This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.mft File: nHjvvmeG-eICxCeI4bv3F4HKjEc.mft (raw, json) Hash identifier: oR69MYhW2mq+h4BlDi15Vlpecfz94M0PXUTuZHvLZRw= Subject key identifier: 7A:53:17:81:24:82:A6:34:62:D1:33:1F:53:14:2E:79:7A:F5:66:2D Authority key identifier: 9C:78:EF:BE:67:86:F9:E2:02:C4:27:88:E1:BB:F7:17:81:CA:8C:47 Certificate issuer: /CN=9c78efbe6786f9e202c42788e1bbf71781ca8c47 Certificate serial: 019B3343ADC89ACBC3C01F90CC7BBB544340 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nHjvvmeG-eICxCeI4bv3F4HKjEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.mft Manifest number: 1784 Signing time: Thu 18 Dec 2025 21:00:31 +0000 Manifest this update: Thu 18 Dec 2025 21:00:31 +0000 Manifest next update: Fri 19 Dec 2025 21:00:31 +0000 Files and hashes: 1: BhSQf1yX1uLwgzRbSbyaxC2Eyyk.roa (hash: QYypOcFPdcc9ArENcLdBU9X1TsVQ+7g/yqAYCtsdaqk=) 2: nHjvvmeG-eICxCeI4bv3F4HKjEc.crl (hash: 7waBqQZXvWG92OHJqeZHxzn+x2LBY35aFwq3T4QcKvY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.mft rsync://rpki.ripe.net/repository/DEFAULT/nHjvvmeG-eICxCeI4bv3F4HKjEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:43:ad:c8:9a:cb:c3:c0:1f:90:cc:7b:bb:54:43:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c78efbe6786f9e202c42788e1bbf71781ca8c47 Validity Not Before: Dec 18 21:00:31 2025 GMT Not After : Dec 19 21:00:31 2025 GMT Subject: CN=7a5317812482a63462d1331f53142e797af5662d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5c:74:96:dc:93:df:3a:b5:cb:62:a5:39:b0: 82:e1:a5:cb:ed:0f:9b:0a:60:65:6c:72:f9:03:d0: c1:4c:6a:11:2f:1c:0b:00:f3:ac:99:76:81:67:53: 5c:c0:81:2d:a9:99:7a:17:c8:c5:25:47:28:20:93: 70:69:9e:ae:13:74:b1:aa:9a:af:42:fb:ce:95:6b: eb:ba:77:e6:81:3d:cb:ee:e6:a9:24:7b:66:98:27: 09:43:00:82:97:4b:29:10:e5:c3:c6:51:d6:a9:ab: d4:1c:4a:5c:23:63:db:24:c7:f4:60:1f:c1:f3:46: dd:6c:4c:c7:13:4a:a8:19:2b:fc:c8:76:10:13:7f: 8a:e9:61:5f:f0:47:7a:11:1a:93:81:88:c5:fa:da: 16:9c:b8:60:29:47:39:6d:a4:47:f6:e4:8d:32:a9: 7f:c9:c5:a0:a7:4f:5f:ed:7e:b0:e4:e9:ac:80:79: 55:d3:ec:fc:6b:43:af:87:0c:0f:89:e6:e1:8c:85: 3b:30:5c:e2:c1:17:f4:07:22:2c:93:09:d7:49:04: dd:c2:91:0b:7c:e9:dc:49:13:09:6b:3d:8a:f5:02: 45:9d:40:df:da:c9:42:42:c4:aa:73:5a:d7:36:5c: c7:ef:dd:71:66:8c:42:ae:3a:30:cd:eb:19:ce:1a: 7f:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:53:17:81:24:82:A6:34:62:D1:33:1F:53:14:2E:79:7A:F5:66:2D X509v3 Authority Key Identifier: keyid:9C:78:EF:BE:67:86:F9:E2:02:C4:27:88:E1:BB:F7:17:81:CA:8C:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nHjvvmeG-eICxCeI4bv3F4HKjEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:7a:e5:f1:90:53:6a:5c:84:5e:77:da:2a:98:eb:01:01:0d: 35:01:74:11:0b:a6:77:ee:be:2f:ec:74:e0:a5:7c:8a:88:eb: 6e:cf:c8:7c:21:7c:f7:d5:d6:0e:a4:21:0f:cd:ab:7c:ca:30: 2f:83:cf:92:9e:1f:7a:87:ae:19:1e:00:4f:cf:d1:80:33:b6: 38:f4:85:21:d4:2a:04:24:5f:8c:8d:32:46:e3:a5:2a:2f:e4: a7:4c:90:d5:58:62:1b:3e:60:42:d3:70:37:b8:0c:ac:f2:52: d1:b3:5f:b7:be:ce:ed:89:48:e8:7a:2d:97:41:91:45:65:62: 4c:ee:5c:07:82:87:8a:3e:2d:ca:d9:32:fc:10:f3:c0:0b:79: ee:72:80:ef:13:e8:b7:4c:39:ec:d2:d9:d0:ab:8c:80:c4:49: 7c:5f:73:75:79:75:36:b5:2b:6e:f5:1a:a0:fc:eb:fb:8a:d3: 54:4a:d6:c9:8e:8e:9e:fe:1c:dc:9f:d5:97:30:de:7d:0e:f1: 92:8c:e3:e0:c6:d0:69:49:2f:b5:12:ea:d3:36:2d:fc:de:1a: a2:08:8b:8e:2b:64:b4:fa:e1:7b:e6:62:2a:a0:b8:80:6b:88: 6f:fe:39:5f:9b:d8:59:6d:a5:a0:29:7e:99:3d:b5:c0:1f:2d: e8:c0:99:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszQ63ImsvDwB+QzHu7VENAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljNzhlZmJlNjc4NmY5ZTIwMmM0Mjc4OGUxYmJmNzE3ODFj YThjNDcwHhcNMjUxMjE4MjEwMDMxWhcNMjUxMjE5MjEwMDMxWjAzMTEwLwYDVQQD Eyg3YTUzMTc4MTI0ODJhNjM0NjJkMTMzMWY1MzE0MmU3OTdhZjU2NjJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlx0ltyT3zq1y2KlObCC4aXL7Q+b CmBlbHL5A9DBTGoRLxwLAPOsmXaBZ1NcwIEtqZl6F8jFJUcoIJNwaZ6uE3Sxqpqv QvvOlWvrunfmgT3L7uapJHtmmCcJQwCCl0spEOXDxlHWqavUHEpcI2PbJMf0YB/B 80bdbEzHE0qoGSv8yHYQE3+K6WFf8Ed6ERqTgYjF+toWnLhgKUc5baRH9uSNMql/ ycWgp09f7X6w5OmsgHlV0+z8a0OvhwwPiebhjIU7MFziwRf0ByIskwnXSQTdwpEL fOncSRMJaz2K9QJFnUDf2slCQsSqc1rXNlzH791xZoxCrjowzesZzhp/rwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHpTF4EkgqY0YtEzH1MULnl69WYtMB8GA1UdIwQY MBaAFJx4775nhvniAsQniOG79xeByoxHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkhqdnZtZUctZUlDeENlSTRidjNGNEhLakVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC80YzE2NDItODBmMy00NTIzLTk3NGQt NGZjMWNhZDhhYjIyLzEvbkhqdnZtZUctZUlDeENlSTRidjNGNEhLakVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC80YzE2NDItODBmMy00NTIzLTk3NGQtNGZjMWNhZDhhYjIy LzEvbkhqdnZtZUctZUlDeENlSTRidjNGNEhLakVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh3rl8ZBT alyEXnfaKpjrAQENNQF0EQumd+6+L+x04KV8iojrbs/IfCF899XWDqQhD82rfMow L4PPkp4feoeuGR4AT8/RgDO2OPSFIdQqBCRfjI0yRuOlKi/kp0yQ1VhiGz5gQtNw N7gMrPJS0bNft77O7YlI6Hotl0GRRWViTO5cB4KHij4tytky/BDzwAt57nKA7xPo t0w57NLZ0KuMgMRJfF9zdXl1NrUrbvUaoPzr+4rTVErWyY6Onv4c3J/VlzDefQ7x kozj4MbQaUkvtRLq0zYt/N4aogiLjitktPrhe+ZiKqC4gGuIb/45X5vYWW2loCl+ mT21wB8t6MCZig== -----END CERTIFICATE-----Generated at Fri Dec 19 01:24:19 2025 by rpki-client