This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/366830-c634-4644-a752-820914022158/1/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.mft File: nqc_uHyHtv-EYgFhR3ZOfk8OrSk.mft (raw, json) Hash identifier: cEvA6LTdRC/d1vsdMBaakFH5AlwfBvG9ug1xjMTDFMI= Subject key identifier: 0A:10:25:EE:34:F3:35:DD:DE:48:6D:68:30:55:A5:EB:95:BE:0B:AE Authority key identifier: 9E:A7:3F:B8:7C:87:B6:FF:84:62:01:61:47:76:4E:7E:4F:0E:AD:29 Certificate issuer: /CN=9ea73fb87c87b6ff8462016147764e7e4f0ead29 Certificate serial: 019B729079621563108FB52F4608A1B4B9F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/366830-c634-4644-a752-820914022158/1/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.mft Manifest number: 09E6 Signing time: Wed 31 Dec 2025 04:00:29 +0000 Manifest this update: Wed 31 Dec 2025 04:00:29 +0000 Manifest next update: Thu 01 Jan 2026 04:00:29 +0000 Files and hashes: 1: Jc4wKdZujtBQlnsZSGZ-Msh3t-U.roa (hash: yoz3wQ6+m9WewYaNOk0D0h3Hx6RkufI02fLU4g+5owo=) 2: nqc_uHyHtv-EYgFhR3ZOfk8OrSk.crl (hash: 8PogJIPH8BksGAQ+qPDCjri2wQtS+I3tBGi7vPrslkg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/366830-c634-4644-a752-820914022158/1/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/366830-c634-4644-a752-820914022158/1/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.mft rsync://rpki.ripe.net/repository/DEFAULT/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 23:41:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:72:90:79:62:15:63:10:8f:b5:2f:46:08:a1:b4:b9:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ea73fb87c87b6ff8462016147764e7e4f0ead29 Validity Not Before: Dec 31 04:00:29 2025 GMT Not After : Jan 1 04:00:29 2026 GMT Subject: CN=0a1025ee34f335ddde486d683055a5eb95be0bae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:60:a5:e6:3a:28:cf:21:f5:ad:ad:07:46:6e: 08:49:9b:26:18:aa:80:22:c1:b4:75:8d:35:ed:e2: 4b:4a:84:62:ef:d7:70:07:2f:37:6a:39:fb:24:a0: 14:14:8a:d0:69:aa:3d:8f:7b:ba:d3:6f:43:de:9e: 8e:03:46:3b:fd:62:6e:da:64:f1:60:4c:dc:28:78: e9:77:1e:25:70:0e:92:97:bd:66:38:08:06:23:dc: 0f:94:94:23:85:11:94:d0:86:8d:e0:5c:29:22:00: 94:57:64:38:3a:99:93:30:e6:57:13:88:53:a5:27: 5b:c0:72:9b:a6:fa:1c:c1:07:ca:b1:12:26:f9:e3: e0:c3:78:ee:2e:d7:f8:7e:33:dc:d6:a3:0d:bb:56: e9:e3:4b:67:fb:77:d0:b5:a2:69:68:ac:83:86:7a: 1f:22:6f:fc:8c:8b:1d:69:40:5c:c3:64:b5:af:8b: 4f:07:99:0a:05:c3:7f:ee:a9:74:d4:d6:17:ca:56: 13:f1:c4:d4:0c:7f:f3:60:da:a3:11:74:d8:7b:d2: fa:21:e8:e2:cc:dd:d5:59:a0:db:85:00:64:d8:a6: c6:cf:11:de:fb:a5:8c:aa:7c:71:82:c9:07:c4:69: e2:7e:5b:dc:73:37:10:74:fe:12:02:ab:e2:0a:74: 6a:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:10:25:EE:34:F3:35:DD:DE:48:6D:68:30:55:A5:EB:95:BE:0B:AE X509v3 Authority Key Identifier: keyid:9E:A7:3F:B8:7C:87:B6:FF:84:62:01:61:47:76:4E:7E:4F:0E:AD:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/366830-c634-4644-a752-820914022158/1/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/366830-c634-4644-a752-820914022158/1/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:92:b2:6c:82:65:50:50:aa:1b:dc:75:27:f8:2d:58:a2:9d: 1a:9e:7f:a9:4b:08:11:a5:75:10:02:f6:8e:19:34:cc:6d:62: 2b:8b:2a:77:06:58:3c:3a:0e:5a:13:2a:c8:ff:f5:3e:f5:1b: e2:6b:2f:c9:ee:62:e5:d3:e6:bd:60:17:71:a3:26:42:65:1a: 55:66:f3:ea:6b:e5:56:e8:f4:54:f5:e6:6d:2a:fc:d5:d0:ba: c9:cb:ed:f8:4e:aa:0a:3d:e0:76:38:66:0f:73:64:38:5c:1a: f5:83:61:00:62:2e:c0:b6:e2:ba:be:ef:7f:10:20:c8:d4:7f: b7:2b:d1:2c:19:68:bf:bc:fa:95:c5:c8:69:fe:66:38:0d:39: 37:07:52:54:36:9d:9b:67:fb:e5:a5:ee:19:f6:5e:dc:e5:14: 85:75:8a:cb:dd:9d:dd:15:7d:f9:0b:0c:71:59:45:26:83:ca: b6:6a:43:8c:f1:11:95:c4:71:0a:ee:f2:72:6b:e5:38:27:29: ac:c4:ce:51:c1:55:cd:62:9e:bb:6a:23:be:5a:8b:f4:b8:47: 6e:02:32:ca:5c:5b:d0:3e:c4:3c:5d:00:32:50:36:8f:f2:eb: ae:ec:ea:0f:dd:09:a1:85:e9:dd:a0:f2:2c:7f:d5:01:09:43: db:ec:d7:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtykHliFWMQj7UvRgihtLn2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllYTczZmI4N2M4N2I2ZmY4NDYyMDE2MTQ3NzY0ZTdlNGYw ZWFkMjkwHhcNMjUxMjMxMDQwMDI5WhcNMjYwMTAxMDQwMDI5WjAzMTEwLwYDVQQD EygwYTEwMjVlZTM0ZjMzNWRkZGU0ODZkNjgzMDU1YTVlYjk1YmUwYmFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWCl5joozyH1ra0HRm4ISZsmGKqA IsG0dY017eJLSoRi79dwBy83ajn7JKAUFIrQaao9j3u6029D3p6OA0Y7/WJu2mTx YEzcKHjpdx4lcA6Sl71mOAgGI9wPlJQjhRGU0IaN4FwpIgCUV2Q4OpmTMOZXE4hT pSdbwHKbpvocwQfKsRIm+ePgw3juLtf4fjPc1qMNu1bp40tn+3fQtaJpaKyDhnof Im/8jIsdaUBcw2S1r4tPB5kKBcN/7ql01NYXylYT8cTUDH/zYNqjEXTYe9L6Ieji zN3VWaDbhQBk2KbGzxHe+6WMqnxxgskHxGniflvcczcQdP4SAqviCnRq5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAoQJe408zXd3khtaDBVpeuVvguuMB8GA1UdIwQY MBaAFJ6nP7h8h7b/hGIBYUd2Tn5PDq0pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnFjX3VIeUh0di1FWWdGaFIzWk9mazhPclNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8zNjY4MzAtYzYzNC00NjQ0LWE3NTIt ODIwOTE0MDIyMTU4LzEvbnFjX3VIeUh0di1FWWdGaFIzWk9mazhPclNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS8zNjY4MzAtYzYzNC00NjQ0LWE3NTItODIwOTE0MDIyMTU4 LzEvbnFjX3VIeUh0di1FWWdGaFIzWk9mazhPclNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAupKybIJl UFCqG9x1J/gtWKKdGp5/qUsIEaV1EAL2jhk0zG1iK4sqdwZYPDoOWhMqyP/1PvUb 4msvye5i5dPmvWAXcaMmQmUaVWbz6mvlVuj0VPXmbSr81dC6ycvt+E6qCj3gdjhm D3NkOFwa9YNhAGIuwLbiur7vfxAgyNR/tyvRLBlov7z6lcXIaf5mOA05NwdSVDad m2f75aXuGfZe3OUUhXWKy92d3RV9+QsMcVlFJoPKtmpDjPERlcRxCu7ycmvlOCcp rMTOUcFVzWKeu2ojvlqL9LhHbgIyylxb0D7EPF0AMlA2j/LrruzqD90JoYXp3aDy LH/VAQlD2+zXBw== -----END CERTIFICATE-----Generated at Wed Dec 31 05:57:27 2025 by rpki-client