This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/NztHo87nmYKtsXA0HQICYCczICM.mft File: NztHo87nmYKtsXA0HQICYCczICM.mft (raw, json) Hash identifier: 38S69N3UQ4YPw2fXcohaqgU+Xc4NZkdkSHyU0DKLl3c= Subject key identifier: C8:B0:8B:47:D7:52:E4:1D:C7:FE:E7:BA:EF:FC:E3:1C:F1:21:B8:56 Authority key identifier: 37:3B:47:A3:CE:E7:99:82:AD:B1:70:34:1D:02:02:60:27:33:20:23 Certificate issuer: /CN=373b47a3cee79982adb170341d02026027332023 Certificate serial: 019B2FD5147EB7BFBD8440BBB7769B9FF75B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NztHo87nmYKtsXA0HQICYCczICM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/NztHo87nmYKtsXA0HQICYCczICM.mft Manifest number: 1783 Signing time: Thu 18 Dec 2025 05:00:52 +0000 Manifest this update: Thu 18 Dec 2025 05:00:52 +0000 Manifest next update: Fri 19 Dec 2025 05:00:52 +0000 Files and hashes: 1: 44PWl9t-VK2hhZNHr5AmomvoGFc.roa (hash: OxQ7QHN27yQWahrAlORJzxbYRAyj5Alk9/N2TAEqxrY=) 2: NztHo87nmYKtsXA0HQICYCczICM.crl (hash: Ld6KQprnADeER/cjE6LRhG12S6sp4bHDZR1DLkpjYNk=) 3: fHM2AB9lWMdrr6W98wCcBfFFZto.roa (hash: O5xk5dJ9bNLjoHECEnZnVJ7Que2qp5xFQYolbd9r+sI=) 4: yGyQiv41kYE21uqhtuih0OLSi9I.roa (hash: tdu5vnXKQDyjaj/70REfOS/T9RJiHmxdfg/dwymFlGk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/NztHo87nmYKtsXA0HQICYCczICM.crl rsync://rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/NztHo87nmYKtsXA0HQICYCczICM.mft rsync://rpki.ripe.net/repository/DEFAULT/NztHo87nmYKtsXA0HQICYCczICM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:d5:14:7e:b7:bf:bd:84:40:bb:b7:76:9b:9f:f7:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=373b47a3cee79982adb170341d02026027332023 Validity Not Before: Dec 18 05:00:52 2025 GMT Not After : Dec 19 05:00:52 2025 GMT Subject: CN=c8b08b47d752e41dc7fee7baeffce31cf121b856 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7b:51:34:07:a0:2e:a8:eb:8d:92:9a:2d:8e: 87:db:e9:98:90:bd:d0:6e:70:28:3b:a8:fe:ca:aa: 7b:92:a7:cb:d8:25:6f:0e:94:23:c6:38:17:1d:51: 08:11:c5:2e:8c:84:13:70:a7:5d:1e:f2:f7:ba:e6: e7:fb:27:19:74:ff:33:7d:9d:d5:cd:93:1d:6d:1a: 1d:01:d8:23:ce:46:84:c3:6b:f0:21:b6:f5:89:b2: 2c:4b:bc:5e:11:f9:25:08:bf:5b:25:e7:c3:18:10: 7e:0e:7c:7f:00:15:2f:1a:4d:c8:4f:b4:91:07:55: f4:90:8c:1d:7e:dd:df:67:cb:6d:3d:96:be:cb:95: 74:37:c6:4a:b2:b5:d5:7e:77:73:0b:34:ea:65:b3: a5:aa:56:9c:7f:40:47:83:b8:d4:e7:20:29:5b:13: ed:92:72:55:15:51:2b:15:dd:2a:e4:2a:cc:b6:49: be:e7:29:98:f3:e1:f2:c9:06:ac:29:a6:00:80:7f: fd:4f:47:54:45:aa:e3:12:0a:0b:2a:9e:0d:0b:1f: 69:7b:e6:c0:75:98:77:73:9e:18:61:c6:09:14:a9: c8:85:af:99:04:6b:b8:ed:56:bf:12:80:f3:fb:6b: e4:a6:b9:fb:9c:63:3b:0f:2b:7f:35:a6:dc:ac:3c: 7a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:B0:8B:47:D7:52:E4:1D:C7:FE:E7:BA:EF:FC:E3:1C:F1:21:B8:56 X509v3 Authority Key Identifier: keyid:37:3B:47:A3:CE:E7:99:82:AD:B1:70:34:1D:02:02:60:27:33:20:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NztHo87nmYKtsXA0HQICYCczICM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/NztHo87nmYKtsXA0HQICYCczICM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/NztHo87nmYKtsXA0HQICYCczICM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:aa:97:a7:69:bc:9c:f4:8b:4c:3c:51:c5:d5:97:86:90:91: b2:1a:98:13:bf:4e:ad:68:7d:ff:e6:90:8b:62:05:e1:39:47: c0:f7:29:84:ad:7b:61:38:82:c4:a8:77:5a:3b:3e:30:6e:3f: 31:e0:4c:8e:cf:3d:b6:d6:19:c2:08:c2:f9:b7:c9:21:6c:ab: b5:da:16:a6:84:66:33:a1:0f:a0:4a:4d:c8:92:5b:de:1b:09: 7a:60:d9:3a:3d:e7:72:52:3e:80:1e:f3:c8:3d:d2:b5:08:b8: fd:ed:73:61:ad:56:29:62:14:c3:57:76:8d:5b:fe:49:87:8f: 5c:10:98:d5:63:52:15:22:cc:c1:7c:1c:e0:4a:39:6d:7d:a3: fb:91:87:ff:a7:51:1b:6b:1a:e4:88:99:82:db:ed:6f:f0:65: 69:a6:3e:65:3c:21:83:42:bc:26:ed:cf:03:7d:66:71:6d:80: 4e:8b:0a:90:96:1d:10:6c:1e:50:25:50:4b:56:7a:cc:b5:e3: 3e:62:14:c9:97:19:9a:c2:45:89:b1:70:e3:42:29:75:f4:4b: 0d:21:f8:66:39:80:dc:f6:19:99:78:a2:54:c7:a4:3d:49:8f: b0:54:34:7b:6a:fc:e2:2d:9f:75:2f:51:64:c4:da:8d:5e:27: 43:be:e6:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsv1RR+t7+9hEC7t3abn/dbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3M2I0N2EzY2VlNzk5ODJhZGIxNzAzNDFkMDIwMjYwMjcz MzIwMjMwHhcNMjUxMjE4MDUwMDUyWhcNMjUxMjE5MDUwMDUyWjAzMTEwLwYDVQQD EyhjOGIwOGI0N2Q3NTJlNDFkYzdmZWU3YmFlZmZjZTMxY2YxMjFiODU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3tRNAegLqjrjZKaLY6H2+mYkL3Q bnAoO6j+yqp7kqfL2CVvDpQjxjgXHVEIEcUujIQTcKddHvL3uubn+ycZdP8zfZ3V zZMdbRodAdgjzkaEw2vwIbb1ibIsS7xeEfklCL9bJefDGBB+Dnx/ABUvGk3IT7SR B1X0kIwdft3fZ8ttPZa+y5V0N8ZKsrXVfndzCzTqZbOlqlacf0BHg7jU5yApWxPt knJVFVErFd0q5CrMtkm+5ymY8+HyyQasKaYAgH/9T0dURarjEgoLKp4NCx9pe+bA dZh3c54YYcYJFKnIha+ZBGu47Va/EoDz+2vkprn7nGM7Dyt/NabcrDx6FwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMiwi0fXUuQdx/7nuu/84xzxIbhWMB8GA1UdIwQY MBaAFDc7R6PO55mCrbFwNB0CAmAnMyAjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnp0SG84N25tWUt0c1hBMEhRSUNZQ2N6SUNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC83YzJhMTUtYWM0ZC00NjRhLWE3N2Ut MzJmOWEyODJmNTZjLzEvTnp0SG84N25tWUt0c1hBMEhRSUNZQ2N6SUNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC83YzJhMTUtYWM0ZC00NjRhLWE3N2UtMzJmOWEyODJmNTZj LzEvTnp0SG84N25tWUt0c1hBMEhRSUNZQ2N6SUNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlqqXp2m8 nPSLTDxRxdWXhpCRshqYE79OrWh9/+aQi2IF4TlHwPcphK17YTiCxKh3Wjs+MG4/ MeBMjs89ttYZwgjC+bfJIWyrtdoWpoRmM6EPoEpNyJJb3hsJemDZOj3nclI+gB7z yD3StQi4/e1zYa1WKWIUw1d2jVv+SYePXBCY1WNSFSLMwXwc4Eo5bX2j+5GH/6dR G2sa5IiZgtvtb/BlaaY+ZTwhg0K8Ju3PA31mcW2ATosKkJYdEGweUCVQS1Z6zLXj PmIUyZcZmsJFibFw40IpdfRLDSH4ZjmA3PYZmXiiVMekPUmPsFQ0e2r84i2fdS9R ZMTajV4nQ77mXw== -----END CERTIFICATE-----Generated at Thu Dec 18 07:43:27 2025 by rpki-client