This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.mft File: NhfAZZZmmF4YXYQSHowgo2ROqY0.mft (raw, json) Hash identifier: i5oosiQk0H3R9wVzv3FYub01ZMiX3Vw8XcNfVcDTvCU= Subject key identifier: E4:D7:29:77:FC:F0:88:00:13:A1:A3:DC:A9:7F:44:8B:76:DD:05:91 Authority key identifier: 36:17:C0:65:96:66:98:5E:18:5D:84:12:1E:8C:20:A3:64:4E:A9:8D Certificate issuer: /CN=3617c0659666985e185d84121e8c20a3644ea98d Certificate serial: 019AF276E9BC1977625FCD6C14C5E4BC844F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhfAZZZmmF4YXYQSHowgo2ROqY0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.mft Manifest number: 0FE6 Signing time: Sat 06 Dec 2025 07:01:10 +0000 Manifest this update: Sat 06 Dec 2025 07:01:10 +0000 Manifest next update: Sun 07 Dec 2025 07:01:10 +0000 Files and hashes: 1: NhfAZZZmmF4YXYQSHowgo2ROqY0.crl (hash: s6pQXm+aXE1w0/dc0RYJ/JmqmBX1IrcPA7fayP4GU+4=) 2: ZFMFiXOWwPj8k4IMO6NkGD3u9_Y.roa (hash: d308Fz0xAcOGQMBvbHe9umSC8kJ11mxoDxfXwvbWkEI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.mft rsync://rpki.ripe.net/repository/DEFAULT/NhfAZZZmmF4YXYQSHowgo2ROqY0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:e9:bc:19:77:62:5f:cd:6c:14:c5:e4:bc:84:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3617c0659666985e185d84121e8c20a3644ea98d Validity Not Before: Dec 6 07:01:10 2025 GMT Not After : Dec 7 07:01:10 2025 GMT Subject: CN=e4d72977fcf0880013a1a3dca97f448b76dd0591 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:0b:de:4d:43:55:66:53:94:11:b8:7c:23:cb: 44:10:62:0d:e2:c3:08:f7:6f:97:1a:b7:c9:ff:ba: 5c:f3:0b:ff:08:ac:c0:7d:f4:c0:73:67:10:c6:ac: 38:32:54:63:e1:e3:ae:4d:a7:24:43:78:df:df:c3: 05:a4:79:d7:ac:ee:16:7c:a8:30:1d:25:74:4b:4b: 8e:64:1d:c9:39:14:bf:a6:c2:00:87:0e:40:6f:55: 0d:fc:6a:6b:9f:57:94:87:9c:bd:bb:a5:91:69:75: 9d:c3:f2:9d:f0:45:7f:88:d3:0b:a3:30:6f:8f:f9: 2a:ae:e7:c6:6e:80:67:58:be:e0:9d:fd:73:d4:4a: 27:81:ed:aa:c5:f7:fa:21:d0:6c:65:a1:e3:3b:02: a5:bc:61:e5:24:47:6e:d2:34:23:47:63:48:9f:ae: 2a:18:96:f4:8e:6a:d6:3a:87:a3:e1:d2:27:1a:f9: ae:6d:f5:b5:6f:07:8f:17:a1:10:57:af:bc:ad:7a: 5b:03:64:60:18:4c:2b:c1:c8:ca:35:df:03:23:4b: c0:de:28:ce:f5:4f:a6:6e:06:9b:b8:3f:9a:81:39: b1:75:54:94:7b:01:d9:33:c0:ba:c3:27:12:6d:67: c3:48:fa:64:af:01:45:00:68:c4:61:89:3f:19:4c: 30:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:D7:29:77:FC:F0:88:00:13:A1:A3:DC:A9:7F:44:8B:76:DD:05:91 X509v3 Authority Key Identifier: keyid:36:17:C0:65:96:66:98:5E:18:5D:84:12:1E:8C:20:A3:64:4E:A9:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhfAZZZmmF4YXYQSHowgo2ROqY0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:45:9c:e4:b8:5a:58:a5:ab:63:7f:30:bd:12:33:1e:de:50: b1:fe:ea:be:51:ca:4d:22:61:6e:3a:55:ad:78:2d:dd:8e:45: b9:0e:46:df:10:25:9c:68:64:ef:5f:2b:4e:0a:a7:08:ef:02: 87:0c:c5:22:6b:43:73:e7:c5:96:8f:ac:c7:1a:e6:89:9c:14: 17:b1:e3:d9:35:cf:73:22:7b:93:5f:06:16:dd:98:4e:8c:45: 72:df:dd:e8:39:81:86:a8:63:66:f3:18:08:07:22:16:44:cd: 00:74:d2:29:bb:a0:48:ee:be:b6:3f:97:11:da:e7:6b:ef:98: c6:08:a0:98:4f:13:88:0b:4e:dd:b0:27:e2:28:58:c6:5f:39: 3a:ae:3d:3c:b4:a2:2e:9f:d3:b5:d6:9c:f6:84:92:ea:df:be: b7:bc:8b:bb:ba:3e:30:f7:f5:01:90:c2:25:77:2a:5d:c2:b0: 6d:0e:0c:e4:8f:55:f6:2a:1b:db:c4:25:cc:25:38:8e:0a:8c: 26:d8:f6:40:5a:6e:57:24:1a:82:e6:fc:1c:35:8b:71:5f:45: 18:74:66:86:b5:33:d1:af:cd:ea:7b:b7:a1:0e:d2:2a:02:d3: d4:4e:b4:b0:7d:e7:5f:86:89:58:d9:40:76:67:aa:98:9b:5c: 5f:12:89:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydum8GXdiX81sFMXkvIRPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2MTdjMDY1OTY2Njk4NWUxODVkODQxMjFlOGMyMGEzNjQ0 ZWE5OGQwHhcNMjUxMjA2MDcwMTEwWhcNMjUxMjA3MDcwMTEwWjAzMTEwLwYDVQQD EyhlNGQ3Mjk3N2ZjZjA4ODAwMTNhMWEzZGNhOTdmNDQ4Yjc2ZGQwNTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1AveTUNVZlOUEbh8I8tEEGIN4sMI 92+XGrfJ/7pc8wv/CKzAffTAc2cQxqw4MlRj4eOuTackQ3jf38MFpHnXrO4WfKgw HSV0S0uOZB3JORS/psIAhw5Ab1UN/Gprn1eUh5y9u6WRaXWdw/Kd8EV/iNMLozBv j/kqrufGboBnWL7gnf1z1Eonge2qxff6IdBsZaHjOwKlvGHlJEdu0jQjR2NIn64q GJb0jmrWOoej4dInGvmubfW1bwePF6EQV6+8rXpbA2RgGEwrwcjKNd8DI0vA3ijO 9U+mbgabuD+agTmxdVSUewHZM8C6wycSbWfDSPpkrwFFAGjEYYk/GUwwHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOTXKXf88IgAE6Gj3Kl/RIt23QWRMB8GA1UdIwQY MBaAFDYXwGWWZpheGF2EEh6MIKNkTqmNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmhmQVpaWm1tRjRZWFlRU0hvd2dvMlJPcVkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9kMTc5MWQtMWM5NC00MmU2LTllM2Mt NjdhY2QyYzg4MDUxLzEvTmhmQVpaWm1tRjRZWFlRU0hvd2dvMlJPcVkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9kMTc5MWQtMWM5NC00MmU2LTllM2MtNjdhY2QyYzg4MDUx LzEvTmhmQVpaWm1tRjRZWFlRU0hvd2dvMlJPcVkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE0Wc5Lha WKWrY38wvRIzHt5Qsf7qvlHKTSJhbjpVrXgt3Y5FuQ5G3xAlnGhk718rTgqnCO8C hwzFImtDc+fFlo+sxxrmiZwUF7Hj2TXPcyJ7k18GFt2YToxFct/d6DmBhqhjZvMY CAciFkTNAHTSKbugSO6+tj+XEdrna++YxgigmE8TiAtO3bAn4ihYxl85Oq49PLSi Lp/Ttdac9oSS6t++t7yLu7o+MPf1AZDCJXcqXcKwbQ4M5I9V9iob28QlzCU4jgqM Jtj2QFpuVyQagub8HDWLcV9FGHRmhrUz0a/N6nu3oQ7SKgLT1E60sH3nX4aJWNlA dmeqmJtcXxKJHA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:38:32 2025 by rpki-client