This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/1f10c2-02e2-438a-90a2-917c3577f34f/1/NHjAigY6wtNKGxkeJDY4m77tXpc.mft File: NHjAigY6wtNKGxkeJDY4m77tXpc.mft (raw, json) Hash identifier: puq3dPAds3EE3OSfki3x/gmGwgBDhtqiHrd89yESJUE= Subject key identifier: E7:1B:D7:84:EB:33:D1:7F:9A:8D:79:5D:66:1F:37:6E:1D:27:18:03 Authority key identifier: 34:78:C0:8A:06:3A:C2:D3:4A:1B:19:1E:24:36:38:9B:BE:ED:5E:97 Certificate issuer: /CN=3478c08a063ac2d34a1b191e2436389bbeed5e97 Certificate serial: 019AF12D912C7227B9C866AFFA93B02F9B52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHjAigY6wtNKGxkeJDY4m77tXpc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/1f10c2-02e2-438a-90a2-917c3577f34f/1/NHjAigY6wtNKGxkeJDY4m77tXpc.mft Manifest number: 0DA0 Signing time: Sat 06 Dec 2025 01:01:26 +0000 Manifest this update: Sat 06 Dec 2025 01:01:26 +0000 Manifest next update: Sun 07 Dec 2025 01:01:26 +0000 Files and hashes: 1: NHjAigY6wtNKGxkeJDY4m77tXpc.crl (hash: FyHbYFtg653i8wcmNzr3CXfXDEZf7p56WVflADFJNSE=) 2: pNlFvC-ThONwUDItOe39MOTdmuo.roa (hash: WDsgShsG54TqHBufqeXclF0wXzsc7Ep5HfaFqkIsZUI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/1f10c2-02e2-438a-90a2-917c3577f34f/1/NHjAigY6wtNKGxkeJDY4m77tXpc.crl rsync://rpki.ripe.net/repository/DEFAULT/13/1f10c2-02e2-438a-90a2-917c3577f34f/1/NHjAigY6wtNKGxkeJDY4m77tXpc.mft rsync://rpki.ripe.net/repository/DEFAULT/NHjAigY6wtNKGxkeJDY4m77tXpc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:91:2c:72:27:b9:c8:66:af:fa:93:b0:2f:9b:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3478c08a063ac2d34a1b191e2436389bbeed5e97 Validity Not Before: Dec 6 01:01:26 2025 GMT Not After : Dec 7 01:01:26 2025 GMT Subject: CN=e71bd784eb33d17f9a8d795d661f376e1d271803 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:13:07:b2:41:0b:93:ab:dd:af:34:d6:6e:57: 38:16:65:96:c0:ec:5b:9b:16:ca:95:3c:89:f7:09: ff:aa:10:d2:28:c7:91:52:6e:e0:01:af:28:69:aa: b5:d9:42:66:9a:b5:5c:28:97:b8:32:3f:cc:f2:57: 02:14:c0:43:55:b5:d2:e0:7f:03:b6:9f:08:07:cf: e1:18:e6:60:fc:ad:5f:9e:01:a1:00:bc:5b:42:8c: 48:f8:04:0d:f5:f0:66:6d:19:b6:ed:31:67:53:c8: 5c:ad:3f:46:47:51:16:db:99:f5:4d:55:bd:02:f5: 39:bc:f9:ce:f2:2b:88:f2:9c:58:e9:99:82:a9:f7: dd:46:12:6e:53:da:bd:5f:62:45:61:78:cc:4f:3d: bd:bf:28:03:75:c8:ef:8d:20:b3:8c:06:37:ef:70: 3b:85:53:2b:02:7b:c8:2e:ec:f2:ba:69:41:51:56: 64:ad:9d:96:a3:87:ab:83:37:2e:ea:64:b4:bc:97: df:0c:47:9a:c3:d8:c8:24:ca:ad:69:10:68:8b:ae: 55:5f:c6:9a:87:0c:ce:ab:7e:f9:d5:1d:d7:e2:67: 3a:9f:36:20:dc:63:3a:11:a8:92:ae:13:35:50:a3: 97:17:27:00:68:af:a3:75:1b:58:06:6f:52:63:05: 04:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:1B:D7:84:EB:33:D1:7F:9A:8D:79:5D:66:1F:37:6E:1D:27:18:03 X509v3 Authority Key Identifier: keyid:34:78:C0:8A:06:3A:C2:D3:4A:1B:19:1E:24:36:38:9B:BE:ED:5E:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHjAigY6wtNKGxkeJDY4m77tXpc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/1f10c2-02e2-438a-90a2-917c3577f34f/1/NHjAigY6wtNKGxkeJDY4m77tXpc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/1f10c2-02e2-438a-90a2-917c3577f34f/1/NHjAigY6wtNKGxkeJDY4m77tXpc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:9a:2d:59:bb:cb:c2:8f:7b:d2:77:21:97:bd:d4:8a:16:8b: d3:ee:fa:a2:4e:35:70:cc:de:dc:97:62:9e:b9:c5:03:f5:83: 5d:31:70:18:0e:7f:77:e9:f4:d1:7c:12:54:f4:7b:0f:6a:97: b9:60:61:e4:65:f7:60:c7:9a:44:29:ca:74:10:a8:8c:f4:a9: b0:be:ef:1c:00:cd:26:89:45:c2:3f:a2:59:ad:4f:cb:ae:1a: 96:89:65:eb:75:71:ae:bf:9f:52:78:0f:4a:e1:de:68:72:f9: 2d:0b:bd:9d:4f:b3:7d:5e:f0:0b:70:aa:cd:4d:f8:62:5c:a0: c8:1f:8e:d5:9f:82:e9:fd:79:85:05:6b:30:ba:b2:59:6b:95: 7d:5b:e3:5b:16:8d:64:4c:1b:69:0c:70:6d:4d:83:79:4c:36: a5:6b:23:ff:9c:21:58:01:72:75:73:a9:83:39:dc:8c:6e:28: 97:84:50:ee:f6:b0:fe:5f:0a:73:08:fe:74:0b:e7:f3:91:7f: 7a:5c:a7:22:40:a6:72:ac:ec:ee:cd:27:06:91:7c:e7:6a:63: 83:d8:83:c4:38:c2:1e:47:23:31:8d:bd:a4:d0:e9:60:10:04: 14:75:18:25:bb:40:ff:e2:d3:cc:75:c2:1c:fb:69:af:ac:b7: d3:db:c0:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLZEscie5yGav+pOwL5tSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0NzhjMDhhMDYzYWMyZDM0YTFiMTkxZTI0MzYzODliYmVl ZDVlOTcwHhcNMjUxMjA2MDEwMTI2WhcNMjUxMjA3MDEwMTI2WjAzMTEwLwYDVQQD EyhlNzFiZDc4NGViMzNkMTdmOWE4ZDc5NWQ2NjFmMzc2ZTFkMjcxODAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBMHskELk6vdrzTWblc4FmWWwOxb mxbKlTyJ9wn/qhDSKMeRUm7gAa8oaaq12UJmmrVcKJe4Mj/M8lcCFMBDVbXS4H8D tp8IB8/hGOZg/K1fngGhALxbQoxI+AQN9fBmbRm27TFnU8hcrT9GR1EW25n1TVW9 AvU5vPnO8iuI8pxY6ZmCqffdRhJuU9q9X2JFYXjMTz29vygDdcjvjSCzjAY373A7 hVMrAnvILuzyumlBUVZkrZ2Wo4ergzcu6mS0vJffDEeaw9jIJMqtaRBoi65VX8aa hwzOq3751R3X4mc6nzYg3GM6EaiSrhM1UKOXFycAaK+jdRtYBm9SYwUExQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOcb14TrM9F/mo15XWYfN24dJxgDMB8GA1UdIwQY MBaAFDR4wIoGOsLTShsZHiQ2OJu+7V6XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkhqQWlnWTZ3dE5LR3hrZUpEWTRtNzd0WHBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy8xZjEwYzItMDJlMi00MzhhLTkwYTIt OTE3YzM1NzdmMzRmLzEvTkhqQWlnWTZ3dE5LR3hrZUpEWTRtNzd0WHBjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy8xZjEwYzItMDJlMi00MzhhLTkwYTItOTE3YzM1NzdmMzRm LzEvTkhqQWlnWTZ3dE5LR3hrZUpEWTRtNzd0WHBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbZotWbvL wo970nchl73UihaL0+76ok41cMze3JdinrnFA/WDXTFwGA5/d+n00XwSVPR7D2qX uWBh5GX3YMeaRCnKdBCojPSpsL7vHADNJolFwj+iWa1Py64aloll63Vxrr+fUngP SuHeaHL5LQu9nU+zfV7wC3CqzU34YlygyB+O1Z+C6f15hQVrMLqyWWuVfVvjWxaN ZEwbaQxwbU2DeUw2pWsj/5whWAFydXOpgzncjG4ol4RQ7vaw/l8Kcwj+dAvn85F/ elynIkCmcqzs7s0nBpF852pjg9iDxDjCHkcjMY29pNDpYBAEFHUYJbtA/+LTzHXC HPtpr6y309vA7g== -----END CERTIFICATE-----Generated at Sat Dec 6 09:19:57 2025 by rpki-client