This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/c2ec61-37ab-405b-a6c2-13ee4c8d3082/1/NLqcIjJB64DivHGFO7fS5YKGvdM.mft File: NLqcIjJB64DivHGFO7fS5YKGvdM.mft (raw, json) Hash identifier: fDVTt7NYWZrausTGYoPBgqtmsN/c0fqp8S9dxciNhZE= Subject key identifier: B9:01:23:35:CE:A8:EE:05:DF:A5:B9:38:32:D3:A8:DD:89:2A:53:0B Authority key identifier: 34:BA:9C:22:32:41:EB:80:E2:BC:71:85:3B:B7:D2:E5:82:86:BD:D3 Certificate issuer: /CN=34ba9c223241eb80e2bc71853bb7d2e58286bdd3 Certificate serial: 019B54188B14B68A93B164B88DE371E14138 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLqcIjJB64DivHGFO7fS5YKGvdM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/c2ec61-37ab-405b-a6c2-13ee4c8d3082/1/NLqcIjJB64DivHGFO7fS5YKGvdM.mft Manifest number: 179C Signing time: Thu 25 Dec 2025 06:00:53 +0000 Manifest this update: Thu 25 Dec 2025 06:00:53 +0000 Manifest next update: Fri 26 Dec 2025 06:00:53 +0000 Files and hashes: 1: NLqcIjJB64DivHGFO7fS5YKGvdM.crl (hash: mu/9t9pxUkKQ+VNfqsCg4IKqlxv43qb46ZMYv2O4ZiU=) 2: fLquejxATIKeZ_Omgco482qTWPw.roa (hash: kp7xeLg7/f6lZ1aJQqZqJ9ZG54b9dQgMXma+xU2orkM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/c2ec61-37ab-405b-a6c2-13ee4c8d3082/1/NLqcIjJB64DivHGFO7fS5YKGvdM.crl rsync://rpki.ripe.net/repository/DEFAULT/de/c2ec61-37ab-405b-a6c2-13ee4c8d3082/1/NLqcIjJB64DivHGFO7fS5YKGvdM.mft rsync://rpki.ripe.net/repository/DEFAULT/NLqcIjJB64DivHGFO7fS5YKGvdM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 06:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:18:8b:14:b6:8a:93:b1:64:b8:8d:e3:71:e1:41:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34ba9c223241eb80e2bc71853bb7d2e58286bdd3 Validity Not Before: Dec 25 06:00:53 2025 GMT Not After : Dec 26 06:00:53 2025 GMT Subject: CN=b9012335cea8ee05dfa5b93832d3a8dd892a530b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a2:78:e3:58:c9:02:42:40:db:ab:08:6d:64: 08:f4:78:4a:60:7a:d6:b5:22:e5:7c:9b:fc:86:ae: 83:7e:9f:4e:e4:97:a9:f3:4f:13:ca:65:3c:b9:0b: ae:cb:9a:af:ac:7e:eb:96:19:d4:12:c0:b7:80:45: ae:36:4e:65:5a:8b:78:30:3b:f1:17:c2:8f:18:6f: 3c:f8:1d:3d:64:65:f3:39:48:71:d6:d1:a1:d6:92: 0e:6e:b6:69:8f:19:07:ac:4f:cd:70:c5:6a:ae:b2: a6:5f:45:8c:1d:ed:35:7f:26:3f:03:74:10:aa:fb: 85:9c:26:dd:82:f6:d7:6a:25:46:bd:9f:c5:df:88: ba:d5:b4:ee:a3:94:6e:82:ac:a2:b6:38:8d:57:50: b3:aa:0e:fa:85:b8:b4:19:ec:ea:04:ce:b8:21:c6: b6:e9:8a:04:e8:4c:f4:60:4a:33:15:ac:83:33:09: 3f:d7:bd:78:7b:4f:e4:75:74:64:c8:30:23:3c:cd: b1:fe:a5:50:d8:e2:ac:34:49:1f:dd:48:7f:72:bd: b6:0f:76:45:1c:4c:53:f1:1a:be:8f:24:d7:8c:d6: 8a:1b:39:6a:c9:2c:a9:47:f4:92:c6:41:a4:d3:95: 41:d2:e6:d8:bc:e5:44:47:97:5a:0c:dd:f3:00:34: 5b:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:01:23:35:CE:A8:EE:05:DF:A5:B9:38:32:D3:A8:DD:89:2A:53:0B X509v3 Authority Key Identifier: keyid:34:BA:9C:22:32:41:EB:80:E2:BC:71:85:3B:B7:D2:E5:82:86:BD:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLqcIjJB64DivHGFO7fS5YKGvdM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c2ec61-37ab-405b-a6c2-13ee4c8d3082/1/NLqcIjJB64DivHGFO7fS5YKGvdM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c2ec61-37ab-405b-a6c2-13ee4c8d3082/1/NLqcIjJB64DivHGFO7fS5YKGvdM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:95:1e:6c:78:35:87:6d:70:3f:46:37:6d:36:2a:f9:75:fd: 4b:ff:9f:31:c7:e4:5f:9e:81:f0:12:9c:ac:f7:45:30:a4:b7: c0:e0:bc:e1:ae:95:4f:d0:f4:12:ab:15:0d:4a:09:be:4a:5e: 5d:4e:aa:00:a6:67:d2:4d:c4:6a:24:39:33:c2:0c:52:58:d1: 46:b7:2c:52:ec:e7:39:a0:21:6f:1f:29:b8:ef:2c:5d:f7:47: 74:2c:8a:88:96:bf:57:2a:37:29:2e:82:4c:a0:0e:ae:5b:d4: 46:1e:9f:12:b9:9e:c3:80:57:73:31:57:48:a2:62:a5:ee:28: 0d:56:23:ae:7e:b5:0b:c7:d2:08:36:8d:26:72:34:60:b5:9f: 75:a9:44:50:0a:ea:05:14:6a:49:f3:c9:19:2a:d7:f8:fc:f3: 36:f6:62:18:f7:7a:d2:e8:9b:ca:95:3c:2d:2b:e3:bf:21:dd: 31:c9:98:39:14:90:f4:6a:f3:23:21:0d:ac:98:91:8a:dc:a6: 11:2c:cd:5a:44:29:1b:89:82:4a:b5:0f:b3:de:c9:d2:41:ed: 4a:c0:1b:a5:45:d7:95:25:4b:8c:78:54:e5:c5:b7:55:2f:2c: 49:4b:9a:bb:86:46:19:81:20:f8:7c:64:ad:d7:e2:20:5d:e3: fc:af:d3:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtUGIsUtoqTsWS4jeNx4UE4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0YmE5YzIyMzI0MWViODBlMmJjNzE4NTNiYjdkMmU1ODI4 NmJkZDMwHhcNMjUxMjI1MDYwMDUzWhcNMjUxMjI2MDYwMDUzWjAzMTEwLwYDVQQD EyhiOTAxMjMzNWNlYThlZTA1ZGZhNWI5MzgzMmQzYThkZDg5MmE1MzBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKJ441jJAkJA26sIbWQI9HhKYHrW tSLlfJv8hq6Dfp9O5Jep808TymU8uQuuy5qvrH7rlhnUEsC3gEWuNk5lWot4MDvx F8KPGG88+B09ZGXzOUhx1tGh1pIObrZpjxkHrE/NcMVqrrKmX0WMHe01fyY/A3QQ qvuFnCbdgvbXaiVGvZ/F34i61bTuo5RugqyitjiNV1Czqg76hbi0GezqBM64Ica2 6YoE6Ez0YEozFayDMwk/1714e0/kdXRkyDAjPM2x/qVQ2OKsNEkf3Uh/cr22D3ZF HExT8Rq+jyTXjNaKGzlqySypR/SSxkGk05VB0ubYvOVER5daDN3zADRbhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLkBIzXOqO4F36W5ODLTqN2JKlMLMB8GA1UdIwQY MBaAFDS6nCIyQeuA4rxxhTu30uWChr3TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkxxY0lqSkI2NERpdkhHRk83ZlM1WUtHdmRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9jMmVjNjEtMzdhYi00MDViLWE2YzIt MTNlZTRjOGQzMDgyLzEvTkxxY0lqSkI2NERpdkhHRk83ZlM1WUtHdmRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS9jMmVjNjEtMzdhYi00MDViLWE2YzItMTNlZTRjOGQzMDgy LzEvTkxxY0lqSkI2NERpdkhHRk83ZlM1WUtHdmRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC5UebHg1 h21wP0Y3bTYq+XX9S/+fMcfkX56B8BKcrPdFMKS3wOC84a6VT9D0EqsVDUoJvkpe XU6qAKZn0k3EaiQ5M8IMUljRRrcsUuznOaAhbx8puO8sXfdHdCyKiJa/Vyo3KS6C TKAOrlvURh6fErmew4BXczFXSKJipe4oDVYjrn61C8fSCDaNJnI0YLWfdalEUArq BRRqSfPJGSrX+PzzNvZiGPd60uibypU8LSvjvyHdMcmYORSQ9GrzIyENrJiRitym ESzNWkQpG4mCSrUPs97J0kHtSsAbpUXXlSVLjHhU5cW3VS8sSUuau4ZGGYEg+Hxk rdfiIF3j/K/T+g== -----END CERTIFICATE-----Generated at Thu Dec 25 14:31:10 2025 by rpki-client