This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/1f10c2-02e2-438a-90a2-917c3577f34f/1/NHjAigY6wtNKGxkeJDY4m77tXpc.mft File: NHjAigY6wtNKGxkeJDY4m77tXpc.mft (raw, json) Hash identifier: rYsDrqKle2FfiMyJD+5VbWWPFfm6lgrW0g5qfEqf4ks= Subject key identifier: 3B:63:59:84:42:50:8E:CC:15:98:C4:15:09:21:E8:0B:4E:AA:C4:FF Authority key identifier: 34:78:C0:8A:06:3A:C2:D3:4A:1B:19:1E:24:36:38:9B:BE:ED:5E:97 Certificate issuer: /CN=3478c08a063ac2d34a1b191e2436389bbeed5e97 Certificate serial: 019B2D0BB94589AB4D49CC121017A5FB52A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHjAigY6wtNKGxkeJDY4m77tXpc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/1f10c2-02e2-438a-90a2-917c3577f34f/1/NHjAigY6wtNKGxkeJDY4m77tXpc.mft Manifest number: 0DBF Signing time: Wed 17 Dec 2025 16:01:41 +0000 Manifest this update: Wed 17 Dec 2025 16:01:41 +0000 Manifest next update: Thu 18 Dec 2025 16:01:41 +0000 Files and hashes: 1: NHjAigY6wtNKGxkeJDY4m77tXpc.crl (hash: SDQGOiJNpALfV8iBex/lTpCszLLl9DcDzux9YNE9yB8=) 2: pNlFvC-ThONwUDItOe39MOTdmuo.roa (hash: WDsgShsG54TqHBufqeXclF0wXzsc7Ep5HfaFqkIsZUI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/1f10c2-02e2-438a-90a2-917c3577f34f/1/NHjAigY6wtNKGxkeJDY4m77tXpc.crl rsync://rpki.ripe.net/repository/DEFAULT/13/1f10c2-02e2-438a-90a2-917c3577f34f/1/NHjAigY6wtNKGxkeJDY4m77tXpc.mft rsync://rpki.ripe.net/repository/DEFAULT/NHjAigY6wtNKGxkeJDY4m77tXpc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 16:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:0b:b9:45:89:ab:4d:49:cc:12:10:17:a5:fb:52:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3478c08a063ac2d34a1b191e2436389bbeed5e97 Validity Not Before: Dec 17 16:01:41 2025 GMT Not After : Dec 18 16:01:41 2025 GMT Subject: CN=3b63598442508ecc1598c4150921e80b4eaac4ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:9e:b1:0c:7f:57:19:11:e9:36:87:b7:91:63: da:bb:f0:a0:db:23:e3:4b:67:3b:42:18:be:0d:f6: 8e:08:58:56:b1:b9:89:4a:79:3d:85:fc:3b:63:ff: a7:c9:10:e3:a9:f1:c8:74:a0:05:47:ca:a5:89:02: 2b:55:1e:1c:a8:4b:17:e8:43:be:01:de:20:76:70: 0d:63:f9:35:3f:d8:f9:96:c1:f0:3e:2e:7a:c1:bf: b1:11:e4:a6:4e:3b:03:e9:dc:e0:82:c3:dc:33:fa: 4c:f6:f5:ec:68:62:99:60:aa:bc:7a:ec:fd:8f:15: 9e:81:3c:c8:27:89:a3:d8:af:ad:49:b2:ac:73:70: 14:25:85:77:cf:40:c7:d6:da:1e:b9:02:67:57:1a: ab:2f:ca:aa:3e:36:1c:52:aa:7b:38:34:d0:87:17: a2:c6:42:31:d7:a8:91:8c:90:1f:41:9f:8c:63:7b: b5:50:7b:3b:03:81:8b:06:68:e0:ec:58:98:02:3e: e5:8a:db:4a:d3:00:a5:b5:49:57:3c:27:13:93:48: a0:3e:41:47:c2:06:c2:63:6c:2f:31:59:e5:08:e6: b0:bc:d5:dd:e1:c5:12:e3:9d:e4:62:15:a0:43:07: d4:b6:b7:c1:c8:e2:09:8b:4f:84:0d:46:1a:61:1f: b8:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:63:59:84:42:50:8E:CC:15:98:C4:15:09:21:E8:0B:4E:AA:C4:FF X509v3 Authority Key Identifier: keyid:34:78:C0:8A:06:3A:C2:D3:4A:1B:19:1E:24:36:38:9B:BE:ED:5E:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHjAigY6wtNKGxkeJDY4m77tXpc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/1f10c2-02e2-438a-90a2-917c3577f34f/1/NHjAigY6wtNKGxkeJDY4m77tXpc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/1f10c2-02e2-438a-90a2-917c3577f34f/1/NHjAigY6wtNKGxkeJDY4m77tXpc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:8a:60:21:bd:a5:42:a1:7b:f3:6a:28:d8:72:36:56:95:6c: 84:bf:3b:2d:7e:94:95:f3:c7:e4:18:72:a0:68:e7:28:8d:a4: 84:95:db:66:c8:0a:fd:59:7b:d7:36:e2:08:f7:24:32:fa:3c: 09:c7:82:b2:c1:e2:ec:61:25:e8:30:00:6a:93:3a:22:21:a3: 36:dc:1b:11:01:14:ca:2c:5f:0b:93:fa:28:bb:6d:53:b2:4e: f2:96:38:74:72:a2:d2:b8:66:e5:4a:90:3b:24:df:e2:1e:e5: 02:76:4f:f2:a6:56:22:80:c7:48:2c:fa:0d:9d:c3:cb:53:ea: 43:f6:66:8e:88:7b:2d:56:12:69:40:88:53:2c:4a:fa:d2:e9: d3:a1:87:78:82:50:10:a0:42:35:e8:35:26:32:bf:f7:db:56: 67:eb:94:88:a1:20:23:53:82:16:a2:9b:fc:56:0e:fe:9c:f1: 77:88:35:a5:cb:74:07:75:a9:ce:17:f7:79:a5:dc:c3:21:62: e4:3e:f0:16:37:32:18:bc:e9:15:28:f6:10:65:e0:93:80:57: 3c:e3:b8:ca:a4:37:87:5f:6a:06:c9:9b:91:e4:9a:7c:f3:3c: 44:f3:22:85:ae:97:33:f2:27:df:67:9a:c9:0d:9b:c4:e8:e3: 97:54:35:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstC7lFiatNScwSEBel+1KpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0NzhjMDhhMDYzYWMyZDM0YTFiMTkxZTI0MzYzODliYmVl ZDVlOTcwHhcNMjUxMjE3MTYwMTQxWhcNMjUxMjE4MTYwMTQxWjAzMTEwLwYDVQQD EygzYjYzNTk4NDQyNTA4ZWNjMTU5OGM0MTUwOTIxZTgwYjRlYWFjNGZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy56xDH9XGRHpNoe3kWPau/Cg2yPj S2c7Qhi+DfaOCFhWsbmJSnk9hfw7Y/+nyRDjqfHIdKAFR8qliQIrVR4cqEsX6EO+ Ad4gdnANY/k1P9j5lsHwPi56wb+xEeSmTjsD6dzggsPcM/pM9vXsaGKZYKq8euz9 jxWegTzIJ4mj2K+tSbKsc3AUJYV3z0DH1toeuQJnVxqrL8qqPjYcUqp7ODTQhxei xkIx16iRjJAfQZ+MY3u1UHs7A4GLBmjg7FiYAj7littK0wCltUlXPCcTk0igPkFH wgbCY2wvMVnlCOawvNXd4cUS453kYhWgQwfUtrfByOIJi0+EDUYaYR+4YQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDtjWYRCUI7MFZjEFQkh6AtOqsT/MB8GA1UdIwQY MBaAFDR4wIoGOsLTShsZHiQ2OJu+7V6XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkhqQWlnWTZ3dE5LR3hrZUpEWTRtNzd0WHBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy8xZjEwYzItMDJlMi00MzhhLTkwYTIt OTE3YzM1NzdmMzRmLzEvTkhqQWlnWTZ3dE5LR3hrZUpEWTRtNzd0WHBjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy8xZjEwYzItMDJlMi00MzhhLTkwYTItOTE3YzM1NzdmMzRm LzEvTkhqQWlnWTZ3dE5LR3hrZUpEWTRtNzd0WHBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADYpgIb2l QqF782oo2HI2VpVshL87LX6UlfPH5BhyoGjnKI2khJXbZsgK/Vl71zbiCPckMvo8 CceCssHi7GEl6DAAapM6IiGjNtwbEQEUyixfC5P6KLttU7JO8pY4dHKi0rhm5UqQ OyTf4h7lAnZP8qZWIoDHSCz6DZ3Dy1PqQ/Zmjoh7LVYSaUCIUyxK+tLp06GHeIJQ EKBCNeg1JjK/99tWZ+uUiKEgI1OCFqKb/FYO/pzxd4g1pct0B3Wpzhf3eaXcwyFi 5D7wFjcyGLzpFSj2EGXgk4BXPOO4yqQ3h19qBsmbkeSafPM8RPMiha6XM/In32ea yQ2bxOjjl1Q1Vw== -----END CERTIFICATE-----Generated at Wed Dec 17 21:05:08 2025 by rpki-client