This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/925d4a-f5f4-4299-a829-152a59479e69/1/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.mft File: Nqr6XD8vjkoIP4Hwy4e8eupEiR8.mft (raw, json) Hash identifier: soskDqQUe5RqD21c0uqNtE/X+EPiPPlcYGeOUgaLol8= Subject key identifier: 7F:DA:70:9A:C6:34:68:F8:E5:E8:33:9B:22:8D:94:BC:0A:C0:2B:CE Authority key identifier: 36:AA:FA:5C:3F:2F:8E:4A:08:3F:81:F0:CB:87:BC:7A:EA:44:89:1F Certificate issuer: /CN=36aafa5c3f2f8e4a083f81f0cb87bc7aea44891f Certificate serial: 019B5ED37868CFED115B58401330BA2DDFBD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/925d4a-f5f4-4299-a829-152a59479e69/1/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.mft Manifest number: 1798 Signing time: Sat 27 Dec 2025 08:01:15 +0000 Manifest this update: Sat 27 Dec 2025 08:01:15 +0000 Manifest next update: Sun 28 Dec 2025 08:01:15 +0000 Files and hashes: 1: Nqr6XD8vjkoIP4Hwy4e8eupEiR8.crl (hash: PSe07hJsBYkUz2eWU8pijXxyNi5+RHrDGNynuMi9qpY=) 2: Tz8QjBgBmzpa68NzWLRe2iAGU-U.roa (hash: juEtxBf0oAaQHOnDE0wzOzsnnb3wMIZXnN/0qajABas=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/925d4a-f5f4-4299-a829-152a59479e69/1/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/925d4a-f5f4-4299-a829-152a59479e69/1/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.mft rsync://rpki.ripe.net/repository/DEFAULT/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 08:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5e:d3:78:68:cf:ed:11:5b:58:40:13:30:ba:2d:df:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36aafa5c3f2f8e4a083f81f0cb87bc7aea44891f Validity Not Before: Dec 27 08:01:15 2025 GMT Not After : Dec 28 08:01:15 2025 GMT Subject: CN=7fda709ac63468f8e5e8339b228d94bc0ac02bce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:1c:33:fa:b4:27:62:91:ff:89:12:dc:e3:48: 06:88:9f:ac:cc:ba:5b:47:cb:0e:ec:51:65:47:64: a6:38:7b:17:1f:e2:b8:73:4c:bf:3a:99:01:f3:34: f4:67:85:2d:55:2a:4d:49:67:41:04:ae:bb:a5:d5: a9:15:3e:a5:9a:4a:31:9d:7b:4c:91:d4:76:0d:3b: c6:0f:78:fc:71:48:60:7c:4f:6e:d9:c7:c7:f7:df: ca:44:f1:3f:fa:96:d5:a0:2e:a9:f8:62:37:f6:2a: 97:79:a2:3a:a4:87:f7:d6:34:3d:3d:7f:27:70:22: da:c0:93:f3:cf:71:22:31:27:1a:6d:93:cb:f7:0a: 72:7e:8e:84:4d:5c:9e:ab:c8:4f:ed:b1:be:65:be: 93:a1:f0:79:1a:76:74:ec:74:31:45:ec:74:27:65: d1:12:ad:9d:cc:47:61:60:79:a2:8e:e1:cc:62:f9: 35:94:a5:82:2b:b7:f7:df:06:ac:37:44:bf:4a:8a: 2a:a0:fc:41:ae:ba:35:f0:13:7f:97:ca:bc:4c:9d: 36:69:23:70:56:94:95:13:4c:c0:91:22:71:50:75: f7:65:76:84:5b:70:e2:71:29:61:90:0b:58:4b:b7: 9d:9a:07:53:9a:fe:2e:93:e3:85:b8:67:1c:28:17: ae:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:DA:70:9A:C6:34:68:F8:E5:E8:33:9B:22:8D:94:BC:0A:C0:2B:CE X509v3 Authority Key Identifier: keyid:36:AA:FA:5C:3F:2F:8E:4A:08:3F:81:F0:CB:87:BC:7A:EA:44:89:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/925d4a-f5f4-4299-a829-152a59479e69/1/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/925d4a-f5f4-4299-a829-152a59479e69/1/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:06:30:95:8b:2e:99:39:65:19:7d:62:a1:49:74:f5:3b:1f: 76:f6:a4:87:4e:cd:64:14:41:be:5c:fa:d5:25:fd:06:8b:79: 63:2d:7e:93:4e:e3:a7:e7:92:7a:d9:ca:aa:36:94:73:c1:61: 13:df:7b:e8:0b:33:62:f8:40:86:91:91:81:49:a6:14:bb:cf: d0:9b:17:20:73:63:78:bb:28:ab:50:de:50:81:b2:1e:a6:8d: ca:a4:4c:25:0e:61:14:d2:76:ee:d9:fc:5e:f2:f5:37:83:e9: 19:7c:f2:cd:7c:da:d4:63:d8:23:72:6e:97:87:84:48:ce:57: 14:69:26:16:fc:00:54:02:a1:bf:66:69:57:42:32:fc:95:6a: b3:59:b1:2a:11:85:8d:da:86:ec:1d:88:53:26:0e:1b:29:25: a7:30:fa:b4:34:8e:68:dd:38:c5:4f:a0:4c:c3:cc:f1:27:14: 27:e3:d4:d3:f8:f4:e3:4a:73:a3:51:45:e7:6c:10:c3:df:5f: 8a:95:dc:ac:28:9f:d2:78:2c:b8:76:ee:4a:88:07:14:6f:78: cb:de:4b:b4:e9:7a:1b:95:a9:41:e2:19:ff:12:5a:d7:89:97: 3d:4f:c1:8a:5e:ff:a1:ba:a9:ca:4d:14:13:fd:66:3c:b2:1c: 35:ce:48:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZte03hoz+0RW1hAEzC6Ld+9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YWFmYTVjM2YyZjhlNGEwODNmODFmMGNiODdiYzdhZWE0 NDg5MWYwHhcNMjUxMjI3MDgwMTE1WhcNMjUxMjI4MDgwMTE1WjAzMTEwLwYDVQQD Eyg3ZmRhNzA5YWM2MzQ2OGY4ZTVlODMzOWIyMjhkOTRiYzBhYzAyYmNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohwz+rQnYpH/iRLc40gGiJ+szLpb R8sO7FFlR2SmOHsXH+K4c0y/OpkB8zT0Z4UtVSpNSWdBBK67pdWpFT6lmkoxnXtM kdR2DTvGD3j8cUhgfE9u2cfH99/KRPE/+pbVoC6p+GI39iqXeaI6pIf31jQ9PX8n cCLawJPzz3EiMScabZPL9wpyfo6ETVyeq8hP7bG+Zb6TofB5GnZ07HQxRex0J2XR Eq2dzEdhYHmijuHMYvk1lKWCK7f33wasN0S/SooqoPxBrro18BN/l8q8TJ02aSNw VpSVE0zAkSJxUHX3ZXaEW3DicSlhkAtYS7edmgdTmv4uk+OFuGccKBeu6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH/acJrGNGj45egzmyKNlLwKwCvOMB8GA1UdIwQY MBaAFDaq+lw/L45KCD+B8MuHvHrqRIkfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnFyNlhEOHZqa29JUDRId3k0ZThldXBFaVI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC85MjVkNGEtZjVmNC00Mjk5LWE4Mjkt MTUyYTU5NDc5ZTY5LzEvTnFyNlhEOHZqa29JUDRId3k0ZThldXBFaVI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC85MjVkNGEtZjVmNC00Mjk5LWE4MjktMTUyYTU5NDc5ZTY5 LzEvTnFyNlhEOHZqa29JUDRId3k0ZThldXBFaVI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKwYwlYsu mTllGX1ioUl09Tsfdvakh07NZBRBvlz61SX9Bot5Yy1+k07jp+eSetnKqjaUc8Fh E9976AszYvhAhpGRgUmmFLvP0JsXIHNjeLsoq1DeUIGyHqaNyqRMJQ5hFNJ27tn8 XvL1N4PpGXzyzXza1GPYI3Jul4eESM5XFGkmFvwAVAKhv2ZpV0Iy/JVqs1mxKhGF jdqG7B2IUyYOGyklpzD6tDSOaN04xU+gTMPM8ScUJ+PU0/j040pzo1FF52wQw99f ipXcrCif0ngsuHbuSogHFG94y95LtOl6G5WpQeIZ/xJa14mXPU/Bil7/obqpyk0U E/1mPLIcNc5IpA== -----END CERTIFICATE-----Generated at Sat Dec 27 10:51:04 2025 by rpki-client