This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.mft File: Nq8EHRLErbZvjBYRPJphR9AjiNk.mft (raw, json) Hash identifier: ObEYrTOtbPNO+Scp92Fcq88kBoTH5c2DajuCSiQdD/I= Subject key identifier: DC:82:FC:20:98:1C:A1:D5:51:32:34:E9:AE:DE:79:BE:2D:1E:62:B0 Authority key identifier: 36:AF:04:1D:12:C4:AD:B6:6F:8C:16:11:3C:9A:61:47:D0:23:88:D9 Certificate issuer: /CN=36af041d12c4adb66f8c16113c9a6147d02388d9 Certificate serial: 019B3D22BE8FA60F6FAB7FDF8AE7B649FE0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nq8EHRLErbZvjBYRPJphR9AjiNk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.mft Manifest number: 10D7 Signing time: Sat 20 Dec 2025 19:00:45 +0000 Manifest this update: Sat 20 Dec 2025 19:00:45 +0000 Manifest next update: Sun 21 Dec 2025 19:00:45 +0000 Files and hashes: 1: Nq8EHRLErbZvjBYRPJphR9AjiNk.crl (hash: 9lxc7X29MQiQlP8MgtGezil+MBJvHt/xti10j2rsTnE=) 2: nxVkwWxp31G9Nhk5RnHhT1dH-NE.roa (hash: dlhfhOwY+Ae+4z4M/Srqh6E06sqatloTn5dl72qTwng=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.crl rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.mft rsync://rpki.ripe.net/repository/DEFAULT/Nq8EHRLErbZvjBYRPJphR9AjiNk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:22:be:8f:a6:0f:6f:ab:7f:df:8a:e7:b6:49:fe:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36af041d12c4adb66f8c16113c9a6147d02388d9 Validity Not Before: Dec 20 19:00:45 2025 GMT Not After : Dec 21 19:00:45 2025 GMT Subject: CN=dc82fc20981ca1d5513234e9aede79be2d1e62b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:31:d9:b6:fd:c8:77:5f:25:55:95:bb:9c:8c: 00:9a:5e:b6:f1:9c:ce:79:95:9a:7c:52:9c:3e:d6: 97:e5:e1:22:53:4d:12:50:fe:84:ed:1e:38:db:a8: 2f:fc:e2:d8:92:c1:d6:94:43:e4:a9:f9:62:49:09: dd:5b:63:41:21:84:2a:4f:3e:86:4a:40:a1:64:01: ff:74:1e:a2:8d:c4:f0:d9:b2:cb:5a:a8:f3:aa:cc: a3:bb:1f:56:3a:42:c7:a1:2b:29:c6:a5:e0:06:77: 47:65:c5:39:a6:f2:15:dd:bf:2b:0e:24:9e:40:83: 4d:d8:29:1c:4e:aa:a1:70:c7:6c:9b:70:20:75:19: 68:50:ee:f2:4c:11:ac:11:0a:e8:69:de:8d:a9:29: 4e:3a:70:86:b4:f5:ad:51:b2:eb:2f:49:50:e8:aa: 99:a8:94:5d:33:11:f1:20:a4:f4:61:b3:1d:b6:cf: a9:a4:46:bf:65:8b:fa:93:f3:63:ac:fe:12:74:98: aa:3c:17:a2:0f:23:14:a4:cb:a4:67:4f:f4:90:43: db:85:86:2d:7f:58:8e:d8:cb:f3:8e:43:a6:f3:2e: 6e:1b:25:da:66:13:5b:77:a6:4e:41:27:77:2f:00: 17:38:86:40:d9:1a:11:11:17:ef:e4:a7:31:d5:b9: 59:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:82:FC:20:98:1C:A1:D5:51:32:34:E9:AE:DE:79:BE:2D:1E:62:B0 X509v3 Authority Key Identifier: keyid:36:AF:04:1D:12:C4:AD:B6:6F:8C:16:11:3C:9A:61:47:D0:23:88:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nq8EHRLErbZvjBYRPJphR9AjiNk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:c4:81:f3:46:b2:c9:11:a7:9b:7b:d2:5f:6e:ea:8a:e2:e0: 9b:f0:4f:45:c1:91:17:30:10:c1:ae:7c:17:cb:d3:d4:66:37: ae:17:a0:e7:47:38:58:a1:80:ae:8c:59:29:3b:dc:24:b7:ed: ce:d6:51:5a:cd:f5:c3:0a:dd:d7:fc:be:02:93:4b:f7:67:ef: 9c:af:e6:2e:87:41:c7:79:3c:c4:37:62:40:2e:b6:af:b3:99: 9e:d8:80:cf:5d:80:38:ee:7c:4a:b8:5a:68:36:81:e8:8f:5a: 9a:82:29:ec:02:94:a6:9b:d9:f9:69:23:01:88:ee:6d:28:7c: eb:82:61:80:10:4c:75:a0:de:cf:92:60:ad:19:a1:5c:45:7f: 06:15:bc:31:5c:aa:37:f0:a8:f0:69:3d:e1:7f:65:e0:25:63: 8e:8f:6d:aa:75:fb:db:ef:4b:ce:0a:62:59:80:7d:87:90:d4: 6e:6a:f8:38:8e:29:ca:9c:dd:cd:38:c6:6d:41:da:1f:85:b2: a5:4f:44:8b:e3:f5:a7:76:71:e7:9f:b4:2a:79:3c:27:13:49: 82:c8:78:91:b9:62:c0:45:1c:e2:99:e6:11:af:2b:59:3e:07: c4:6c:b3:b7:5b:76:ef:24:07:4f:d3:4f:6f:fb:21:93:97:d5: a0:53:f6:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9Ir6Ppg9vq3/fiue2Sf4OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YWYwNDFkMTJjNGFkYjY2ZjhjMTYxMTNjOWE2MTQ3ZDAy Mzg4ZDkwHhcNMjUxMjIwMTkwMDQ1WhcNMjUxMjIxMTkwMDQ1WjAzMTEwLwYDVQQD EyhkYzgyZmMyMDk4MWNhMWQ1NTEzMjM0ZTlhZWRlNzliZTJkMWU2MmIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1zHZtv3Id18lVZW7nIwAml628ZzO eZWafFKcPtaX5eEiU00SUP6E7R4426gv/OLYksHWlEPkqfliSQndW2NBIYQqTz6G SkChZAH/dB6ijcTw2bLLWqjzqsyjux9WOkLHoSspxqXgBndHZcU5pvIV3b8rDiSe QINN2CkcTqqhcMdsm3AgdRloUO7yTBGsEQroad6NqSlOOnCGtPWtUbLrL0lQ6KqZ qJRdMxHxIKT0YbMdts+ppEa/ZYv6k/NjrP4SdJiqPBeiDyMUpMukZ0/0kEPbhYYt f1iO2MvzjkOm8y5uGyXaZhNbd6ZOQSd3LwAXOIZA2RoRERfv5Kcx1blZQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNyC/CCYHKHVUTI06a7eeb4tHmKwMB8GA1UdIwQY MBaAFDavBB0SxK22b4wWETyaYUfQI4jZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnE4RUhSTEVyYlp2akJZUlBKcGhSOUFqaU5rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC83YTU0MmQtNzE5ZS00NmQwLWE1Y2Mt MDYxZGQ2ODEzMzJjLzEvTnE4RUhSTEVyYlp2akJZUlBKcGhSOUFqaU5rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC83YTU0MmQtNzE5ZS00NmQwLWE1Y2MtMDYxZGQ2ODEzMzJj LzEvTnE4RUhSTEVyYlp2akJZUlBKcGhSOUFqaU5rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMcSB80ay yRGnm3vSX27qiuLgm/BPRcGRFzAQwa58F8vT1GY3rheg50c4WKGAroxZKTvcJLft ztZRWs31wwrd1/y+ApNL92fvnK/mLodBx3k8xDdiQC62r7OZntiAz12AOO58Srha aDaB6I9amoIp7AKUppvZ+WkjAYjubSh864JhgBBMdaDez5JgrRmhXEV/BhW8MVyq N/Co8Gk94X9l4CVjjo9tqnX72+9LzgpiWYB9h5DUbmr4OI4pypzdzTjGbUHaH4Wy pU9Ei+P1p3Zx55+0Knk8JxNJgsh4kbliwEUc4pnmEa8rWT4HxGyzt1t27yQHT9NP b/shk5fVoFP2eQ== -----END CERTIFICATE-----Generated at Sat Dec 20 21:41:02 2025 by rpki-client