This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/nhUzxHAsLMtang6HqyetVrFfLHY.mft File: nhUzxHAsLMtang6HqyetVrFfLHY.mft (raw, json) Hash identifier: wYRJsaqZm82vAqEOGDqpFd7QeHk3xdlVjarkUatc9EE= Subject key identifier: 58:D9:85:7D:F5:ED:42:A0:DA:AF:0D:FC:10:08:8A:C3:45:6B:EC:8D Authority key identifier: 9E:15:33:C4:70:2C:2C:CB:5A:9E:0E:87:AB:27:AD:56:B1:5F:2C:76 Certificate issuer: /CN=9e1533c4702c2ccb5a9e0e87ab27ad56b15f2c76 Certificate serial: 019B3EA32A1334B894C524DC48DC5AC61461 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nhUzxHAsLMtang6HqyetVrFfLHY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/nhUzxHAsLMtang6HqyetVrFfLHY.mft Manifest number: 0E5D Signing time: Sun 21 Dec 2025 02:00:39 +0000 Manifest this update: Sun 21 Dec 2025 02:00:39 +0000 Manifest next update: Mon 22 Dec 2025 02:00:39 +0000 Files and hashes: 1: RYaLU7P7StEvfIaG8O_HUuwrXWg.roa (hash: YEpuYm5zeKipnH1+lgwVkLpZPGAKbbKNqPvP2OUt0Mc=) 2: g1QBI0oBpZMDfLnVbzlJh58dtno.roa (hash: DThH0UYff9JRlzHoLRkutIVBWjbtodZbQuiDh8h2xSo=) 3: nhUzxHAsLMtang6HqyetVrFfLHY.crl (hash: bKBYldsfeO5ZsiMlE81EQ5y6GQoYSLFpX5fSOTmYXW8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/nhUzxHAsLMtang6HqyetVrFfLHY.crl rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/nhUzxHAsLMtang6HqyetVrFfLHY.mft rsync://rpki.ripe.net/repository/DEFAULT/nhUzxHAsLMtang6HqyetVrFfLHY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:2a:13:34:b8:94:c5:24:dc:48:dc:5a:c6:14:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e1533c4702c2ccb5a9e0e87ab27ad56b15f2c76 Validity Not Before: Dec 21 02:00:39 2025 GMT Not After : Dec 22 02:00:39 2025 GMT Subject: CN=58d9857df5ed42a0daaf0dfc10088ac3456bec8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e8:85:35:0d:56:78:1a:22:0d:73:5b:7c:d7: e3:c6:f1:2d:ed:8a:84:2f:e0:65:19:de:82:e3:91: 30:6e:ef:fb:9a:02:a5:d2:3f:f1:ff:b0:a1:3d:1c: 45:ec:1e:45:90:ad:4f:ee:cf:b2:70:bb:06:83:7f: 91:c6:31:07:d6:04:5b:47:88:9c:96:90:34:d9:f9: a2:79:77:5f:f7:23:81:9e:ef:55:98:ae:92:d8:24: 90:f5:36:a4:71:e8:10:d2:9c:f2:1a:af:c7:da:bd: 3a:46:5d:4f:51:21:86:af:23:65:27:b5:02:83:52: 56:03:e4:dd:c1:17:f9:e7:90:bc:52:25:46:64:2c: aa:eb:ae:31:26:c8:13:ad:f3:35:ea:60:74:a7:83: 7e:80:69:10:f9:a3:bc:4a:c6:6c:44:20:5f:89:3b: 4f:27:3e:23:f2:1c:ee:6d:b7:49:bb:60:f2:03:86: 2f:f0:8c:c8:c0:f4:24:64:86:4d:74:20:29:01:15: 05:30:4d:f8:dc:78:cc:b7:46:b4:5b:cf:73:84:36: b9:a0:c1:2a:d2:16:f6:07:d7:f8:62:b1:ff:eb:ff: d2:a6:ba:3d:8f:8b:2c:50:70:05:9b:a6:5e:56:c0: d4:d2:8b:09:90:93:c6:02:01:c5:11:bf:eb:ae:fe: 75:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:D9:85:7D:F5:ED:42:A0:DA:AF:0D:FC:10:08:8A:C3:45:6B:EC:8D X509v3 Authority Key Identifier: keyid:9E:15:33:C4:70:2C:2C:CB:5A:9E:0E:87:AB:27:AD:56:B1:5F:2C:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nhUzxHAsLMtang6HqyetVrFfLHY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/nhUzxHAsLMtang6HqyetVrFfLHY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/nhUzxHAsLMtang6HqyetVrFfLHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:d1:6d:72:5c:48:ad:d7:12:c8:76:e7:15:9a:0f:a0:9a:de: f1:b8:7e:25:f2:5a:c5:bf:47:f2:25:42:20:40:a2:d9:25:43: 15:05:16:11:a6:63:8f:e2:89:1e:7b:48:1d:6a:b9:b8:01:67: d3:41:39:82:fe:64:1d:5b:15:64:d4:84:25:47:73:f4:7e:de: 82:0a:d5:22:ab:f8:72:b0:15:7c:51:e5:51:f0:c3:77:05:09: 22:d1:9f:0b:24:f2:74:4e:34:a1:1a:f8:43:ef:4c:6d:a3:1b: dd:f5:cc:df:53:54:e7:55:86:aa:8d:32:3c:c9:d9:fc:e6:77: 03:8e:87:5c:08:51:45:6b:e1:4a:eb:c9:18:32:d4:cf:9a:44: 06:35:04:04:01:7a:01:4b:9f:06:29:df:b1:e6:8a:16:6f:8d: 50:3a:75:92:6b:6c:e4:b0:04:1a:be:2e:45:78:6c:54:ce:e5: 18:52:5c:bb:d4:b9:dd:25:1d:63:b2:b0:bc:fd:37:41:ad:e2: 60:94:c5:7c:0b:a6:f7:8d:ff:11:73:b8:32:05:b7:02:ad:39: 6e:d7:69:17:74:c8:63:4f:93:b5:46:2b:4e:a5:e1:8b:50:3f: 7c:e9:5c:18:86:fb:5c:27:ce:35:f5:5f:ae:1a:a4:01:94:c4: 61:dc:11:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+oyoTNLiUxSTcSNxaxhRhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllMTUzM2M0NzAyYzJjY2I1YTllMGU4N2FiMjdhZDU2YjE1 ZjJjNzYwHhcNMjUxMjIxMDIwMDM5WhcNMjUxMjIyMDIwMDM5WjAzMTEwLwYDVQQD Eyg1OGQ5ODU3ZGY1ZWQ0MmEwZGFhZjBkZmMxMDA4OGFjMzQ1NmJlYzhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOiFNQ1WeBoiDXNbfNfjxvEt7YqE L+BlGd6C45Ewbu/7mgKl0j/x/7ChPRxF7B5FkK1P7s+ycLsGg3+RxjEH1gRbR4ic lpA02fmieXdf9yOBnu9VmK6S2CSQ9TakcegQ0pzyGq/H2r06Rl1PUSGGryNlJ7UC g1JWA+TdwRf555C8UiVGZCyq664xJsgTrfM16mB0p4N+gGkQ+aO8SsZsRCBfiTtP Jz4j8hzubbdJu2DyA4Yv8IzIwPQkZIZNdCApARUFME343HjMt0a0W89zhDa5oMEq 0hb2B9f4YrH/6//Spro9j4ssUHAFm6ZeVsDU0osJkJPGAgHFEb/rrv510wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFjZhX317UKg2q8N/BAIisNFa+yNMB8GA1UdIwQY MBaAFJ4VM8RwLCzLWp4Oh6snrVaxXyx2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmhVenhIQXNMTXRhbmc2SHF5ZXRWckZmTEhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8yNjg4YjYtZGE3MC00YWJkLThmNTkt MWE4MzFiNTk5YzE4LzEvbmhVenhIQXNMTXRhbmc2SHF5ZXRWckZmTEhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS8yNjg4YjYtZGE3MC00YWJkLThmNTktMWE4MzFiNTk5YzE4 LzEvbmhVenhIQXNMTXRhbmc2SHF5ZXRWckZmTEhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEdFtclxI rdcSyHbnFZoPoJre8bh+JfJaxb9H8iVCIECi2SVDFQUWEaZjj+KJHntIHWq5uAFn 00E5gv5kHVsVZNSEJUdz9H7eggrVIqv4crAVfFHlUfDDdwUJItGfCyTydE40oRr4 Q+9MbaMb3fXM31NU51WGqo0yPMnZ/OZ3A46HXAhRRWvhSuvJGDLUz5pEBjUEBAF6 AUufBinfseaKFm+NUDp1kmts5LAEGr4uRXhsVM7lGFJcu9S53SUdY7KwvP03Qa3i YJTFfAum943/EXO4MgW3Aq05btdpF3TIY0+TtUYrTqXhi1A/fOlcGIb7XCfONfVf rhqkAZTEYdwR2Q== -----END CERTIFICATE-----Generated at Sun Dec 21 09:30:42 2025 by rpki-client