This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/7f78e3-0ccd-41fc-9883-69be037bf079/1/nmh1g4EMwAZO207-QFf1phpV5ws.mft File: nmh1g4EMwAZO207-QFf1phpV5ws.mft (raw, json) Hash identifier: UakVLx4+CjS6mfroFIkLEmsfoBp360pDcK+kqMNQ2EQ= Subject key identifier: 0A:8F:94:A9:13:02:0C:50:3F:0F:75:A7:0F:C6:EE:DB:B0:9D:96:5A Authority key identifier: 9E:68:75:83:81:0C:C0:06:4E:DB:4E:FE:40:57:F5:A6:1A:55:E7:0B Certificate issuer: /CN=9e687583810cc0064edb4efe4057f5a61a55e70b Certificate serial: 019B2B8A1EA5A17C5F56156FD78D64EC18DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nmh1g4EMwAZO207-QFf1phpV5ws.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/7f78e3-0ccd-41fc-9883-69be037bf079/1/nmh1g4EMwAZO207-QFf1phpV5ws.mft Manifest number: 0654 Signing time: Wed 17 Dec 2025 09:00:30 +0000 Manifest this update: Wed 17 Dec 2025 09:00:30 +0000 Manifest next update: Thu 18 Dec 2025 09:00:30 +0000 Files and hashes: 1: nmh1g4EMwAZO207-QFf1phpV5ws.crl (hash: WhSVAXrUEO3pz7GWjxTtjza2O4cBK1NnMKGfICW/HaA=) 2: qw-aF3yIkt-72WfpE7ETeHkvHMU.roa (hash: 3nZH1KB8lozx5AtSdJomkLmrFoDBz1VyVSOmQdHc1wE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/7f78e3-0ccd-41fc-9883-69be037bf079/1/nmh1g4EMwAZO207-QFf1phpV5ws.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/7f78e3-0ccd-41fc-9883-69be037bf079/1/nmh1g4EMwAZO207-QFf1phpV5ws.mft rsync://rpki.ripe.net/repository/DEFAULT/nmh1g4EMwAZO207-QFf1phpV5ws.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:8a:1e:a5:a1:7c:5f:56:15:6f:d7:8d:64:ec:18:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e687583810cc0064edb4efe4057f5a61a55e70b Validity Not Before: Dec 17 09:00:30 2025 GMT Not After : Dec 18 09:00:30 2025 GMT Subject: CN=0a8f94a913020c503f0f75a70fc6eedbb09d965a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:4b:d1:8a:d7:d4:97:7c:05:3a:43:3a:ea:f1: b1:78:10:43:8f:72:27:4c:41:60:e5:21:89:c3:0b: a7:2c:33:d2:8d:f0:87:1a:e3:2d:3c:41:45:15:60: 87:77:c9:5f:1d:59:15:98:70:df:29:4c:73:77:fc: 5a:67:69:d9:8f:c1:04:94:12:a6:e6:99:c8:b2:ae: 15:a3:17:94:89:b1:c1:80:eb:c4:50:78:9f:10:aa: df:29:2e:84:9e:cf:98:97:62:06:48:6c:6a:b3:e1: 87:5e:70:26:09:ae:2c:28:4a:3f:92:4c:de:bb:38: d2:ab:03:1a:0b:b0:d1:20:27:9c:5d:cb:8b:bd:1d: b9:c7:58:63:7c:f8:f1:59:45:7c:e6:a0:49:5c:aa: 22:c7:ac:80:9e:66:b2:8f:4c:08:f3:28:47:9c:35: 2c:33:80:7c:ab:3b:fd:ef:1b:85:3a:dd:e5:a5:69: af:9a:a8:4d:6f:75:a9:34:5b:f5:a6:6b:29:24:ff: e1:08:0b:e2:64:a8:94:b8:11:10:b8:72:a1:30:9f: e3:8e:02:ea:ba:32:6b:94:e2:1b:50:26:95:87:21: 14:06:b0:26:63:0b:98:26:1b:9e:1d:ed:54:00:f7: 7a:46:46:4c:80:6e:ad:f0:4a:cb:af:d0:25:81:23: 2d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:8F:94:A9:13:02:0C:50:3F:0F:75:A7:0F:C6:EE:DB:B0:9D:96:5A X509v3 Authority Key Identifier: keyid:9E:68:75:83:81:0C:C0:06:4E:DB:4E:FE:40:57:F5:A6:1A:55:E7:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nmh1g4EMwAZO207-QFf1phpV5ws.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/7f78e3-0ccd-41fc-9883-69be037bf079/1/nmh1g4EMwAZO207-QFf1phpV5ws.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/7f78e3-0ccd-41fc-9883-69be037bf079/1/nmh1g4EMwAZO207-QFf1phpV5ws.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:74:f8:66:1d:fb:61:3a:95:44:e5:de:7f:a8:b1:d1:37:e3: 62:4c:1f:cc:44:45:9f:18:55:cc:be:c6:36:17:ae:86:32:19: 63:c4:2e:79:c4:31:b0:10:67:60:ed:6a:4f:16:d2:ae:02:b2: c5:ad:f7:8c:16:8d:ce:c9:d1:dd:c4:ea:88:45:87:cb:05:65: 94:59:e8:c2:73:4b:1b:88:d5:37:a1:1b:f1:89:dc:c3:77:7a: 48:30:9c:0d:04:e5:79:61:4e:65:26:64:ad:06:2d:48:f9:95: 89:eb:8a:ca:a7:f2:b7:41:08:b5:a7:2c:da:44:a7:33:12:39: 3e:ee:04:3a:45:52:a3:91:9d:8c:98:d8:05:9f:e3:f1:9e:2c: 93:09:d9:e7:eb:8c:ac:5b:0f:97:50:fe:6b:12:8b:63:9b:96: 77:c6:ad:de:3b:b2:72:33:a8:ab:0f:76:ed:a1:64:83:5c:ec: 9f:df:51:95:b4:5f:8f:25:72:93:ec:06:9e:4f:aa:0b:19:cf: 19:28:42:3e:0c:2c:4b:66:37:a6:39:de:ee:56:cd:41:68:b9: 48:e2:ba:2a:c5:43:89:a8:22:e8:6e:3b:dd:92:53:4a:0d:ed: 51:c6:79:ff:75:12:06:3e:41:bb:f3:9f:54:d8:9b:6a:8f:77: 3c:c2:c8:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrih6loXxfVhVv141k7BjaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNjg3NTgzODEwY2MwMDY0ZWRiNGVmZTQwNTdmNWE2MWE1 NWU3MGIwHhcNMjUxMjE3MDkwMDMwWhcNMjUxMjE4MDkwMDMwWjAzMTEwLwYDVQQD EygwYThmOTRhOTEzMDIwYzUwM2YwZjc1YTcwZmM2ZWVkYmIwOWQ5NjVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkvRitfUl3wFOkM66vGxeBBDj3In TEFg5SGJwwunLDPSjfCHGuMtPEFFFWCHd8lfHVkVmHDfKUxzd/xaZ2nZj8EElBKm 5pnIsq4VoxeUibHBgOvEUHifEKrfKS6Ens+Yl2IGSGxqs+GHXnAmCa4sKEo/kkze uzjSqwMaC7DRICecXcuLvR25x1hjfPjxWUV85qBJXKoix6yAnmayj0wI8yhHnDUs M4B8qzv97xuFOt3lpWmvmqhNb3WpNFv1pmspJP/hCAviZKiUuBEQuHKhMJ/jjgLq ujJrlOIbUCaVhyEUBrAmYwuYJhueHe1UAPd6RkZMgG6t8ErLr9AlgSMtHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAqPlKkTAgxQPw91pw/G7tuwnZZaMB8GA1UdIwQY MBaAFJ5odYOBDMAGTttO/kBX9aYaVecLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbm1oMWc0RU13QVpPMjA3LVFGZjFwaHBWNXdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC83Zjc4ZTMtMGNjZC00MWZjLTk4ODMt NjliZTAzN2JmMDc5LzEvbm1oMWc0RU13QVpPMjA3LVFGZjFwaHBWNXdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC83Zjc4ZTMtMGNjZC00MWZjLTk4ODMtNjliZTAzN2JmMDc5 LzEvbm1oMWc0RU13QVpPMjA3LVFGZjFwaHBWNXdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUnT4Zh37 YTqVROXef6ix0TfjYkwfzERFnxhVzL7GNheuhjIZY8QuecQxsBBnYO1qTxbSrgKy xa33jBaNzsnR3cTqiEWHywVllFnownNLG4jVN6Eb8Yncw3d6SDCcDQTleWFOZSZk rQYtSPmVieuKyqfyt0EItacs2kSnMxI5Pu4EOkVSo5GdjJjYBZ/j8Z4skwnZ5+uM rFsPl1D+axKLY5uWd8at3juycjOoqw927aFkg1zsn99RlbRfjyVyk+wGnk+qCxnP GShCPgwsS2Y3pjne7lbNQWi5SOK6KsVDiagi6G473ZJTSg3tUcZ5/3USBj5Bu/Of VNibao93PMLIEA== -----END CERTIFICATE-----Generated at Wed Dec 17 19:54:57 2025 by rpki-client