This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.mft File: NlHOpaznf01_TdKC8Qq5yw7k0ew.mft (raw, json) Hash identifier: D0SVWNCiShsGksHGcm6fHr6YhgXoFrnUPcIi2LLqM74= Subject key identifier: 64:1E:EE:6C:D0:B7:CF:08:DD:6D:D4:D7:27:E6:84:47:F3:C5:36:D0 Authority key identifier: 36:51:CE:A5:AC:E7:7F:4D:7F:4D:D2:82:F1:0A:B9:CB:0E:E4:D1:EC Certificate issuer: /CN=3651cea5ace77f4d7f4dd282f10ab9cb0ee4d1ec Certificate serial: 019B530603EE74E682F7777EBCEA37F06ECD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NlHOpaznf01_TdKC8Qq5yw7k0ew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.mft Manifest number: 1293 Signing time: Thu 25 Dec 2025 01:01:01 +0000 Manifest this update: Thu 25 Dec 2025 01:01:01 +0000 Manifest next update: Fri 26 Dec 2025 01:01:01 +0000 Files and hashes: 1: NlHOpaznf01_TdKC8Qq5yw7k0ew.crl (hash: 6uFy0WdfLhxiwH+WxI49ivul3ksXvnKCFxj+ci7YkgI=) 2: XPkovunJ2mYG9xru2HKfkrigcMA.roa (hash: ZBoNLDdsfMiH4Qvw9YL8Os7NUZ9E42iEu1OMEgsfl7U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.mft rsync://rpki.ripe.net/repository/DEFAULT/NlHOpaznf01_TdKC8Qq5yw7k0ew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 01:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:06:03:ee:74:e6:82:f7:77:7e:bc:ea:37:f0:6e:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3651cea5ace77f4d7f4dd282f10ab9cb0ee4d1ec Validity Not Before: Dec 25 01:01:01 2025 GMT Not After : Dec 26 01:01:01 2025 GMT Subject: CN=641eee6cd0b7cf08dd6dd4d727e68447f3c536d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:e1:20:46:b4:1d:e4:ef:22:5e:68:20:44:d6: 17:4c:30:c5:4a:b0:4a:f1:f4:7a:55:b2:15:04:94: ce:78:8e:eb:20:33:21:96:d2:b1:d6:f7:2b:e4:50: f9:47:49:81:2a:db:a0:f2:d8:10:4d:bd:10:3a:65: 30:dc:a6:88:75:b4:1a:98:bf:40:7d:d3:92:ac:d2: 6f:f8:1d:66:20:08:83:55:f5:8a:21:a5:a9:11:0e: 7f:30:f3:1f:28:be:e3:a2:2e:80:2d:69:9e:25:b4: 93:d1:bd:91:98:60:50:bd:23:70:84:c4:97:51:9d: 09:f6:e5:e3:76:c7:89:5d:5c:67:c4:fc:60:41:cb: c9:ff:82:33:c0:06:5e:ac:51:98:f7:87:41:8b:53: 5d:34:0d:23:3a:e3:ae:bd:cb:d9:a2:d3:d0:00:27: bf:ea:5d:b0:49:29:54:d4:67:4f:5d:fe:5a:84:24: 24:f9:89:f5:b3:6a:0f:9c:bd:de:81:b1:15:8c:f1: 74:ed:9b:10:ef:a1:f9:26:58:88:a6:f2:a2:65:07: d8:c4:0c:72:63:23:9b:56:6f:74:ee:0d:75:c4:39: 2c:14:68:ea:6a:ab:48:e5:b2:49:6c:74:65:77:26: 98:3e:86:c5:50:c2:d2:1e:38:4b:ce:17:9f:78:c0: 9e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:1E:EE:6C:D0:B7:CF:08:DD:6D:D4:D7:27:E6:84:47:F3:C5:36:D0 X509v3 Authority Key Identifier: keyid:36:51:CE:A5:AC:E7:7F:4D:7F:4D:D2:82:F1:0A:B9:CB:0E:E4:D1:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NlHOpaznf01_TdKC8Qq5yw7k0ew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:0d:c9:61:96:7c:e7:83:c0:13:51:ad:e7:3c:87:a7:c1:ee: 75:ef:68:e8:95:f4:26:5a:cf:4c:ff:e1:4c:20:29:1d:b7:71: b7:6a:6d:a4:8e:8c:16:69:71:e0:5b:16:09:89:d5:83:00:02: 35:c9:64:40:3e:7c:27:d8:a2:23:0b:f0:af:ad:36:23:62:c0: 5e:43:f3:cb:94:4f:7b:8f:41:96:f6:8c:1b:87:a2:aa:a8:07: fa:6e:5c:d1:37:8c:fe:38:0a:9c:11:88:40:a6:e4:a5:3c:57: ed:33:9c:b6:3a:2b:d2:d7:e5:64:85:2c:86:14:a6:fc:78:60: 39:85:07:72:2f:69:ca:bb:9c:53:5a:1a:3b:26:40:8f:81:a5: fe:90:76:c0:30:a1:36:16:88:4b:87:5e:63:43:04:cf:d0:ec: e3:83:00:d5:e1:98:be:01:2f:66:e1:c9:14:32:63:b1:ee:bb: dd:40:66:6e:a7:ce:21:3b:72:fd:fe:0f:06:af:fa:98:07:9a: 44:31:68:98:65:4d:e5:c1:96:4c:f1:3e:57:10:a4:01:1f:0c: b6:eb:45:6c:f6:3c:09:53:fa:96:d2:90:c7:a5:2d:6c:ed:f6: 76:e8:4f:bf:3e:fd:80:e2:f4:23:62:11:68:11:c5:8a:56:ac: f1:70:0d:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTBgPudOaC93d+vOo38G7NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2NTFjZWE1YWNlNzdmNGQ3ZjRkZDI4MmYxMGFiOWNiMGVl NGQxZWMwHhcNMjUxMjI1MDEwMTAxWhcNMjUxMjI2MDEwMTAxWjAzMTEwLwYDVQQD Eyg2NDFlZWU2Y2QwYjdjZjA4ZGQ2ZGQ0ZDcyN2U2ODQ0N2YzYzUzNmQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3uEgRrQd5O8iXmggRNYXTDDFSrBK 8fR6VbIVBJTOeI7rIDMhltKx1vcr5FD5R0mBKtug8tgQTb0QOmUw3KaIdbQamL9A fdOSrNJv+B1mIAiDVfWKIaWpEQ5/MPMfKL7joi6ALWmeJbST0b2RmGBQvSNwhMSX UZ0J9uXjdseJXVxnxPxgQcvJ/4IzwAZerFGY94dBi1NdNA0jOuOuvcvZotPQACe/ 6l2wSSlU1GdPXf5ahCQk+Yn1s2oPnL3egbEVjPF07ZsQ76H5JliIpvKiZQfYxAxy YyObVm907g11xDksFGjqaqtI5bJJbHRldyaYPobFUMLSHjhLzhefeMCeLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGQe7mzQt88I3W3U1yfmhEfzxTbQMB8GA1UdIwQY MBaAFDZRzqWs539Nf03SgvEKucsO5NHsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmxIT3Bhem5mMDFfVGRLQzhRcTV5dzdrMGV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9hYzIxNGItMzc3Mi00ODEwLTkyMDYt YjkyYjA5NGYzYTNjLzEvTmxIT3Bhem5mMDFfVGRLQzhRcTV5dzdrMGV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC9hYzIxNGItMzc3Mi00ODEwLTkyMDYtYjkyYjA5NGYzYTNj LzEvTmxIT3Bhem5mMDFfVGRLQzhRcTV5dzdrMGV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHA3JYZZ8 54PAE1Gt5zyHp8Hude9o6JX0JlrPTP/hTCApHbdxt2ptpI6MFmlx4FsWCYnVgwAC NclkQD58J9iiIwvwr602I2LAXkPzy5RPe49BlvaMG4eiqqgH+m5c0TeM/jgKnBGI QKbkpTxX7TOctjor0tflZIUshhSm/HhgOYUHci9pyrucU1oaOyZAj4Gl/pB2wDCh NhaIS4deY0MEz9Ds44MA1eGYvgEvZuHJFDJjse673UBmbqfOITty/f4PBq/6mAea RDFomGVN5cGWTPE+VxCkAR8MtutFbPY8CVP6ltKQx6UtbO32duhPvz79gOL0I2IR aBHFilas8XANcw== -----END CERTIFICATE-----Generated at Thu Dec 25 09:16:14 2025 by rpki-client