This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.mft File: 1NHzJb-K5pShnyj9QHzVu1AOGz4.mft (raw, json) Hash identifier: 2oqu6mkpa6zUwGEEjRuXhtsmnhZ7oHPa6KuiBPepfJ4= Subject key identifier: B2:1D:9C:FE:2D:67:58:A8:82:95:4B:DE:6C:F9:2A:8F:3C:63:EE:3D Authority key identifier: D4:D1:F3:25:BF:8A:E6:94:A1:9F:28:FD:40:7C:D5:BB:50:0E:1B:3E Certificate issuer: /CN=d4d1f325bf8ae694a19f28fd407cd5bb500e1b3e Certificate serial: 019B4438B28A2AA1F1FAFF218C3E01E9D16D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1NHzJb-K5pShnyj9QHzVu1AOGz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.mft Manifest number: 142B Signing time: Mon 22 Dec 2025 04:02:04 +0000 Manifest this update: Mon 22 Dec 2025 04:02:04 +0000 Manifest next update: Tue 23 Dec 2025 04:02:04 +0000 Files and hashes: 1: 1NHzJb-K5pShnyj9QHzVu1AOGz4.crl (hash: 7MLn2o0kG7rvVqnDioZKVkPEmSE0BXdLUMZBVCWmU2w=) 2: FJfX864pvFwf4qPxQ1uqI0bIaXg.roa (hash: oKD/fS/LmM/Bugiaw6RKm+DzVLCUCTYs+LRezp4BQso=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.crl rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.mft rsync://rpki.ripe.net/repository/DEFAULT/1NHzJb-K5pShnyj9QHzVu1AOGz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 04:02:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:38:b2:8a:2a:a1:f1:fa:ff:21:8c:3e:01:e9:d1:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4d1f325bf8ae694a19f28fd407cd5bb500e1b3e Validity Not Before: Dec 22 04:02:04 2025 GMT Not After : Dec 23 04:02:04 2025 GMT Subject: CN=b21d9cfe2d6758a882954bde6cf92a8f3c63ee3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:0b:71:3e:ff:30:92:a3:12:a7:92:ec:31:e6: 4d:f6:48:fc:fe:cf:a4:29:34:f4:b7:5a:a1:fb:30: e7:fb:1b:e1:5f:bc:2f:12:71:e4:ad:bf:64:cc:eb: 50:22:a3:c8:07:90:b9:6d:66:0b:77:ca:b2:24:d4: 7f:32:a0:4a:14:0b:43:58:19:33:7d:53:f7:b1:f4: 34:9d:8f:c8:14:3f:f2:70:42:d7:ae:66:e6:7a:50: 1b:84:03:7e:01:19:cc:eb:bc:fd:91:e0:19:bc:9a: c2:b5:1d:6b:6b:a8:49:fe:bf:03:16:b4:9b:38:c7: 39:e6:7f:b0:e9:5b:16:19:e0:9b:0d:71:1f:6a:02: 0b:2f:a3:76:a1:0d:23:66:08:49:0f:08:8c:c4:53: 8e:10:80:a4:39:0d:03:40:04:21:9a:af:7d:92:e5: a8:5f:01:bd:c0:c4:ce:b0:f3:03:49:a9:7d:67:a2: 3a:ac:5a:d2:d7:38:63:87:66:ac:bc:82:12:af:23: e9:da:f3:8e:9d:ec:00:61:b2:35:32:99:57:9e:46: 67:16:32:75:14:5a:1e:4b:8f:8c:0f:12:e9:7d:e2: 34:5c:bb:0f:fc:50:5a:92:b1:85:2e:61:b3:b3:80: c4:9d:a4:3d:fd:f6:7f:cf:a3:c1:e5:ac:d9:59:20: 1d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:1D:9C:FE:2D:67:58:A8:82:95:4B:DE:6C:F9:2A:8F:3C:63:EE:3D X509v3 Authority Key Identifier: keyid:D4:D1:F3:25:BF:8A:E6:94:A1:9F:28:FD:40:7C:D5:BB:50:0E:1B:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1NHzJb-K5pShnyj9QHzVu1AOGz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:a7:3e:73:57:01:a0:31:35:47:4e:8e:0c:4d:4b:4d:16:95: 16:bd:17:38:ba:38:42:27:ff:a8:53:16:15:85:5c:20:83:24: 7c:ff:db:aa:82:45:e9:9b:4a:d2:9b:81:04:d6:71:5c:89:2b: c1:d2:a1:19:d1:26:3f:db:0e:66:e2:e3:5f:2b:2f:99:66:66: 1b:23:35:24:ba:12:ce:57:aa:59:47:d0:97:64:a3:5d:98:24: 78:14:f2:b9:e6:fd:e0:23:fa:75:d2:84:8b:73:a3:07:84:36: 44:f9:93:31:56:87:4f:42:cc:23:b7:b3:83:f2:1d:dc:d8:d3: ef:9e:c1:58:94:2f:6f:64:8f:33:b6:22:b1:f3:a5:87:54:68: a5:dd:66:3e:39:2b:87:e2:b6:44:4e:22:11:f0:1d:05:9d:52: ab:b4:a4:16:ec:a5:05:4c:48:d9:f3:07:5c:bb:40:79:1f:6e: 82:88:27:f7:8f:33:ec:c7:0e:77:f4:ff:f3:9d:32:01:08:ac: 97:c3:40:ce:fa:09:24:ba:a1:36:d7:6f:3e:ea:fe:4b:c8:e4: 94:55:3f:13:24:53:14:80:29:25:10:84:72:6d:4b:58:96:eb: ed:c0:c4:0f:19:39:8c:1e:46:c0:be:c2:ca:43:0a:16:e4:26: b4:78:35:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEOLKKKqHx+v8hjD4B6dFtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0ZDFmMzI1YmY4YWU2OTRhMTlmMjhmZDQwN2NkNWJiNTAw ZTFiM2UwHhcNMjUxMjIyMDQwMjA0WhcNMjUxMjIzMDQwMjA0WjAzMTEwLwYDVQQD EyhiMjFkOWNmZTJkNjc1OGE4ODI5NTRiZGU2Y2Y5MmE4ZjNjNjNlZTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3gtxPv8wkqMSp5LsMeZN9kj8/s+k KTT0t1qh+zDn+xvhX7wvEnHkrb9kzOtQIqPIB5C5bWYLd8qyJNR/MqBKFAtDWBkz fVP3sfQ0nY/IFD/ycELXrmbmelAbhAN+ARnM67z9keAZvJrCtR1ra6hJ/r8DFrSb OMc55n+w6VsWGeCbDXEfagILL6N2oQ0jZghJDwiMxFOOEICkOQ0DQAQhmq99kuWo XwG9wMTOsPMDSal9Z6I6rFrS1zhjh2asvIISryPp2vOOnewAYbI1MplXnkZnFjJ1 FFoeS4+MDxLpfeI0XLsP/FBakrGFLmGzs4DEnaQ9/fZ/z6PB5azZWSAdOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLIdnP4tZ1iogpVL3mz5Ko88Y+49MB8GA1UdIwQY MBaAFNTR8yW/iuaUoZ8o/UB81btQDhs+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMU5IekpiLUs1cFNobnlqOVFIelZ1MUFPR3o0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi85NzcwYTEtNTliZC00MTVhLWJhZGUt YjI4MmRkNjc0ODIzLzEvMU5IekpiLUs1cFNobnlqOVFIelZ1MUFPR3o0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi85NzcwYTEtNTliZC00MTVhLWJhZGUtYjI4MmRkNjc0ODIz LzEvMU5IekpiLUs1cFNobnlqOVFIelZ1MUFPR3o0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGKc+c1cB oDE1R06ODE1LTRaVFr0XOLo4Qif/qFMWFYVcIIMkfP/bqoJF6ZtK0puBBNZxXIkr wdKhGdEmP9sOZuLjXysvmWZmGyM1JLoSzleqWUfQl2SjXZgkeBTyueb94CP6ddKE i3OjB4Q2RPmTMVaHT0LMI7ezg/Id3NjT757BWJQvb2SPM7YisfOlh1Ropd1mPjkr h+K2RE4iEfAdBZ1Sq7SkFuylBUxI2fMHXLtAeR9ugogn948z7McOd/T/850yAQis l8NAzvoJJLqhNtdvPur+S8jklFU/EyRTFIApJRCEcm1LWJbr7cDEDxk5jB5GwL7C ykMKFuQmtHg1tg== -----END CERTIFICATE-----Generated at Mon Dec 22 14:30:21 2025 by rpki-client