This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/366830-c634-4644-a752-820914022158/1/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.mft File: nqc_uHyHtv-EYgFhR3ZOfk8OrSk.mft (raw, json) Hash identifier: CCFXd2K/yzeG720KhnjcOwEm0BAvTg7gxqztMKw7xBo= Subject key identifier: CB:7A:CC:55:49:03:B2:60:5A:AB:68:C6:00:59:B5:03:E2:41:85:20 Authority key identifier: 9E:A7:3F:B8:7C:87:B6:FF:84:62:01:61:47:76:4E:7E:4F:0E:AD:29 Certificate issuer: /CN=9ea73fb87c87b6ff8462016147764e7e4f0ead29 Certificate serial: 019B650CE844FB23A3AF8EF33ADC8B875447 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/366830-c634-4644-a752-820914022158/1/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.mft Manifest number: 09DF Signing time: Sun 28 Dec 2025 13:01:43 +0000 Manifest this update: Sun 28 Dec 2025 13:01:43 +0000 Manifest next update: Mon 29 Dec 2025 13:01:43 +0000 Files and hashes: 1: Jc4wKdZujtBQlnsZSGZ-Msh3t-U.roa (hash: yoz3wQ6+m9WewYaNOk0D0h3Hx6RkufI02fLU4g+5owo=) 2: nqc_uHyHtv-EYgFhR3ZOfk8OrSk.crl (hash: rjUEBScvyyOARjIMExZPT42k3dTxaYTMHz5JpslA+r4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/366830-c634-4644-a752-820914022158/1/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/366830-c634-4644-a752-820914022158/1/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.mft rsync://rpki.ripe.net/repository/DEFAULT/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 13:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:65:0c:e8:44:fb:23:a3:af:8e:f3:3a:dc:8b:87:54:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ea73fb87c87b6ff8462016147764e7e4f0ead29 Validity Not Before: Dec 28 13:01:43 2025 GMT Not After : Dec 29 13:01:43 2025 GMT Subject: CN=cb7acc554903b2605aab68c60059b503e2418520 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:e7:b9:e8:0e:df:1b:fe:59:92:90:13:b5:bf: 6e:83:26:ae:83:1f:17:68:2c:ce:4b:fd:38:0e:48: e6:4f:5c:c3:73:92:d1:bc:13:ca:45:83:3a:ce:a6: d4:97:bd:0e:a9:cf:89:5a:1b:c0:a9:ec:80:fe:eb: e0:35:86:5d:75:5b:a8:3c:85:67:46:4c:cf:61:4f: 43:9f:0e:0c:0c:ae:be:98:ed:ab:77:47:fc:92:ef: 80:49:04:95:b7:2c:61:8d:28:b0:91:64:6d:4b:94: 0e:15:dc:94:d4:56:b9:b1:d9:35:32:77:81:39:12: a8:67:dc:7f:af:18:c8:d8:72:a8:81:da:e5:19:fd: 39:73:1b:4d:7f:a0:db:a9:73:19:65:69:dd:20:57: ce:2d:c6:b8:e1:3d:61:b8:83:cb:58:17:82:09:20: 66:e8:bc:e6:d9:c7:f9:83:27:e8:cb:3a:e9:ff:42: 40:51:91:f1:62:bc:6e:70:da:fd:15:31:7f:07:ae: 6d:2a:ce:88:1e:6c:40:69:d8:64:7e:c5:47:41:c4: 22:33:1c:a0:29:5a:89:af:3a:c8:70:30:fe:04:01: cf:e6:af:c1:f9:d3:3c:d0:1b:bc:e7:3c:89:07:56: 89:9c:1d:0a:ed:66:69:a9:da:11:c6:a8:16:68:b7: 3f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:7A:CC:55:49:03:B2:60:5A:AB:68:C6:00:59:B5:03:E2:41:85:20 X509v3 Authority Key Identifier: keyid:9E:A7:3F:B8:7C:87:B6:FF:84:62:01:61:47:76:4E:7E:4F:0E:AD:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/366830-c634-4644-a752-820914022158/1/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/366830-c634-4644-a752-820914022158/1/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:0d:38:92:f1:ab:e6:94:90:86:0e:4b:c8:65:a6:56:cd:e3: 08:60:81:c0:34:b1:8f:a6:a4:8e:0b:2d:a0:ce:5f:13:1c:ac: ba:fd:74:ae:60:ad:56:9b:f3:15:06:83:17:72:97:cb:3b:40: 2e:aa:cd:56:1f:94:7e:30:90:b7:3a:e6:b7:f0:72:70:2e:0d: 1a:27:da:dc:aa:01:40:11:26:13:dc:72:6f:da:15:4a:ee:95: 27:0f:19:dc:2d:8d:e6:03:5b:5e:ac:26:67:d4:5f:d0:bc:52: 38:dd:e9:8d:46:1d:98:07:c5:16:31:c3:97:b5:b8:0e:0b:3f: a7:28:e2:a5:75:4e:93:0a:2d:f6:41:71:5b:7a:07:59:69:46: a5:1b:73:ae:58:fb:15:83:90:76:ad:53:83:27:9c:85:57:97: bd:39:2a:cf:04:ae:c0:61:22:43:72:00:5c:eb:06:c3:46:9d: ea:af:0e:18:36:c7:55:ff:82:d6:4e:4e:e8:41:0f:0e:60:5d: 9d:04:cd:5b:83:a2:f8:dc:08:7e:f3:bc:c6:c5:58:7b:dc:a1: 57:68:4d:54:35:06:27:30:49:92:21:85:0d:6c:65:f6:1b:8e: 0a:6e:1f:87:14:29:ca:7d:1c:5c:07:5c:6c:07:cd:f5:35:a2: 07:36:cf:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtlDOhE+yOjr47zOtyLh1RHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllYTczZmI4N2M4N2I2ZmY4NDYyMDE2MTQ3NzY0ZTdlNGYw ZWFkMjkwHhcNMjUxMjI4MTMwMTQzWhcNMjUxMjI5MTMwMTQzWjAzMTEwLwYDVQQD EyhjYjdhY2M1NTQ5MDNiMjYwNWFhYjY4YzYwMDU5YjUwM2UyNDE4NTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiue56A7fG/5ZkpATtb9ugyaugx8X aCzOS/04DkjmT1zDc5LRvBPKRYM6zqbUl70Oqc+JWhvAqeyA/uvgNYZddVuoPIVn RkzPYU9Dnw4MDK6+mO2rd0f8ku+ASQSVtyxhjSiwkWRtS5QOFdyU1Fa5sdk1MneB ORKoZ9x/rxjI2HKogdrlGf05cxtNf6DbqXMZZWndIFfOLca44T1huIPLWBeCCSBm 6Lzm2cf5gyfoyzrp/0JAUZHxYrxucNr9FTF/B65tKs6IHmxAadhkfsVHQcQiMxyg KVqJrzrIcDD+BAHP5q/B+dM80Bu85zyJB1aJnB0K7WZpqdoRxqgWaLc/FwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMt6zFVJA7JgWqtoxgBZtQPiQYUgMB8GA1UdIwQY MBaAFJ6nP7h8h7b/hGIBYUd2Tn5PDq0pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnFjX3VIeUh0di1FWWdGaFIzWk9mazhPclNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8zNjY4MzAtYzYzNC00NjQ0LWE3NTIt ODIwOTE0MDIyMTU4LzEvbnFjX3VIeUh0di1FWWdGaFIzWk9mazhPclNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS8zNjY4MzAtYzYzNC00NjQ0LWE3NTItODIwOTE0MDIyMTU4 LzEvbnFjX3VIeUh0di1FWWdGaFIzWk9mazhPclNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuw04kvGr 5pSQhg5LyGWmVs3jCGCBwDSxj6akjgstoM5fExysuv10rmCtVpvzFQaDF3KXyztA LqrNVh+UfjCQtzrmt/BycC4NGifa3KoBQBEmE9xyb9oVSu6VJw8Z3C2N5gNbXqwm Z9Rf0LxSON3pjUYdmAfFFjHDl7W4Dgs/pyjipXVOkwot9kFxW3oHWWlGpRtzrlj7 FYOQdq1TgyechVeXvTkqzwSuwGEiQ3IAXOsGw0ad6q8OGDbHVf+C1k5O6EEPDmBd nQTNW4Oi+NwIfvO8xsVYe9yhV2hNVDUGJzBJkiGFDWxl9huOCm4fhxQpyn0cXAdc bAfN9TWiBzbP/g== -----END CERTIFICATE-----Generated at Sun Dec 28 22:16:33 2025 by rpki-client