This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft File: NHQhDChBPiYoSCKr6DrW18D3ZPo.mft (raw, json) Hash identifier: WSVKn0HR781NRxkKyWfOH08ygyT/LTC0BOZCD75Dbmc= Subject key identifier: BC:C7:F9:8C:CA:67:35:45:92:6D:73:A7:39:96:98:FE:78:AD:1E:59 Authority key identifier: 34:74:21:0C:28:41:3E:26:28:48:22:AB:E8:3A:D6:D7:C0:F7:64:FA Certificate issuer: /CN=3474210c28413e26284822abe83ad6d7c0f764fa Certificate serial: 019AF19BE210EDA8418B6331A53315B271EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft Manifest number: 1769 Signing time: Sat 06 Dec 2025 03:01:56 +0000 Manifest this update: Sat 06 Dec 2025 03:01:56 +0000 Manifest next update: Sun 07 Dec 2025 03:01:56 +0000 Files and hashes: 1: 1bcuYr7QKJ5bW0bfcIYHS53yG6g.roa (hash: qd4P1coRqTY7B32E2jEnjJekCI9CLXdo/5/4fRHSsDk=) 2: 2yd3628VmNb462n9Ht_mrHJwpz4.roa (hash: jjvaAqc3q0c+UVUm7qyigUPHQ2zsUspQsTjOZ4ZjQ5E=) 3: 77kR0uenLneOf0_otMBTrdwkJ5I.roa (hash: kFgic4lpP8Yb+Wik/VcFSyZzSPM0vnTo7v0lGbnx3eU=) 4: An_xJWf4RJw4Ylw59J21Md85Jws.roa (hash: gk/epjcVW86jJdWfxESndHuaQolg8wlmkWBhHhLsN3Y=) 5: MMs4HnHsbdNr8Ew965SH5DIpvi4.roa (hash: Ku/6dybZerpifq4qXee8mDRjz4eG7rI5ajzOtuGjP0c=) 6: NHQhDChBPiYoSCKr6DrW18D3ZPo.crl (hash: PgBQvuM1iQFpmukE0Giif8zTyQbKVu90Pc/+F8sO02g=) 7: byk_uVbEcBcJ5E54PZILxzilXqs.roa (hash: JCkW4yYVwvgxvyj62HKMLWieGutHlsi8Ja6vFazZOyk=) 8: s_AA60Ddfygbd8EKAGEg6mSlXwc.roa (hash: ENuKCW/gynViV0FOCDZJgVAAEXvbRuvjapJ167NV/i4=) 9: zbORAgVCBGdwMFpkpNpVU4F-JYE.roa (hash: bnmHuORo7L7E/r6zgTIFCwfAOxo5IKx9z46OH+yKYpI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.crl rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:e2:10:ed:a8:41:8b:63:31:a5:33:15:b2:71:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3474210c28413e26284822abe83ad6d7c0f764fa Validity Not Before: Dec 6 03:01:56 2025 GMT Not After : Dec 7 03:01:56 2025 GMT Subject: CN=bcc7f98cca673545926d73a7399698fe78ad1e59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:20:3d:8d:37:1a:44:88:b2:60:f8:c5:8b:22: 97:0d:5d:85:7e:03:6e:b8:94:29:20:96:69:d0:43: ad:5e:ca:60:ab:1f:bc:2b:19:75:79:0a:5b:8b:80: de:08:68:96:22:8e:ab:67:55:ba:a8:d2:4d:e0:60: 37:69:80:b2:30:04:a0:72:04:e7:3e:18:76:06:44: 14:65:ae:0e:9b:eb:cb:e6:54:8c:95:9d:07:87:41: 73:d2:df:46:71:1a:be:e3:77:b6:eb:06:8d:ad:13: 67:48:bc:eb:4a:51:b8:3f:b2:14:c4:1f:d8:41:f8: d2:d8:52:8f:53:58:83:3f:46:cb:7f:00:db:c2:86: 60:ea:a8:a7:d0:d8:41:e2:29:e3:08:13:05:ca:7d: 8b:a0:ed:97:d8:65:d6:6c:97:45:f8:9a:b6:86:d5: 96:e6:52:40:bd:7b:fc:b7:3b:98:75:9e:31:fc:ed: ac:80:f4:ca:52:b1:0e:03:e5:8d:0f:a8:b3:56:46: a6:fa:63:9f:a8:a9:9f:8f:3a:25:b6:07:26:72:31: f9:5c:3f:8d:fa:10:3f:d5:99:94:ff:80:12:18:cd: 19:84:97:b2:a9:43:84:f4:08:ac:7d:be:d7:1e:8a: d9:31:06:e3:39:03:1a:26:9a:b9:07:3e:58:aa:16: 51:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:C7:F9:8C:CA:67:35:45:92:6D:73:A7:39:96:98:FE:78:AD:1E:59 X509v3 Authority Key Identifier: keyid:34:74:21:0C:28:41:3E:26:28:48:22:AB:E8:3A:D6:D7:C0:F7:64:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:72:a3:37:78:28:30:d7:ad:41:dc:f9:5f:a6:98:72:4a:29: b5:9f:c0:38:5d:39:3a:ba:87:17:99:cf:e4:be:f3:b4:37:1e: 3c:ae:6f:9c:bc:7b:52:9b:0b:18:8f:2d:b1:5c:45:d9:01:fd: 8d:75:b6:45:e1:bd:32:a5:28:4f:d5:e3:22:b2:92:95:f0:38: fa:8c:e4:b7:f4:30:01:bf:e3:d8:1d:86:ab:21:f1:c6:3e:a3: 35:6c:a9:25:7e:c5:d9:e3:01:78:1a:2c:14:49:31:0b:b5:9c: 44:34:8a:e4:7e:03:eb:cc:07:92:c3:45:6a:85:3e:c8:f3:54: f3:8c:2f:30:a9:94:a0:fb:a6:be:65:6f:3a:c7:d3:1f:c6:0b: c2:24:3e:34:65:d2:e8:3b:48:5b:ee:bc:d6:78:d2:47:7b:df: e0:db:5c:fd:ca:69:38:48:97:d9:c6:7d:95:80:5c:6e:aa:28: b2:f3:6a:b0:50:92:c6:2d:10:03:44:01:7b:2f:52:58:94:59: 99:d1:c3:f9:75:e8:5a:13:74:8d:50:5b:ee:38:6b:d5:53:c7: 95:80:ae:7d:4c:33:25:92:42:d8:5b:f3:87:cc:14:be:5c:83: ed:af:82:fb:87:f1:d4:16:12:02:f5:70:bf:c0:f1:ee:45:b7: 8c:a5:4a:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm+IQ7ahBi2MxpTMVsnHqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0NzQyMTBjMjg0MTNlMjYyODQ4MjJhYmU4M2FkNmQ3YzBm NzY0ZmEwHhcNMjUxMjA2MDMwMTU2WhcNMjUxMjA3MDMwMTU2WjAzMTEwLwYDVQQD EyhiY2M3Zjk4Y2NhNjczNTQ1OTI2ZDczYTczOTk2OThmZTc4YWQxZTU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyA9jTcaRIiyYPjFiyKXDV2FfgNu uJQpIJZp0EOtXspgqx+8Kxl1eQpbi4DeCGiWIo6rZ1W6qNJN4GA3aYCyMASgcgTn Phh2BkQUZa4Om+vL5lSMlZ0Hh0Fz0t9GcRq+43e26waNrRNnSLzrSlG4P7IUxB/Y QfjS2FKPU1iDP0bLfwDbwoZg6qin0NhB4injCBMFyn2LoO2X2GXWbJdF+Jq2htWW 5lJAvXv8tzuYdZ4x/O2sgPTKUrEOA+WND6izVkam+mOfqKmfjzoltgcmcjH5XD+N +hA/1ZmU/4ASGM0ZhJeyqUOE9Aisfb7XHorZMQbjOQMaJpq5Bz5YqhZRrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLzH+YzKZzVFkm1zpzmWmP54rR5ZMB8GA1UdIwQY MBaAFDR0IQwoQT4mKEgiq+g61tfA92T6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkhRaERDaEJQaVlvU0NLcjZEclcxOEQzWlBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8zZTk5MTYtNGY4YS00YjA4LTg5Yzkt YjBjNzRiNzZlMTgyLzEvTkhRaERDaEJQaVlvU0NLcjZEclcxOEQzWlBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My8zZTk5MTYtNGY4YS00YjA4LTg5YzktYjBjNzRiNzZlMTgy LzEvTkhRaERDaEJQaVlvU0NLcjZEclcxOEQzWlBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkXKjN3go MNetQdz5X6aYckoptZ/AOF05OrqHF5nP5L7ztDcePK5vnLx7UpsLGI8tsVxF2QH9 jXW2ReG9MqUoT9XjIrKSlfA4+ozkt/QwAb/j2B2GqyHxxj6jNWypJX7F2eMBeBos FEkxC7WcRDSK5H4D68wHksNFaoU+yPNU84wvMKmUoPumvmVvOsfTH8YLwiQ+NGXS 6DtIW+681njSR3vf4Ntc/cppOEiX2cZ9lYBcbqoosvNqsFCSxi0QA0QBey9SWJRZ mdHD+XXoWhN0jVBb7jhr1VPHlYCufUwzJZJC2Fvzh8wUvlyD7a+C+4fx1BYSAvVw v8Dx7kW3jKVKkQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:10:07 2025 by rpki-client