This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.mft File: nHPZRT--37gMRUO7Up_DMMH4wc4.mft (raw, json) Hash identifier: 38GI8K7HDReT9DEH6rdynMp37u1b9v+NOtr/rwym3qM= Subject key identifier: D7:74:C4:94:B8:44:CC:F6:95:07:0B:E2:5B:D8:98:DD:FF:D2:C7:6F Authority key identifier: 9C:73:D9:45:3F:BE:DF:B8:0C:45:43:BB:52:9F:C3:30:C1:F8:C1:CE Certificate issuer: /CN=9c73d9453fbedfb80c4543bb529fc330c1f8c1ce Certificate serial: 019B3CEC1F4C956D3D8766CBA66802869C83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nHPZRT--37gMRUO7Up_DMMH4wc4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.mft Manifest number: 0D40 Signing time: Sat 20 Dec 2025 18:01:05 +0000 Manifest this update: Sat 20 Dec 2025 18:01:05 +0000 Manifest next update: Sun 21 Dec 2025 18:01:05 +0000 Files and hashes: 1: AMTfdcOhvN2UxA7mt3gv3KECuGg.roa (hash: k51GSY+oL6d3vSnVOqR7gGcER+6PBSvBsmHDXYmEq2c=) 2: IZ4_8o0uG1RVAax56_hcAW3WTtc.roa (hash: BLF9NvSAp12xGKGCWF6fmakXoIQEimqM8wkdCYNJdbY=) 3: U3sT87GYwy9D9SgOPVW_RiOktmI.roa (hash: 1ZFvEfBkgKcB/Gz4D0UF4KApAihzQ1ZYW/CMo5SgnsM=) 4: ieAfCh_vwbBTbF3DGBJXQYMx9Pw.roa (hash: N095uXaZbk2Jvru/0oYsrQzeZ/eKCMXo6ETE3DefpcQ=) 5: j4cd6L8tYRDjLejdv94aClKAGXU.roa (hash: WlNinENED4PfFKrXHfbYinzDLlIPfYjUPCjvbvhk+i8=) 6: nHPZRT--37gMRUO7Up_DMMH4wc4.crl (hash: lnve7LSAci8yNdDKBpWIKwflstHCCVy5I/2L4+aKqyg=) 7: xe-87aH9X1grSznD-2-c4OZyYHo.roa (hash: S80ekAfHbqsZOpsBTbZwj0DAL1iEaOufRZ1+nQUXDqE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.mft rsync://rpki.ripe.net/repository/DEFAULT/nHPZRT--37gMRUO7Up_DMMH4wc4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:1f:4c:95:6d:3d:87:66:cb:a6:68:02:86:9c:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c73d9453fbedfb80c4543bb529fc330c1f8c1ce Validity Not Before: Dec 20 18:01:05 2025 GMT Not After : Dec 21 18:01:05 2025 GMT Subject: CN=d774c494b844ccf695070be25bd898ddffd2c76f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:42:4c:62:9b:d0:45:04:c4:10:84:c5:75:3e: 29:24:eb:e7:24:c4:fb:31:63:f9:57:a1:2f:69:33: c3:d6:b2:19:40:ad:90:28:19:5b:78:a3:70:6b:d9: 0c:ed:64:ea:04:55:0b:ba:d4:5b:25:17:4e:41:78: d4:25:70:60:c7:5f:bc:f6:2d:d2:f2:66:4b:74:55: 71:07:79:80:35:91:6d:3e:8b:ee:82:2d:5a:e0:bd: 50:7b:bb:7f:89:9e:8e:ae:3e:a8:25:14:ec:f5:77: 41:40:1b:43:af:d8:4b:fc:e5:39:1d:f6:73:d1:4d: 77:1f:11:75:c6:26:0f:8b:3b:52:4b:6d:f1:a2:c7: 45:82:67:57:d0:3f:54:82:a4:b5:1d:67:7b:0d:10: 9e:f6:ed:c0:e9:31:84:d1:51:6e:a8:c2:15:34:1e: f7:34:d4:91:2e:92:5d:17:ad:09:de:94:5c:9a:c1: 6b:bb:0a:29:23:a3:fc:2e:c1:b4:43:3a:cb:13:c3: f4:b3:1e:a8:96:9a:fb:14:ef:a0:98:90:69:b7:78: 5b:cb:62:4f:01:33:a3:7d:e8:93:9c:77:36:86:1c: 9f:9f:d4:d8:77:a7:ed:4c:98:58:57:21:b4:f0:8d: 28:31:be:f0:3a:02:97:ec:5d:b4:b7:1a:16:e7:9a: af:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:74:C4:94:B8:44:CC:F6:95:07:0B:E2:5B:D8:98:DD:FF:D2:C7:6F X509v3 Authority Key Identifier: keyid:9C:73:D9:45:3F:BE:DF:B8:0C:45:43:BB:52:9F:C3:30:C1:F8:C1:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nHPZRT--37gMRUO7Up_DMMH4wc4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:c8:7f:c0:ca:4c:d8:b6:3d:c9:1d:e2:f0:66:55:21:88:ab: 7e:d9:51:e2:ba:8f:e3:ee:0b:7f:6f:31:71:38:3b:10:1e:bc: 66:ea:6d:13:18:e9:22:0f:ed:56:96:c0:1f:2e:e9:8a:62:2a: 1e:2a:87:2c:ca:4c:d7:fc:3c:97:ee:99:63:ce:7d:eb:a7:4c: 1d:fd:25:18:d6:8d:67:a2:f4:90:fd:3f:25:46:5f:a5:89:4e: 08:2e:9e:e0:7f:00:83:7b:07:83:d4:8a:32:72:12:8d:4e:58: 8d:de:f5:19:5c:69:70:de:3e:e7:dc:20:95:6d:5d:98:79:fa: 3a:b2:6f:34:55:f2:81:a6:6a:1b:4c:0d:2e:1e:a9:89:ef:bd: 07:0f:f7:9c:34:01:11:a2:02:ae:7a:ab:19:ea:26:79:e7:07: 2d:ba:72:1f:d0:52:59:f3:a2:e7:b5:4e:69:2f:68:c0:21:c5: 4d:2c:9e:ed:4a:95:22:96:e9:75:4d:a7:cb:aa:d3:56:4d:a3: a3:76:c8:69:30:76:cd:27:75:8e:7c:50:6c:96:c0:b4:0d:17: 0e:ea:eb:7b:05:41:9c:70:49:7e:5c:b1:f8:52:cb:ee:83:69: 05:f2:26:b0:df:f4:e8:9c:ce:c2:79:6e:08:eb:8c:be:fb:e5: 28:c5:ab:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87B9MlW09h2bLpmgChpyDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljNzNkOTQ1M2ZiZWRmYjgwYzQ1NDNiYjUyOWZjMzMwYzFm OGMxY2UwHhcNMjUxMjIwMTgwMTA1WhcNMjUxMjIxMTgwMTA1WjAzMTEwLwYDVQQD EyhkNzc0YzQ5NGI4NDRjY2Y2OTUwNzBiZTI1YmQ4OThkZGZmZDJjNzZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUJMYpvQRQTEEITFdT4pJOvnJMT7 MWP5V6EvaTPD1rIZQK2QKBlbeKNwa9kM7WTqBFULutRbJRdOQXjUJXBgx1+89i3S 8mZLdFVxB3mANZFtPovugi1a4L1Qe7t/iZ6Orj6oJRTs9XdBQBtDr9hL/OU5HfZz 0U13HxF1xiYPiztSS23xosdFgmdX0D9UgqS1HWd7DRCe9u3A6TGE0VFuqMIVNB73 NNSRLpJdF60J3pRcmsFruwopI6P8LsG0QzrLE8P0sx6olpr7FO+gmJBpt3hby2JP ATOjfeiTnHc2hhyfn9TYd6ftTJhYVyG08I0oMb7wOgKX7F20txoW55qvpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNd0xJS4RMz2lQcL4lvYmN3/0sdvMB8GA1UdIwQY MBaAFJxz2UU/vt+4DEVDu1KfwzDB+MHOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkhQWlJULS0zN2dNUlVPN1VwX0RNTUg0d2M0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9iMzUzNzktMjEyMi00MTkxLTg4MjEt YzQ3ZTE4ZGYwMzcxLzEvbkhQWlJULS0zN2dNUlVPN1VwX0RNTUg0d2M0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC9iMzUzNzktMjEyMi00MTkxLTg4MjEtYzQ3ZTE4ZGYwMzcx LzEvbkhQWlJULS0zN2dNUlVPN1VwX0RNTUg0d2M0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi8h/wMpM 2LY9yR3i8GZVIYirftlR4rqP4+4Lf28xcTg7EB68ZuptExjpIg/tVpbAHy7pimIq HiqHLMpM1/w8l+6ZY85966dMHf0lGNaNZ6L0kP0/JUZfpYlOCC6e4H8Ag3sHg9SK MnISjU5Yjd71GVxpcN4+59wglW1dmHn6OrJvNFXygaZqG0wNLh6pie+9Bw/3nDQB EaICrnqrGeomeecHLbpyH9BSWfOi57VOaS9owCHFTSye7UqVIpbpdU2ny6rTVk2j o3bIaTB2zSd1jnxQbJbAtA0XDurrewVBnHBJflyx+FLL7oNpBfImsN/06JzOwnlu COuMvvvlKMWrPw== -----END CERTIFICATE-----Generated at Sat Dec 20 22:02:45 2025 by rpki-client