This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.mft File: NhrfV8jct7_TTprs2D42NC7Do8k.mft (raw, json) Hash identifier: q1s72uyijkBMvZ0QiGBtU29LWvod1k0F7fl74YHuScM= Subject key identifier: A7:2A:5F:73:6D:69:02:4E:26:B0:3B:CC:18:73:F2:2F:68:34:63:2A Authority key identifier: 36:1A:DF:57:C8:DC:B7:BF:D3:4E:9A:EC:D8:3E:36:34:2E:C3:A3:C9 Certificate issuer: /CN=361adf57c8dcb7bfd34e9aecd83e36342ec3a3c9 Certificate serial: 019B3F4849F7B3C3F8A7415C491EE2D958E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhrfV8jct7_TTprs2D42NC7Do8k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.mft Manifest number: 1546 Signing time: Sun 21 Dec 2025 05:01:00 +0000 Manifest this update: Sun 21 Dec 2025 05:01:00 +0000 Manifest next update: Mon 22 Dec 2025 05:01:00 +0000 Files and hashes: 1: 8GuN-54fOOWK-SbVRHbvHD1t258.roa (hash: +JAgmZYVHbTg/tn7L+SSKAVcpZBlqMe4rbmvvs3DmTY=) 2: KFmrVFMv5VvGN18H4jdGIeWGvn8.roa (hash: /z+1/Ei//uOKicmtTi2XHrdGdq2SuXHHljqI7g0rhfE=) 3: NhrfV8jct7_TTprs2D42NC7Do8k.crl (hash: a8Qlb6ObUa6MBF4Mm5W4zyzK5OpyA1XCAlkibKl4+U0=) 4: gaApv-P3VWnlKNagOLOw5elCXUg.roa (hash: uJOMrg9lvM87wMjmTs9ZCZY0pZU1l+jJJKNSBI4+HgI=) 5: mldZ02SgByZkxb9-hN-tKmR0o0s.roa (hash: DrkW1wHvYpTjqDlBZkGq/sAaUPB7borOxMsYKMVFock=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.mft rsync://rpki.ripe.net/repository/DEFAULT/NhrfV8jct7_TTprs2D42NC7Do8k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:49:f7:b3:c3:f8:a7:41:5c:49:1e:e2:d9:58:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=361adf57c8dcb7bfd34e9aecd83e36342ec3a3c9 Validity Not Before: Dec 21 05:01:00 2025 GMT Not After : Dec 22 05:01:00 2025 GMT Subject: CN=a72a5f736d69024e26b03bcc1873f22f6834632a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:70:18:bd:14:03:2f:71:34:fb:a3:0d:5b:62: c6:c1:bf:11:2e:cc:18:b3:c0:47:e3:8a:7b:22:90: 1a:51:06:00:e6:96:af:32:ed:75:e6:17:31:2e:e7: ef:79:2f:ea:99:96:68:df:66:eb:29:f5:1e:fa:2e: 73:d9:33:43:ae:ff:03:30:b0:11:74:82:07:eb:5e: f0:52:72:e5:40:27:24:2f:e8:f2:fc:79:ba:d6:33: d4:df:34:62:30:c9:58:fd:72:38:cc:bd:e4:22:64: d7:7e:2d:c6:96:84:fb:a7:e2:32:d2:0e:1a:0e:c2: a9:fb:50:69:d6:f1:89:66:12:b0:c8:f9:84:35:df: 0a:ca:cc:89:9f:0b:1b:78:b3:f2:e7:e6:a9:cf:e5: cb:a8:76:73:3a:15:61:4c:41:16:18:74:38:80:3b: fc:10:93:62:c5:6e:cf:ba:c9:b4:dc:e7:dd:bf:bc: c1:a7:f4:70:9a:00:0e:c5:d3:4e:47:63:22:1e:3b: fb:e6:1c:90:99:3c:1b:1c:69:7a:98:f2:b5:2b:9b: 52:f6:69:b6:22:97:ce:1c:58:f7:61:72:f5:56:0b: 35:93:1c:c7:c9:60:b6:a6:27:7d:58:05:9f:3e:4e: 2a:86:ad:42:68:c5:8f:2d:ff:0a:68:b3:ce:89:ee: 57:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:2A:5F:73:6D:69:02:4E:26:B0:3B:CC:18:73:F2:2F:68:34:63:2A X509v3 Authority Key Identifier: keyid:36:1A:DF:57:C8:DC:B7:BF:D3:4E:9A:EC:D8:3E:36:34:2E:C3:A3:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhrfV8jct7_TTprs2D42NC7Do8k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:4c:52:6b:ce:d9:f6:95:07:00:62:67:b1:33:48:00:b0:3f: 16:dd:69:cc:19:95:ec:e4:1c:1e:3c:1b:8c:a4:dd:3e:48:68: 58:76:7d:6d:f4:61:5b:27:40:30:88:47:8a:ae:c1:21:96:1e: 5c:ec:fa:3e:9e:03:ba:3f:09:9a:30:51:c1:18:24:99:ee:1a: d9:4d:97:25:3f:a2:7c:10:5d:9a:ea:67:b8:d7:4c:64:ea:33: e7:31:ad:1e:22:ca:64:71:d8:11:f6:51:b0:d7:87:92:46:96: 12:3e:73:51:1f:ff:ef:15:b8:65:3d:1f:5e:ba:43:dc:5a:3b: ab:c0:98:a5:cd:bc:fe:db:56:a2:9d:d6:cc:5c:62:41:10:8c: 64:02:94:b9:d1:11:91:72:89:bc:db:d5:4a:57:24:fa:28:4c: 8d:2f:f6:c1:36:7a:bf:6e:09:11:f8:b8:aa:32:19:62:38:10: 0c:6f:85:c0:6f:f1:e7:1b:46:d7:dd:6a:fa:f1:6d:37:4b:c4: f0:18:f1:c7:45:2f:f7:fe:33:d5:21:dd:82:f1:4e:f5:71:62: a4:6d:f8:a6:85:0c:fc:bf:52:0a:18:60:fe:dc:1d:9b:33:9c: 88:37:13:6b:2c:a9:87:f7:a8:d7:30:3a:d0:b1:31:2b:ca:f1: 1a:e8:a7:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SEn3s8P4p0FcSR7i2VjkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2MWFkZjU3YzhkY2I3YmZkMzRlOWFlY2Q4M2UzNjM0MmVj M2EzYzkwHhcNMjUxMjIxMDUwMTAwWhcNMjUxMjIyMDUwMTAwWjAzMTEwLwYDVQQD EyhhNzJhNWY3MzZkNjkwMjRlMjZiMDNiY2MxODczZjIyZjY4MzQ2MzJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXAYvRQDL3E0+6MNW2LGwb8RLswY s8BH44p7IpAaUQYA5pavMu115hcxLufveS/qmZZo32brKfUe+i5z2TNDrv8DMLAR dIIH617wUnLlQCckL+jy/Hm61jPU3zRiMMlY/XI4zL3kImTXfi3GloT7p+Iy0g4a DsKp+1Bp1vGJZhKwyPmENd8KysyJnwsbeLPy5+apz+XLqHZzOhVhTEEWGHQ4gDv8 EJNixW7Pusm03Ofdv7zBp/RwmgAOxdNOR2MiHjv75hyQmTwbHGl6mPK1K5tS9mm2 IpfOHFj3YXL1Vgs1kxzHyWC2pid9WAWfPk4qhq1CaMWPLf8KaLPOie5XOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKcqX3NtaQJOJrA7zBhz8i9oNGMqMB8GA1UdIwQY MBaAFDYa31fI3Le/006a7Ng+NjQuw6PJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmhyZlY4amN0N19UVHByczJENDJOQzdEbzhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9lMGY4YzYtYWFkYy00YzMxLWI5MmIt MWExODczOGI0NzQxLzEvTmhyZlY4amN0N19UVHByczJENDJOQzdEbzhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi9lMGY4YzYtYWFkYy00YzMxLWI5MmItMWExODczOGI0NzQx LzEvTmhyZlY4amN0N19UVHByczJENDJOQzdEbzhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEkxSa87Z 9pUHAGJnsTNIALA/Ft1pzBmV7OQcHjwbjKTdPkhoWHZ9bfRhWydAMIhHiq7BIZYe XOz6Pp4Duj8JmjBRwRgkme4a2U2XJT+ifBBdmupnuNdMZOoz5zGtHiLKZHHYEfZR sNeHkkaWEj5zUR//7xW4ZT0fXrpD3Fo7q8CYpc28/ttWop3WzFxiQRCMZAKUudER kXKJvNvVSlck+ihMjS/2wTZ6v24JEfi4qjIZYjgQDG+FwG/x5xtG191q+vFtN0vE 8Bjxx0Uv9/4z1SHdgvFO9XFipG34poUM/L9SChhg/twdmzOciDcTayyph/eo1zA6 0LExK8rxGuin2Q== -----END CERTIFICATE-----Generated at Sun Dec 21 08:14:47 2025 by rpki-client