This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.mft File: 1NhufQc6nk1p7HFcNiMXaAWJTVo.mft (raw, json) Hash identifier: HBW+bXj0GFTLgO6cxefg3V9sP2o8Z26UlXycyapir6I= Subject key identifier: B8:77:B7:3E:58:C6:97:D9:08:17:DF:6A:CF:96:3F:60:78:47:6D:DE Authority key identifier: D4:D8:6E:7D:07:3A:9E:4D:69:EC:71:5C:36:23:17:68:05:89:4D:5A Certificate issuer: /CN=d4d86e7d073a9e4d69ec715c3623176805894d5a Certificate serial: 019B4393122BCEF00391817749CD539BB8AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1NhufQc6nk1p7HFcNiMXaAWJTVo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.mft Manifest number: 0E7E Signing time: Mon 22 Dec 2025 01:01:10 +0000 Manifest this update: Mon 22 Dec 2025 01:01:10 +0000 Manifest next update: Tue 23 Dec 2025 01:01:10 +0000 Files and hashes: 1: 1NhufQc6nk1p7HFcNiMXaAWJTVo.crl (hash: 7SlUbegtDALTKLG2RlNpjDPfg6cFIDNxEhrITgEL2DY=) 2: yVOuH9GnWiOJ4T0Bjcul16G_CUI.roa (hash: cYY3QuLeMs+0RKKYLhzyVIgFcgFYuNr0hEZcjUsKwaU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.mft rsync://rpki.ripe.net/repository/DEFAULT/1NhufQc6nk1p7HFcNiMXaAWJTVo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:93:12:2b:ce:f0:03:91:81:77:49:cd:53:9b:b8:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4d86e7d073a9e4d69ec715c3623176805894d5a Validity Not Before: Dec 22 01:01:10 2025 GMT Not After : Dec 23 01:01:10 2025 GMT Subject: CN=b877b73e58c697d90817df6acf963f6078476dde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c8:df:67:84:2b:87:8b:fd:07:5e:92:14:f8: 1b:8a:b2:1a:1f:66:29:64:70:41:cf:a5:93:05:0d: 9a:b6:04:ae:96:d7:f5:5c:1f:b2:4e:fd:4d:24:1f: e2:1c:8d:f7:e2:c0:70:20:33:3a:f1:83:11:4f:87: 2a:5a:1d:8d:de:bb:b5:16:45:9d:11:dc:21:08:17: 02:41:b8:e9:87:6f:bd:03:4a:f6:e8:bc:7b:90:d8: fc:4b:08:3c:9a:53:2a:c1:f8:b4:45:6e:11:21:03: 7c:37:1c:30:d0:6b:0b:20:07:a1:ff:72:50:41:47: 36:9a:0e:81:e0:25:98:f5:e0:71:75:1b:93:c5:48: 45:92:42:08:96:5c:b1:ff:a8:1d:04:80:ca:e8:51: 5e:00:ca:33:97:27:ff:f0:9a:a9:07:f6:89:e4:60: 85:44:da:97:c4:76:91:8d:e9:0d:97:15:91:67:b4: 9a:25:66:c5:5a:18:9a:ff:c6:d3:2b:fc:d7:4b:ab: 0d:de:df:74:bf:84:11:e3:c6:88:1d:8b:d7:cb:b5: f5:eb:b9:63:18:93:22:9b:cc:5c:d1:16:14:17:27: 98:23:87:ad:1b:7c:c1:61:77:26:9b:78:5c:a5:ff: 14:cd:7b:f6:54:ae:bb:4c:1f:50:b8:b5:f0:50:a2: 68:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:77:B7:3E:58:C6:97:D9:08:17:DF:6A:CF:96:3F:60:78:47:6D:DE X509v3 Authority Key Identifier: keyid:D4:D8:6E:7D:07:3A:9E:4D:69:EC:71:5C:36:23:17:68:05:89:4D:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1NhufQc6nk1p7HFcNiMXaAWJTVo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:fe:b7:19:c1:5f:b9:7d:46:5c:8a:df:1a:41:77:6d:91:a8: 3f:92:71:7d:92:a3:57:79:62:a3:d1:7e:32:dd:6b:21:7e:b0: b6:a2:0b:0f:06:92:a8:a5:95:78:9e:76:13:ad:22:38:b2:a4: 42:ce:66:f1:be:d4:c7:d4:01:54:d5:43:08:0a:31:87:a9:c3: 3d:74:76:d3:95:24:b7:08:49:15:f5:8f:63:46:05:0c:52:82: 72:0d:f0:97:55:79:26:9e:bd:a4:93:0b:72:46:61:68:22:0a: d1:96:73:3f:58:a3:c9:8b:b1:ff:2a:65:f8:77:29:68:4b:5c: 6d:19:cd:b3:52:95:b8:be:6b:0c:00:f5:ae:8a:a4:d2:4c:14: 1f:5a:47:98:2b:e1:24:07:55:ab:d7:2f:54:cd:1b:77:40:82: 14:70:46:9a:5a:2c:55:25:b3:8f:ae:e7:68:77:27:be:e3:80: ed:ff:bd:2e:ba:d6:3f:80:11:8d:43:06:7b:e6:76:ab:1c:9a: 7f:98:2f:46:ca:81:79:b7:3e:97:d6:3d:fa:ae:89:81:d1:09: 57:c9:a2:3c:4e:11:cf:d1:19:0c:69:54:92:bb:42:d4:2f:62: 6f:cc:b2:d1:77:14:73:48:e1:a7:94:59:a8:00:8f:b4:59:08: 5d:90:dd:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDkxIrzvADkYF3Sc1Tm7isMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0ZDg2ZTdkMDczYTllNGQ2OWVjNzE1YzM2MjMxNzY4MDU4 OTRkNWEwHhcNMjUxMjIyMDEwMTEwWhcNMjUxMjIzMDEwMTEwWjAzMTEwLwYDVQQD EyhiODc3YjczZTU4YzY5N2Q5MDgxN2RmNmFjZjk2M2Y2MDc4NDc2ZGRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcjfZ4Qrh4v9B16SFPgbirIaH2Yp ZHBBz6WTBQ2atgSultf1XB+yTv1NJB/iHI334sBwIDM68YMRT4cqWh2N3ru1FkWd EdwhCBcCQbjph2+9A0r26Lx7kNj8Swg8mlMqwfi0RW4RIQN8Nxww0GsLIAeh/3JQ QUc2mg6B4CWY9eBxdRuTxUhFkkIIllyx/6gdBIDK6FFeAMozlyf/8JqpB/aJ5GCF RNqXxHaRjekNlxWRZ7SaJWbFWhia/8bTK/zXS6sN3t90v4QR48aIHYvXy7X167lj GJMim8xc0RYUFyeYI4etG3zBYXcmm3hcpf8UzXv2VK67TB9QuLXwUKJowQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLh3tz5YxpfZCBffas+WP2B4R23eMB8GA1UdIwQY MBaAFNTYbn0HOp5NaexxXDYjF2gFiU1aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMU5odWZRYzZuazFwN0hGY05pTVhhQVdKVFZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC84MmQ2NWEtNDVlMi00ZWZiLWIyM2Mt OTU1YWQ3OGJjYjA3LzEvMU5odWZRYzZuazFwN0hGY05pTVhhQVdKVFZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC84MmQ2NWEtNDVlMi00ZWZiLWIyM2MtOTU1YWQ3OGJjYjA3 LzEvMU5odWZRYzZuazFwN0hGY05pTVhhQVdKVFZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa/63GcFf uX1GXIrfGkF3bZGoP5JxfZKjV3lio9F+Mt1rIX6wtqILDwaSqKWVeJ52E60iOLKk Qs5m8b7Ux9QBVNVDCAoxh6nDPXR205UktwhJFfWPY0YFDFKCcg3wl1V5Jp69pJML ckZhaCIK0ZZzP1ijyYux/ypl+HcpaEtcbRnNs1KVuL5rDAD1roqk0kwUH1pHmCvh JAdVq9cvVM0bd0CCFHBGmlosVSWzj67naHcnvuOA7f+9LrrWP4ARjUMGe+Z2qxya f5gvRsqBebc+l9Y9+q6JgdEJV8miPE4Rz9EZDGlUkrtC1C9ib8yy0XcUc0jhp5RZ qACPtFkIXZDd+w== -----END CERTIFICATE-----Generated at Mon Dec 22 04:43:51 2025 by rpki-client