This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.mft File: nqFCUiVBDJMhHQh1j82vD3qhzKo.mft (raw, json) Hash identifier: IjVy4mWXslmBBPAlJedTQZlFEznHDyLykg3N8uDSh0s= Subject key identifier: 68:F0:69:5A:9D:9E:B8:15:0D:D0:1D:09:59:ED:82:78:4B:43:12:42 Authority key identifier: 9E:A1:42:52:25:41:0C:93:21:1D:08:75:8F:CD:AF:0F:7A:A1:CC:AA Certificate issuer: /CN=9ea1425225410c93211d08758fcdaf0f7aa1ccaa Certificate serial: 019B3A914E181F3B47895B5860F950A21AF7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nqFCUiVBDJMhHQh1j82vD3qhzKo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.mft Manifest number: 10FD Signing time: Sat 20 Dec 2025 07:02:39 +0000 Manifest this update: Sat 20 Dec 2025 07:02:39 +0000 Manifest next update: Sun 21 Dec 2025 07:02:39 +0000 Files and hashes: 1: Cy35oxIBw3su2liG61xuPEUmvjI.roa (hash: 2IrXlMCQpECjm4Y6ZOTZrh47ViIm4Ji7SwFI+6InbKc=) 2: nqFCUiVBDJMhHQh1j82vD3qhzKo.crl (hash: 7CupiQCFEOViIbKcvBg8Qa0FLoZTjUNEqokZHFRvn+I=) 3: sUbGHvxaPc1G1E3lSBfIJzcROEU.roa (hash: 5uZ2a8tZ0H9NijCrdgd56gsgVSZf0YOuYCFhbDVjRg4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.mft rsync://rpki.ripe.net/repository/DEFAULT/nqFCUiVBDJMhHQh1j82vD3qhzKo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:02:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:91:4e:18:1f:3b:47:89:5b:58:60:f9:50:a2:1a:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ea1425225410c93211d08758fcdaf0f7aa1ccaa Validity Not Before: Dec 20 07:02:39 2025 GMT Not After : Dec 21 07:02:39 2025 GMT Subject: CN=68f0695a9d9eb8150dd01d0959ed82784b431242 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:78:bc:9f:28:85:58:7f:ed:56:f1:52:5f:db: ac:ed:31:fe:ff:27:3c:1b:76:52:56:1c:89:bf:e2: 10:36:70:af:a6:dc:f7:0a:22:f9:ef:0d:21:13:5f: 2f:eb:27:e9:90:3e:3a:66:b8:40:35:c2:d6:7a:f4: 73:c5:2e:20:5e:b1:33:0c:fd:77:ca:f2:e6:bc:12: c3:69:d3:17:45:fe:4c:e9:b5:c0:58:41:9b:99:83: e4:8b:e5:c6:72:7e:69:56:f9:e3:52:8e:01:55:62: 51:b7:b6:d9:a0:6c:68:91:aa:52:43:d6:e3:ca:df: 83:1a:f9:f1:ec:2c:d7:f3:4d:1a:de:2f:97:5d:a4: e2:4e:98:2d:d5:3c:82:53:82:d8:0b:a3:c9:51:67: 92:26:6c:e1:21:37:66:b7:c0:d9:8c:53:12:69:83: d3:dd:13:86:53:74:a6:2e:d5:51:95:f4:33:fc:81: 8d:dc:87:ee:02:42:cb:99:31:d2:2c:63:19:9a:18: 18:a4:fb:7a:8c:18:fd:18:46:43:42:b0:a0:e7:51: 1c:27:f8:34:46:05:aa:63:65:c7:01:aa:89:c5:75: 6b:d2:88:22:ab:ea:54:68:0b:1b:7a:0a:e4:be:90: 7d:b9:16:93:87:28:d0:49:53:2c:40:c2:66:56:4d: da:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:F0:69:5A:9D:9E:B8:15:0D:D0:1D:09:59:ED:82:78:4B:43:12:42 X509v3 Authority Key Identifier: keyid:9E:A1:42:52:25:41:0C:93:21:1D:08:75:8F:CD:AF:0F:7A:A1:CC:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nqFCUiVBDJMhHQh1j82vD3qhzKo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:12:11:53:b8:33:2d:a4:b6:0c:f2:e6:c3:0b:68:5e:68:8d: fd:2e:14:c8:5a:c0:56:67:b2:32:e9:39:c7:41:d1:7c:bf:64: 49:71:2b:80:dd:1c:38:7e:ef:2e:c5:25:f1:2d:d0:2c:b4:81: 03:f5:b4:1f:34:f1:25:58:ca:47:cb:1a:49:b3:6a:e1:74:e9: b3:13:4b:ac:fa:be:da:d8:15:cb:89:9a:56:84:c5:91:78:50: 46:4f:e4:a8:5f:a6:e9:f6:92:55:b4:ae:15:49:fa:c3:e9:6b: 57:79:b8:31:b5:6a:8e:39:85:22:47:8f:e5:dd:f1:1d:16:68: c7:85:a5:31:3e:18:fd:4b:89:a7:f7:79:2d:85:bb:66:6d:e3: 28:94:6d:c4:94:68:90:ac:cd:1d:84:b3:84:3c:b5:ec:2d:59: de:89:39:db:6c:c3:ea:2f:b2:1a:d0:ce:1c:7a:b8:9a:1f:4a: cf:a8:e7:e5:cb:3b:3a:d1:3c:53:7c:a3:3d:a5:af:e8:c6:04: 7e:57:16:3d:34:e6:fb:74:39:c8:e0:49:64:e8:56:2c:43:2f: 1f:5a:4a:14:9c:ae:5b:87:a0:37:9f:1a:b8:80:03:39:e2:87: 16:2c:a0:9a:7d:0e:5a:f7:07:c7:89:63:13:eb:77:2f:ce:5b: 36:b6:42:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kU4YHztHiVtYYPlQohr3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllYTE0MjUyMjU0MTBjOTMyMTFkMDg3NThmY2RhZjBmN2Fh MWNjYWEwHhcNMjUxMjIwMDcwMjM5WhcNMjUxMjIxMDcwMjM5WjAzMTEwLwYDVQQD Eyg2OGYwNjk1YTlkOWViODE1MGRkMDFkMDk1OWVkODI3ODRiNDMxMjQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXi8nyiFWH/tVvFSX9us7TH+/yc8 G3ZSVhyJv+IQNnCvptz3CiL57w0hE18v6yfpkD46ZrhANcLWevRzxS4gXrEzDP13 yvLmvBLDadMXRf5M6bXAWEGbmYPki+XGcn5pVvnjUo4BVWJRt7bZoGxokapSQ9bj yt+DGvnx7CzX800a3i+XXaTiTpgt1TyCU4LYC6PJUWeSJmzhITdmt8DZjFMSaYPT 3ROGU3SmLtVRlfQz/IGN3IfuAkLLmTHSLGMZmhgYpPt6jBj9GEZDQrCg51EcJ/g0 RgWqY2XHAaqJxXVr0ogiq+pUaAsbegrkvpB9uRaThyjQSVMsQMJmVk3aHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGjwaVqdnrgVDdAdCVntgnhLQxJCMB8GA1UdIwQY MBaAFJ6hQlIlQQyTIR0IdY/Nrw96ocyqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnFGQ1VpVkJESk1oSFFoMWo4MnZEM3FoektvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9hM2U0NmYtN2U1YS00NjYzLWJkNjMt ZGMwOTY2NjY5NjA5LzEvbnFGQ1VpVkJESk1oSFFoMWo4MnZEM3FoektvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9hM2U0NmYtN2U1YS00NjYzLWJkNjMtZGMwOTY2NjY5NjA5 LzEvbnFGQ1VpVkJESk1oSFFoMWo4MnZEM3FoektvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMBIRU7gz LaS2DPLmwwtoXmiN/S4UyFrAVmeyMuk5x0HRfL9kSXErgN0cOH7vLsUl8S3QLLSB A/W0HzTxJVjKR8saSbNq4XTpsxNLrPq+2tgVy4maVoTFkXhQRk/kqF+m6faSVbSu FUn6w+lrV3m4MbVqjjmFIkeP5d3xHRZox4WlMT4Y/UuJp/d5LYW7Zm3jKJRtxJRo kKzNHYSzhDy17C1Z3ok522zD6i+yGtDOHHq4mh9Kz6jn5cs7OtE8U3yjPaWv6MYE flcWPTTm+3Q5yOBJZOhWLEMvH1pKFJyuW4egN58auIADOeKHFiygmn0OWvcHx4lj E+t3L85bNrZCDA== -----END CERTIFICATE-----Generated at Sat Dec 20 16:03:31 2025 by rpki-client