This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft File: NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft (raw, json) Hash identifier: qGR0FiynuoM4A2fyGWMhkDZV8E88/OnfXtXHhJqB3XE= Subject key identifier: DC:E5:C8:18:0C:94:C2:53:AE:6C:B8:E2:B5:DF:45:E2:66:3B:C9:D6 Authority key identifier: 36:EA:A0:0E:A7:77:09:8B:1B:F0:36:75:6D:64:0E:9D:31:D6:3B:3B Certificate issuer: /CN=36eaa00ea777098b1bf036756d640e9d31d63b3b Certificate serial: 019B44A5815A7814FA32E02AA0E7C7625B18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft Manifest number: 178F Signing time: Mon 22 Dec 2025 06:00:55 +0000 Manifest this update: Mon 22 Dec 2025 06:00:55 +0000 Manifest next update: Tue 23 Dec 2025 06:00:55 +0000 Files and hashes: 1: NuqgDqd3CYsb8DZ1bWQOnTHWOzs.crl (hash: xDu6rhqxa6AuDtvV9unjwnfb/GJwhkkNeI31wbxU2EQ=) 2: _g5I57Jrtat3c0sUXQvZ3nqFfuc.roa (hash: grBe56vRIljL0qbICiVpYCBgfKjQkIm+ss1oa9xOZxk=) 3: nyb0R-h__Mic6GDdyNWGNxBzot4.roa (hash: fgTFT13/lPyU/NB1je1ug0Uwy5bGAtYnZFu7LeFmdpg=) 4: pi0m8ItGQU_1KUziIzWipbWTZ1U.roa (hash: dNmRlkGp5JHgq9te/3UnftdEhJnuqvrIk2cLoA0C8Mo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft rsync://rpki.ripe.net/repository/DEFAULT/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 06:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:a5:81:5a:78:14:fa:32:e0:2a:a0:e7:c7:62:5b:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36eaa00ea777098b1bf036756d640e9d31d63b3b Validity Not Before: Dec 22 06:00:55 2025 GMT Not After : Dec 23 06:00:55 2025 GMT Subject: CN=dce5c8180c94c253ae6cb8e2b5df45e2663bc9d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:64:fc:4c:99:5b:b6:b7:1a:07:60:a9:3b:12: dd:e6:e0:d0:a6:7c:8b:6e:63:40:40:dc:3d:c9:d7: 33:df:4d:78:c8:6d:a9:e9:11:22:e2:2d:09:3c:16: 11:81:69:7a:cd:6e:10:42:af:ea:cd:43:51:7f:80: 8d:de:0a:3d:92:c2:49:a1:9b:c4:54:a1:97:53:16: 2d:d5:d6:14:37:21:60:71:a4:04:c9:fc:23:5d:e2: 71:74:7e:ad:7a:0a:b6:d1:14:76:93:5e:22:67:aa: ce:83:55:08:d1:b5:92:e1:36:b3:4e:e8:b2:f3:60: 45:4b:d9:1a:e5:7e:ce:d4:6c:fe:33:8f:a1:72:52: 94:5d:0c:79:73:31:1f:9c:71:30:6e:d4:d1:fa:b1: 5c:38:27:d6:3c:fe:98:a2:39:87:90:f7:d3:8a:0e: 7d:8e:c5:57:96:42:50:78:c8:e3:04:7b:a0:8e:91: 09:be:08:46:e6:c4:8a:67:58:b3:04:e4:f9:ff:12: 6f:11:b6:5e:08:65:b7:e7:72:70:0c:69:96:49:2d: 5d:15:7a:49:b3:7f:58:89:90:14:09:62:87:6e:b8: cd:27:60:a9:d8:42:ac:2e:c0:45:28:4b:02:11:22: 07:57:90:3e:05:a8:43:de:58:47:53:df:f6:d7:f9: 9e:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:E5:C8:18:0C:94:C2:53:AE:6C:B8:E2:B5:DF:45:E2:66:3B:C9:D6 X509v3 Authority Key Identifier: keyid:36:EA:A0:0E:A7:77:09:8B:1B:F0:36:75:6D:64:0E:9D:31:D6:3B:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:95:1a:ff:8b:b4:3d:3e:1d:34:30:3c:05:58:29:17:a7:91: 7c:a4:a0:19:a2:3a:44:29:65:36:ee:a3:e0:da:41:2a:36:d6: bc:b9:f7:eb:72:f8:79:91:e6:cd:47:27:57:42:de:3f:45:cf: 87:b9:e2:9a:2c:19:a8:62:09:0e:3f:7f:3f:79:84:e8:ef:e5: 17:c6:6a:34:7d:af:85:67:bb:af:ea:30:4f:3f:d5:ba:ef:af: 2b:7e:22:fc:7e:42:1e:98:57:d5:e5:0d:f2:6a:fd:7b:77:66: 6c:f0:84:92:fe:4b:4f:7c:95:1b:c8:76:af:4e:4f:b9:28:2f: a4:15:fc:be:34:5e:41:c4:13:a3:f0:0a:a7:ad:4c:55:25:72: 4d:80:30:3b:ef:4c:cc:03:84:8c:6a:5b:fd:2c:86:cd:0f:5b: 60:22:0d:a5:24:cf:f8:67:0a:87:e6:0f:39:09:de:01:02:8b: 44:d8:3b:71:ed:2b:1a:d6:f8:3d:c0:a3:ab:b6:5f:7b:42:c8: e1:c0:c7:e0:25:6a:2f:ce:82:f2:47:54:03:46:9b:79:5a:84: 5a:18:52:fa:c9:91:22:4d:b0:01:58:7f:d3:7e:da:b4:3a:67: d7:2d:b8:f1:c8:42:a6:a9:eb:33:76:18:69:7a:9b:cc:6f:64: 7f:92:e8:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEpYFaeBT6MuAqoOfHYlsYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2ZWFhMDBlYTc3NzA5OGIxYmYwMzY3NTZkNjQwZTlkMzFk NjNiM2IwHhcNMjUxMjIyMDYwMDU1WhcNMjUxMjIzMDYwMDU1WjAzMTEwLwYDVQQD EyhkY2U1YzgxODBjOTRjMjUzYWU2Y2I4ZTJiNWRmNDVlMjY2M2JjOWQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1WT8TJlbtrcaB2CpOxLd5uDQpnyL bmNAQNw9ydcz3014yG2p6REi4i0JPBYRgWl6zW4QQq/qzUNRf4CN3go9ksJJoZvE VKGXUxYt1dYUNyFgcaQEyfwjXeJxdH6tegq20RR2k14iZ6rOg1UI0bWS4TazTuiy 82BFS9ka5X7O1Gz+M4+hclKUXQx5czEfnHEwbtTR+rFcOCfWPP6YojmHkPfTig59 jsVXlkJQeMjjBHugjpEJvghG5sSKZ1izBOT5/xJvEbZeCGW353JwDGmWSS1dFXpJ s39YiZAUCWKHbrjNJ2Cp2EKsLsBFKEsCESIHV5A+BahD3lhHU9/21/meYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNzlyBgMlMJTrmy44rXfReJmO8nWMB8GA1UdIwQY MBaAFDbqoA6ndwmLG/A2dW1kDp0x1js7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnVxZ0RxZDNDWXNiOERaMWJXUU9uVEhXT3pzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS80MTAyMzItYjFmZC00MTM3LTgzMmQt YmRiMjEzMTNjM2VjLzEvTnVxZ0RxZDNDWXNiOERaMWJXUU9uVEhXT3pzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS80MTAyMzItYjFmZC00MTM3LTgzMmQtYmRiMjEzMTNjM2Vj LzEvTnVxZ0RxZDNDWXNiOERaMWJXUU9uVEhXT3pzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnZUa/4u0 PT4dNDA8BVgpF6eRfKSgGaI6RCllNu6j4NpBKjbWvLn363L4eZHmzUcnV0LeP0XP h7nimiwZqGIJDj9/P3mE6O/lF8ZqNH2vhWe7r+owTz/Vuu+vK34i/H5CHphX1eUN 8mr9e3dmbPCEkv5LT3yVG8h2r05PuSgvpBX8vjReQcQTo/AKp61MVSVyTYAwO+9M zAOEjGpb/SyGzQ9bYCINpSTP+GcKh+YPOQneAQKLRNg7ce0rGtb4PcCjq7Zfe0LI 4cDH4CVqL86C8kdUA0abeVqEWhhS+smRIk2wAVh/037atDpn1y248chCpqnrM3YY aXqbzG9kf5LoIQ== -----END CERTIFICATE-----Generated at Mon Dec 22 14:31:13 2025 by rpki-client