Manifest next update: Sun 21 Dec 2025 00:00:35 +0000 Files and hashes: 1: YqcsRsNWUIAuSWFcG2LkwlaCRpU.roa (hash: JnjUw+oSYZ7zYyFgVViB1dXlZlt1DLN5IKIef4zg43A=) 2: _VhyulaRLMFmy7z_tqs-4L4cWXE.roa (hash: T2PRCy0LrQZ9+r9vTWIgoLmdpeQ4Ly8m5VmmmlXegNc=) 3: i4e34huH3g5sLDHdnkVm8dSr_sE.roa (hash: S/XQJg4OAS7AjMIGPw3l7NpJsp2Db+/obQ9OlOHPkv4=) 4: nozX1qQQV1C_iXWn0LlnlMHv5iI.crl (hash: O7jATdKtrOem9r95NJSbGZQ7w4M4/VKfei2/CEU/8Gc=) 5: qdNG49hIyDFFdCFIGbm6kEPFcbI.roa (hash: oUfCXgwymuAlhA935EnqN9SnikKCG4eVZ1qECppIrzI=) 6: tgtnwoMSuJpvUhZwhk9qFrx7hWQ.roa (hash: rFNa5r+Q4PL0nS416jQMSkeeFMd2IaIQ8Oy1MIANZ/s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.crl rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.mft rsync://rpki.ripe.net/repository/DEFAULT/nozX1qQQV1C_iXWn0LlnlMHv5iI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 00:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:0e:e2:fb:5b:ce:a6:9e:25:d5:6f:4e:aa:2c:13:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e8cd7d6a4105750bf8975a7d0b96794c1efe622 Validity Not Before: Dec 20 00:00:35 2025 GMT Not After : Dec 21 00:00:35 2025 GMT Subject: CN=7749f9836d8b42fbc095f210112c4cb25d8add52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a1:ee:8f:af:ed:6d:e1:43:0b:c4:10:04:50: 54:24:19:c8:f9:82:1c:a9:7d:8b:09:4e:d4:df:fe: 38:1f:6f:46:2a:83:90:12:32:f2:17:dd:92:a5:a4: 30:31:fd:83:8f:2d:d9:ce:f3:b5:9c:3d:d3:77:c7: 92:dc:21:75:b5:bc:f1:81:9f:5c:5d:b8:6c:b9:d6: 7a:24:6a:43:3c:e0:de:16:9c:f1:eb:fc:85:d6:c3: 84:12:55:35:11:eb:2c:c4:36:e8:ec:d0:74:c2:8e: e7:74:47:59:11:6e:76:a6:5b:3e:3f:87:2f:77:c6: 54:8a:f8:da:bc:07:6e:47:69:c3:c3:e0:9b:09:f4: 61:63:d0:79:df:43:be:f8:7b:71:20:a8:33:bb:b8: 98:d0:d5:4a:a1:36:56:70:77:1e:c4:09:ae:e6:7e: a0:78:b2:c2:7d:fe:09:9c:61:55:ba:e5:ef:8b:63: 2a:3b:5e:41:14:2f:9a:35:38:30:7a:f4:0a:8c:bc: ec:8b:a0:5a:9e:5d:4f:57:f6:9c:c1:75:ea:83:61: 96:0c:f9:eb:37:44:f9:4c:96:a2:6b:a0:5e:2e:f2: d9:0c:35:1b:19:2a:b5:82:6f:c5:48:2c:21:07:e0: 48:98:67:44:32:8b:46:ca:4f:8f:79:d0:69:e2:50: 3b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:49:F9:83:6D:8B:42:FB:C0:95:F2:10:11:2C:4C:B2:5D:8A:DD:52 X509v3 Authority Key Identifier: keyid:9E:8C:D7:D6:A4:10:57:50:BF:89:75:A7:D0:B9:67:94:C1:EF:E6:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nozX1qQQV1C_iXWn0LlnlMHv5iI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:bc:df:34:72:de:2f:9e:28:e1:bb:d5:9d:03:c6:9d:b0:17: 59:d0:a0:04:5b:79:8f:57:1b:50:23:5e:01:e0:e6:ac:48:7e: f8:d5:0f:be:64:36:80:8c:96:68:23:80:09:8e:fc:59:30:89: 29:fd:73:e7:63:ac:17:89:69:f3:77:3b:0e:4f:2f:93:9a:d5: ba:83:2d:05:98:d2:8d:4b:b2:28:61:c0:c5:15:6c:9d:e1:fe: ab:c7:1f:b1:34:b7:fe:b7:bc:40:54:57:63:23:7e:6d:96:78: 91:6f:00:00:43:7c:f6:3d:d1:32:46:12:b4:03:54:6b:d1:43: 7f:67:ad:40:89:b2:4c:79:ee:e0:68:e0:1c:9b:f1:74:46:75: 10:c4:aa:0b:5a:72:6f:14:72:09:30:f1:b2:7e:18:83:d3:1a: cc:6f:5f:45:88:aa:2c:f1:50:e0:56:b8:3a:07:71:d9:21:3b: a8:9d:23:b4:9f:37:a4:97:a3:50:47:09:7c:ab:72:76:0d:7c: 42:4b:49:1e:02:ff:18:e9:6b:ba:93:72:8c:d3:00:54:98:57: 2d:fd:48:0e:75:85:11:33:c7:f2:55:b7:f0:a6:e8:cc:8e:59: 19:f4:fb:7c:7f:c2:b1:a0:75:c3:19:e1:f0:2c:94:e3:d2:a7: f5:c1:70:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5DuL7W86mniXVb06qLBOeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOGNkN2Q2YTQxMDU3NTBiZjg5NzVhN2QwYjk2Nzk0YzFl ZmU2MjIwHhcNMjUxMjIwMDAwMDM1WhcNMjUxMjIxMDAwMDM1WjAzMTEwLwYDVQQD Eyg3NzQ5Zjk4MzZkOGI0MmZiYzA5NWYyMTAxMTJjNGNiMjVkOGFkZDUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKHuj6/tbeFDC8QQBFBUJBnI+YIc qX2LCU7U3/44H29GKoOQEjLyF92SpaQwMf2Djy3ZzvO1nD3Td8eS3CF1tbzxgZ9c XbhsudZ6JGpDPODeFpzx6/yF1sOEElU1EessxDbo7NB0wo7ndEdZEW52pls+P4cv d8ZUivjavAduR2nDw+CbCfRhY9B530O++HtxIKgzu7iY0NVKoTZWcHcexAmu5n6g eLLCff4JnGFVuuXvi2MqO15BFC+aNTgwevQKjLzsi6Banl1PV/acwXXqg2GWDPnr N0T5TJaia6BeLvLZDDUbGSq1gm/FSCwhB+BImGdEMotGyk+PedBp4lA7TQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHdJ+YNti0L7wJXyEBEsTLJdit1SMB8GA1UdIwQY MBaAFJ6M19akEFdQv4l1p9C5Z5TB7+YiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbm96WDFxUVFWMUNfaVhXbjBMbG5sTUh2NWlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi84NWM2YmQtNmE2OC00ZDExLWI5Y2Qt OGMyZGY1YTVjNmQ3LzEvbm96WDFxUVFWMUNfaVhXbjBMbG5sTUh2NWlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi84NWM2YmQtNmE2OC00ZDExLWI5Y2QtOGMyZGY1YTVjNmQ3 LzEvbm96WDFxUVFWMUNfaVhXbjBMbG5sTUh2NWlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAirzfNHLe L54o4bvVnQPGnbAXWdCgBFt5j1cbUCNeAeDmrEh++NUPvmQ2gIyWaCOACY78WTCJ Kf1z52OsF4lp83c7Dk8vk5rVuoMtBZjSjUuyKGHAxRVsneH+q8cfsTS3/re8QFRX YyN+bZZ4kW8AAEN89j3RMkYStANUa9FDf2etQImyTHnu4GjgHJvxdEZ1EMSqC1py bxRyCTDxsn4Yg9MazG9fRYiqLPFQ4Fa4Ogdx2SE7qJ0jtJ83pJejUEcJfKtydg18 QktJHgL/GOlrupNyjNMAVJhXLf1IDnWFETPH8lW38KbozI5ZGfT7fH/CsaB1wxnh 8CyU49Kn9cFwFg== -----END CERTIFICATE-----Generated at Sat Dec 20 04:30:05 2025 by rpki-client