This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.mft File: rh__nrDPTAungU4yLsjgPU8fBxg.mft (raw, json) Hash identifier: mMOD2XiGnPWJV5fict3P3GF3DrWc7FM0GB4m+kw0knk= Subject key identifier: DB:EE:1C:91:44:19:F9:D9:3F:7C:68:58:27:70:D9:73:8D:77:43:E8 Authority key identifier: AE:1F:FF:9E:B0:CF:4C:0B:A7:81:4E:32:2E:C8:E0:3D:4F:1F:07:18 Certificate issuer: /CN=ae1fff9eb0cf4c0ba7814e322ec8e03d4f1f0718 Certificate serial: 019AF20997743605A058FF0813D78C77EFF4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rh__nrDPTAungU4yLsjgPU8fBxg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.mft Manifest number: 0DF0 Signing time: Sat 06 Dec 2025 05:01:45 +0000 Manifest this update: Sat 06 Dec 2025 05:01:45 +0000 Manifest next update: Sun 07 Dec 2025 05:01:45 +0000 Files and hashes: 1: FE0N8Kmo4OQXkTM86cmuHztqlpc.roa (hash: SAO+tGk+RLFdSMx2iDPle0Zv+2Ko3C4/o12jLuDIkhw=) 2: rh__nrDPTAungU4yLsjgPU8fBxg.crl (hash: cXv7/7z2Xsk3qsz0WH6gGpZTtO967LF4JnaVEAD5yD8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.crl rsync://rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.mft rsync://rpki.ripe.net/repository/DEFAULT/rh__nrDPTAungU4yLsjgPU8fBxg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:97:74:36:05:a0:58:ff:08:13:d7:8c:77:ef:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae1fff9eb0cf4c0ba7814e322ec8e03d4f1f0718 Validity Not Before: Dec 6 05:01:45 2025 GMT Not After : Dec 7 05:01:45 2025 GMT Subject: CN=dbee1c914419f9d93f7c68582770d9738d7743e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:84:2c:80:68:6e:23:17:21:89:b2:4a:e6:74: 03:e8:88:c2:06:39:82:85:fd:83:ca:9b:c8:28:cf: b9:bd:e5:13:20:16:9a:97:13:63:35:c7:c2:3b:c9: 0c:dd:8a:2f:16:7a:cd:81:69:ed:1a:8f:ec:7f:f0: d2:2a:7b:d2:71:27:45:d8:7d:b8:43:72:82:4b:10: 0b:97:f0:6d:c0:62:62:50:fe:c3:42:73:96:d7:18: 85:82:9b:7f:5a:08:32:b3:8f:74:fe:2f:41:12:15: 6c:b9:52:be:93:86:c4:84:bc:99:8d:7b:1e:04:aa: 79:29:09:77:09:cc:5d:8a:7c:2e:a0:0d:ce:11:59: 8d:65:6a:1a:41:bb:c4:c1:e9:97:ad:8b:dd:77:10: 8e:a7:56:5c:a7:1e:ff:b4:5a:c9:26:55:e7:6b:d6: 5d:45:a2:c2:fe:a1:cb:2b:80:8e:06:fa:df:74:c6: 80:64:84:00:64:46:26:54:6c:92:38:4e:c8:d9:0b: 04:bd:09:d4:70:04:03:96:bf:d3:c7:d4:c5:da:08: 63:d1:83:96:6f:97:ac:fb:4f:16:fe:c6:9c:f6:f0: 46:34:8e:10:ce:61:32:bc:2d:37:fd:d3:dc:68:f6: 21:fd:7a:ff:bc:e9:6d:fc:90:ce:a1:51:9d:81:f3: 80:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:EE:1C:91:44:19:F9:D9:3F:7C:68:58:27:70:D9:73:8D:77:43:E8 X509v3 Authority Key Identifier: keyid:AE:1F:FF:9E:B0:CF:4C:0B:A7:81:4E:32:2E:C8:E0:3D:4F:1F:07:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rh__nrDPTAungU4yLsjgPU8fBxg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:6e:44:ea:f0:bb:45:85:b6:ac:6c:79:bb:be:5a:cc:ef:fd: 26:59:b3:eb:ab:b5:f9:94:97:93:aa:51:2a:51:cd:2e:8e:25: 6b:8a:3b:bb:fd:17:5c:a4:37:05:6a:be:e7:80:5f:55:69:c0: 50:ef:c2:4e:71:d8:12:a5:3c:21:47:bf:c4:a7:df:fd:31:bb: fb:4f:b7:81:06:47:87:79:97:76:41:65:e2:d6:7c:c6:ba:61: 41:72:c0:35:c4:b6:4c:a1:f0:3e:26:6a:20:dc:8a:3e:7c:f2: 34:db:f1:d6:b4:b4:92:e6:55:7d:9b:eb:5b:74:44:8c:d8:3e: fc:81:70:1c:94:7a:14:85:8d:91:3a:5f:7c:69:8b:55:d1:bf: e9:96:c8:a7:4d:5c:e0:6e:12:9d:c0:0d:94:c6:73:6f:de:c5: fe:2e:61:6b:27:9e:75:d3:8d:3c:e5:bb:1e:ce:8d:af:92:35: 4c:5f:23:f5:73:f9:46:28:32:b2:d3:91:14:6c:cc:b0:4b:31: 06:5e:25:17:15:ce:82:83:0d:cf:e8:26:71:81:66:fa:0b:98: 39:20:28:b8:a6:c8:53:51:c8:d0:ee:93:fb:3e:7c:d2:f6:d6: 20:af:11:69:63:5f:02:8b:65:e6:fb:73:07:c1:17:2a:5c:02: 95:30:38:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCZd0NgWgWP8IE9eMd+/0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlMWZmZjllYjBjZjRjMGJhNzgxNGUzMjJlYzhlMDNkNGYx ZjA3MTgwHhcNMjUxMjA2MDUwMTQ1WhcNMjUxMjA3MDUwMTQ1WjAzMTEwLwYDVQQD EyhkYmVlMWM5MTQ0MTlmOWQ5M2Y3YzY4NTgyNzcwZDk3MzhkNzc0M2U4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4QsgGhuIxchibJK5nQD6IjCBjmC hf2DypvIKM+5veUTIBaalxNjNcfCO8kM3YovFnrNgWntGo/sf/DSKnvScSdF2H24 Q3KCSxALl/BtwGJiUP7DQnOW1xiFgpt/Wggys490/i9BEhVsuVK+k4bEhLyZjXse BKp5KQl3CcxdinwuoA3OEVmNZWoaQbvEwemXrYvddxCOp1Zcpx7/tFrJJlXna9Zd RaLC/qHLK4COBvrfdMaAZIQAZEYmVGySOE7I2QsEvQnUcAQDlr/Tx9TF2ghj0YOW b5es+08W/sac9vBGNI4QzmEyvC03/dPcaPYh/Xr/vOlt/JDOoVGdgfOA6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNvuHJFEGfnZP3xoWCdw2XONd0PoMB8GA1UdIwQY MBaAFK4f/56wz0wLp4FOMi7I4D1PHwcYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmhfX25yRFBUQXVuZ1U0eUxzamdQVThmQnhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8wZTlmYjktZjVhNy00NjZhLThmODEt OWUxMDI5NGExOGVhLzEvcmhfX25yRFBUQXVuZ1U0eUxzamdQVThmQnhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8wZTlmYjktZjVhNy00NjZhLThmODEtOWUxMDI5NGExOGVh LzEvcmhfX25yRFBUQXVuZ1U0eUxzamdQVThmQnhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFm5E6vC7 RYW2rGx5u75azO/9Jlmz66u1+ZSXk6pRKlHNLo4la4o7u/0XXKQ3BWq+54BfVWnA UO/CTnHYEqU8IUe/xKff/TG7+0+3gQZHh3mXdkFl4tZ8xrphQXLANcS2TKHwPiZq INyKPnzyNNvx1rS0kuZVfZvrW3REjNg+/IFwHJR6FIWNkTpffGmLVdG/6ZbIp01c 4G4SncANlMZzb97F/i5hayeeddONPOW7Hs6Nr5I1TF8j9XP5RigystORFGzMsEsx Bl4lFxXOgoMNz+gmcYFm+guYOSAouKbIU1HI0O6T+z580vbWIK8RaWNfAotl5vtz B8EXKlwClTA4/w== -----END CERTIFICATE-----Generated at Sat Dec 6 08:09:37 2025 by rpki-client