This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.mft File: nQp0muJcHLtlhx1BanmrSohKxGg.mft (raw, json) Hash identifier: PRqrwgkryhZoj+gxZqQEn5WLyS/pFNVidJ7uzc3S+XU= Subject key identifier: 69:FD:0F:19:9C:A9:9C:99:E2:42:8A:C1:69:23:13:EA:CE:31:07:33 Authority key identifier: 9D:0A:74:9A:E2:5C:1C:BB:65:87:1D:41:6A:79:AB:4A:88:4A:C4:68 Certificate issuer: /CN=9d0a749ae25c1cbb65871d416a79ab4a884ac468 Certificate serial: 019B3EDA1A81B5F02CC5527E232497B63999 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQp0muJcHLtlhx1BanmrSohKxGg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.mft Manifest number: 178C Signing time: Sun 21 Dec 2025 03:00:39 +0000 Manifest this update: Sun 21 Dec 2025 03:00:39 +0000 Manifest next update: Mon 22 Dec 2025 03:00:39 +0000 Files and hashes: 1: mtkhlYdRRxy7HTt4lejr_BK0O0E.roa (hash: XUZOJXssCKIIh5ucQaDh2vYICFb1VOST7rkiATGvktw=) 2: nQp0muJcHLtlhx1BanmrSohKxGg.crl (hash: I6RBiLyNgL4zu1JRkupxc53+oPnFccNSCYeHteGyy6U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.mft rsync://rpki.ripe.net/repository/DEFAULT/nQp0muJcHLtlhx1BanmrSohKxGg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:1a:81:b5:f0:2c:c5:52:7e:23:24:97:b6:39:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d0a749ae25c1cbb65871d416a79ab4a884ac468 Validity Not Before: Dec 21 03:00:39 2025 GMT Not After : Dec 22 03:00:39 2025 GMT Subject: CN=69fd0f199ca99c99e2428ac1692313eace310733 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:1a:c4:1a:90:11:5b:06:e7:6a:f8:d9:31:fa: 4c:49:3c:ac:ca:97:75:0e:36:c7:31:45:1f:44:e4: 97:7b:9a:26:70:8e:7c:8e:a4:25:7b:9d:1c:70:8f: 03:35:32:97:6a:7a:ba:6f:d2:bf:c7:18:18:4f:de: 61:ad:1e:c8:d2:0f:71:6a:4c:74:10:fe:11:4f:75: e2:74:bc:7c:e4:9c:ff:27:8e:92:5c:4f:d1:cc:f6: 57:5d:13:1d:10:dd:7f:a9:cd:93:9f:71:e3:01:35: d0:6b:e7:56:27:a4:0d:d3:50:09:18:1c:44:55:c9: 27:c7:5f:54:85:4b:40:c1:ce:c5:eb:36:4b:20:66: ce:f5:a3:cd:13:37:89:f8:bd:0f:2a:fd:83:fa:7a: 54:87:e1:85:f4:d9:fe:73:45:50:3b:b2:1a:6f:49: aa:9f:83:1a:9a:fc:f0:b4:0f:3b:8b:dd:21:f7:86: 0e:b3:7b:06:ba:af:a4:4c:0a:c9:29:b3:ae:12:e3: dc:ef:91:e1:1c:5c:e8:b0:c1:71:6a:a5:e3:fd:67: 19:f5:30:dd:55:02:8c:b2:ff:2d:8b:f0:f8:2b:a0: 75:c9:31:86:56:34:03:dd:5b:e2:75:69:58:af:fb: ff:16:64:d4:d2:58:a6:54:63:34:f8:20:d6:d8:7a: 66:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:FD:0F:19:9C:A9:9C:99:E2:42:8A:C1:69:23:13:EA:CE:31:07:33 X509v3 Authority Key Identifier: keyid:9D:0A:74:9A:E2:5C:1C:BB:65:87:1D:41:6A:79:AB:4A:88:4A:C4:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQp0muJcHLtlhx1BanmrSohKxGg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:12:d2:8a:53:db:a6:c2:16:19:76:4b:f0:0a:41:6f:41:56: a6:ee:6b:21:1c:98:55:1c:21:88:90:6a:99:a8:75:a6:bc:91: 0d:f7:86:5a:bd:17:1a:c6:f7:c1:2f:ed:2d:a8:ca:59:48:db: a8:ee:38:dc:60:93:6a:41:d5:eb:99:69:f8:2c:fd:59:7c:bf: d3:07:07:1f:8d:a0:f0:23:f9:60:f1:52:1a:2e:8c:e1:06:1e: e5:bc:52:b5:84:c6:4a:73:84:fd:03:96:20:48:3e:c4:5d:57: b7:36:9d:38:5d:2f:b2:46:a7:42:36:28:00:a1:56:78:2a:07: 56:47:bb:86:41:7a:c7:cb:f7:5e:9b:60:dd:9d:cb:6e:86:89: 57:1d:84:1a:b8:0c:db:e4:de:0b:cc:15:08:d2:31:3d:be:bc: ac:b5:e0:0b:02:cb:47:34:b9:ba:e8:51:a6:e7:74:62:74:c5: 2e:f0:88:f5:a3:b8:45:de:0b:b3:6a:00:ae:0d:10:f1:f3:ab: 59:ef:14:52:e3:43:01:c7:36:84:80:fb:49:b3:ec:02:a5:ee: 33:57:66:20:ce:10:87:91:55:ec:3d:76:10:b5:7e:a7:b3:fb: 5e:09:d2:d4:77:a4:49:b7:e0:15:76:9d:3a:f1:4f:8f:53:18: dc:1f:25:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2hqBtfAsxVJ+IySXtjmZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMGE3NDlhZTI1YzFjYmI2NTg3MWQ0MTZhNzlhYjRhODg0 YWM0NjgwHhcNMjUxMjIxMDMwMDM5WhcNMjUxMjIyMDMwMDM5WjAzMTEwLwYDVQQD Eyg2OWZkMGYxOTljYTk5Yzk5ZTI0MjhhYzE2OTIzMTNlYWNlMzEwNzMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshrEGpARWwbnavjZMfpMSTysypd1 DjbHMUUfROSXe5omcI58jqQle50ccI8DNTKXanq6b9K/xxgYT95hrR7I0g9xakx0 EP4RT3XidLx85Jz/J46SXE/RzPZXXRMdEN1/qc2Tn3HjATXQa+dWJ6QN01AJGBxE Vcknx19UhUtAwc7F6zZLIGbO9aPNEzeJ+L0PKv2D+npUh+GF9Nn+c0VQO7Iab0mq n4MamvzwtA87i90h94YOs3sGuq+kTArJKbOuEuPc75HhHFzosMFxaqXj/WcZ9TDd VQKMsv8ti/D4K6B1yTGGVjQD3VvidWlYr/v/FmTU0limVGM0+CDW2Hpm1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGn9DxmcqZyZ4kKKwWkjE+rOMQczMB8GA1UdIwQY MBaAFJ0KdJriXBy7ZYcdQWp5q0qISsRoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblFwMG11SmNITHRsaHgxQmFubXJTb2hLeEdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS84NWQwYTctZDgwMi00MWM0LTgxYWYt MWE2ZDNjOTlkYzQ4LzEvblFwMG11SmNITHRsaHgxQmFubXJTb2hLeEdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS84NWQwYTctZDgwMi00MWM0LTgxYWYtMWE2ZDNjOTlkYzQ4 LzEvblFwMG11SmNITHRsaHgxQmFubXJTb2hLeEdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAShLSilPb psIWGXZL8ApBb0FWpu5rIRyYVRwhiJBqmah1pryRDfeGWr0XGsb3wS/tLajKWUjb qO443GCTakHV65lp+Cz9WXy/0wcHH42g8CP5YPFSGi6M4QYe5bxStYTGSnOE/QOW IEg+xF1XtzadOF0vskanQjYoAKFWeCoHVke7hkF6x8v3Xptg3Z3LboaJVx2EGrgM 2+TeC8wVCNIxPb68rLXgCwLLRzS5uuhRpud0YnTFLvCI9aO4Rd4Ls2oArg0Q8fOr We8UUuNDAcc2hID7SbPsAqXuM1dmIM4Qh5FV7D12ELV+p7P7XgnS1HekSbfgFXad OvFPj1MY3B8lbA== -----END CERTIFICATE-----Generated at Sun Dec 21 06:03:49 2025 by rpki-client