This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/NztHo87nmYKtsXA0HQICYCczICM.mft File: NztHo87nmYKtsXA0HQICYCczICM.mft (raw, json) Hash identifier: yVS3Zk4MQXHGL7yL2o3dqmXmu6llV1Av87wzLsUiXno= Subject key identifier: 25:8C:BE:09:C4:AC:F5:C4:24:AC:4C:E3:E4:6E:DC:D6:8F:2C:0B:4E Authority key identifier: 37:3B:47:A3:CE:E7:99:82:AD:B1:70:34:1D:02:02:60:27:33:20:23 Certificate issuer: /CN=373b47a3cee79982adb170341d02026027332023 Certificate serial: 019B3F4827B606B53FAC6100B82B4AA2C3A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NztHo87nmYKtsXA0HQICYCczICM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/NztHo87nmYKtsXA0HQICYCczICM.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 05:00:51 +0000 Manifest this update: Sun 21 Dec 2025 05:00:51 +0000 Manifest next update: Mon 22 Dec 2025 05:00:51 +0000 Files and hashes: 1: 44PWl9t-VK2hhZNHr5AmomvoGFc.roa (hash: OxQ7QHN27yQWahrAlORJzxbYRAyj5Alk9/N2TAEqxrY=) 2: NztHo87nmYKtsXA0HQICYCczICM.crl (hash: 2v0ZqK6hksoO9tboJXRIGbZvz0ZxmKdcvhCGeoiYrdI=) 3: fHM2AB9lWMdrr6W98wCcBfFFZto.roa (hash: O5xk5dJ9bNLjoHECEnZnVJ7Que2qp5xFQYolbd9r+sI=) 4: yGyQiv41kYE21uqhtuih0OLSi9I.roa (hash: tdu5vnXKQDyjaj/70REfOS/T9RJiHmxdfg/dwymFlGk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/NztHo87nmYKtsXA0HQICYCczICM.crl rsync://rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/NztHo87nmYKtsXA0HQICYCczICM.mft rsync://rpki.ripe.net/repository/DEFAULT/NztHo87nmYKtsXA0HQICYCczICM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:27:b6:06:b5:3f:ac:61:00:b8:2b:4a:a2:c3:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=373b47a3cee79982adb170341d02026027332023 Validity Not Before: Dec 21 05:00:51 2025 GMT Not After : Dec 22 05:00:51 2025 GMT Subject: CN=258cbe09c4acf5c424ac4ce3e46edcd68f2c0b4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:34:8c:98:12:9a:31:6f:2c:54:5b:be:55:82: be:1e:86:9d:ef:4f:94:d6:fe:ff:05:90:98:04:c9: c7:67:15:b8:40:f9:67:be:59:a8:2b:7a:14:50:31: 39:b6:f9:7f:0e:aa:06:e8:43:82:d3:a0:92:f2:7b: 68:16:4d:85:6f:9a:05:ee:b8:06:41:77:cd:bc:cf: 15:64:30:23:48:af:ae:29:81:ba:a7:9e:5f:a7:1a: eb:b8:40:5d:b2:ca:4d:ac:7c:28:62:c5:d4:25:1e: 29:ea:9d:74:48:4d:44:a3:54:87:9e:45:0c:1c:a1: 3c:c5:b9:77:41:42:af:c5:a9:80:d2:9a:9d:2c:b4: 29:45:4d:79:b5:0d:3c:e2:b2:69:ad:55:f9:90:82: 77:14:c5:d2:ca:0f:21:af:ef:a5:ce:7a:36:0c:a1: e1:6b:47:f3:81:2b:dc:78:a8:fe:25:41:97:b4:e9: 6e:54:b0:f7:5f:d5:d3:a0:21:4d:3c:b5:d7:90:df: 9e:e4:32:de:1d:b9:80:e9:98:2c:dd:1f:20:35:b1: de:c7:f1:02:e0:46:ea:68:ad:69:7d:ed:46:66:d4: 3f:14:8c:78:33:75:ab:8a:11:3b:47:6e:4a:ec:5a: e8:58:36:b7:dd:20:45:7b:95:05:cb:1e:94:0f:8b: a1:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:8C:BE:09:C4:AC:F5:C4:24:AC:4C:E3:E4:6E:DC:D6:8F:2C:0B:4E X509v3 Authority Key Identifier: keyid:37:3B:47:A3:CE:E7:99:82:AD:B1:70:34:1D:02:02:60:27:33:20:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NztHo87nmYKtsXA0HQICYCczICM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/NztHo87nmYKtsXA0HQICYCczICM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/NztHo87nmYKtsXA0HQICYCczICM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:89:a2:fc:e6:c5:0a:b1:84:6a:8f:8e:12:2a:c1:42:02:a4: c6:5c:6e:cc:76:d6:e5:d0:df:71:94:d9:c6:a0:58:2d:ef:82: d3:42:3d:de:27:1f:5a:d4:81:3a:81:67:b2:ca:6e:6b:17:4b: 56:f5:38:d8:0e:1a:6f:a1:f9:e3:a7:7a:36:17:09:00:ad:d1: 8c:7c:c8:77:36:53:e7:b1:c8:ba:e1:09:05:f0:79:5b:d9:fa: 9d:5d:d8:f2:f6:fd:11:68:c3:e4:3e:c0:f5:be:8e:88:be:79: b3:60:f3:00:ad:c7:9e:19:04:9c:da:6c:2c:29:d8:f4:e3:6b: 47:a7:52:9e:f5:a8:23:a3:f7:f5:47:97:5a:55:1a:b5:1e:f6: 9d:fa:43:47:e8:68:c2:f4:f5:36:6e:67:55:c8:d3:3c:4f:fa: 0d:bb:ef:58:2e:56:eb:38:cb:c4:d3:06:a0:ad:56:34:81:82: e2:d9:11:80:eb:54:54:53:1e:41:a0:9d:aa:79:24:43:2e:e9: 2b:59:58:27:d4:97:c0:46:b8:97:f0:e6:84:62:fd:79:f5:0c: 24:88:de:3b:73:be:2f:c9:0e:49:80:97:49:be:00:e3:41:33: b4:69:a1:f6:0c:1e:f6:3a:7f:67:35:79:75:03:11:68:ff:ae: a7:f4:fc:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SCe2BrU/rGEAuCtKosOhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3M2I0N2EzY2VlNzk5ODJhZGIxNzAzNDFkMDIwMjYwMjcz MzIwMjMwHhcNMjUxMjIxMDUwMDUxWhcNMjUxMjIyMDUwMDUxWjAzMTEwLwYDVQQD EygyNThjYmUwOWM0YWNmNWM0MjRhYzRjZTNlNDZlZGNkNjhmMmMwYjRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzSMmBKaMW8sVFu+VYK+Hoad70+U 1v7/BZCYBMnHZxW4QPlnvlmoK3oUUDE5tvl/DqoG6EOC06CS8ntoFk2Fb5oF7rgG QXfNvM8VZDAjSK+uKYG6p55fpxrruEBdsspNrHwoYsXUJR4p6p10SE1Eo1SHnkUM HKE8xbl3QUKvxamA0pqdLLQpRU15tQ084rJprVX5kIJ3FMXSyg8hr++lzno2DKHh a0fzgSvceKj+JUGXtOluVLD3X9XToCFNPLXXkN+e5DLeHbmA6Zgs3R8gNbHex/EC 4EbqaK1pfe1GZtQ/FIx4M3WrihE7R25K7FroWDa33SBFe5UFyx6UD4uhpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCWMvgnErPXEJKxM4+Ru3NaPLAtOMB8GA1UdIwQY MBaAFDc7R6PO55mCrbFwNB0CAmAnMyAjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnp0SG84N25tWUt0c1hBMEhRSUNZQ2N6SUNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC83YzJhMTUtYWM0ZC00NjRhLWE3N2Ut MzJmOWEyODJmNTZjLzEvTnp0SG84N25tWUt0c1hBMEhRSUNZQ2N6SUNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC83YzJhMTUtYWM0ZC00NjRhLWE3N2UtMzJmOWEyODJmNTZj LzEvTnp0SG84N25tWUt0c1hBMEhRSUNZQ2N6SUNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmImi/ObF CrGEao+OEirBQgKkxlxuzHbW5dDfcZTZxqBYLe+C00I93icfWtSBOoFnsspuaxdL VvU42A4ab6H546d6NhcJAK3RjHzIdzZT57HIuuEJBfB5W9n6nV3Y8vb9EWjD5D7A 9b6OiL55s2DzAK3HnhkEnNpsLCnY9ONrR6dSnvWoI6P39UeXWlUatR72nfpDR+ho wvT1Nm5nVcjTPE/6DbvvWC5W6zjLxNMGoK1WNIGC4tkRgOtUVFMeQaCdqnkkQy7p K1lYJ9SXwEa4l/DmhGL9efUMJIjeO3O+L8kOSYCXSb4A40EztGmh9gwe9jp/ZzV5 dQMRaP+up/T8rA== -----END CERTIFICATE-----Generated at Sun Dec 21 13:54:59 2025 by rpki-client