This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/7f78e3-0ccd-41fc-9883-69be037bf079/1/nmh1g4EMwAZO207-QFf1phpV5ws.mft File: nmh1g4EMwAZO207-QFf1phpV5ws.mft (raw, json) Hash identifier: Xvw3XrnHzn658RJACjKMtNLNYnH67OdGEm3G/Ukv+jg= Subject key identifier: C4:A9:84:2D:EC:A6:DE:B9:2C:3F:73:24:9D:D9:D4:BE:EE:54:01:B9 Authority key identifier: 9E:68:75:83:81:0C:C0:06:4E:DB:4E:FE:40:57:F5:A6:1A:55:E7:0B Certificate issuer: /CN=9e687583810cc0064edb4efe4057f5a61a55e70b Certificate serial: 019B3155A483626E686419D37CE4212F482E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nmh1g4EMwAZO207-QFf1phpV5ws.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/7f78e3-0ccd-41fc-9883-69be037bf079/1/nmh1g4EMwAZO207-QFf1phpV5ws.mft Manifest number: 0657 Signing time: Thu 18 Dec 2025 12:00:54 +0000 Manifest this update: Thu 18 Dec 2025 12:00:54 +0000 Manifest next update: Fri 19 Dec 2025 12:00:54 +0000 Files and hashes: 1: nmh1g4EMwAZO207-QFf1phpV5ws.crl (hash: hh+MKNhm1x02+pZ5D9i9fdZhzLvojot04HEcpGbOpaw=) 2: qw-aF3yIkt-72WfpE7ETeHkvHMU.roa (hash: 3nZH1KB8lozx5AtSdJomkLmrFoDBz1VyVSOmQdHc1wE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/7f78e3-0ccd-41fc-9883-69be037bf079/1/nmh1g4EMwAZO207-QFf1phpV5ws.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/7f78e3-0ccd-41fc-9883-69be037bf079/1/nmh1g4EMwAZO207-QFf1phpV5ws.mft rsync://rpki.ripe.net/repository/DEFAULT/nmh1g4EMwAZO207-QFf1phpV5ws.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:55:a4:83:62:6e:68:64:19:d3:7c:e4:21:2f:48:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e687583810cc0064edb4efe4057f5a61a55e70b Validity Not Before: Dec 18 12:00:54 2025 GMT Not After : Dec 19 12:00:54 2025 GMT Subject: CN=c4a9842deca6deb92c3f73249dd9d4beee5401b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:cd:b7:87:b1:39:6c:db:c1:14:bc:8e:4c:f1: 13:35:60:cf:9d:88:05:e9:bb:5b:73:3d:92:51:fe: 23:1b:bf:17:8a:9b:f2:c9:c3:60:37:52:89:e8:fc: e0:dc:e2:82:03:4a:48:41:2d:1c:76:54:4a:6f:3c: d6:95:b9:18:52:07:77:54:36:5a:fb:e0:02:9e:d8: 01:fc:ef:ac:e8:38:90:1d:e9:c3:e2:b8:bc:35:85: a7:57:7c:1c:75:21:34:7c:4f:20:6a:2f:e8:19:07: b8:60:a6:94:b8:c4:1b:6f:c9:c5:c9:7e:1e:d1:77: 9d:da:a8:a2:58:4d:f6:d5:e2:c4:e7:59:d4:db:85: d1:fe:74:6a:fd:d3:65:78:f3:ca:b1:fc:4a:26:c0: 71:e1:01:4b:e3:47:97:91:7f:31:ed:f1:55:6f:b2: b8:ac:9a:04:02:2e:3a:4e:ec:b9:e9:58:56:a1:2f: f3:47:54:ed:a0:ec:b9:1f:67:d4:c4:43:dc:37:03: 42:82:5b:40:00:e1:fe:ae:04:ba:38:fa:91:f8:91: 27:f1:d9:9e:01:fc:81:dd:e8:a0:5d:35:37:0d:4d: c3:13:3f:ba:43:c9:cc:c9:9a:e6:f7:0f:d4:05:69: 2e:38:f9:6e:46:1c:e3:9c:e4:c9:1b:85:35:f2:8f: 52:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:A9:84:2D:EC:A6:DE:B9:2C:3F:73:24:9D:D9:D4:BE:EE:54:01:B9 X509v3 Authority Key Identifier: keyid:9E:68:75:83:81:0C:C0:06:4E:DB:4E:FE:40:57:F5:A6:1A:55:E7:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nmh1g4EMwAZO207-QFf1phpV5ws.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/7f78e3-0ccd-41fc-9883-69be037bf079/1/nmh1g4EMwAZO207-QFf1phpV5ws.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/7f78e3-0ccd-41fc-9883-69be037bf079/1/nmh1g4EMwAZO207-QFf1phpV5ws.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:d8:f0:7a:38:af:be:06:a8:63:bd:ec:51:e2:3c:12:1c:75: c7:da:69:04:9a:c4:0f:b1:56:07:bf:34:9a:8b:75:39:11:cd: 05:5c:d3:ba:b0:1d:1e:28:78:29:03:4f:8f:11:ee:f5:5a:bf: 4e:e9:b6:8f:77:ab:a6:f0:ba:4c:0c:62:c9:22:3a:37:36:b8: 20:ae:34:fc:1c:29:fa:f0:0f:b2:d4:d5:8a:b0:23:bb:51:0d: eb:c1:48:97:13:40:74:3c:38:ab:2a:f4:00:4a:3c:3c:c3:58: dd:8f:8c:3f:f7:a7:d7:14:aa:e3:7f:b7:5b:51:e3:5b:e0:cb: f1:1b:6e:05:f1:88:04:33:e5:c3:cf:8c:e2:ed:13:63:83:51: dd:b1:e2:cb:1c:17:1d:1f:87:a2:0a:dc:73:b7:2e:92:27:5d: 2a:bc:c3:0f:e6:ac:45:82:84:07:71:a5:86:c7:aa:a3:1c:9e: 1a:99:13:3b:69:ef:2d:e3:0f:3e:be:36:83:92:3a:5d:b1:48: 8a:34:82:ac:49:f1:19:22:f0:55:74:7f:b6:18:97:86:cb:34: 42:63:9f:0c:2d:a8:8d:a6:9b:90:93:d4:fd:ad:a5:46:0e:97: 80:ed:2d:ad:e4:02:e7:f2:2b:60:a8:2e:90:77:e0:51:fa:2a: 27:c9:c4:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxVaSDYm5oZBnTfOQhL0guMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNjg3NTgzODEwY2MwMDY0ZWRiNGVmZTQwNTdmNWE2MWE1 NWU3MGIwHhcNMjUxMjE4MTIwMDU0WhcNMjUxMjE5MTIwMDU0WjAzMTEwLwYDVQQD EyhjNGE5ODQyZGVjYTZkZWI5MmMzZjczMjQ5ZGQ5ZDRiZWVlNTQwMWI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwc23h7E5bNvBFLyOTPETNWDPnYgF 6btbcz2SUf4jG78XipvyycNgN1KJ6Pzg3OKCA0pIQS0cdlRKbzzWlbkYUgd3VDZa ++ACntgB/O+s6DiQHenD4ri8NYWnV3wcdSE0fE8gai/oGQe4YKaUuMQbb8nFyX4e 0Xed2qiiWE321eLE51nU24XR/nRq/dNlePPKsfxKJsBx4QFL40eXkX8x7fFVb7K4 rJoEAi46Tuy56VhWoS/zR1TtoOy5H2fUxEPcNwNCgltAAOH+rgS6OPqR+JEn8dme AfyB3eigXTU3DU3DEz+6Q8nMyZrm9w/UBWkuOPluRhzjnOTJG4U18o9SzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMSphC3spt65LD9zJJ3Z1L7uVAG5MB8GA1UdIwQY MBaAFJ5odYOBDMAGTttO/kBX9aYaVecLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbm1oMWc0RU13QVpPMjA3LVFGZjFwaHBWNXdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC83Zjc4ZTMtMGNjZC00MWZjLTk4ODMt NjliZTAzN2JmMDc5LzEvbm1oMWc0RU13QVpPMjA3LVFGZjFwaHBWNXdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC83Zjc4ZTMtMGNjZC00MWZjLTk4ODMtNjliZTAzN2JmMDc5 LzEvbm1oMWc0RU13QVpPMjA3LVFGZjFwaHBWNXdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFdjwejiv vgaoY73sUeI8Ehx1x9ppBJrED7FWB780mot1ORHNBVzTurAdHih4KQNPjxHu9Vq/ Tum2j3erpvC6TAxiySI6Nza4IK40/Bwp+vAPstTVirAju1EN68FIlxNAdDw4qyr0 AEo8PMNY3Y+MP/en1xSq43+3W1HjW+DL8RtuBfGIBDPlw8+M4u0TY4NR3bHiyxwX HR+Hogrcc7cukiddKrzDD+asRYKEB3GlhseqoxyeGpkTO2nvLeMPPr42g5I6XbFI ijSCrEnxGSLwVXR/thiXhss0QmOfDC2ojaabkJPU/a2lRg6XgO0treQC5/IrYKgu kHfgUfoqJ8nE4A== -----END CERTIFICATE-----Generated at Thu Dec 18 14:19:13 2025 by rpki-client