This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.mft File: NHK1U_DLCxOQDUwuDmx3msoD47E.mft (raw, json) Hash identifier: U0Q3hG/4/7WMBzggwxDkJaIvnqBdgFyssRIPkENi5g4= Subject key identifier: 1B:4B:D2:80:96:2C:B6:1C:B7:F8:E7:4D:4A:0C:F7:7B:F2:6C:6D:8E Authority key identifier: 34:72:B5:53:F0:CB:0B:13:90:0D:4C:2E:0E:6C:77:9A:CA:03:E3:B1 Certificate issuer: /CN=3472b553f0cb0b13900d4c2e0e6c779aca03e3b1 Certificate serial: 019AF5E637238A13FB3F5675710AC59A5AC0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHK1U_DLCxOQDUwuDmx3msoD47E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.mft Manifest number: 1492 Signing time: Sat 06 Dec 2025 23:01:36 +0000 Manifest this update: Sat 06 Dec 2025 23:01:36 +0000 Manifest next update: Sun 07 Dec 2025 23:01:36 +0000 Files and hashes: 1: 6-1i0N_EbFZTo9ANl2hYmIXY6kM.roa (hash: QWIH2VncfiqkLEzvbdcgtq9ctbO+I+7aPSyiE4vt93o=) 2: NHK1U_DLCxOQDUwuDmx3msoD47E.crl (hash: PXtLUTCpjktICkCHXT4awhlbwDhKMG2SGrMbk7C8YUM=) 3: PzRiqf6-YVqlskQDhqkV86tLS2k.roa (hash: hb2uYQFMFVLH00O7jFoKdZGYwNQ4nvgVdgn8uModie8=) 4: gu7MjE2UvzrS0XGUY6b4iCkG2LQ.roa (hash: kYyvw5YUpEYRs591UgfTOuS34Jj5NCcUlDlrBVHVgqQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.mft rsync://rpki.ripe.net/repository/DEFAULT/NHK1U_DLCxOQDUwuDmx3msoD47E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e6:37:23:8a:13:fb:3f:56:75:71:0a:c5:9a:5a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3472b553f0cb0b13900d4c2e0e6c779aca03e3b1 Validity Not Before: Dec 6 23:01:36 2025 GMT Not After : Dec 7 23:01:36 2025 GMT Subject: CN=1b4bd280962cb61cb7f8e74d4a0cf77bf26c6d8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:e3:db:ce:04:0d:ec:2f:91:ac:bd:41:f7:9c: a4:e2:d0:81:04:e2:e0:8e:e0:78:94:a8:30:b0:0b: 77:c4:2f:0b:70:12:a1:28:98:59:3e:6b:c5:45:ee: 4d:5a:bb:d3:87:89:3b:22:de:8c:cd:a0:c5:8d:2c: 01:21:63:52:31:ed:76:52:8c:51:e2:2d:bf:fb:8a: a7:9f:da:2a:c5:81:ed:f7:50:1d:da:b0:ff:79:e0: dc:d7:f5:36:9c:ab:55:54:2a:0d:1e:f6:24:a5:20: 52:6c:d9:67:8b:c9:2f:d0:d7:72:b0:9c:20:7e:fb: 0c:bf:35:04:57:4c:64:72:5f:c3:e4:63:8f:e0:cb: 15:51:1e:0c:ef:2f:2e:c9:5e:02:9c:2e:ca:c1:a7: 20:4a:d8:dc:52:e4:46:44:f5:21:9d:ef:fe:d1:c5: d8:d4:ee:b5:00:3f:54:56:26:e7:3d:4d:ac:b7:3c: 07:88:93:6f:97:7c:69:2d:2f:27:d5:78:bc:34:53: 40:09:67:98:c2:ad:ae:50:ae:81:66:35:13:c5:75: f3:63:37:1d:1f:4e:4c:17:b4:80:c7:ee:7d:c0:ab: 0e:fd:b6:4c:5f:44:98:e3:84:85:c1:71:92:a3:b8: 53:e9:e9:bb:f4:29:92:f4:30:04:b3:57:3f:ef:0f: 71:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:4B:D2:80:96:2C:B6:1C:B7:F8:E7:4D:4A:0C:F7:7B:F2:6C:6D:8E X509v3 Authority Key Identifier: keyid:34:72:B5:53:F0:CB:0B:13:90:0D:4C:2E:0E:6C:77:9A:CA:03:E3:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHK1U_DLCxOQDUwuDmx3msoD47E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:d9:ad:a4:39:c8:4b:21:30:56:64:81:80:fc:39:e9:73:2c: 08:b9:2d:16:3d:f5:af:1e:dd:3f:88:f3:b3:93:35:21:25:6c: ed:66:24:e5:77:f8:9e:b1:8f:44:4c:f2:1c:39:df:ab:ac:51: 2a:55:8a:19:be:66:ce:54:7c:03:5b:d2:7b:02:bf:bf:7d:81: 8f:08:bb:f3:9b:cf:1a:f4:5f:bd:a1:03:15:1e:c1:f8:56:4c: b4:5e:96:ff:a3:22:12:35:5c:c4:82:46:b8:10:48:60:c2:4c: 3d:c9:4b:1b:72:c2:c0:e2:43:6b:4a:f0:c7:90:86:45:95:7c: fe:08:86:15:0d:fe:b9:3f:e2:64:f8:3c:2e:a5:5f:41:8a:1c: ac:ca:9b:7b:13:81:9a:45:52:ca:56:52:03:c7:1f:3e:73:67: 1c:6a:ce:46:46:f9:46:cc:b8:72:b7:2a:ad:59:f9:e4:1f:ed: 0a:94:c0:fa:0e:be:c4:a1:95:ca:0f:49:7e:eb:2d:9f:5a:77: 61:60:82:da:20:b3:a4:9d:cf:d4:45:ec:ad:1e:74:d0:8a:df: ea:a5:31:f3:8d:cc:ba:79:ca:f1:e0:36:a0:25:4f:2e:f5:ef: f9:ca:42:ba:7e:ac:10:3e:0d:fa:00:e6:dc:8c:4f:52:57:33: 08:11:52:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15jcjihP7P1Z1cQrFmlrAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0NzJiNTUzZjBjYjBiMTM5MDBkNGMyZTBlNmM3NzlhY2Ew M2UzYjEwHhcNMjUxMjA2MjMwMTM2WhcNMjUxMjA3MjMwMTM2WjAzMTEwLwYDVQQD EygxYjRiZDI4MDk2MmNiNjFjYjdmOGU3NGQ0YTBjZjc3YmYyNmM2ZDhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+uPbzgQN7C+RrL1B95yk4tCBBOLg juB4lKgwsAt3xC8LcBKhKJhZPmvFRe5NWrvTh4k7It6MzaDFjSwBIWNSMe12UoxR 4i2/+4qnn9oqxYHt91Ad2rD/eeDc1/U2nKtVVCoNHvYkpSBSbNlni8kv0NdysJwg fvsMvzUEV0xkcl/D5GOP4MsVUR4M7y8uyV4CnC7KwacgStjcUuRGRPUhne/+0cXY 1O61AD9UVibnPU2stzwHiJNvl3xpLS8n1Xi8NFNACWeYwq2uUK6BZjUTxXXzYzcd H05MF7SAx+59wKsO/bZMX0SY44SFwXGSo7hT6em79CmS9DAEs1c/7w9xDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBtL0oCWLLYct/jnTUoM93vybG2OMB8GA1UdIwQY MBaAFDRytVPwywsTkA1MLg5sd5rKA+OxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkhLMVVfRExDeE9RRFV3dURteDNtc29ENDdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8wNWVkMmYtYzRmNy00NDE3LWE0ZmIt MGQyMDUyNWVkYzc0LzEvTkhLMVVfRExDeE9RRFV3dURteDNtc29ENDdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi8wNWVkMmYtYzRmNy00NDE3LWE0ZmItMGQyMDUyNWVkYzc0 LzEvTkhLMVVfRExDeE9RRFV3dURteDNtc29ENDdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB9mtpDnI SyEwVmSBgPw56XMsCLktFj31rx7dP4jzs5M1ISVs7WYk5Xf4nrGPREzyHDnfq6xR KlWKGb5mzlR8A1vSewK/v32Bjwi785vPGvRfvaEDFR7B+FZMtF6W/6MiEjVcxIJG uBBIYMJMPclLG3LCwOJDa0rwx5CGRZV8/giGFQ3+uT/iZPg8LqVfQYocrMqbexOB mkVSylZSA8cfPnNnHGrORkb5Rsy4crcqrVn55B/tCpTA+g6+xKGVyg9Jfustn1p3 YWCC2iCzpJ3P1EXsrR500Irf6qUx843MunnK8eA2oCVPLvXv+cpCun6sED4N+gDm 3IxPUlczCBFS8g== -----END CERTIFICATE-----Generated at Sun Dec 7 01:23:02 2025 by rpki-client