This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.mft File: rh__nrDPTAungU4yLsjgPU8fBxg.mft (raw, json) Hash identifier: YD3RG38dzfHW/GPDYuOR4mNtcNOb6niYFyKLbrwcvmY= Subject key identifier: FF:23:C7:83:69:BC:4B:F3:9F:A0:6C:13:21:3A:60:8F:DC:DB:40:D3 Authority key identifier: AE:1F:FF:9E:B0:CF:4C:0B:A7:81:4E:32:2E:C8:E0:3D:4F:1F:07:18 Certificate issuer: /CN=ae1fff9eb0cf4c0ba7814e322ec8e03d4f1f0718 Certificate serial: 019B41364EDF0F87379D971734727038A076 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rh__nrDPTAungU4yLsjgPU8fBxg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.mft Manifest number: 0E19 Signing time: Sun 21 Dec 2025 14:00:36 +0000 Manifest this update: Sun 21 Dec 2025 14:00:36 +0000 Manifest next update: Mon 22 Dec 2025 14:00:36 +0000 Files and hashes: 1: FE0N8Kmo4OQXkTM86cmuHztqlpc.roa (hash: SAO+tGk+RLFdSMx2iDPle0Zv+2Ko3C4/o12jLuDIkhw=) 2: rh__nrDPTAungU4yLsjgPU8fBxg.crl (hash: cpBJpdsz8+Ly/+EON7CIjebbp5MAqDSf3PRZcY+vQqE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.crl rsync://rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.mft rsync://rpki.ripe.net/repository/DEFAULT/rh__nrDPTAungU4yLsjgPU8fBxg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:36:4e:df:0f:87:37:9d:97:17:34:72:70:38:a0:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae1fff9eb0cf4c0ba7814e322ec8e03d4f1f0718 Validity Not Before: Dec 21 14:00:36 2025 GMT Not After : Dec 22 14:00:36 2025 GMT Subject: CN=ff23c78369bc4bf39fa06c13213a608fdcdb40d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c7:b1:18:f4:a2:30:2f:34:74:1f:eb:65:77: f9:12:de:36:91:4a:f0:4a:3f:7a:69:76:0a:32:f3: ba:4c:1f:6b:fa:fd:c4:67:ee:e7:c1:3f:35:2f:4a: ff:8a:4b:b0:4c:ef:54:5f:d5:2f:e8:b1:6d:51:20: c5:a2:c4:2f:92:c7:d0:44:d0:37:f8:ad:05:be:c1: b6:f3:ec:e7:6e:69:06:de:39:01:e0:66:e3:78:5b: 22:6d:10:b4:53:40:96:37:3c:28:67:d3:97:62:3f: 54:dc:fd:81:4a:c8:d1:5f:19:f3:ce:19:9f:c7:75: 8d:8f:90:71:17:07:92:cb:00:55:f3:7b:77:d0:e7: 93:14:36:c0:d7:d5:28:9c:39:1c:60:36:3c:45:d4: 5d:37:1c:11:64:9f:a7:a1:f0:d1:19:a0:f8:bd:c0: 22:48:dd:93:87:4e:fc:34:ce:ef:b4:83:78:46:4c: b3:68:6d:67:ee:ac:08:3e:10:5e:4e:29:7f:ad:16: 5e:d2:86:9a:51:85:4a:c2:26:41:41:78:84:10:e5: ab:69:bf:56:8b:80:17:fe:ba:df:53:3d:1f:17:af: 26:35:74:9e:98:1d:0d:14:9c:44:c2:4a:e8:d5:ff: fb:ce:9c:a4:b6:7c:65:11:ae:d3:06:e4:f1:af:ef: 80:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:23:C7:83:69:BC:4B:F3:9F:A0:6C:13:21:3A:60:8F:DC:DB:40:D3 X509v3 Authority Key Identifier: keyid:AE:1F:FF:9E:B0:CF:4C:0B:A7:81:4E:32:2E:C8:E0:3D:4F:1F:07:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rh__nrDPTAungU4yLsjgPU8fBxg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:08:28:c8:b1:39:10:65:ee:17:fe:49:e6:d3:0d:78:36:81: 58:57:f9:fb:94:e3:9f:12:8b:cb:46:cd:1e:c0:b0:d5:83:d4: 0f:f8:4e:d3:02:77:8a:c2:b8:b7:6d:3a:7e:64:f1:0a:22:8d: 33:d4:56:59:94:f9:e1:89:ce:15:ab:6b:34:f7:00:4e:bf:e5: 49:d8:1c:39:55:b8:de:b5:de:23:aa:dc:d3:73:af:fa:53:aa: 5a:03:4a:23:1d:e3:24:f7:27:2e:35:1c:de:18:bc:00:15:21: 94:a8:9a:f9:de:f2:25:13:30:a4:48:aa:b5:fb:38:7d:44:a2: f1:b4:16:e5:7b:f0:bb:7d:68:c9:49:55:09:98:3f:56:b7:fd: 81:9a:6a:dc:78:72:c7:27:ad:f0:97:7e:36:43:09:a3:73:16: 9c:60:a3:b3:38:d1:2c:1a:7e:80:89:a0:5f:3a:3a:c8:7a:b7: 0a:8f:5b:43:8c:3c:d1:e7:bf:73:9b:38:f3:67:a6:3e:23:b3: f5:45:bd:67:1c:cf:0e:20:db:27:4b:b1:5d:58:30:3b:99:05: 79:1e:38:13:f2:6d:6a:f6:67:04:fc:9d:b9:00:c7:3c:c2:58: 73:e0:2f:84:c8:e3:1e:b6:aa:41:52:9b:1c:e3:b5:29:95:5e: 4c:8d:9d:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBNk7fD4c3nZcXNHJwOKB2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlMWZmZjllYjBjZjRjMGJhNzgxNGUzMjJlYzhlMDNkNGYx ZjA3MTgwHhcNMjUxMjIxMTQwMDM2WhcNMjUxMjIyMTQwMDM2WjAzMTEwLwYDVQQD EyhmZjIzYzc4MzY5YmM0YmYzOWZhMDZjMTMyMTNhNjA4ZmRjZGI0MGQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8exGPSiMC80dB/rZXf5Et42kUrw Sj96aXYKMvO6TB9r+v3EZ+7nwT81L0r/ikuwTO9UX9Uv6LFtUSDFosQvksfQRNA3 +K0FvsG28+znbmkG3jkB4GbjeFsibRC0U0CWNzwoZ9OXYj9U3P2BSsjRXxnzzhmf x3WNj5BxFweSywBV83t30OeTFDbA19UonDkcYDY8RdRdNxwRZJ+nofDRGaD4vcAi SN2Th078NM7vtIN4RkyzaG1n7qwIPhBeTil/rRZe0oaaUYVKwiZBQXiEEOWrab9W i4AX/rrfUz0fF68mNXSemB0NFJxEwkro1f/7zpyktnxlEa7TBuTxr++ArwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP8jx4NpvEvzn6BsEyE6YI/c20DTMB8GA1UdIwQY MBaAFK4f/56wz0wLp4FOMi7I4D1PHwcYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmhfX25yRFBUQXVuZ1U0eUxzamdQVThmQnhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8wZTlmYjktZjVhNy00NjZhLThmODEt OWUxMDI5NGExOGVhLzEvcmhfX25yRFBUQXVuZ1U0eUxzamdQVThmQnhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8wZTlmYjktZjVhNy00NjZhLThmODEtOWUxMDI5NGExOGVh LzEvcmhfX25yRFBUQXVuZ1U0eUxzamdQVThmQnhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnggoyLE5 EGXuF/5J5tMNeDaBWFf5+5TjnxKLy0bNHsCw1YPUD/hO0wJ3isK4t206fmTxCiKN M9RWWZT54YnOFatrNPcATr/lSdgcOVW43rXeI6rc03Ov+lOqWgNKIx3jJPcnLjUc 3hi8ABUhlKia+d7yJRMwpEiqtfs4fUSi8bQW5Xvwu31oyUlVCZg/Vrf9gZpq3Hhy xyet8Jd+NkMJo3MWnGCjszjRLBp+gImgXzo6yHq3Co9bQ4w80ee/c5s482emPiOz 9UW9ZxzPDiDbJ0uxXVgwO5kFeR44E/JtavZnBPyduQDHPMJYc+AvhMjjHraqQVKb HOO1KZVeTI2diA== -----END CERTIFICATE-----Generated at Sun Dec 21 19:27:03 2025 by rpki-client