This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.mft File: nozX1qQQV1C_iXWn0LlnlMHv5iI.mft (raw, json) Hash identifier: kQYiV70CG1SYNe8KSns//7MNEjXL2lCM4WFsYe6ljO8= Subject key identifier: B0:6A:D6:D4:EE:0B:19:CC:7E:5C:08:99:FB:C7:64:88:3B:A1:57:F4 Authority key identifier: 9E:8C:D7:D6:A4:10:57:50:BF:89:75:A7:D0:B9:67:94:C1:EF:E6:22 Certificate issuer: /CN=9e8cd7d6a4105750bf8975a7d0b96794c1efe622 Certificate serial: 019B44A533964ABBE54BB38A908C678AE0C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nozX1qQQV1C_iXWn0LlnlMHv5iI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.mft Manifest number: 10CF Signing time: Mon 22 Dec 2025 06:00:35 +0000 Manifest this update: Mon 22 Dec 2025 06:00:35 +0000 Manifest next update: Tue 23 Dec 2025 06:00:35 +0000 Files and hashes: 1: YqcsRsNWUIAuSWFcG2LkwlaCRpU.roa (hash: JnjUw+oSYZ7zYyFgVViB1dXlZlt1DLN5IKIef4zg43A=) 2: _VhyulaRLMFmy7z_tqs-4L4cWXE.roa (hash: T2PRCy0LrQZ9+r9vTWIgoLmdpeQ4Ly8m5VmmmlXegNc=) 3: i4e34huH3g5sLDHdnkVm8dSr_sE.roa (hash: S/XQJg4OAS7AjMIGPw3l7NpJsp2Db+/obQ9OlOHPkv4=) 4: nozX1qQQV1C_iXWn0LlnlMHv5iI.crl (hash: vK4ABIdzpZjzgtt3bEuDMhQfDTaEdScj+AX8SdtI2oo=) 5: qdNG49hIyDFFdCFIGbm6kEPFcbI.roa (hash: oUfCXgwymuAlhA935EnqN9SnikKCG4eVZ1qECppIrzI=) 6: tgtnwoMSuJpvUhZwhk9qFrx7hWQ.roa (hash: rFNa5r+Q4PL0nS416jQMSkeeFMd2IaIQ8Oy1MIANZ/s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.crl rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.mft rsync://rpki.ripe.net/repository/DEFAULT/nozX1qQQV1C_iXWn0LlnlMHv5iI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 06:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:a5:33:96:4a:bb:e5:4b:b3:8a:90:8c:67:8a:e0:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e8cd7d6a4105750bf8975a7d0b96794c1efe622 Validity Not Before: Dec 22 06:00:35 2025 GMT Not After : Dec 23 06:00:35 2025 GMT Subject: CN=b06ad6d4ee0b19cc7e5c0899fbc764883ba157f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ff:1e:a6:16:14:fe:2c:83:b2:7a:6b:7d:8a: 11:e3:bc:34:d1:23:d9:bf:af:84:13:15:6c:f3:50: 3c:b2:a2:8c:de:ee:01:f2:b8:76:6d:b2:64:b6:71: fb:23:c1:7f:85:4a:dc:f1:e8:87:d3:8f:c9:a7:b4: 9c:d9:f5:cb:fa:41:2a:78:ff:89:1f:9b:5a:92:c5: 80:79:84:a5:0c:f1:e6:07:ca:89:a0:c5:57:69:81: 66:32:b8:e8:74:aa:f2:76:ae:63:17:e8:47:64:36: 5c:4d:9f:fd:ed:93:79:b5:9b:9d:86:ae:bc:e8:21: 38:c9:da:28:16:81:34:79:85:cc:90:4d:ab:c0:8b: c0:aa:e9:3f:e4:3b:ab:85:d2:8b:93:1f:da:b1:a8: 7d:a8:4f:50:c9:18:b9:e2:03:98:0c:df:59:48:54: 52:c8:0a:a6:9f:55:15:59:92:58:26:e6:65:8c:b1: f9:4e:0b:32:0c:15:d4:89:94:47:6f:8c:34:a6:04: c6:8e:2c:8c:e1:34:fe:51:d0:37:00:9f:69:8b:0c: 8c:b6:e4:2d:f7:ae:3a:01:79:b0:b2:61:26:d0:d7: d7:dd:c5:d8:cf:f7:d8:5d:17:07:a9:07:13:9a:15: 08:ff:c2:7f:91:10:7d:bc:6e:41:bf:44:09:ed:93: 36:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:6A:D6:D4:EE:0B:19:CC:7E:5C:08:99:FB:C7:64:88:3B:A1:57:F4 X509v3 Authority Key Identifier: keyid:9E:8C:D7:D6:A4:10:57:50:BF:89:75:A7:D0:B9:67:94:C1:EF:E6:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nozX1qQQV1C_iXWn0LlnlMHv5iI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:78:b9:35:7d:ba:15:ae:3c:68:72:77:8a:0f:cd:2e:5c:f8: d5:e5:1a:dc:09:80:c5:44:f9:35:63:3c:60:8a:0c:ff:48:06: 1c:43:77:56:b0:2e:ca:26:51:fe:bc:a9:46:af:33:11:bc:55: 9c:9b:df:2d:7f:8a:15:2a:2a:12:fe:31:46:9d:09:69:7a:b1: 6d:a8:c5:5a:b2:50:db:d9:1e:91:39:60:a1:8e:43:21:f7:12: 89:f7:0d:52:bc:76:9f:82:f3:3e:a2:b8:16:a7:c6:e6:1d:4f: 23:66:8d:3f:fe:8e:43:bc:4d:eb:fb:91:08:d0:9e:0a:ea:57: 99:61:65:57:be:a9:10:a9:63:9b:40:06:0f:59:18:6b:8e:8e: 1b:cd:cc:d1:4c:3e:6a:b9:d4:1d:f5:e5:2c:74:86:71:93:3a: 38:90:48:3b:6e:08:44:59:fc:cf:23:46:98:db:ad:89:65:26: fd:80:3a:a6:f6:69:84:ca:46:7b:58:d8:58:93:a7:52:fc:d6: c3:a8:ad:13:aa:c8:6b:4f:bd:0f:87:10:4d:f1:01:cd:89:cd: f6:f2:3d:17:14:1a:71:a3:52:ce:60:03:68:1d:9c:67:e4:0d: 2b:66:5d:04:46:1f:ce:0c:a2:d1:12:9d:46:19:6c:0f:f9:d2: 87:78:85:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEpTOWSrvlS7OKkIxniuDJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOGNkN2Q2YTQxMDU3NTBiZjg5NzVhN2QwYjk2Nzk0YzFl ZmU2MjIwHhcNMjUxMjIyMDYwMDM1WhcNMjUxMjIzMDYwMDM1WjAzMTEwLwYDVQQD EyhiMDZhZDZkNGVlMGIxOWNjN2U1YzA4OTlmYmM3NjQ4ODNiYTE1N2Y0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzf8ephYU/iyDsnprfYoR47w00SPZ v6+EExVs81A8sqKM3u4B8rh2bbJktnH7I8F/hUrc8eiH04/Jp7Sc2fXL+kEqeP+J H5taksWAeYSlDPHmB8qJoMVXaYFmMrjodKrydq5jF+hHZDZcTZ/97ZN5tZudhq68 6CE4ydooFoE0eYXMkE2rwIvAquk/5DurhdKLkx/asah9qE9QyRi54gOYDN9ZSFRS yAqmn1UVWZJYJuZljLH5TgsyDBXUiZRHb4w0pgTGjiyM4TT+UdA3AJ9piwyMtuQt 9646AXmwsmEm0NfX3cXYz/fYXRcHqQcTmhUI/8J/kRB9vG5Bv0QJ7ZM2JwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLBq1tTuCxnMflwImfvHZIg7oVf0MB8GA1UdIwQY MBaAFJ6M19akEFdQv4l1p9C5Z5TB7+YiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbm96WDFxUVFWMUNfaVhXbjBMbG5sTUh2NWlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi84NWM2YmQtNmE2OC00ZDExLWI5Y2Qt OGMyZGY1YTVjNmQ3LzEvbm96WDFxUVFWMUNfaVhXbjBMbG5sTUh2NWlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi84NWM2YmQtNmE2OC00ZDExLWI5Y2QtOGMyZGY1YTVjNmQ3 LzEvbm96WDFxUVFWMUNfaVhXbjBMbG5sTUh2NWlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfni5NX26 Fa48aHJ3ig/NLlz41eUa3AmAxUT5NWM8YIoM/0gGHEN3VrAuyiZR/rypRq8zEbxV nJvfLX+KFSoqEv4xRp0JaXqxbajFWrJQ29kekTlgoY5DIfcSifcNUrx2n4LzPqK4 FqfG5h1PI2aNP/6OQ7xN6/uRCNCeCupXmWFlV76pEKljm0AGD1kYa46OG83M0Uw+ arnUHfXlLHSGcZM6OJBIO24IRFn8zyNGmNutiWUm/YA6pvZphMpGe1jYWJOnUvzW w6itE6rIa0+9D4cQTfEBzYnN9vI9FxQacaNSzmADaB2cZ+QNK2ZdBEYfzgyi0RKd RhlsD/nSh3iFqg== -----END CERTIFICATE-----Generated at Mon Dec 22 09:29:58 2025 by rpki-client