This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.mft File: NHK1U_DLCxOQDUwuDmx3msoD47E.mft (raw, json) Hash identifier: yBj9PQQsbXzni468xjwvcuu9x83EgEVd9/0BUPcr4Z8= Subject key identifier: 18:64:BA:89:19:05:E5:E3:E7:54:F5:64:74:7C:84:18:21:5F:B3:59 Authority key identifier: 34:72:B5:53:F0:CB:0B:13:90:0D:4C:2E:0E:6C:77:9A:CA:03:E3:B1 Certificate issuer: /CN=3472b553f0cb0b13900d4c2e0e6c779aca03e3b1 Certificate serial: 019BF4D062473CDF3D72D178C65CFD934B91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHK1U_DLCxOQDUwuDmx3msoD47E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.mft Manifest number: 1517 Signing time: Sun 25 Jan 2026 11:00:55 +0000 Manifest this update: Sun 25 Jan 2026 11:00:55 +0000 Manifest next update: Mon 26 Jan 2026 11:00:55 +0000 Files and hashes: 1: 122r5D9hg8_HADqcPzhfHNNyyQI.roa (hash: b13CPy4CxS/Si1pCOjKwo3Dds43c0jLnWbM4fwD9emw=) 2: 6PRCGkiI_XzJ_VOqrhMmdFSTSrI.roa (hash: 9NL6gQ94K7F43Bm5nwrA+CCTiLxRLaQDrGPgp2DhJyM=) 3: JTblbDk5qmgs49V1IeqJoG_e-jI.roa (hash: jSRnDLnRJxGnNzUMCH/eyYcLAQj4Mpkh/xUJIElD2Jw=) 4: NHK1U_DLCxOQDUwuDmx3msoD47E.crl (hash: xpFyfsLCkix3QoNqYHLlEGzxaUCkugNbOAMY/r3myC4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.mft rsync://rpki.ripe.net/repository/DEFAULT/NHK1U_DLCxOQDUwuDmx3msoD47E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d0:62:47:3c:df:3d:72:d1:78:c6:5c:fd:93:4b:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3472b553f0cb0b13900d4c2e0e6c779aca03e3b1 Validity Not Before: Jan 25 11:00:55 2026 GMT Not After : Jan 26 11:00:55 2026 GMT Subject: CN=1864ba891905e5e3e754f564747c8418215fb359 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:24:e9:c3:45:08:ac:4d:1b:42:7c:63:ee:aa: 9e:72:9e:97:0b:3f:3f:ed:9a:4b:be:ab:57:12:9b: f2:c0:9a:39:a3:09:85:9f:73:a5:6b:12:4f:6a:21: 1a:ba:cc:fc:8c:71:30:6e:dc:c9:15:1d:5c:60:1b: 3b:48:c0:8d:95:b0:2d:c4:fd:32:16:66:d0:c4:b3: dd:8b:6d:5b:c9:7f:a0:b2:93:2f:1a:74:72:b9:e5: 4d:6a:99:e6:ae:c2:24:d8:99:5d:d5:2d:26:13:81: 1f:3a:d9:e6:19:71:a3:29:10:0d:ad:5b:c8:ad:23: f7:2b:e6:c0:44:aa:e3:8c:2f:db:f9:bb:89:5f:e8: 44:66:ed:14:10:d3:6d:fb:46:2b:49:15:9b:bd:7f: 82:4a:90:4d:70:95:d2:bb:20:5f:c1:7d:d8:3d:2b: 9d:0d:dd:ea:8b:f6:3d:62:ca:86:25:0f:62:51:af: 64:d7:c0:e0:69:04:42:22:48:9f:b3:cf:6c:b0:37: df:2e:e3:42:47:b8:11:70:31:85:c7:16:57:09:c8: 90:20:b7:ab:52:75:ef:24:06:ee:4c:78:0b:76:4d: 20:44:8f:0e:94:96:e6:38:8f:36:33:5b:58:40:72: 4b:06:9e:fd:6c:4d:ac:0e:eb:7c:09:15:fb:e7:20: 4d:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:64:BA:89:19:05:E5:E3:E7:54:F5:64:74:7C:84:18:21:5F:B3:59 X509v3 Authority Key Identifier: keyid:34:72:B5:53:F0:CB:0B:13:90:0D:4C:2E:0E:6C:77:9A:CA:03:E3:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHK1U_DLCxOQDUwuDmx3msoD47E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:cc:7f:e7:59:4f:fb:51:f9:4a:c0:87:f0:bb:36:4c:e3:eb: b6:4e:b8:0d:f2:a3:0e:49:a1:13:36:6e:a6:6f:60:b0:ac:c5: 44:91:3a:51:4b:72:0e:ca:93:23:1e:a7:1b:57:fe:ae:ec:a9: 0a:19:06:27:02:d2:02:ac:85:2c:d9:d6:f4:01:ac:cf:ed:53: 8e:21:67:ba:42:86:d2:4e:97:12:ba:25:bc:de:22:b0:22:bd: 5f:1f:d1:1e:6c:a6:1a:9c:b3:cf:c1:ce:c3:03:77:86:22:38: ee:39:1f:9b:a6:c4:e2:27:2b:0c:45:23:1a:5b:c8:b5:61:52: 90:d2:2b:ad:32:59:aa:cc:10:08:f3:0c:7f:39:44:cd:3e:17: 6d:a2:d3:d6:94:29:38:02:3f:2b:1a:66:c7:6f:9d:bb:20:e0: e6:65:e5:0f:af:72:aa:50:c6:10:aa:32:a4:ba:96:a1:f1:26: 1d:40:77:6c:4d:a4:0f:74:8f:3c:61:c9:be:8c:0c:ce:eb:cb: b3:12:cb:61:cc:2c:2c:c7:fd:d6:b8:bd:ff:61:6f:f3:d8:7f: ea:92:b7:8c:07:c8:e3:e2:6e:bc:07:17:fa:c7:c1:80:78:fe: cf:23:5f:e1:45:bc:84:6a:36:e0:ec:96:ec:3f:ed:70:32:12: 1c:04:29:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00GJHPN89ctF4xlz9k0uRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0NzJiNTUzZjBjYjBiMTM5MDBkNGMyZTBlNmM3NzlhY2Ew M2UzYjEwHhcNMjYwMTI1MTEwMDU1WhcNMjYwMTI2MTEwMDU1WjAzMTEwLwYDVQQD EygxODY0YmE4OTE5MDVlNWUzZTc1NGY1NjQ3NDdjODQxODIxNWZiMzU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyTpw0UIrE0bQnxj7qqecp6XCz8/ 7ZpLvqtXEpvywJo5owmFn3OlaxJPaiEausz8jHEwbtzJFR1cYBs7SMCNlbAtxP0y FmbQxLPdi21byX+gspMvGnRyueVNapnmrsIk2Jld1S0mE4EfOtnmGXGjKRANrVvI rSP3K+bARKrjjC/b+buJX+hEZu0UENNt+0YrSRWbvX+CSpBNcJXSuyBfwX3YPSud Dd3qi/Y9YsqGJQ9iUa9k18DgaQRCIkifs89ssDffLuNCR7gRcDGFxxZXCciQILer UnXvJAbuTHgLdk0gRI8OlJbmOI82M1tYQHJLBp79bE2sDut8CRX75yBNBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBhkuokZBeXj51T1ZHR8hBghX7NZMB8GA1UdIwQY MBaAFDRytVPwywsTkA1MLg5sd5rKA+OxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkhLMVVfRExDeE9RRFV3dURteDNtc29ENDdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8wNWVkMmYtYzRmNy00NDE3LWE0ZmIt MGQyMDUyNWVkYzc0LzEvTkhLMVVfRExDeE9RRFV3dURteDNtc29ENDdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi8wNWVkMmYtYzRmNy00NDE3LWE0ZmItMGQyMDUyNWVkYzc0 LzEvTkhLMVVfRExDeE9RRFV3dURteDNtc29ENDdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkcx/51lP +1H5SsCH8Ls2TOPrtk64DfKjDkmhEzZupm9gsKzFRJE6UUtyDsqTIx6nG1f+ruyp ChkGJwLSAqyFLNnW9AGsz+1TjiFnukKG0k6XErolvN4isCK9Xx/RHmymGpyzz8HO wwN3hiI47jkfm6bE4icrDEUjGlvItWFSkNIrrTJZqswQCPMMfzlEzT4XbaLT1pQp OAI/Kxpmx2+duyDg5mXlD69yqlDGEKoypLqWofEmHUB3bE2kD3SPPGHJvowMzuvL sxLLYcwsLMf91ri9/2Fv89h/6pK3jAfI4+JuvAcX+sfBgHj+zyNf4UW8hGo24OyW 7D/tcDISHAQpAA== -----END CERTIFICATE-----Generated at Sun Jan 25 16:23:28 2026 by rpki-client