This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft File: nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft (raw, json) Hash identifier: IJaViiidbSRtHa0WomerNlR3lFbi2TVCzCTGwUnU2UQ= Subject key identifier: AB:76:C2:E5:4C:50:95:C4:6E:A8:07:84:C3:C0:BC:C8:1E:9A:28:D6 Authority key identifier: 9E:74:0C:D3:B6:6B:60:E1:8B:3D:96:FF:B3:F4:21:8D:79:B5:B7:70 Certificate issuer: /CN=9e740cd3b66b60e18b3d96ffb3f4218d79b5b770 Certificate serial: 019B48829427519BA53D28AB22706F2A3E6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nnQM07ZrYOGLPZb_s_QhjXm1t3A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft Manifest number: 1720 Signing time: Tue 23 Dec 2025 00:01:15 +0000 Manifest this update: Tue 23 Dec 2025 00:01:15 +0000 Manifest next update: Wed 24 Dec 2025 00:01:15 +0000 Files and hashes: 1: P4xtR7feyaz6xolJASFQCzKsZ5I.roa (hash: 8akLt+kVG21bECUmJhi7RKtZ33RFaJwb4cW+qtXYRks=) 2: nnQM07ZrYOGLPZb_s_QhjXm1t3A.crl (hash: 3hqeBp362P4jBrbyDv0tpSwLvfFLGAagd5Wx8E+qdZA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft rsync://rpki.ripe.net/repository/DEFAULT/nnQM07ZrYOGLPZb_s_QhjXm1t3A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:82:94:27:51:9b:a5:3d:28:ab:22:70:6f:2a:3e:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e740cd3b66b60e18b3d96ffb3f4218d79b5b770 Validity Not Before: Dec 23 00:01:15 2025 GMT Not After : Dec 24 00:01:15 2025 GMT Subject: CN=ab76c2e54c5095c46ea80784c3c0bcc81e9a28d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:a5:22:b1:b0:12:17:e2:df:48:c3:64:76:fa: 26:71:57:07:fd:07:59:93:d3:e4:9d:48:a8:94:3f: b3:be:cd:d6:11:22:76:31:64:78:f2:d0:62:4c:b2: 49:af:2a:49:6d:cb:ae:2c:9f:87:6b:c1:6f:ae:13: eb:70:3e:69:42:08:d3:cc:6d:30:e3:5c:bb:c7:84: 80:b6:c9:a8:9c:2e:76:4d:d5:fb:cd:8f:16:2b:87: 29:11:9d:c1:4b:d4:f0:a4:c1:98:a5:7f:40:cc:d4: 3f:96:ab:e1:20:2a:00:12:87:91:60:e9:04:f0:1f: c1:90:14:41:03:2e:d8:e7:48:56:e3:2d:e8:1e:b9: e9:47:29:11:56:d8:c5:5e:eb:99:43:dd:56:ad:e3: f4:03:8e:ff:a5:ad:08:3d:7e:23:97:9d:c0:10:66: d8:b5:82:a0:a1:3b:66:32:e0:50:86:1f:85:84:ab: de:48:68:96:a0:69:2c:bb:bd:f9:25:67:f5:49:c2: a6:d5:b7:01:61:47:82:bd:ca:c8:d8:d4:67:07:a5: 96:14:3e:81:52:37:b7:d9:e1:a6:07:12:3a:e0:64: bc:be:81:b8:d4:bf:d3:f7:d2:1c:d6:2c:17:0a:a1: fa:d4:38:b0:1a:47:cc:c4:a2:c0:79:c9:37:4e:64: 72:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:76:C2:E5:4C:50:95:C4:6E:A8:07:84:C3:C0:BC:C8:1E:9A:28:D6 X509v3 Authority Key Identifier: keyid:9E:74:0C:D3:B6:6B:60:E1:8B:3D:96:FF:B3:F4:21:8D:79:B5:B7:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nnQM07ZrYOGLPZb_s_QhjXm1t3A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:1a:5d:8c:cc:fc:87:03:32:ad:25:63:e8:a2:c4:41:2d:b9: c9:0c:5d:31:ca:ec:3e:1a:f4:7e:88:2c:e8:86:ea:0c:10:50: 63:56:0e:ef:60:19:9b:e9:ff:f4:d7:83:9e:ae:3b:9a:30:80: 1f:14:64:fa:16:70:61:34:e4:6d:f4:a6:7c:b1:f0:72:ec:5d: 56:1a:cf:d2:20:f9:bd:e4:13:31:16:22:e8:15:74:5d:10:12: dc:d6:4e:57:bb:11:33:58:53:c6:1f:52:00:15:19:36:d9:07: 05:89:bd:28:87:fc:06:81:5e:18:8a:36:a7:1c:26:86:b4:b1: 8a:c6:72:f8:1a:c9:7a:c6:93:50:ed:31:a4:dd:2e:e4:91:c7: f0:43:09:7c:87:a5:72:2a:f6:7d:05:da:4d:01:b0:5a:39:dc: 31:23:95:e5:14:3e:d4:56:58:74:c0:3d:24:d9:41:2d:8f:d7: 77:8e:6d:ad:66:bd:70:af:76:fd:d1:67:1c:26:7d:b7:5e:66: 3a:bf:55:5f:90:5c:82:fb:9a:fe:52:f0:86:62:e1:c3:2b:fc: 95:1a:2e:0f:df:97:e8:8c:c1:e5:9f:18:bc:9c:60:a2:87:88: a5:c9:47:56:2b:e5:bb:82:fc:c0:0b:37:93:70:f3:23:80:bb: aa:31:ab:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIgpQnUZulPSirInBvKj5sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNzQwY2QzYjY2YjYwZTE4YjNkOTZmZmIzZjQyMThkNzli NWI3NzAwHhcNMjUxMjIzMDAwMTE1WhcNMjUxMjI0MDAwMTE1WjAzMTEwLwYDVQQD EyhhYjc2YzJlNTRjNTA5NWM0NmVhODA3ODRjM2MwYmNjODFlOWEyOGQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA26UisbASF+LfSMNkdvomcVcH/QdZ k9PknUiolD+zvs3WESJ2MWR48tBiTLJJrypJbcuuLJ+Ha8FvrhPrcD5pQgjTzG0w 41y7x4SAtsmonC52TdX7zY8WK4cpEZ3BS9TwpMGYpX9AzNQ/lqvhICoAEoeRYOkE 8B/BkBRBAy7Y50hW4y3oHrnpRykRVtjFXuuZQ91WreP0A47/pa0IPX4jl53AEGbY tYKgoTtmMuBQhh+FhKveSGiWoGksu735JWf1ScKm1bcBYUeCvcrI2NRnB6WWFD6B Uje32eGmBxI64GS8voG41L/T99Ic1iwXCqH61DiwGkfMxKLAeck3TmRyQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKt2wuVMUJXEbqgHhMPAvMgemijWMB8GA1UdIwQY MBaAFJ50DNO2a2Dhiz2W/7P0IY15tbdwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbm5RTTA3WnJZT0dMUFpiX3NfUWhqWG0xdDNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8xZGU2MTMtNjFiOS00YjA3LWFkNDct NTBlNGIwNTA0ZjQ4LzEvbm5RTTA3WnJZT0dMUFpiX3NfUWhqWG0xdDNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC8xZGU2MTMtNjFiOS00YjA3LWFkNDctNTBlNGIwNTA0ZjQ4 LzEvbm5RTTA3WnJZT0dMUFpiX3NfUWhqWG0xdDNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYhpdjMz8 hwMyrSVj6KLEQS25yQxdMcrsPhr0fogs6IbqDBBQY1YO72AZm+n/9NeDnq47mjCA HxRk+hZwYTTkbfSmfLHwcuxdVhrP0iD5veQTMRYi6BV0XRAS3NZOV7sRM1hTxh9S ABUZNtkHBYm9KIf8BoFeGIo2pxwmhrSxisZy+BrJesaTUO0xpN0u5JHH8EMJfIel cir2fQXaTQGwWjncMSOV5RQ+1FZYdMA9JNlBLY/Xd45trWa9cK92/dFnHCZ9t15m Or9VX5Bcgvua/lLwhmLhwyv8lRouD9+X6IzB5Z8YvJxgooeIpclHVivlu4L8wAs3 k3DzI4C7qjGrrQ== -----END CERTIFICATE-----Generated at Tue Dec 23 02:37:13 2025 by rpki-client