This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.mft File: nQp0muJcHLtlhx1BanmrSohKxGg.mft (raw, json) Hash identifier: 4ZNxyv4gu4t6OJJfOKlZLzRDetXupUkaZsW8aClSr2c= Subject key identifier: E0:65:68:C2:16:C8:92:66:2F:31:01:5E:BF:19:68:02:E9:BB:2F:F8 Authority key identifier: 9D:0A:74:9A:E2:5C:1C:BB:65:87:1D:41:6A:79:AB:4A:88:4A:C4:68 Certificate issuer: /CN=9d0a749ae25c1cbb65871d416a79ab4a884ac468 Certificate serial: 019B4882876CA268ED78D3782A42199C1C34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQp0muJcHLtlhx1BanmrSohKxGg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.mft Manifest number: 1791 Signing time: Tue 23 Dec 2025 00:01:12 +0000 Manifest this update: Tue 23 Dec 2025 00:01:12 +0000 Manifest next update: Wed 24 Dec 2025 00:01:12 +0000 Files and hashes: 1: mtkhlYdRRxy7HTt4lejr_BK0O0E.roa (hash: XUZOJXssCKIIh5ucQaDh2vYICFb1VOST7rkiATGvktw=) 2: nQp0muJcHLtlhx1BanmrSohKxGg.crl (hash: 8JEvjbhzzuxEJ+dluOb66OVysxo3bXbCCCMuG5TAJ64=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.mft rsync://rpki.ripe.net/repository/DEFAULT/nQp0muJcHLtlhx1BanmrSohKxGg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:82:87:6c:a2:68:ed:78:d3:78:2a:42:19:9c:1c:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d0a749ae25c1cbb65871d416a79ab4a884ac468 Validity Not Before: Dec 23 00:01:12 2025 GMT Not After : Dec 24 00:01:12 2025 GMT Subject: CN=e06568c216c892662f31015ebf196802e9bb2ff8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:a2:49:b7:cc:5d:12:40:b9:fd:ad:f0:dc:2d: a1:39:c7:a9:5d:1d:a1:9e:3f:9a:44:41:92:6f:23: 49:b1:7c:ef:5e:aa:1b:77:84:e2:1b:1b:77:17:34: 95:ac:1e:c3:a5:8f:ac:7d:8b:1a:13:95:06:ca:f6: 44:19:9a:c9:ce:31:3f:29:42:df:11:28:07:c3:db: 10:d8:50:c6:2f:60:f6:77:26:5a:1d:7e:9c:c0:54: 17:32:a8:0c:a5:50:8c:38:67:6a:8a:6b:9d:e0:78: fb:b7:34:d8:24:99:64:4d:a4:f1:1e:32:e8:f8:31: 83:08:e0:05:69:73:b5:fe:77:3f:71:c9:60:c7:01: 7a:e6:68:97:e0:d5:8a:02:e4:f0:43:cd:d7:07:e9: af:b9:33:ba:dd:ff:d6:66:79:24:65:d3:87:c9:9a: a6:e4:89:2a:f0:2d:b3:57:e7:c8:6d:49:c8:0d:67: 23:84:94:37:fa:e0:b6:1e:24:44:c0:9f:d3:63:00: f1:f3:49:a5:49:25:86:9e:94:5f:13:44:c9:c5:d2: 92:6e:85:56:1f:9e:1f:11:5c:c2:92:69:e4:89:95: a2:72:73:12:85:45:bf:67:aa:18:3c:91:a5:5d:78: 8c:59:7a:a4:9f:e2:1c:9e:c0:d5:df:fc:c3:26:43: 0e:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:65:68:C2:16:C8:92:66:2F:31:01:5E:BF:19:68:02:E9:BB:2F:F8 X509v3 Authority Key Identifier: keyid:9D:0A:74:9A:E2:5C:1C:BB:65:87:1D:41:6A:79:AB:4A:88:4A:C4:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQp0muJcHLtlhx1BanmrSohKxGg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:8d:0a:d7:d3:a3:03:63:8b:7a:c7:0c:df:de:81:50:78:98: 78:29:ef:0a:a3:2c:a7:41:24:e0:69:67:0d:f6:52:c9:7a:71: 54:ea:81:14:35:ca:1f:cf:b4:18:b8:fa:02:2f:36:e8:17:19: db:97:39:c1:f1:f1:ed:eb:9e:3c:b1:83:8c:e8:83:9c:9a:95: 75:11:b4:6f:c2:1b:c8:f2:d0:51:ec:e9:4f:45:c4:4c:fc:05: 6f:77:99:b4:03:9c:f7:de:2f:eb:48:1b:de:a6:55:30:27:52: 24:94:99:f2:9e:b1:fc:31:ea:dd:e1:3a:83:fa:e1:8f:d3:b7: 02:63:c2:71:e6:e6:2a:6d:1f:4a:b5:ef:06:a2:60:61:09:ed: 06:98:3e:33:0e:6c:14:55:d5:7b:a2:e2:5a:be:3e:8c:a7:b2: 3f:2e:97:b9:d5:eb:60:93:7c:61:02:ed:ce:cb:4f:ff:aa:5c: b8:44:1f:39:69:15:c6:9e:77:6d:f6:8c:85:e3:2d:7a:56:85: 80:c9:f7:c1:e2:7a:77:86:33:91:ca:72:bb:c8:89:76:b4:02: e2:9c:08:eb:d4:5b:3a:12:05:53:70:a5:aa:9b:b7:bf:35:5f: a0:da:e8:9c:85:5d:fc:9e:f3:1f:d7:19:4b:95:40:73:f7:49: 14:a8:b6:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIgodsomjteNN4KkIZnBw0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMGE3NDlhZTI1YzFjYmI2NTg3MWQ0MTZhNzlhYjRhODg0 YWM0NjgwHhcNMjUxMjIzMDAwMTEyWhcNMjUxMjI0MDAwMTEyWjAzMTEwLwYDVQQD EyhlMDY1NjhjMjE2Yzg5MjY2MmYzMTAxNWViZjE5NjgwMmU5YmIyZmY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06JJt8xdEkC5/a3w3C2hOcepXR2h nj+aREGSbyNJsXzvXqobd4TiGxt3FzSVrB7DpY+sfYsaE5UGyvZEGZrJzjE/KULf ESgHw9sQ2FDGL2D2dyZaHX6cwFQXMqgMpVCMOGdqimud4Hj7tzTYJJlkTaTxHjLo +DGDCOAFaXO1/nc/cclgxwF65miX4NWKAuTwQ83XB+mvuTO63f/WZnkkZdOHyZqm 5Ikq8C2zV+fIbUnIDWcjhJQ3+uC2HiREwJ/TYwDx80mlSSWGnpRfE0TJxdKSboVW H54fEVzCkmnkiZWicnMShUW/Z6oYPJGlXXiMWXqkn+IcnsDV3/zDJkMO8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOBlaMIWyJJmLzEBXr8ZaALpuy/4MB8GA1UdIwQY MBaAFJ0KdJriXBy7ZYcdQWp5q0qISsRoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblFwMG11SmNITHRsaHgxQmFubXJTb2hLeEdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS84NWQwYTctZDgwMi00MWM0LTgxYWYt MWE2ZDNjOTlkYzQ4LzEvblFwMG11SmNITHRsaHgxQmFubXJTb2hLeEdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS84NWQwYTctZDgwMi00MWM0LTgxYWYtMWE2ZDNjOTlkYzQ4 LzEvblFwMG11SmNITHRsaHgxQmFubXJTb2hLeEdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnI0K19Oj A2OLescM396BUHiYeCnvCqMsp0Ek4GlnDfZSyXpxVOqBFDXKH8+0GLj6Ai826BcZ 25c5wfHx7euePLGDjOiDnJqVdRG0b8IbyPLQUezpT0XETPwFb3eZtAOc994v60gb 3qZVMCdSJJSZ8p6x/DHq3eE6g/rhj9O3AmPCcebmKm0fSrXvBqJgYQntBpg+Mw5s FFXVe6LiWr4+jKeyPy6XudXrYJN8YQLtzstP/6pcuEQfOWkVxp53bfaMheMtelaF gMn3weJ6d4Yzkcpyu8iJdrQC4pwI69RbOhIFU3Clqpu3vzVfoNronIVd/J7zH9cZ S5VAc/dJFKi25g== -----END CERTIFICATE-----Generated at Tue Dec 23 07:18:00 2025 by rpki-client