This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/6ca852-ed4b-41d1-a7b6-84a71cc32d48/1/NehMBjohgLI_X20xYqdbMJL1wY0.mft File: NehMBjohgLI_X20xYqdbMJL1wY0.mft (raw, json) Hash identifier: N5pz/g1bFvOwpHuzoyn95kLUu7/tFPPU2Fx0T9MLlKw= Subject key identifier: 73:6F:32:20:9A:38:B5:C3:86:A4:BB:89:BE:FF:B1:E2:46:18:D2:5C Authority key identifier: 35:E8:4C:06:3A:21:80:B2:3F:5F:6D:31:62:A7:5B:30:92:F5:C1:8D Certificate issuer: /CN=35e84c063a2180b23f5f6d3162a75b3092f5c18d Certificate serial: 019B5F7790454DB0A521E67CCB7C6422CF91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NehMBjohgLI_X20xYqdbMJL1wY0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/6ca852-ed4b-41d1-a7b6-84a71cc32d48/1/NehMBjohgLI_X20xYqdbMJL1wY0.mft Manifest number: 1798 Signing time: Sat 27 Dec 2025 11:00:29 +0000 Manifest this update: Sat 27 Dec 2025 11:00:29 +0000 Manifest next update: Sun 28 Dec 2025 11:00:29 +0000 Files and hashes: 1: NehMBjohgLI_X20xYqdbMJL1wY0.crl (hash: Wk8DeIBw06AQiDefhxe7L1H07/HNa7Kk7vRC84GSm4Y=) 2: W3mDa3qMM3UMHKwdjXNmQQYwzCo.roa (hash: uhcnNrB9w8L6u9yOsZumoNimMZDsDc9Fp+1S6uVCDDA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/6ca852-ed4b-41d1-a7b6-84a71cc32d48/1/NehMBjohgLI_X20xYqdbMJL1wY0.crl rsync://rpki.ripe.net/repository/DEFAULT/54/6ca852-ed4b-41d1-a7b6-84a71cc32d48/1/NehMBjohgLI_X20xYqdbMJL1wY0.mft rsync://rpki.ripe.net/repository/DEFAULT/NehMBjohgLI_X20xYqdbMJL1wY0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5f:77:90:45:4d:b0:a5:21:e6:7c:cb:7c:64:22:cf:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e84c063a2180b23f5f6d3162a75b3092f5c18d Validity Not Before: Dec 27 11:00:29 2025 GMT Not After : Dec 28 11:00:29 2025 GMT Subject: CN=736f32209a38b5c386a4bb89beffb1e24618d25c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c4:a1:05:c5:0f:23:d7:3a:2d:a4:fd:aa:27: 89:10:90:15:42:45:03:16:12:fa:04:19:58:25:eb: 1b:48:0b:68:96:ec:a9:f8:57:fb:31:68:40:2c:a1: c3:7d:08:a9:fe:20:6c:b0:df:4a:86:a5:e0:90:81: 77:8d:fb:1f:bd:3b:0a:a6:a7:2f:af:d4:32:0d:67: 7e:a9:0d:13:78:7d:ec:a2:9a:c5:cd:0d:d8:2f:63: ba:5c:44:fe:af:f8:84:e9:6d:2b:1e:af:fd:aa:1f: 8e:e5:1b:cb:cc:fb:8a:af:ab:8c:f5:62:eb:f0:d0: 3d:3d:98:64:1e:a0:d0:1d:a2:1d:2a:7a:29:8f:55: 4f:8a:a1:0c:43:94:da:0f:24:88:08:15:e7:d7:df: 20:c4:4a:22:a3:a2:bc:a2:c8:a4:23:eb:48:3d:35: a0:32:a9:b7:d9:31:55:d4:54:60:b4:e3:70:3c:59: 14:0d:4a:31:4a:f6:04:93:7f:73:a6:0c:48:31:10: 23:7b:db:49:3a:66:2c:fb:b8:f0:31:c9:fd:1e:7e: 24:c7:08:64:3f:6b:68:33:32:4a:54:15:d7:30:6b: 53:1f:2c:99:fb:df:e1:54:9f:9a:ab:9a:0c:ef:12: f3:65:c9:8f:5d:a9:d8:43:bf:c2:3c:57:d5:32:cd: 8e:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:6F:32:20:9A:38:B5:C3:86:A4:BB:89:BE:FF:B1:E2:46:18:D2:5C X509v3 Authority Key Identifier: keyid:35:E8:4C:06:3A:21:80:B2:3F:5F:6D:31:62:A7:5B:30:92:F5:C1:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NehMBjohgLI_X20xYqdbMJL1wY0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6ca852-ed4b-41d1-a7b6-84a71cc32d48/1/NehMBjohgLI_X20xYqdbMJL1wY0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6ca852-ed4b-41d1-a7b6-84a71cc32d48/1/NehMBjohgLI_X20xYqdbMJL1wY0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:17:75:ed:18:d1:d4:00:4a:a1:ed:15:d3:d4:fa:3c:2f:88: 09:0b:e2:d7:1f:9f:ab:19:0b:2a:d3:ad:1b:45:a4:e5:c2:d4: e3:06:51:76:25:6c:d4:86:17:93:16:42:97:c6:24:82:10:6a: 8c:e5:f6:79:ce:05:a6:1b:75:73:d2:e8:5b:55:cf:13:32:f1: f9:8b:3f:be:f7:68:86:2c:c4:24:51:16:f3:52:16:95:3d:34: 61:e5:d2:b9:7e:b2:17:51:4f:da:ae:1a:a7:14:bf:9c:6d:9a: 98:4b:05:0d:5a:c8:be:1f:d6:0c:a9:ce:ee:38:fc:3f:f9:7e: b6:00:b3:ca:06:6b:62:76:90:16:01:14:60:bb:a6:0a:67:6e: 5a:72:fe:19:61:72:67:cb:f9:9a:9d:4f:48:a1:8a:15:44:10: 83:be:14:2d:0d:82:65:2d:83:b8:32:d4:ce:c3:d6:0c:40:44: 57:97:34:ed:29:03:51:69:6b:f4:19:01:5a:a7:00:19:0e:29: 2b:c2:12:94:a8:b4:a7:b4:71:60:ba:04:50:f8:07:a6:22:4a: 24:c5:93:f3:9b:0f:a6:24:19:08:a0:fe:4a:14:89:4f:d2:1a: f6:22:39:2d:fc:25:15:24:f8:8f:c9:c1:a4:67:18:bf:8b:b8: 8e:10:04:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtfd5BFTbClIeZ8y3xkIs+RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1ZTg0YzA2M2EyMTgwYjIzZjVmNmQzMTYyYTc1YjMwOTJm NWMxOGQwHhcNMjUxMjI3MTEwMDI5WhcNMjUxMjI4MTEwMDI5WjAzMTEwLwYDVQQD Eyg3MzZmMzIyMDlhMzhiNWMzODZhNGJiODliZWZmYjFlMjQ2MThkMjVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocShBcUPI9c6LaT9qieJEJAVQkUD FhL6BBlYJesbSAtoluyp+Ff7MWhALKHDfQip/iBssN9KhqXgkIF3jfsfvTsKpqcv r9QyDWd+qQ0TeH3soprFzQ3YL2O6XET+r/iE6W0rHq/9qh+O5RvLzPuKr6uM9WLr 8NA9PZhkHqDQHaIdKnopj1VPiqEMQ5TaDySICBXn198gxEoio6K8osikI+tIPTWg Mqm32TFV1FRgtONwPFkUDUoxSvYEk39zpgxIMRAje9tJOmYs+7jwMcn9Hn4kxwhk P2toMzJKVBXXMGtTHyyZ+9/hVJ+aq5oM7xLzZcmPXanYQ7/CPFfVMs2OiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHNvMiCaOLXDhqS7ib7/seJGGNJcMB8GA1UdIwQY MBaAFDXoTAY6IYCyP19tMWKnWzCS9cGNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmVoTUJqb2hnTElfWDIweFlxZGJNSkwxd1kwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC82Y2E4NTItZWQ0Yi00MWQxLWE3YjYt ODRhNzFjYzMyZDQ4LzEvTmVoTUJqb2hnTElfWDIweFlxZGJNSkwxd1kwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC82Y2E4NTItZWQ0Yi00MWQxLWE3YjYtODRhNzFjYzMyZDQ4 LzEvTmVoTUJqb2hnTElfWDIweFlxZGJNSkwxd1kwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUxd17RjR 1ABKoe0V09T6PC+ICQvi1x+fqxkLKtOtG0Wk5cLU4wZRdiVs1IYXkxZCl8YkghBq jOX2ec4Fpht1c9LoW1XPEzLx+Ys/vvdohizEJFEW81IWlT00YeXSuX6yF1FP2q4a pxS/nG2amEsFDVrIvh/WDKnO7jj8P/l+tgCzygZrYnaQFgEUYLumCmduWnL+GWFy Z8v5mp1PSKGKFUQQg74ULQ2CZS2DuDLUzsPWDEBEV5c07SkDUWlr9BkBWqcAGQ4p K8ISlKi0p7RxYLoEUPgHpiJKJMWT85sPpiQZCKD+ShSJT9Ia9iI5LfwlFST4j8nB pGcYv4u4jhAEpg== -----END CERTIFICATE-----Generated at Sat Dec 27 17:48:17 2025 by rpki-client