This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/1f10c2-02e2-438a-90a2-917c3577f34f/1/NHjAigY6wtNKGxkeJDY4m77tXpc.mft File: NHjAigY6wtNKGxkeJDY4m77tXpc.mft (raw, json) Hash identifier: 40Rc7+z0ROIBD+wWyLMqgcTutftkAn/VEli78mirnXg= Subject key identifier: 01:4C:6D:6B:20:A4:9C:EF:85:01:1C:DC:B1:9E:5B:96:BC:C1:96:C7 Authority key identifier: 34:78:C0:8A:06:3A:C2:D3:4A:1B:19:1E:24:36:38:9B:BE:ED:5E:97 Certificate issuer: /CN=3478c08a063ac2d34a1b191e2436389bbeed5e97 Certificate serial: 019B32D6EC5547CA3A7A626CDE1A3D3B6E9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHjAigY6wtNKGxkeJDY4m77tXpc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/1f10c2-02e2-438a-90a2-917c3577f34f/1/NHjAigY6wtNKGxkeJDY4m77tXpc.mft Manifest number: 0DC2 Signing time: Thu 18 Dec 2025 19:01:44 +0000 Manifest this update: Thu 18 Dec 2025 19:01:44 +0000 Manifest next update: Fri 19 Dec 2025 19:01:44 +0000 Files and hashes: 1: NHjAigY6wtNKGxkeJDY4m77tXpc.crl (hash: FvIwZnwA0wb88Ce9RLWIJfEeaERBM2r5lW0+w8fPaaE=) 2: pNlFvC-ThONwUDItOe39MOTdmuo.roa (hash: WDsgShsG54TqHBufqeXclF0wXzsc7Ep5HfaFqkIsZUI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/1f10c2-02e2-438a-90a2-917c3577f34f/1/NHjAigY6wtNKGxkeJDY4m77tXpc.crl rsync://rpki.ripe.net/repository/DEFAULT/13/1f10c2-02e2-438a-90a2-917c3577f34f/1/NHjAigY6wtNKGxkeJDY4m77tXpc.mft rsync://rpki.ripe.net/repository/DEFAULT/NHjAigY6wtNKGxkeJDY4m77tXpc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d6:ec:55:47:ca:3a:7a:62:6c:de:1a:3d:3b:6e:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3478c08a063ac2d34a1b191e2436389bbeed5e97 Validity Not Before: Dec 18 19:01:44 2025 GMT Not After : Dec 19 19:01:44 2025 GMT Subject: CN=014c6d6b20a49cef85011cdcb19e5b96bcc196c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a5:4d:90:01:8d:f1:6a:e3:6a:9d:55:24:70: 0c:a1:1c:63:30:0e:91:ed:3a:f3:d7:76:d9:09:fd: 56:8f:35:7c:8b:b6:46:46:4a:f2:61:da:df:64:2e: 43:f1:d1:e1:ee:74:a4:8b:86:b9:56:01:25:d1:3c: 3a:88:99:e5:7b:7a:44:1f:b1:a5:7e:37:48:43:c0: 08:d9:4d:04:6a:64:6a:10:7b:04:3f:cb:6f:dd:69: 05:c7:05:8c:dd:cb:1d:01:43:6c:0d:fa:d3:d5:98: 8a:43:78:55:dc:a3:15:cf:4e:c6:60:29:3e:9d:9a: 37:57:a8:e9:cc:f1:8a:4e:a5:af:f5:a2:54:26:77: 63:97:8d:15:72:d1:9a:40:bf:01:f5:47:82:9b:38: af:b3:70:07:2d:65:51:53:7f:44:d6:1c:e7:61:88: 79:50:12:57:9b:28:a7:f0:11:0e:fd:77:c0:36:09: 28:07:c4:04:c1:70:4b:23:23:54:7b:89:3d:61:2e: 2e:b0:10:6a:aa:92:44:f1:24:78:11:c5:84:bb:d4: cb:25:93:00:75:54:d6:06:c9:9d:3e:38:0f:5a:89: e8:f4:35:48:9f:a4:0f:a1:f5:6b:f2:26:59:9c:e1: a9:e4:db:dd:b2:44:33:c6:f6:53:0d:95:d5:ed:4b: 75:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:4C:6D:6B:20:A4:9C:EF:85:01:1C:DC:B1:9E:5B:96:BC:C1:96:C7 X509v3 Authority Key Identifier: keyid:34:78:C0:8A:06:3A:C2:D3:4A:1B:19:1E:24:36:38:9B:BE:ED:5E:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHjAigY6wtNKGxkeJDY4m77tXpc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/1f10c2-02e2-438a-90a2-917c3577f34f/1/NHjAigY6wtNKGxkeJDY4m77tXpc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/1f10c2-02e2-438a-90a2-917c3577f34f/1/NHjAigY6wtNKGxkeJDY4m77tXpc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:1b:02:e1:29:8b:5b:2b:33:88:b5:95:55:70:09:0e:82:60: 23:bf:9e:87:8c:40:1d:62:9e:23:c1:01:79:a3:df:06:4d:07: 84:7f:dc:c0:17:a1:de:52:c8:76:c9:e7:37:01:b2:83:ac:e4: 3e:51:e5:50:d0:e6:76:74:78:93:f4:87:17:26:49:98:84:f1: 97:04:59:41:33:ea:8e:21:42:48:92:fd:b2:05:53:5e:24:c4: 6a:e7:d6:76:9e:d0:f5:dc:56:e3:1f:01:1f:a5:ee:d4:f0:f4: a8:28:1b:6c:10:7b:d4:ce:6d:3b:57:80:06:67:74:42:73:8f: b6:8a:d3:f2:a7:20:ed:88:66:62:1e:91:ef:6d:cb:78:02:36: ba:08:0a:90:a6:c9:00:06:23:e6:c9:c9:dd:23:b8:34:77:1d: 6c:98:39:92:1b:26:e0:27:96:3c:a4:a3:2f:38:d6:04:31:4c: 1a:7a:50:58:98:db:0c:aa:f5:f8:e6:d9:53:d1:6b:60:fc:77: 5b:ee:af:61:c9:6b:c0:57:80:34:b4:e4:07:cd:5d:f9:02:dc: 80:ba:c5:12:f7:c3:82:20:9d:de:9d:06:cc:7d:25:e6:4c:44: a2:47:7d:5c:36:13:71:ef:62:fb:20:77:7b:47:39:fc:c9:18: 91:f7:64:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1uxVR8o6emJs3ho9O26bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0NzhjMDhhMDYzYWMyZDM0YTFiMTkxZTI0MzYzODliYmVl ZDVlOTcwHhcNMjUxMjE4MTkwMTQ0WhcNMjUxMjE5MTkwMTQ0WjAzMTEwLwYDVQQD EygwMTRjNmQ2YjIwYTQ5Y2VmODUwMTFjZGNiMTllNWI5NmJjYzE5NmM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqVNkAGN8Wrjap1VJHAMoRxjMA6R 7Trz13bZCf1WjzV8i7ZGRkryYdrfZC5D8dHh7nSki4a5VgEl0Tw6iJnle3pEH7Gl fjdIQ8AI2U0EamRqEHsEP8tv3WkFxwWM3csdAUNsDfrT1ZiKQ3hV3KMVz07GYCk+ nZo3V6jpzPGKTqWv9aJUJndjl40VctGaQL8B9UeCmzivs3AHLWVRU39E1hznYYh5 UBJXmyin8BEO/XfANgkoB8QEwXBLIyNUe4k9YS4usBBqqpJE8SR4EcWEu9TLJZMA dVTWBsmdPjgPWono9DVIn6QPofVr8iZZnOGp5NvdskQzxvZTDZXV7Ut1nQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAFMbWsgpJzvhQEc3LGeW5a8wZbHMB8GA1UdIwQY MBaAFDR4wIoGOsLTShsZHiQ2OJu+7V6XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkhqQWlnWTZ3dE5LR3hrZUpEWTRtNzd0WHBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy8xZjEwYzItMDJlMi00MzhhLTkwYTIt OTE3YzM1NzdmMzRmLzEvTkhqQWlnWTZ3dE5LR3hrZUpEWTRtNzd0WHBjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy8xZjEwYzItMDJlMi00MzhhLTkwYTItOTE3YzM1NzdmMzRm LzEvTkhqQWlnWTZ3dE5LR3hrZUpEWTRtNzd0WHBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArhsC4SmL WysziLWVVXAJDoJgI7+eh4xAHWKeI8EBeaPfBk0HhH/cwBeh3lLIdsnnNwGyg6zk PlHlUNDmdnR4k/SHFyZJmITxlwRZQTPqjiFCSJL9sgVTXiTEaufWdp7Q9dxW4x8B H6Xu1PD0qCgbbBB71M5tO1eABmd0QnOPtorT8qcg7YhmYh6R723LeAI2uggKkKbJ AAYj5snJ3SO4NHcdbJg5khsm4CeWPKSjLzjWBDFMGnpQWJjbDKr1+ObZU9FrYPx3 W+6vYclrwFeANLTkB81d+QLcgLrFEvfDgiCd3p0GzH0l5kxEokd9XDYTce9i+yB3 e0c5/MkYkfdkNw== -----END CERTIFICATE-----Generated at Fri Dec 19 01:28:02 2025 by rpki-client