This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/464260-8d7e-4507-b44b-2864707b2b3f/1/nHIayAejJvhxu6oYSWPNYCtcwtY.mft File: nHIayAejJvhxu6oYSWPNYCtcwtY.mft (raw, json) Hash identifier: 9LV78ExtjsYVFWra53qCo7zQOglSi2TEedEmzULDDHY= Subject key identifier: BE:43:A4:BF:DF:E1:06:E7:F9:02:9D:02:C2:95:73:53:0B:6F:55:76 Authority key identifier: 9C:72:1A:C8:07:A3:26:F8:71:BB:AA:18:49:63:CD:60:2B:5C:C2:D6 Certificate issuer: /CN=9c721ac807a326f871bbaa184963cd602b5cc2d6 Certificate serial: 019B6DD866E7A988A7CAAE3BDB012F406F69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nHIayAejJvhxu6oYSWPNYCtcwtY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/464260-8d7e-4507-b44b-2864707b2b3f/1/nHIayAejJvhxu6oYSWPNYCtcwtY.mft Manifest number: 17A2 Signing time: Tue 30 Dec 2025 06:00:57 +0000 Manifest this update: Tue 30 Dec 2025 06:00:57 +0000 Manifest next update: Wed 31 Dec 2025 06:00:57 +0000 Files and hashes: 1: 9jfoHjHhXlQUp0QHnvy8Xfhd38g.roa (hash: /upMq7FxxL/VBqHPpqBK/s+Z/2QbORhxGy0ijXbQbKE=) 2: nHIayAejJvhxu6oYSWPNYCtcwtY.crl (hash: BQL0mOaQHKWPwgTcmf//apDsyy1v5B/idaWpGOvNOUM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/464260-8d7e-4507-b44b-2864707b2b3f/1/nHIayAejJvhxu6oYSWPNYCtcwtY.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/464260-8d7e-4507-b44b-2864707b2b3f/1/nHIayAejJvhxu6oYSWPNYCtcwtY.mft rsync://rpki.ripe.net/repository/DEFAULT/nHIayAejJvhxu6oYSWPNYCtcwtY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6d:d8:66:e7:a9:88:a7:ca:ae:3b:db:01:2f:40:6f:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c721ac807a326f871bbaa184963cd602b5cc2d6 Validity Not Before: Dec 30 06:00:57 2025 GMT Not After : Dec 31 06:00:57 2025 GMT Subject: CN=be43a4bfdfe106e7f9029d02c29573530b6f5576 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:0c:4a:af:b1:84:2c:f8:86:2a:df:53:d3:f1: d0:89:65:b5:59:9e:cd:98:ba:44:a0:4e:23:a4:49: 84:22:37:71:19:3c:d3:1a:e2:70:28:4f:7f:b1:a5: 64:29:bc:3a:11:9b:f6:59:9c:10:59:ca:c0:77:f1: a3:88:32:cb:b3:1c:f0:4c:d2:76:5a:a1:7d:f1:f3: e3:43:fc:1e:eb:f3:05:96:ce:b8:22:1b:07:1a:27: f4:99:63:b6:e1:9e:52:a9:22:6c:b4:f1:8d:8e:13: 4b:e4:76:ed:9c:00:73:c6:b8:f3:7b:8c:09:cd:1b: d9:e1:6a:e1:e7:a0:87:be:02:9d:27:bd:28:01:77: bb:bd:19:f0:0c:ca:da:53:9a:f5:f3:9c:49:35:ea: 0e:16:5e:98:16:d6:63:26:34:9b:5d:6c:3c:af:6a: f4:52:75:d6:35:24:6f:3e:4d:da:41:81:57:39:89: f6:36:13:82:72:f9:97:d0:dc:4a:3e:09:5c:a6:97: db:13:0d:47:6c:bc:df:45:57:94:b7:fe:e4:bc:7a: c0:fe:06:ca:dd:98:10:7b:e4:20:c4:0b:da:46:8f: 19:92:20:45:80:4e:90:1f:88:70:0f:c6:d3:8c:ef: dc:37:26:42:c9:70:35:74:98:46:08:8e:7f:f9:0d: a6:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:43:A4:BF:DF:E1:06:E7:F9:02:9D:02:C2:95:73:53:0B:6F:55:76 X509v3 Authority Key Identifier: keyid:9C:72:1A:C8:07:A3:26:F8:71:BB:AA:18:49:63:CD:60:2B:5C:C2:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nHIayAejJvhxu6oYSWPNYCtcwtY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/464260-8d7e-4507-b44b-2864707b2b3f/1/nHIayAejJvhxu6oYSWPNYCtcwtY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/464260-8d7e-4507-b44b-2864707b2b3f/1/nHIayAejJvhxu6oYSWPNYCtcwtY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:82:1c:43:78:51:7c:6e:d8:00:a9:ee:2b:46:32:2e:0f:e2: bc:b1:36:fb:cd:11:69:1f:ab:46:db:ec:7e:cf:92:74:11:e8: 42:c0:c7:7c:b7:4e:b4:60:cb:d6:fa:37:30:8b:c0:04:35:97: fc:57:70:c3:ea:34:cb:9c:d2:83:f6:f2:99:e8:69:e0:e1:cf: 38:4c:5f:ff:62:1a:30:4f:95:b8:9f:19:10:3a:e8:a3:c4:6b: a4:ef:0d:74:c9:4c:27:19:11:89:51:f0:14:67:78:56:3c:4d: b8:68:e6:fe:2d:1b:f4:73:95:70:2b:65:08:09:19:0e:d1:f1: b1:f5:46:13:a4:39:eb:e7:81:d5:1b:22:a8:09:91:4c:37:9d: a4:35:b4:f0:88:d9:d5:4f:1d:00:94:83:26:f1:44:97:14:15: 71:7a:76:ca:bb:10:da:f7:6e:7b:9f:42:95:f5:49:38:81:93: 46:72:68:73:7b:dd:28:2f:f6:49:3b:90:87:60:38:d0:4d:68: 79:53:c2:f5:8b:c6:7c:1f:66:ba:f2:61:1d:52:ff:58:3e:f7: b9:02:eb:24:ed:08:d3:96:4a:4b:17:ed:87:e3:22:02:41:6e: d2:c2:38:b3:da:f0:cb:f4:c2:11:b5:fd:d1:6a:c6:4e:65:12: 5c:1e:ef:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtt2GbnqYinyq472wEvQG9pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljNzIxYWM4MDdhMzI2Zjg3MWJiYWExODQ5NjNjZDYwMmI1 Y2MyZDYwHhcNMjUxMjMwMDYwMDU3WhcNMjUxMjMxMDYwMDU3WjAzMTEwLwYDVQQD EyhiZTQzYTRiZmRmZTEwNmU3ZjkwMjlkMDJjMjk1NzM1MzBiNmY1NTc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0wxKr7GELPiGKt9T0/HQiWW1WZ7N mLpEoE4jpEmEIjdxGTzTGuJwKE9/saVkKbw6EZv2WZwQWcrAd/GjiDLLsxzwTNJ2 WqF98fPjQ/we6/MFls64IhsHGif0mWO24Z5SqSJstPGNjhNL5HbtnABzxrjze4wJ zRvZ4Wrh56CHvgKdJ70oAXe7vRnwDMraU5r185xJNeoOFl6YFtZjJjSbXWw8r2r0 UnXWNSRvPk3aQYFXOYn2NhOCcvmX0NxKPglcppfbEw1HbLzfRVeUt/7kvHrA/gbK 3ZgQe+QgxAvaRo8ZkiBFgE6QH4hwD8bTjO/cNyZCyXA1dJhGCI5/+Q2m0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL5DpL/f4Qbn+QKdAsKVc1MLb1V2MB8GA1UdIwQY MBaAFJxyGsgHoyb4cbuqGEljzWArXMLWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkhJYXlBZWpKdmh4dTZvWVNXUE5ZQ3Rjd3RZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi80NjQyNjAtOGQ3ZS00NTA3LWI0NGIt Mjg2NDcwN2IyYjNmLzEvbkhJYXlBZWpKdmh4dTZvWVNXUE5ZQ3Rjd3RZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi80NjQyNjAtOGQ3ZS00NTA3LWI0NGItMjg2NDcwN2IyYjNm LzEvbkhJYXlBZWpKdmh4dTZvWVNXUE5ZQ3Rjd3RZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG4IcQ3hR fG7YAKnuK0YyLg/ivLE2+80RaR+rRtvsfs+SdBHoQsDHfLdOtGDL1vo3MIvABDWX /Fdww+o0y5zSg/bymehp4OHPOExf/2IaME+VuJ8ZEDroo8RrpO8NdMlMJxkRiVHw FGd4VjxNuGjm/i0b9HOVcCtlCAkZDtHxsfVGE6Q56+eB1RsiqAmRTDedpDW08IjZ 1U8dAJSDJvFElxQVcXp2yrsQ2vdue59ClfVJOIGTRnJoc3vdKC/2STuQh2A40E1o eVPC9YvGfB9muvJhHVL/WD73uQLrJO0I05ZKSxfth+MiAkFu0sI4s9rwy/TCEbX9 0WrGTmUSXB7vLA== -----END CERTIFICATE-----Generated at Tue Dec 30 07:59:55 2025 by rpki-client