This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft File: NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft (raw, json) Hash identifier: Ad9Ycfb+QCKs4Aqn1bqVdefmY8hPASQ3uQ7wL2XoEhw= Subject key identifier: 40:B2:24:2F:DF:16:FD:76:21:98:AB:DF:4C:4B:90:79:4D:67:BC:F6 Authority key identifier: 36:A4:66:8F:F8:38:14:AF:90:A7:8B:4F:C8:D2:62:32:50:58:CB:C6 Certificate issuer: /CN=36a4668ff83814af90a78b4fc8d262325058cbc6 Certificate serial: 019B3E6CDF30848AAADE9C200D7C2DEFFDE3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 01:01:20 +0000 Manifest this update: Sun 21 Dec 2025 01:01:20 +0000 Manifest next update: Mon 22 Dec 2025 01:01:20 +0000 Files and hashes: 1: Bha5fqCb4Fccw9Hz-g5tESnNC_M.roa (hash: 46eG+dZ14ZYRFYw5iRf0nTqMM6SE1SjEdU7Pao7e1x0=) 2: NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.crl (hash: zpEiH+7AP8JXgPHbscvsjCZW1wLMgBW0AlqCBYkYHdU=) 3: k7ZKxdVx9_HpLEEXMgJ7VK0ot74.roa (hash: Jn0c0Y7u45CliHNs1mV0LEaHAyb9OLN6GTScJnODixs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.crl rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft rsync://rpki.ripe.net/repository/DEFAULT/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:df:30:84:8a:aa:de:9c:20:0d:7c:2d:ef:fd:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36a4668ff83814af90a78b4fc8d262325058cbc6 Validity Not Before: Dec 21 01:01:20 2025 GMT Not After : Dec 22 01:01:20 2025 GMT Subject: CN=40b2242fdf16fd762198abdf4c4b90794d67bcf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:85:5f:e3:fe:e0:6a:11:f6:5d:32:3c:6d:f6: d1:fd:38:e6:27:58:7a:7e:2f:b2:17:8d:b5:85:82: 41:64:3e:c2:dc:ce:00:ab:df:44:dc:1a:6d:f8:20: c8:40:e4:ed:58:89:5d:e8:53:21:5c:d0:20:44:b0: 0d:5e:d2:bf:8a:02:8b:45:67:9a:be:4f:39:6a:1a: 61:d6:3f:d7:ae:48:b9:75:3f:5f:5b:a5:8e:5e:c5: 6f:95:37:e9:40:73:91:4a:36:30:af:4b:2a:ab:e7: 3d:86:73:9c:91:ce:f7:27:63:9a:ab:87:c5:76:7a: 62:a1:98:dc:c0:a4:9b:a7:53:f2:14:87:d5:b1:2a: e6:09:25:77:6b:f4:a6:b2:83:44:fa:08:93:08:69: 02:e3:60:5b:74:43:3d:be:05:83:a7:7b:aa:90:8f: 21:3c:c9:fe:24:a5:04:31:30:c5:6b:2c:52:07:31: e7:eb:92:01:4b:78:3d:fb:52:ab:7a:9e:00:e9:0a: 0b:1c:0c:cc:8f:6b:1b:b1:41:43:86:91:5f:99:ab: 61:c5:b2:02:69:a0:89:dc:4a:27:b6:8b:aa:66:38: b3:f1:57:88:09:1d:d2:a1:ea:4b:5b:82:5c:87:d8: 77:04:42:0d:a0:16:73:67:45:60:b9:d1:ab:c5:7a: d5:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:B2:24:2F:DF:16:FD:76:21:98:AB:DF:4C:4B:90:79:4D:67:BC:F6 X509v3 Authority Key Identifier: keyid:36:A4:66:8F:F8:38:14:AF:90:A7:8B:4F:C8:D2:62:32:50:58:CB:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:4e:8d:10:5a:9c:5f:39:e6:c8:bd:f1:d5:95:31:25:11:35: 8d:72:0a:84:66:cd:10:ff:0b:0f:a7:a4:5c:81:4c:74:1a:a9: bc:a7:79:b0:7d:25:16:20:dd:ea:18:61:b7:12:74:92:5b:1b: 60:93:44:5d:32:e4:d3:41:68:1d:59:2a:b1:d0:1d:bb:fd:20: a5:01:f3:d6:31:66:eb:c4:1a:3b:15:de:c5:a3:03:ec:00:9b: ff:ce:fa:76:25:6c:50:14:0f:24:1d:6d:9b:00:53:0b:12:34: cb:90:e3:7f:1d:32:28:bb:42:9f:4a:03:cb:e3:ae:62:33:94: 08:90:4f:85:8c:56:1c:d9:4d:46:30:92:fd:1e:13:e8:14:6e: 4f:84:3a:e7:65:61:16:ac:c2:1c:33:65:2a:f4:e2:8f:39:92: d2:6d:c1:23:68:72:4a:e4:11:48:59:5e:1c:26:f9:62:35:58: a6:12:f8:0f:7b:7d:a4:f2:5e:cb:68:93:e1:99:ba:8a:87:ef: 08:4e:ea:44:e2:d9:b9:37:f6:d0:ca:64:d8:dd:ff:9b:d4:b8: f3:3a:0d:00:54:d6:d8:7c:ee:15:3f:83:67:ab:17:7e:3e:76: 2d:1e:98:77:26:a2:06:df:63:02:75:e9:c7:d3:2e:2c:6d:70: 52:35:1d:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bN8whIqq3pwgDXwt7/3jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YTQ2NjhmZjgzODE0YWY5MGE3OGI0ZmM4ZDI2MjMyNTA1 OGNiYzYwHhcNMjUxMjIxMDEwMTIwWhcNMjUxMjIyMDEwMTIwWjAzMTEwLwYDVQQD Eyg0MGIyMjQyZmRmMTZmZDc2MjE5OGFiZGY0YzRiOTA3OTRkNjdiY2Y2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIVf4/7gahH2XTI8bfbR/TjmJ1h6 fi+yF421hYJBZD7C3M4Aq99E3Bpt+CDIQOTtWIld6FMhXNAgRLANXtK/igKLRWea vk85ahph1j/Xrki5dT9fW6WOXsVvlTfpQHORSjYwr0sqq+c9hnOckc73J2Oaq4fF dnpioZjcwKSbp1PyFIfVsSrmCSV3a/SmsoNE+giTCGkC42BbdEM9vgWDp3uqkI8h PMn+JKUEMTDFayxSBzHn65IBS3g9+1Krep4A6QoLHAzMj2sbsUFDhpFfmathxbIC aaCJ3EontouqZjiz8VeICR3SoepLW4Jch9h3BEINoBZzZ0VgudGrxXrVgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFECyJC/fFv12IZir30xLkHlNZ7z2MB8GA1UdIwQY MBaAFDakZo/4OBSvkKeLT8jSYjJQWMvGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnFSbWpfZzRGSy1RcDR0UHlOSmlNbEJZeThZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My8wMzFmY2ItYjc0ZS00ZTc1LWE3Yjkt OTBlNjU0MTIyNTJhLzEvTnFSbWpfZzRGSy1RcDR0UHlOSmlNbEJZeThZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My8wMzFmY2ItYjc0ZS00ZTc1LWE3YjktOTBlNjU0MTIyNTJh LzEvTnFSbWpfZzRGSy1RcDR0UHlOSmlNbEJZeThZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkU6NEFqc XznmyL3x1ZUxJRE1jXIKhGbNEP8LD6ekXIFMdBqpvKd5sH0lFiDd6hhhtxJ0klsb YJNEXTLk00FoHVkqsdAdu/0gpQHz1jFm68QaOxXexaMD7ACb/876diVsUBQPJB1t mwBTCxI0y5Djfx0yKLtCn0oDy+OuYjOUCJBPhYxWHNlNRjCS/R4T6BRuT4Q652Vh FqzCHDNlKvTijzmS0m3BI2hySuQRSFleHCb5YjVYphL4D3t9pPJey2iT4Zm6iofv CE7qROLZuTf20Mpk2N3/m9S48zoNAFTW2HzuFT+DZ6sXfj52LR6YdyaiBt9jAnXp x9MuLG1wUjUdGA== -----END CERTIFICATE-----Generated at Sun Dec 21 06:07:01 2025 by rpki-client