This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/daccc4-36c8-4d4c-8c4e-5760b5d54df9/1/nHLoTFLlxJCdvHAqodIS1HiHX60.mft File: nHLoTFLlxJCdvHAqodIS1HiHX60.mft (raw, json) Hash identifier: nwPgnwjiVqB1KMjqFMgXbATMNR4Sr9cxB+SXHrdevdA= Subject key identifier: BF:8A:D0:D3:09:7F:D4:25:25:59:19:51:C3:C0:7A:12:83:8E:92:68 Authority key identifier: 9C:72:E8:4C:52:E5:C4:90:9D:BC:70:2A:A1:D2:12:D4:78:87:5F:AD Certificate issuer: /CN=9c72e84c52e5c4909dbc702aa1d212d478875fad Certificate serial: 019B424910D3BB63E62E03B4539BEAF595C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nHLoTFLlxJCdvHAqodIS1HiHX60.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/daccc4-36c8-4d4c-8c4e-5760b5d54df9/1/nHLoTFLlxJCdvHAqodIS1HiHX60.mft Manifest number: 0776 Signing time: Sun 21 Dec 2025 19:00:43 +0000 Manifest this update: Sun 21 Dec 2025 19:00:43 +0000 Manifest next update: Mon 22 Dec 2025 19:00:43 +0000 Files and hashes: 1: MJgreWjojTG3TWAm0IOsT3PX7yE.roa (hash: QQOCbVX4ydh8RHwVZnu9QI+n2Ns0Q1CadZGcMjFSReI=) 2: nHLoTFLlxJCdvHAqodIS1HiHX60.crl (hash: q3j20P5IexlQBYu0i8APikNIlxOPF2eugJ3HtNxbl3o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/daccc4-36c8-4d4c-8c4e-5760b5d54df9/1/nHLoTFLlxJCdvHAqodIS1HiHX60.crl rsync://rpki.ripe.net/repository/DEFAULT/29/daccc4-36c8-4d4c-8c4e-5760b5d54df9/1/nHLoTFLlxJCdvHAqodIS1HiHX60.mft rsync://rpki.ripe.net/repository/DEFAULT/nHLoTFLlxJCdvHAqodIS1HiHX60.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:49:10:d3:bb:63:e6:2e:03:b4:53:9b:ea:f5:95:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c72e84c52e5c4909dbc702aa1d212d478875fad Validity Not Before: Dec 21 19:00:43 2025 GMT Not After : Dec 22 19:00:43 2025 GMT Subject: CN=bf8ad0d3097fd42525591951c3c07a12838e9268 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:7f:83:45:c2:09:d2:6b:45:16:44:0a:30:3e: c4:04:3f:db:2b:23:75:f9:3a:dd:dd:cd:01:b0:e2: d5:47:8f:32:40:dc:35:8b:14:6e:a7:3c:a7:3e:ec: 78:69:5b:8c:d3:d8:fc:e2:52:3d:6d:f9:69:f3:df: 54:5e:95:b3:fd:a6:d7:6b:b8:81:ca:ec:e5:72:25: bb:fe:34:47:95:13:0b:65:20:81:3a:79:1b:61:0c: 5d:9a:40:8b:4c:eb:08:45:58:95:53:dd:c8:55:0c: 04:83:75:11:b6:f7:b3:74:f5:9f:79:1a:69:96:7a: 01:36:07:18:68:4e:26:60:c6:23:96:de:cb:65:99: 57:5e:91:f1:a9:7e:0c:13:1f:94:e8:e0:e9:49:c4: 78:27:c9:a1:6d:67:7a:33:36:19:1f:47:86:09:fe: 98:3b:b3:5f:8d:64:b4:c7:be:14:ca:cb:99:6c:7a: e5:44:35:aa:fe:e4:b3:ec:ae:2c:98:60:32:7b:2a: 6c:aa:f5:df:31:6f:c4:82:37:33:9b:f3:af:5b:b2: e6:a5:ff:cc:64:41:e7:ba:b6:70:5c:ad:00:c0:c5: f6:08:5d:2e:ac:ca:58:08:28:b5:d0:37:d2:6b:b6: ab:38:58:76:46:49:03:6d:7d:ea:c8:35:db:d5:ff: 3d:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:8A:D0:D3:09:7F:D4:25:25:59:19:51:C3:C0:7A:12:83:8E:92:68 X509v3 Authority Key Identifier: keyid:9C:72:E8:4C:52:E5:C4:90:9D:BC:70:2A:A1:D2:12:D4:78:87:5F:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nHLoTFLlxJCdvHAqodIS1HiHX60.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/daccc4-36c8-4d4c-8c4e-5760b5d54df9/1/nHLoTFLlxJCdvHAqodIS1HiHX60.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/daccc4-36c8-4d4c-8c4e-5760b5d54df9/1/nHLoTFLlxJCdvHAqodIS1HiHX60.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:a8:85:97:06:6d:06:55:5d:0b:4f:4b:d1:19:7e:96:e6:50: d2:9e:ad:78:ab:0c:26:8f:e0:45:26:2b:70:d3:bb:8b:87:a6: ee:73:17:f9:1b:34:f3:ba:2a:af:07:43:6e:9c:4d:f3:08:0b: 5c:06:a6:be:72:25:78:c8:27:66:23:72:f6:59:1b:58:24:3c: 66:dc:fe:2c:0b:11:c2:94:a9:46:4a:72:bc:0f:f1:30:91:a2: 95:c3:0d:d3:c5:89:8d:99:cc:76:d6:4b:b0:d7:97:ba:f1:f3: 0f:40:f8:13:b5:ce:0e:4d:62:7c:04:0e:98:b2:8b:82:7c:29: 0b:e4:b4:f8:6c:12:04:e0:a7:00:d0:4e:93:93:93:a7:65:6e: eb:30:0b:36:08:1e:20:0b:20:16:c1:2c:da:90:03:0d:83:73: 1d:6a:84:ae:07:a5:0c:7e:11:84:bb:b1:b3:a2:29:e7:94:18: c4:36:07:13:39:9a:be:82:5f:a1:7a:c1:3c:17:b5:4b:e3:35: d6:75:ab:80:af:a9:51:07:26:5b:15:e9:1f:08:5f:80:4e:01: 8c:25:b4:bf:3e:48:97:1d:41:70:56:3c:73:bd:92:5a:b5:03: 6b:ae:0d:e9:cc:8d:8e:54:92:a6:69:ef:47:bd:f9:a8:c3:d9: 36:b2:c2:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSRDTu2PmLgO0U5vq9ZXBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljNzJlODRjNTJlNWM0OTA5ZGJjNzAyYWExZDIxMmQ0Nzg4 NzVmYWQwHhcNMjUxMjIxMTkwMDQzWhcNMjUxMjIyMTkwMDQzWjAzMTEwLwYDVQQD EyhiZjhhZDBkMzA5N2ZkNDI1MjU1OTE5NTFjM2MwN2ExMjgzOGU5MjY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxH+DRcIJ0mtFFkQKMD7EBD/bKyN1 +Trd3c0BsOLVR48yQNw1ixRupzynPux4aVuM09j84lI9bflp899UXpWz/abXa7iB yuzlciW7/jRHlRMLZSCBOnkbYQxdmkCLTOsIRViVU93IVQwEg3URtvezdPWfeRpp lnoBNgcYaE4mYMYjlt7LZZlXXpHxqX4MEx+U6ODpScR4J8mhbWd6MzYZH0eGCf6Y O7NfjWS0x74UysuZbHrlRDWq/uSz7K4smGAyeypsqvXfMW/Egjczm/OvW7Lmpf/M ZEHnurZwXK0AwMX2CF0urMpYCCi10DfSa7arOFh2RkkDbX3qyDXb1f89jwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL+K0NMJf9QlJVkZUcPAehKDjpJoMB8GA1UdIwQY MBaAFJxy6ExS5cSQnbxwKqHSEtR4h1+tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkhMb1RGTGx4SkNkdkhBcW9kSVMxSGlIWDYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9kYWNjYzQtMzZjOC00ZDRjLThjNGUt NTc2MGI1ZDU0ZGY5LzEvbkhMb1RGTGx4SkNkdkhBcW9kSVMxSGlIWDYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9kYWNjYzQtMzZjOC00ZDRjLThjNGUtNTc2MGI1ZDU0ZGY5 LzEvbkhMb1RGTGx4SkNkdkhBcW9kSVMxSGlIWDYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp6iFlwZt BlVdC09L0Rl+luZQ0p6teKsMJo/gRSYrcNO7i4em7nMX+Rs087oqrwdDbpxN8wgL XAamvnIleMgnZiNy9lkbWCQ8Ztz+LAsRwpSpRkpyvA/xMJGilcMN08WJjZnMdtZL sNeXuvHzD0D4E7XODk1ifAQOmLKLgnwpC+S0+GwSBOCnANBOk5OTp2Vu6zALNgge IAsgFsEs2pADDYNzHWqErgelDH4RhLuxs6Ip55QYxDYHEzmavoJfoXrBPBe1S+M1 1nWrgK+pUQcmWxXpHwhfgE4BjCW0vz5Ilx1BcFY8c72SWrUDa64N6cyNjlSSpmnv R735qMPZNrLCKg== -----END CERTIFICATE-----Generated at Mon Dec 22 01:48:50 2025 by rpki-client