This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.mft File: nHPZRT--37gMRUO7Up_DMMH4wc4.mft (raw, json) Hash identifier: IU3TXI+igUBaZFQrBs7Jl4Z/ARkAv0hEXIrdMbeErCg= Subject key identifier: E3:68:4D:31:CF:33:FF:8A:88:06:18:8B:E5:B2:DB:0E:69:CA:73:7B Authority key identifier: 9C:73:D9:45:3F:BE:DF:B8:0C:45:43:BB:52:9F:C3:30:C1:F8:C1:CE Certificate issuer: /CN=9c73d9453fbedfb80c4543bb529fc330c1f8c1ce Certificate serial: 019B390F5967570F25B53F3EC622AE2AB066 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nHPZRT--37gMRUO7Up_DMMH4wc4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.mft Manifest number: 0D3E Signing time: Sat 20 Dec 2025 00:01:05 +0000 Manifest this update: Sat 20 Dec 2025 00:01:05 +0000 Manifest next update: Sun 21 Dec 2025 00:01:05 +0000 Files and hashes: 1: AMTfdcOhvN2UxA7mt3gv3KECuGg.roa (hash: k51GSY+oL6d3vSnVOqR7gGcER+6PBSvBsmHDXYmEq2c=) 2: IZ4_8o0uG1RVAax56_hcAW3WTtc.roa (hash: BLF9NvSAp12xGKGCWF6fmakXoIQEimqM8wkdCYNJdbY=) 3: U3sT87GYwy9D9SgOPVW_RiOktmI.roa (hash: 1ZFvEfBkgKcB/Gz4D0UF4KApAihzQ1ZYW/CMo5SgnsM=) 4: ieAfCh_vwbBTbF3DGBJXQYMx9Pw.roa (hash: N095uXaZbk2Jvru/0oYsrQzeZ/eKCMXo6ETE3DefpcQ=) 5: j4cd6L8tYRDjLejdv94aClKAGXU.roa (hash: WlNinENED4PfFKrXHfbYinzDLlIPfYjUPCjvbvhk+i8=) 6: nHPZRT--37gMRUO7Up_DMMH4wc4.crl (hash: qciyFDvh+Xu0CK4cCGKiogLzMXLCOneiY4j1iDAqHnc=) 7: xe-87aH9X1grSznD-2-c4OZyYHo.roa (hash: S80ekAfHbqsZOpsBTbZwj0DAL1iEaOufRZ1+nQUXDqE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.mft rsync://rpki.ripe.net/repository/DEFAULT/nHPZRT--37gMRUO7Up_DMMH4wc4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 00:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:0f:59:67:57:0f:25:b5:3f:3e:c6:22:ae:2a:b0:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c73d9453fbedfb80c4543bb529fc330c1f8c1ce Validity Not Before: Dec 20 00:01:05 2025 GMT Not After : Dec 21 00:01:05 2025 GMT Subject: CN=e3684d31cf33ff8a8806188be5b2db0e69ca737b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:56:56:94:29:1c:12:98:c7:bf:b0:66:fe:2d: 72:9c:21:7b:f3:39:ae:cb:18:37:d1:b7:01:43:95: b5:55:79:40:e5:7f:13:a7:82:a4:1f:50:a9:a1:fa: 14:2e:3a:85:bb:81:b0:d1:dc:79:03:a7:34:bb:32: f1:ee:ce:79:26:ec:45:f4:30:80:a8:52:1c:8c:b9: a6:a4:85:16:fd:1a:40:4c:4d:5f:3d:61:72:ca:20: e3:ae:33:63:1c:3e:8c:60:e2:b2:53:a7:aa:3d:e6: 22:f8:a3:f1:e2:83:81:f9:77:16:ee:6e:a3:00:dd: 1b:5d:e0:50:b6:d1:11:14:04:6e:b9:4f:35:f8:06: 11:6a:62:66:a2:d5:6c:21:51:65:37:4f:52:05:8d: 29:39:98:81:78:22:b5:82:e3:fe:14:05:e5:e9:d1: a3:a4:12:17:38:b2:b1:69:09:83:5e:d5:dc:9f:9c: 1c:c0:f8:a8:a0:99:51:21:6a:39:d0:ec:53:8a:5a: 8a:13:f2:37:cd:6f:74:d0:26:d6:45:f4:b2:df:08: 06:75:c9:54:9e:68:5c:02:18:f4:33:55:ae:77:43: a9:37:ad:9a:47:5e:5a:c7:8c:41:92:b2:97:05:ce: a9:f1:41:55:e7:a9:84:27:a7:fe:bb:1c:30:94:34: f7:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:68:4D:31:CF:33:FF:8A:88:06:18:8B:E5:B2:DB:0E:69:CA:73:7B X509v3 Authority Key Identifier: keyid:9C:73:D9:45:3F:BE:DF:B8:0C:45:43:BB:52:9F:C3:30:C1:F8:C1:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nHPZRT--37gMRUO7Up_DMMH4wc4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:01:0b:2c:2a:fb:49:56:c9:35:43:e8:05:ab:4e:33:b7:19: 38:96:28:52:d1:6c:6d:d4:18:73:ca:0a:53:2c:0a:2e:43:f2: 33:9c:0b:b0:42:1d:db:48:d0:fa:e7:16:e0:65:25:a6:00:a1: 0a:f6:2d:f6:fe:b3:e2:5b:06:ce:65:90:5d:17:10:cc:05:72: 6a:b3:18:70:83:b2:ce:fd:4a:81:7d:b6:c9:a3:34:e1:90:0e: 51:c5:93:f3:d6:ad:a7:85:63:a5:21:44:88:59:95:9b:07:58: 0c:8b:bb:60:aa:c5:e9:13:5a:ae:71:73:cc:62:bd:82:50:8e: a3:31:99:50:4e:5c:ba:0f:a8:78:95:fa:70:40:4d:86:31:1b: d6:b9:d4:3c:7c:9d:ba:62:b1:64:2c:9f:fd:21:79:16:93:52: 9b:ce:bb:b1:dd:d3:ee:a3:90:0a:0d:e8:8a:43:24:f9:2d:eb: 11:04:90:83:77:83:9c:43:7e:77:2f:6b:54:0a:6b:50:55:98: 78:e8:5d:f7:95:69:80:36:e5:1f:5b:9f:a3:cf:9b:16:29:45: 46:7d:e6:bf:74:a6:99:59:3d:68:76:bb:f2:ed:45:b4:3d:34: 30:0e:9e:65:be:2f:7c:cb:39:48:a6:39:b7:b6:84:d7:8e:ee: b2:30:4c:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5D1lnVw8ltT8+xiKuKrBmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljNzNkOTQ1M2ZiZWRmYjgwYzQ1NDNiYjUyOWZjMzMwYzFm OGMxY2UwHhcNMjUxMjIwMDAwMTA1WhcNMjUxMjIxMDAwMTA1WjAzMTEwLwYDVQQD EyhlMzY4NGQzMWNmMzNmZjhhODgwNjE4OGJlNWIyZGIwZTY5Y2E3MzdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVZWlCkcEpjHv7Bm/i1ynCF78zmu yxg30bcBQ5W1VXlA5X8Tp4KkH1CpofoULjqFu4Gw0dx5A6c0uzLx7s55JuxF9DCA qFIcjLmmpIUW/RpATE1fPWFyyiDjrjNjHD6MYOKyU6eqPeYi+KPx4oOB+XcW7m6j AN0bXeBQttERFARuuU81+AYRamJmotVsIVFlN09SBY0pOZiBeCK1guP+FAXl6dGj pBIXOLKxaQmDXtXcn5wcwPiooJlRIWo50OxTilqKE/I3zW900CbWRfSy3wgGdclU nmhcAhj0M1Wud0OpN62aR15ax4xBkrKXBc6p8UFV56mEJ6f+uxwwlDT3ewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFONoTTHPM/+KiAYYi+Wy2w5pynN7MB8GA1UdIwQY MBaAFJxz2UU/vt+4DEVDu1KfwzDB+MHOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkhQWlJULS0zN2dNUlVPN1VwX0RNTUg0d2M0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9iMzUzNzktMjEyMi00MTkxLTg4MjEt YzQ3ZTE4ZGYwMzcxLzEvbkhQWlJULS0zN2dNUlVPN1VwX0RNTUg0d2M0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC9iMzUzNzktMjEyMi00MTkxLTg4MjEtYzQ3ZTE4ZGYwMzcx LzEvbkhQWlJULS0zN2dNUlVPN1VwX0RNTUg0d2M0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlAELLCr7 SVbJNUPoBatOM7cZOJYoUtFsbdQYc8oKUywKLkPyM5wLsEId20jQ+ucW4GUlpgCh CvYt9v6z4lsGzmWQXRcQzAVyarMYcIOyzv1KgX22yaM04ZAOUcWT89atp4VjpSFE iFmVmwdYDIu7YKrF6RNarnFzzGK9glCOozGZUE5cug+oeJX6cEBNhjEb1rnUPHyd umKxZCyf/SF5FpNSm867sd3T7qOQCg3oikMk+S3rEQSQg3eDnEN+dy9rVAprUFWY eOhd95VpgDblH1ufo8+bFilFRn3mv3SmmVk9aHa78u1FtD00MA6eZb4vfMs5SKY5 t7aE147usjBMvQ== -----END CERTIFICATE-----Generated at Sat Dec 20 05:43:55 2025 by rpki-client