This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/6ca852-ed4b-41d1-a7b6-84a71cc32d48/1/NehMBjohgLI_X20xYqdbMJL1wY0.mft File: NehMBjohgLI_X20xYqdbMJL1wY0.mft (raw, json) Hash identifier: V6OHxqs+eYQ/xMxaSuTdCKGMRhx8M4eK55I7zL6Q2Rw= Subject key identifier: BE:48:FE:12:BF:F2:38:51:53:F2:BA:4C:34:B7:17:93:F6:C5:79:10 Authority key identifier: 35:E8:4C:06:3A:21:80:B2:3F:5F:6D:31:62:A7:5B:30:92:F5:C1:8D Certificate issuer: /CN=35e84c063a2180b23f5f6d3162a75b3092f5c18d Certificate serial: 019B330D0DA1D6629E3A96AD9E356C7FCB6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NehMBjohgLI_X20xYqdbMJL1wY0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/6ca852-ed4b-41d1-a7b6-84a71cc32d48/1/NehMBjohgLI_X20xYqdbMJL1wY0.mft Manifest number: 1781 Signing time: Thu 18 Dec 2025 20:00:51 +0000 Manifest this update: Thu 18 Dec 2025 20:00:51 +0000 Manifest next update: Fri 19 Dec 2025 20:00:51 +0000 Files and hashes: 1: NehMBjohgLI_X20xYqdbMJL1wY0.crl (hash: yeBhTeNtMQNDIgHlc6QJckP3paUV6cfVIJ+BEZLc1ik=) 2: W3mDa3qMM3UMHKwdjXNmQQYwzCo.roa (hash: uhcnNrB9w8L6u9yOsZumoNimMZDsDc9Fp+1S6uVCDDA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/6ca852-ed4b-41d1-a7b6-84a71cc32d48/1/NehMBjohgLI_X20xYqdbMJL1wY0.crl rsync://rpki.ripe.net/repository/DEFAULT/54/6ca852-ed4b-41d1-a7b6-84a71cc32d48/1/NehMBjohgLI_X20xYqdbMJL1wY0.mft rsync://rpki.ripe.net/repository/DEFAULT/NehMBjohgLI_X20xYqdbMJL1wY0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:0d:0d:a1:d6:62:9e:3a:96:ad:9e:35:6c:7f:cb:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e84c063a2180b23f5f6d3162a75b3092f5c18d Validity Not Before: Dec 18 20:00:51 2025 GMT Not After : Dec 19 20:00:51 2025 GMT Subject: CN=be48fe12bff2385153f2ba4c34b71793f6c57910 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c2:67:ae:b4:17:27:7a:7e:73:1f:3f:61:2b: 79:ad:01:1a:ca:6c:3d:7e:49:06:bb:d9:05:9c:58: 4c:28:e0:35:74:49:5b:5b:b2:b0:73:fa:d1:b8:0f: e0:d5:53:81:8f:c5:c0:55:ea:90:c2:8f:e3:bc:fd: eb:4e:82:13:5d:40:d6:d8:98:c4:8c:d6:23:28:95: 33:df:31:b7:26:45:6b:8c:b7:2e:c7:c2:bb:6c:a7: f3:20:87:7b:a2:0c:46:e0:be:22:b8:73:36:e4:9a: ce:08:ef:08:04:a3:cb:e5:90:98:d3:d0:1e:a1:17: 20:0d:ab:31:40:77:f9:51:e7:da:b9:37:7c:63:c7: 9e:29:25:1e:b0:53:73:62:1a:02:d4:ec:6c:31:38: 84:94:6b:a8:91:ce:67:f3:66:f8:0d:06:30:f1:a7: f0:f1:87:cb:3f:cc:71:46:a4:c6:a5:36:ec:37:ca: 3c:88:8d:c1:e3:bf:6b:be:ae:a6:dd:bc:55:b4:84: 73:bf:9d:49:3e:a6:74:e1:4b:a4:19:e7:8a:3b:c5: 38:31:dc:be:e8:d2:43:6c:9c:66:43:13:4a:7d:a7: 73:ca:b1:5d:2c:e5:7d:00:2c:f0:55:f4:04:67:79: 52:52:31:94:49:78:bf:72:40:0e:23:fa:28:95:36: 17:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:48:FE:12:BF:F2:38:51:53:F2:BA:4C:34:B7:17:93:F6:C5:79:10 X509v3 Authority Key Identifier: keyid:35:E8:4C:06:3A:21:80:B2:3F:5F:6D:31:62:A7:5B:30:92:F5:C1:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NehMBjohgLI_X20xYqdbMJL1wY0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6ca852-ed4b-41d1-a7b6-84a71cc32d48/1/NehMBjohgLI_X20xYqdbMJL1wY0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6ca852-ed4b-41d1-a7b6-84a71cc32d48/1/NehMBjohgLI_X20xYqdbMJL1wY0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:5d:56:b2:ad:fa:bc:40:e5:11:a7:6a:8b:87:1f:92:39:4a: 29:73:31:56:ac:40:72:c8:95:cd:79:24:95:74:ea:c5:60:e5: 28:4d:2a:c9:68:41:05:ba:42:44:e6:41:b5:5b:b2:ca:d2:4c: a5:20:96:90:0c:19:44:af:4b:81:d7:65:2a:60:47:9d:3d:4f: ae:c7:81:6e:e3:e5:83:e1:e5:46:cf:90:22:84:83:25:af:51: 79:5e:ba:32:e2:db:44:2e:0a:c5:5a:49:9d:bc:ce:15:a1:58: d9:9a:42:6b:98:04:d2:66:3b:1d:c2:6a:48:8d:8d:84:d1:05: 42:de:4e:8a:51:a9:16:e2:bb:39:ac:67:08:17:17:02:fb:ea: 6f:fa:e9:c8:49:cd:d8:07:ad:9b:70:c1:ab:19:f0:af:26:4d: f5:24:0f:f9:a0:c3:3c:92:d9:0d:f9:12:88:93:ef:63:44:6a: 1c:70:0a:e9:68:c6:4d:14:5a:71:88:5f:8e:18:24:ed:e5:8c: ce:ad:59:c3:40:23:e9:6c:a0:d3:b8:c9:2d:10:d5:3c:67:98: a5:5c:51:e0:5b:5c:3f:15:7f:3c:c6:01:f5:d5:b5:52:b2:9a: 50:50:70:a1:80:a5:4a:7b:58:f6:55:b9:14:da:53:95:58:06: 3d:e8:84:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszDQ2h1mKeOpatnjVsf8tvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1ZTg0YzA2M2EyMTgwYjIzZjVmNmQzMTYyYTc1YjMwOTJm NWMxOGQwHhcNMjUxMjE4MjAwMDUxWhcNMjUxMjE5MjAwMDUxWjAzMTEwLwYDVQQD EyhiZTQ4ZmUxMmJmZjIzODUxNTNmMmJhNGMzNGI3MTc5M2Y2YzU3OTEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucJnrrQXJ3p+cx8/YSt5rQEaymw9 fkkGu9kFnFhMKOA1dElbW7Kwc/rRuA/g1VOBj8XAVeqQwo/jvP3rToITXUDW2JjE jNYjKJUz3zG3JkVrjLcux8K7bKfzIId7ogxG4L4iuHM25JrOCO8IBKPL5ZCY09Ae oRcgDasxQHf5UefauTd8Y8eeKSUesFNzYhoC1OxsMTiElGuokc5n82b4DQYw8afw 8YfLP8xxRqTGpTbsN8o8iI3B479rvq6m3bxVtIRzv51JPqZ04UukGeeKO8U4Mdy+ 6NJDbJxmQxNKfadzyrFdLOV9ACzwVfQEZ3lSUjGUSXi/ckAOI/oolTYXfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL5I/hK/8jhRU/K6TDS3F5P2xXkQMB8GA1UdIwQY MBaAFDXoTAY6IYCyP19tMWKnWzCS9cGNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmVoTUJqb2hnTElfWDIweFlxZGJNSkwxd1kwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC82Y2E4NTItZWQ0Yi00MWQxLWE3YjYt ODRhNzFjYzMyZDQ4LzEvTmVoTUJqb2hnTElfWDIweFlxZGJNSkwxd1kwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC82Y2E4NTItZWQ0Yi00MWQxLWE3YjYtODRhNzFjYzMyZDQ4 LzEvTmVoTUJqb2hnTElfWDIweFlxZGJNSkwxd1kwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFF1Wsq36 vEDlEadqi4cfkjlKKXMxVqxAcsiVzXkklXTqxWDlKE0qyWhBBbpCROZBtVuyytJM pSCWkAwZRK9LgddlKmBHnT1PrseBbuPlg+HlRs+QIoSDJa9ReV66MuLbRC4KxVpJ nbzOFaFY2ZpCa5gE0mY7HcJqSI2NhNEFQt5OilGpFuK7OaxnCBcXAvvqb/rpyEnN 2Aetm3DBqxnwryZN9SQP+aDDPJLZDfkSiJPvY0RqHHAK6WjGTRRacYhfjhgk7eWM zq1Zw0Aj6Wyg07jJLRDVPGeYpVxR4FtcPxV/PMYB9dW1UrKaUFBwoYClSntY9lW5 FNpTlVgGPeiEKA== -----END CERTIFICATE-----Generated at Fri Dec 19 00:16:03 2025 by rpki-client