This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft File: NHQhDChBPiYoSCKr6DrW18D3ZPo.mft (raw, json) Hash identifier: qh9ljBzSuX8PA4lYER0Xqr/yZX5ntnbn4qn2d1z6E2o= Subject key identifier: 99:ED:3F:2F:B1:82:23:34:9A:31:36:F3:87:49:87:76:DA:22:7E:D8 Authority key identifier: 34:74:21:0C:28:41:3E:26:28:48:22:AB:E8:3A:D6:D7:C0:F7:64:FA Certificate issuer: /CN=3474210c28413e26284822abe83ad6d7c0f764fa Certificate serial: 019B40C91B858760DD514E34DE4A47AB6BBF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft Manifest number: 1792 Signing time: Sun 21 Dec 2025 12:01:20 +0000 Manifest this update: Sun 21 Dec 2025 12:01:20 +0000 Manifest next update: Mon 22 Dec 2025 12:01:20 +0000 Files and hashes: 1: 1bcuYr7QKJ5bW0bfcIYHS53yG6g.roa (hash: qd4P1coRqTY7B32E2jEnjJekCI9CLXdo/5/4fRHSsDk=) 2: 2yd3628VmNb462n9Ht_mrHJwpz4.roa (hash: jjvaAqc3q0c+UVUm7qyigUPHQ2zsUspQsTjOZ4ZjQ5E=) 3: 77kR0uenLneOf0_otMBTrdwkJ5I.roa (hash: kFgic4lpP8Yb+Wik/VcFSyZzSPM0vnTo7v0lGbnx3eU=) 4: An_xJWf4RJw4Ylw59J21Md85Jws.roa (hash: gk/epjcVW86jJdWfxESndHuaQolg8wlmkWBhHhLsN3Y=) 5: MMs4HnHsbdNr8Ew965SH5DIpvi4.roa (hash: Ku/6dybZerpifq4qXee8mDRjz4eG7rI5ajzOtuGjP0c=) 6: NHQhDChBPiYoSCKr6DrW18D3ZPo.crl (hash: 2B7RnEzOasGSQ0xtOaVrPtAoHFuQ0xvYCypbWwJ7C7M=) 7: byk_uVbEcBcJ5E54PZILxzilXqs.roa (hash: JCkW4yYVwvgxvyj62HKMLWieGutHlsi8Ja6vFazZOyk=) 8: s_AA60Ddfygbd8EKAGEg6mSlXwc.roa (hash: ENuKCW/gynViV0FOCDZJgVAAEXvbRuvjapJ167NV/i4=) 9: zbORAgVCBGdwMFpkpNpVU4F-JYE.roa (hash: bnmHuORo7L7E/r6zgTIFCwfAOxo5IKx9z46OH+yKYpI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.crl rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 12:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:c9:1b:85:87:60:dd:51:4e:34:de:4a:47:ab:6b:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3474210c28413e26284822abe83ad6d7c0f764fa Validity Not Before: Dec 21 12:01:20 2025 GMT Not After : Dec 22 12:01:20 2025 GMT Subject: CN=99ed3f2fb18223349a3136f387498776da227ed8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:99:dc:41:4c:7b:df:e6:79:14:36:97:16:96: 86:8d:7f:62:5c:08:c5:9c:3f:03:2f:70:12:e4:d6: ec:a3:30:72:dd:21:d1:a5:29:79:1f:be:98:2e:af: 37:9c:89:c3:14:88:a8:0d:a4:33:3c:c3:b3:14:cf: 1d:a1:40:e8:04:6e:0c:18:d3:0b:84:39:bb:c3:2e: 50:45:5e:e9:9f:fb:b7:f1:71:a8:98:9d:8e:7d:37: da:70:08:78:0c:13:d1:f7:b6:17:47:83:09:03:6e: 45:9d:d3:76:48:bb:03:a9:06:f6:53:e9:a7:35:b1: 01:6d:7f:7d:7a:40:2f:ca:96:a2:7e:8f:46:2f:6a: 3e:56:f5:72:09:7c:d1:57:07:d9:7d:d0:2f:63:55: ff:b8:0c:49:f9:85:ed:66:0f:9c:9a:07:da:15:c6: 7d:40:7c:79:89:1d:b1:8b:d8:81:c8:e5:7a:4f:a5: 98:9c:fa:b9:84:48:9b:0e:f9:17:f0:9d:4e:4d:9f: 7f:a6:e1:9e:4a:1a:49:e2:13:f7:5e:ca:77:75:81: bb:fe:a0:41:36:af:0c:40:37:d7:fa:7a:e6:3c:68: ec:5e:7d:78:00:a7:c3:cf:15:93:84:a1:0c:6e:71: 79:1b:c6:28:e9:78:13:a1:26:ee:4d:1b:9c:90:92: c9:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:ED:3F:2F:B1:82:23:34:9A:31:36:F3:87:49:87:76:DA:22:7E:D8 X509v3 Authority Key Identifier: keyid:34:74:21:0C:28:41:3E:26:28:48:22:AB:E8:3A:D6:D7:C0:F7:64:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:c6:b3:6e:6a:f1:19:1c:a3:3d:70:bb:b5:d6:ac:8c:fa:9f: 33:5b:45:e9:67:7e:5e:2c:bd:9d:0b:8c:8e:32:cb:dd:7c:1b: 93:26:02:b8:f2:36:5a:48:84:5f:dc:67:13:bd:5a:7b:cd:28: 91:af:c9:e0:af:d2:cd:f5:a4:27:d6:97:30:ae:bc:6b:ed:d4: 44:80:9c:e1:28:1f:35:1f:01:e0:fb:e5:9a:9f:32:f2:dd:f2: 12:d3:3b:59:cc:f0:ef:10:2f:62:fe:2d:9e:63:1b:a5:29:fd: 17:28:cf:46:9e:4f:3a:98:04:5c:f0:ea:06:61:c4:4d:ab:53: 55:42:6c:45:e8:83:6e:d1:d6:a2:62:fe:22:24:ee:a8:67:df: 81:70:1b:57:c2:ae:e8:c1:4f:68:47:40:17:82:05:c2:03:96: df:c4:15:e4:ce:ff:a7:56:54:6e:e2:7f:07:0c:cb:80:a4:ad: 05:87:42:60:22:e6:fc:91:65:fc:a9:7c:73:0d:77:ac:b6:03: ca:a7:2b:24:8b:bb:48:66:f9:c4:a1:77:37:ef:4b:1a:80:bc: d9:ee:33:6d:42:ca:40:5a:b1:eb:1b:ec:76:3a:4c:48:96:c3: de:1e:4a:43:8d:e1:84:56:bf:fa:90:4f:4f:20:a5:16:ce:44: 1e:29:15:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAyRuFh2DdUU403kpHq2u/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0NzQyMTBjMjg0MTNlMjYyODQ4MjJhYmU4M2FkNmQ3YzBm NzY0ZmEwHhcNMjUxMjIxMTIwMTIwWhcNMjUxMjIyMTIwMTIwWjAzMTEwLwYDVQQD Eyg5OWVkM2YyZmIxODIyMzM0OWEzMTM2ZjM4NzQ5ODc3NmRhMjI3ZWQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZncQUx73+Z5FDaXFpaGjX9iXAjF nD8DL3AS5NbsozBy3SHRpSl5H76YLq83nInDFIioDaQzPMOzFM8doUDoBG4MGNML hDm7wy5QRV7pn/u38XGomJ2OfTfacAh4DBPR97YXR4MJA25FndN2SLsDqQb2U+mn NbEBbX99ekAvypaifo9GL2o+VvVyCXzRVwfZfdAvY1X/uAxJ+YXtZg+cmgfaFcZ9 QHx5iR2xi9iByOV6T6WYnPq5hEibDvkX8J1OTZ9/puGeShpJ4hP3Xsp3dYG7/qBB Nq8MQDfX+nrmPGjsXn14AKfDzxWThKEMbnF5G8Yo6XgToSbuTRuckJLJBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJntPy+xgiM0mjE284dJh3baIn7YMB8GA1UdIwQY MBaAFDR0IQwoQT4mKEgiq+g61tfA92T6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkhRaERDaEJQaVlvU0NLcjZEclcxOEQzWlBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8zZTk5MTYtNGY4YS00YjA4LTg5Yzkt YjBjNzRiNzZlMTgyLzEvTkhRaERDaEJQaVlvU0NLcjZEclcxOEQzWlBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My8zZTk5MTYtNGY4YS00YjA4LTg5YzktYjBjNzRiNzZlMTgy LzEvTkhRaERDaEJQaVlvU0NLcjZEclcxOEQzWlBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlMazbmrx GRyjPXC7tdasjPqfM1tF6Wd+Xiy9nQuMjjLL3XwbkyYCuPI2WkiEX9xnE71ae80o ka/J4K/SzfWkJ9aXMK68a+3URICc4SgfNR8B4Pvlmp8y8t3yEtM7Wczw7xAvYv4t nmMbpSn9FyjPRp5POpgEXPDqBmHETatTVUJsReiDbtHWomL+IiTuqGffgXAbV8Ku 6MFPaEdAF4IFwgOW38QV5M7/p1ZUbuJ/BwzLgKStBYdCYCLm/JFl/Kl8cw13rLYD yqcrJIu7SGb5xKF3N+9LGoC82e4zbULKQFqx6xvsdjpMSJbD3h5KQ43hhFa/+pBP TyClFs5EHikVJQ== -----END CERTIFICATE-----Generated at Sun Dec 21 22:27:36 2025 by rpki-client