This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.mft File: NHK1U_DLCxOQDUwuDmx3msoD47E.mft (raw, json) Hash identifier: Eux51P019APz6G9GcBjSmNo+JsMO4GRN9nivHQH7lWM= Subject key identifier: 0E:96:E4:92:4B:9B:D2:E7:93:5B:45:39:59:3A:E0:5C:3F:08:75:47 Authority key identifier: 34:72:B5:53:F0:CB:0B:13:90:0D:4C:2E:0E:6C:77:9A:CA:03:E3:B1 Certificate issuer: /CN=3472b553f0cb0b13900d4c2e0e6c779aca03e3b1 Certificate serial: 019B3D5999A06E129BC604B1BEC6D55B5965 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHK1U_DLCxOQDUwuDmx3msoD47E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.mft Manifest number: 14B7 Signing time: Sat 20 Dec 2025 20:00:40 +0000 Manifest this update: Sat 20 Dec 2025 20:00:40 +0000 Manifest next update: Sun 21 Dec 2025 20:00:40 +0000 Files and hashes: 1: 6-1i0N_EbFZTo9ANl2hYmIXY6kM.roa (hash: QWIH2VncfiqkLEzvbdcgtq9ctbO+I+7aPSyiE4vt93o=) 2: NHK1U_DLCxOQDUwuDmx3msoD47E.crl (hash: sowNsbX7evkiUaodTOlohKy4Ov35DsCL9RJsy+ORHdE=) 3: PzRiqf6-YVqlskQDhqkV86tLS2k.roa (hash: hb2uYQFMFVLH00O7jFoKdZGYwNQ4nvgVdgn8uModie8=) 4: gu7MjE2UvzrS0XGUY6b4iCkG2LQ.roa (hash: kYyvw5YUpEYRs591UgfTOuS34Jj5NCcUlDlrBVHVgqQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.mft rsync://rpki.ripe.net/repository/DEFAULT/NHK1U_DLCxOQDUwuDmx3msoD47E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:99:a0:6e:12:9b:c6:04:b1:be:c6:d5:5b:59:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3472b553f0cb0b13900d4c2e0e6c779aca03e3b1 Validity Not Before: Dec 20 20:00:40 2025 GMT Not After : Dec 21 20:00:40 2025 GMT Subject: CN=0e96e4924b9bd2e7935b4539593ae05c3f087547 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:33:7a:38:27:db:87:4e:69:ba:c2:b2:22:78: 05:e2:92:c1:bb:9b:ac:fd:f2:93:8e:89:d4:34:81: 01:f6:76:38:f7:cd:8b:7b:28:3a:11:87:af:58:e5: bf:11:89:b3:9c:c0:0f:90:b6:3f:05:14:c3:03:b9: 83:06:63:a1:a6:00:18:73:8c:31:70:61:2a:da:97: 9c:68:14:ca:f6:c6:18:67:1b:08:80:25:45:3b:33: a0:c5:c1:85:0d:d8:48:ee:10:41:74:d1:f9:62:9c: ec:48:b9:b4:09:c2:e1:da:66:83:e4:f0:77:4c:0b: 83:1a:da:31:74:8d:cd:64:0c:9b:d0:65:3e:8c:75: 69:9d:d8:5d:dd:60:cb:26:09:0d:8e:9e:33:77:a9: f1:1f:29:39:48:ad:12:c8:6f:a9:c6:d2:dd:19:41: 02:0a:3a:fe:9d:7c:93:da:54:08:00:01:3d:cd:89: 7c:76:99:27:ca:84:d4:07:69:69:1c:4f:59:80:e4: 37:14:e9:ca:4b:e3:cf:99:54:9e:d6:a8:84:01:2b: d8:eb:ed:d8:08:d3:0c:5a:86:b0:91:b2:b6:e2:98: 1b:ca:0c:54:0f:ed:33:49:76:ad:af:e6:72:7b:c6: fb:ef:17:2e:0d:71:8d:a9:2e:c4:1e:7b:50:4d:83: 68:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:96:E4:92:4B:9B:D2:E7:93:5B:45:39:59:3A:E0:5C:3F:08:75:47 X509v3 Authority Key Identifier: keyid:34:72:B5:53:F0:CB:0B:13:90:0D:4C:2E:0E:6C:77:9A:CA:03:E3:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHK1U_DLCxOQDUwuDmx3msoD47E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:ae:9f:3c:03:79:e6:b2:e9:47:47:0b:f7:36:cf:a7:46:ed: c0:17:17:1b:f7:27:22:6e:a9:52:0f:86:f0:be:90:1d:dd:4a: 45:5a:86:74:e6:ba:09:ab:7d:e1:8a:e8:a1:18:f3:61:12:50: 00:8c:a6:70:3a:95:f6:bd:e4:76:1d:b2:94:cb:8a:db:7a:39: 07:0a:9e:4b:a7:0c:e5:f9:6d:a8:85:3e:45:f3:fb:cf:df:15: a1:a4:51:47:8c:6d:a1:7c:4e:1b:d8:ab:fc:d9:c9:ee:20:f2: 84:25:80:7b:5f:b8:4c:96:8b:5e:ab:09:1b:72:de:37:65:64: de:94:7f:f9:31:b1:6b:aa:dc:a2:aa:16:49:7d:da:e9:11:5b: 4b:e3:61:41:45:7f:87:b6:4e:de:e5:f9:4c:73:03:fd:f8:66: b9:4c:cf:d5:de:0a:4c:e2:3e:5e:90:88:4f:bd:b8:e2:95:ee: cc:11:84:60:a8:43:20:b8:f1:7d:ee:e9:b6:68:70:38:f0:31: 7c:a0:14:e9:20:16:b5:73:28:09:67:07:e7:15:01:4b:f3:33: 06:65:db:d9:f0:3f:0e:77:37:d9:c1:a2:09:61:ca:b1:4f:74: 84:6c:da:a7:ad:94:88:85:3a:0e:d3:0e:89:6e:e6:2e:43:cf: 6f:f1:93:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WZmgbhKbxgSxvsbVW1llMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0NzJiNTUzZjBjYjBiMTM5MDBkNGMyZTBlNmM3NzlhY2Ew M2UzYjEwHhcNMjUxMjIwMjAwMDQwWhcNMjUxMjIxMjAwMDQwWjAzMTEwLwYDVQQD EygwZTk2ZTQ5MjRiOWJkMmU3OTM1YjQ1Mzk1OTNhZTA1YzNmMDg3NTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzN6OCfbh05pusKyIngF4pLBu5us /fKTjonUNIEB9nY4982Leyg6EYevWOW/EYmznMAPkLY/BRTDA7mDBmOhpgAYc4wx cGEq2pecaBTK9sYYZxsIgCVFOzOgxcGFDdhI7hBBdNH5YpzsSLm0CcLh2maD5PB3 TAuDGtoxdI3NZAyb0GU+jHVpndhd3WDLJgkNjp4zd6nxHyk5SK0SyG+pxtLdGUEC Cjr+nXyT2lQIAAE9zYl8dpknyoTUB2lpHE9ZgOQ3FOnKS+PPmVSe1qiEASvY6+3Y CNMMWoawkbK24pgbygxUD+0zSXatr+Zye8b77xcuDXGNqS7EHntQTYNo9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA6W5JJLm9Lnk1tFOVk64Fw/CHVHMB8GA1UdIwQY MBaAFDRytVPwywsTkA1MLg5sd5rKA+OxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkhLMVVfRExDeE9RRFV3dURteDNtc29ENDdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8wNWVkMmYtYzRmNy00NDE3LWE0ZmIt MGQyMDUyNWVkYzc0LzEvTkhLMVVfRExDeE9RRFV3dURteDNtc29ENDdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi8wNWVkMmYtYzRmNy00NDE3LWE0ZmItMGQyMDUyNWVkYzc0 LzEvTkhLMVVfRExDeE9RRFV3dURteDNtc29ENDdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaa6fPAN5 5rLpR0cL9zbPp0btwBcXG/cnIm6pUg+G8L6QHd1KRVqGdOa6Cat94YrooRjzYRJQ AIymcDqV9r3kdh2ylMuK23o5BwqeS6cM5fltqIU+RfP7z98VoaRRR4xtoXxOG9ir /NnJ7iDyhCWAe1+4TJaLXqsJG3LeN2Vk3pR/+TGxa6rcoqoWSX3a6RFbS+NhQUV/ h7ZO3uX5THMD/fhmuUzP1d4KTOI+XpCIT7244pXuzBGEYKhDILjxfe7ptmhwOPAx fKAU6SAWtXMoCWcH5xUBS/MzBmXb2fA/Dnc32cGiCWHKsU90hGzap62UiIU6DtMO iW7mLkPPb/GTGQ== -----END CERTIFICATE-----Generated at Sun Dec 21 01:15:54 2025 by rpki-client