This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft File: NHQhDChBPiYoSCKr6DrW18D3ZPo.mft (raw, json) Hash identifier: gLj7dkjfQjVTT3klrjCuzi4zuxCpIBQBm+kHsFEQ2so= Subject key identifier: E2:79:55:A5:D5:A0:33:5E:FC:4B:BB:B1:02:05:B9:06:42:97:89:82 Authority key identifier: 34:74:21:0C:28:41:3E:26:28:48:22:AB:E8:3A:D6:D7:C0:F7:64:FA Certificate issuer: /CN=3474210c28413e26284822abe83ad6d7c0f764fa Certificate serial: 019B390F40731108CE5BA1B912A6FC7732B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft Manifest number: 178E Signing time: Sat 20 Dec 2025 00:00:59 +0000 Manifest this update: Sat 20 Dec 2025 00:00:59 +0000 Manifest next update: Sun 21 Dec 2025 00:00:59 +0000 Files and hashes: 1: 1bcuYr7QKJ5bW0bfcIYHS53yG6g.roa (hash: qd4P1coRqTY7B32E2jEnjJekCI9CLXdo/5/4fRHSsDk=) 2: 2yd3628VmNb462n9Ht_mrHJwpz4.roa (hash: jjvaAqc3q0c+UVUm7qyigUPHQ2zsUspQsTjOZ4ZjQ5E=) 3: 77kR0uenLneOf0_otMBTrdwkJ5I.roa (hash: kFgic4lpP8Yb+Wik/VcFSyZzSPM0vnTo7v0lGbnx3eU=) 4: An_xJWf4RJw4Ylw59J21Md85Jws.roa (hash: gk/epjcVW86jJdWfxESndHuaQolg8wlmkWBhHhLsN3Y=) 5: MMs4HnHsbdNr8Ew965SH5DIpvi4.roa (hash: Ku/6dybZerpifq4qXee8mDRjz4eG7rI5ajzOtuGjP0c=) 6: NHQhDChBPiYoSCKr6DrW18D3ZPo.crl (hash: 3MlKcWtyVkUtsXo0WjI7vI+NJkAGOPd2t4Lh12Y3UC8=) 7: byk_uVbEcBcJ5E54PZILxzilXqs.roa (hash: JCkW4yYVwvgxvyj62HKMLWieGutHlsi8Ja6vFazZOyk=) 8: s_AA60Ddfygbd8EKAGEg6mSlXwc.roa (hash: ENuKCW/gynViV0FOCDZJgVAAEXvbRuvjapJ167NV/i4=) 9: zbORAgVCBGdwMFpkpNpVU4F-JYE.roa (hash: bnmHuORo7L7E/r6zgTIFCwfAOxo5IKx9z46OH+yKYpI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.crl rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 00:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:0f:40:73:11:08:ce:5b:a1:b9:12:a6:fc:77:32:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3474210c28413e26284822abe83ad6d7c0f764fa Validity Not Before: Dec 20 00:00:59 2025 GMT Not After : Dec 21 00:00:59 2025 GMT Subject: CN=e27955a5d5a0335efc4bbbb10205b90642978982 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:66:75:31:85:ef:67:fb:11:62:58:23:44:6f: 0a:59:85:8c:8b:9a:11:74:9f:ae:4f:e3:ca:8c:e8: 3e:9c:9b:96:49:4d:81:a1:a3:3c:2c:eb:03:cb:eb: a6:7a:05:25:6e:c6:6a:75:d4:c1:2f:07:23:83:6c: db:93:61:df:88:19:db:99:0c:e7:21:97:26:de:05: 87:68:63:c5:08:b0:50:f7:2c:87:52:76:ca:cc:bf: 11:b2:7a:4c:b5:c9:a6:da:f5:e7:89:b9:6d:5d:da: b0:99:70:1e:a8:be:a8:9e:b3:a6:f1:63:1d:70:89: 2a:bb:9f:e7:bd:b0:4e:14:c4:36:1a:b0:a0:32:f8: 6d:3f:51:e0:62:7c:53:f2:66:0e:e4:0c:9c:ae:d0: 95:68:2e:2a:9b:d9:c5:14:d1:b4:f2:7f:e2:c7:2f: b4:8a:e0:20:6d:24:67:06:47:71:62:e7:aa:e8:3b: d2:04:4a:60:81:f3:3b:da:d7:1f:7b:2c:c4:94:df: 81:b1:ab:06:1e:dd:b0:84:39:a4:6d:39:30:62:2a: ba:26:e8:43:e8:f3:dd:3f:ec:71:50:56:d6:14:bb: 58:f3:2a:e8:d2:36:7a:ef:6a:a4:8b:5e:3f:b2:ce: e9:d4:05:ec:d3:74:54:b9:21:af:9c:ca:ab:35:44: 2d:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:79:55:A5:D5:A0:33:5E:FC:4B:BB:B1:02:05:B9:06:42:97:89:82 X509v3 Authority Key Identifier: keyid:34:74:21:0C:28:41:3E:26:28:48:22:AB:E8:3A:D6:D7:C0:F7:64:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:cd:93:38:c7:b5:65:62:ce:6a:1a:03:c7:65:b7:f9:74:95: 1c:08:e3:bc:70:7f:3f:01:58:2a:7a:c4:87:ca:f1:10:79:e7: 59:77:38:fa:8b:a3:42:8a:70:4d:c5:27:b1:f6:ab:6d:4c:28: aa:9b:bc:a2:73:91:9c:8a:11:e6:c5:e5:ff:2f:8d:9a:2c:90: cc:b6:ca:0d:c7:7a:29:40:33:d2:33:c8:f6:95:9c:6d:06:8a: b4:93:5b:e5:56:a1:cb:c4:d3:be:43:e6:b2:2b:8f:75:30:06: fb:97:32:f6:53:90:a8:cc:5a:93:41:8b:62:e4:f7:59:fa:a0: 92:e5:49:52:e2:54:85:14:b6:34:2c:45:9a:ff:1a:e5:23:dc: 99:8b:46:49:3e:b6:44:db:b4:63:05:b8:b8:83:2e:c0:5d:4e: 91:cf:e2:96:82:a9:67:be:5f:ef:23:65:90:f1:2a:15:76:31: c3:df:26:ee:0e:7b:53:ee:86:5d:59:13:c9:ca:bc:8e:0f:d4: e6:a7:18:bd:7d:fd:95:32:8d:1e:68:9c:8d:1b:b0:af:17:a2: 20:38:4f:0f:76:65:a2:fb:5e:7c:5f:69:65:5f:f5:31:06:65: 31:7a:be:1e:23:03:eb:70:3a:4d:41:92:5d:ac:69:bb:fe:73: cb:50:25:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5D0BzEQjOW6G5Eqb8dzK1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0NzQyMTBjMjg0MTNlMjYyODQ4MjJhYmU4M2FkNmQ3YzBm NzY0ZmEwHhcNMjUxMjIwMDAwMDU5WhcNMjUxMjIxMDAwMDU5WjAzMTEwLwYDVQQD EyhlMjc5NTVhNWQ1YTAzMzVlZmM0YmJiYjEwMjA1YjkwNjQyOTc4OTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2Z1MYXvZ/sRYlgjRG8KWYWMi5oR dJ+uT+PKjOg+nJuWSU2BoaM8LOsDy+umegUlbsZqddTBLwcjg2zbk2HfiBnbmQzn IZcm3gWHaGPFCLBQ9yyHUnbKzL8RsnpMtcmm2vXnibltXdqwmXAeqL6onrOm8WMd cIkqu5/nvbBOFMQ2GrCgMvhtP1HgYnxT8mYO5AycrtCVaC4qm9nFFNG08n/ixy+0 iuAgbSRnBkdxYueq6DvSBEpggfM72tcfeyzElN+BsasGHt2whDmkbTkwYiq6JuhD 6PPdP+xxUFbWFLtY8yro0jZ672qki14/ss7p1AXs03RUuSGvnMqrNUQtRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOJ5VaXVoDNe/Eu7sQIFuQZCl4mCMB8GA1UdIwQY MBaAFDR0IQwoQT4mKEgiq+g61tfA92T6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkhRaERDaEJQaVlvU0NLcjZEclcxOEQzWlBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8zZTk5MTYtNGY4YS00YjA4LTg5Yzkt YjBjNzRiNzZlMTgyLzEvTkhRaERDaEJQaVlvU0NLcjZEclcxOEQzWlBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My8zZTk5MTYtNGY4YS00YjA4LTg5YzktYjBjNzRiNzZlMTgy LzEvTkhRaERDaEJQaVlvU0NLcjZEclcxOEQzWlBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAys2TOMe1 ZWLOahoDx2W3+XSVHAjjvHB/PwFYKnrEh8rxEHnnWXc4+oujQopwTcUnsfarbUwo qpu8onORnIoR5sXl/y+NmiyQzLbKDcd6KUAz0jPI9pWcbQaKtJNb5Vahy8TTvkPm siuPdTAG+5cy9lOQqMxak0GLYuT3WfqgkuVJUuJUhRS2NCxFmv8a5SPcmYtGST62 RNu0YwW4uIMuwF1Okc/iloKpZ75f7yNlkPEqFXYxw98m7g57U+6GXVkTycq8jg/U 5qcYvX39lTKNHmicjRuwrxeiIDhPD3ZlovtefF9pZV/1MQZlMXq+HiMD63A6TUGS Xaxpu/5zy1Al6Q== -----END CERTIFICATE-----Generated at Sat Dec 20 06:33:48 2025 by rpki-client