This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.mft File: nla1Ht856_BmKyyDTWXRvR3oJSI.mft (raw, json) Hash identifier: Yg3wQMUpdutGZmf4ZcPYj503tbCzu8zyQ+vxY1Kz6/A= Subject key identifier: F5:F3:7C:EC:98:E7:2B:20:DF:13:10:E7:1B:59:E8:72:10:14:50:4A Authority key identifier: 9E:56:B5:1E:DF:39:EB:F0:66:2B:2C:83:4D:65:D1:BD:1D:E8:25:22 Certificate issuer: /CN=9e56b51edf39ebf0662b2c834d65d1bd1de82522 Certificate serial: 019AF209102BF1E13A3A1DBBB4E7DF88E0F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nla1Ht856_BmKyyDTWXRvR3oJSI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.mft Manifest number: 7A Signing time: Sat 06 Dec 2025 05:01:11 +0000 Manifest this update: Sat 06 Dec 2025 05:01:11 +0000 Manifest next update: Sun 07 Dec 2025 05:01:11 +0000 Files and hashes: 1: nla1Ht856_BmKyyDTWXRvR3oJSI.crl (hash: HxZfw+DzAJj/luxzR7wSslJv8BfwMMJnktVuPu3L4P4=) 2: o5pLMTSJFFMB0jUj5lW2pSY6bO0.roa (hash: Ith7eEpfTVoSvx7vhXb+tIODzV8AAoDagu8eTPct+mE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.mft rsync://rpki.ripe.net/repository/DEFAULT/nla1Ht856_BmKyyDTWXRvR3oJSI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:10:2b:f1:e1:3a:3a:1d:bb:b4:e7:df:88:e0:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e56b51edf39ebf0662b2c834d65d1bd1de82522 Validity Not Before: Dec 6 05:01:11 2025 GMT Not After : Dec 7 05:01:11 2025 GMT Subject: CN=f5f37cec98e72b20df1310e71b59e8721014504a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:22:fa:41:c5:07:9e:88:9d:74:ee:93:3b:40: e1:dc:6b:88:35:9e:91:78:b2:dd:a1:cf:63:50:0f: a7:26:4b:15:6a:21:30:c1:0f:6e:fd:f1:4d:fc:72: cf:a9:1f:95:35:33:6a:22:da:1f:dd:70:26:85:27: 9e:00:1b:4a:1d:7f:3f:d2:36:d8:74:f0:1f:cd:cc: f8:20:62:96:f3:c1:2a:08:0b:1c:9b:dd:5c:18:3a: 06:b2:2c:66:ce:f9:e6:d5:3f:55:3b:7e:f4:e2:fe: 8e:1a:9c:53:72:a9:88:48:f1:a1:27:21:64:e9:c4: 5b:76:0e:f0:b9:51:68:77:09:ff:73:06:d3:1e:a1: 86:0e:a1:7f:e4:ec:50:7a:11:68:b0:43:eb:af:1a: a4:b9:52:60:91:86:ce:c8:d1:09:98:a4:44:4b:f3: cb:69:af:b1:25:40:96:b8:94:59:a1:e3:c0:0c:ea: ff:66:7d:f8:7c:a2:25:4f:fc:17:90:1b:df:d0:5f: a5:f1:31:76:a8:5a:0b:da:54:af:77:34:e1:10:af: 05:b1:e6:36:3c:6c:1a:93:32:92:64:56:67:ce:ab: 55:aa:88:58:f0:eb:75:16:a7:0b:3a:c0:1c:f8:87: 71:3e:01:b0:98:8f:08:d0:58:c1:12:7a:e3:98:da: a2:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:F3:7C:EC:98:E7:2B:20:DF:13:10:E7:1B:59:E8:72:10:14:50:4A X509v3 Authority Key Identifier: keyid:9E:56:B5:1E:DF:39:EB:F0:66:2B:2C:83:4D:65:D1:BD:1D:E8:25:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nla1Ht856_BmKyyDTWXRvR3oJSI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:88:a5:b1:19:8f:80:f2:fe:26:07:69:42:15:03:ed:ec:6e: ad:a9:88:97:5c:8f:9f:52:a7:fd:ea:91:98:cd:0d:ea:3b:0c: 14:91:82:a7:e6:74:48:4e:c8:c4:74:7c:29:15:15:65:13:65: d5:0d:fb:cd:94:aa:99:00:fe:b5:e1:45:23:51:2c:02:4b:37: a0:a1:e4:1f:60:1f:88:7d:95:8d:ab:44:0c:2d:bc:3d:06:f3: cd:86:76:6d:76:b9:81:b6:fc:f1:40:3a:50:fa:a9:4a:12:be: 69:af:94:06:73:c2:b3:31:ab:4c:b3:3b:d8:6c:7f:4f:f2:2c: c3:c7:2c:2a:1b:8c:d8:f9:58:ec:69:da:23:99:e8:e1:fc:8e: 11:d0:19:b2:20:62:7b:23:60:89:b6:d3:36:8c:a9:8d:5e:42: 75:e0:ab:2e:b2:24:9b:02:31:06:05:46:35:c7:32:c0:30:34: 6b:ce:5b:03:3a:cf:22:af:ea:01:b0:e8:59:6d:ea:35:cf:ee: ac:e3:10:8a:3e:71:65:22:91:1f:37:88:22:83:a1:ad:6b:8d: 31:e1:0e:ce:e8:c3:78:cf:77:db:0f:02:c6:13:b9:3a:38:2c: fb:4e:2a:1a:c0:dc:54:1e:a3:0b:86:e9:6e:34:a5:d7:69:e4: bb:dd:c8:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCRAr8eE6Oh27tOffiOD5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNTZiNTFlZGYzOWViZjA2NjJiMmM4MzRkNjVkMWJkMWRl ODI1MjIwHhcNMjUxMjA2MDUwMTExWhcNMjUxMjA3MDUwMTExWjAzMTEwLwYDVQQD EyhmNWYzN2NlYzk4ZTcyYjIwZGYxMzEwZTcxYjU5ZTg3MjEwMTQ1MDRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliL6QcUHnoiddO6TO0Dh3GuINZ6R eLLdoc9jUA+nJksVaiEwwQ9u/fFN/HLPqR+VNTNqItof3XAmhSeeABtKHX8/0jbY dPAfzcz4IGKW88EqCAscm91cGDoGsixmzvnm1T9VO3704v6OGpxTcqmISPGhJyFk 6cRbdg7wuVFodwn/cwbTHqGGDqF/5OxQehFosEPrrxqkuVJgkYbOyNEJmKRES/PL aa+xJUCWuJRZoePADOr/Zn34fKIlT/wXkBvf0F+l8TF2qFoL2lSvdzThEK8FseY2 PGwakzKSZFZnzqtVqohY8Ot1FqcLOsAc+IdxPgGwmI8I0FjBEnrjmNqiAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPXzfOyY5ysg3xMQ5xtZ6HIQFFBKMB8GA1UdIwQY MBaAFJ5WtR7fOevwZissg01l0b0d6CUiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmxhMUh0ODU2X0JtS3l5RFRXWFJ2UjNvSlNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9lNjNmMmUtOTdiMC00ZGU4LTg3ZWQt NTYzYTE0ZTg2ZDYwLzEvbmxhMUh0ODU2X0JtS3l5RFRXWFJ2UjNvSlNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC9lNjNmMmUtOTdiMC00ZGU4LTg3ZWQtNTYzYTE0ZTg2ZDYw LzEvbmxhMUh0ODU2X0JtS3l5RFRXWFJ2UjNvSlNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAToilsRmP gPL+JgdpQhUD7exuramIl1yPn1Kn/eqRmM0N6jsMFJGCp+Z0SE7IxHR8KRUVZRNl 1Q37zZSqmQD+teFFI1EsAks3oKHkH2AfiH2VjatEDC28PQbzzYZ2bXa5gbb88UA6 UPqpShK+aa+UBnPCszGrTLM72Gx/T/Isw8csKhuM2PlY7GnaI5no4fyOEdAZsiBi eyNgibbTNoypjV5CdeCrLrIkmwIxBgVGNccywDA0a85bAzrPIq/qAbDoWW3qNc/u rOMQij5xZSKRHzeIIoOhrWuNMeEOzujDeM932w8CxhO5Ojgs+04qGsDcVB6jC4bp bjSl12nku93I/A== -----END CERTIFICATE-----Generated at Sat Dec 6 07:41:50 2025 by rpki-client