This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.mft File: NhMCLe3B-PATqm45D6I70i8f45I.mft (raw, json) Hash identifier: TEdAxHvyzQ1/Ozxw+RfapPSS126yxHJZgW8IeeTuUbY= Subject key identifier: 87:3B:AB:0F:FA:46:C8:8E:9B:58:E3:05:A0:6D:F3:F5:2C:F5:E1:8F Authority key identifier: 36:13:02:2D:ED:C1:F8:F0:13:AA:6E:39:0F:A2:3B:D2:2F:1F:E3:92 Certificate issuer: /CN=3613022dedc1f8f013aa6e390fa23bd22f1fe392 Certificate serial: 019AF19B14A49A74CEC1259BDC383C326B1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhMCLe3B-PATqm45D6I70i8f45I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.mft Manifest number: 0733 Signing time: Sat 06 Dec 2025 03:01:03 +0000 Manifest this update: Sat 06 Dec 2025 03:01:03 +0000 Manifest next update: Sun 07 Dec 2025 03:01:03 +0000 Files and hashes: 1: NhMCLe3B-PATqm45D6I70i8f45I.crl (hash: m0QJcj+4qYl/5op02IHfnrHBZljORCN5qH45IZ6F6qc=) 2: bg5bOuuw1jO6ynyy8gmi6MGK7vU.roa (hash: ibYhxEKhbJdN0UQ/s48RBfEhiV9dbycm32Xti2GP31Y=) 3: hzr42e2R_h-LWwgBpSQZacNEqsc.roa (hash: 9mXipkAV76pHGL76kppNcnsru8YUceXMwinc9f3N1VQ=) 4: tL5-Keddv0icrOkLTgT8ryYM2Dk.roa (hash: oDOl9ZfQxy4MI0oXfGazHV5Kou2gL/nj4KWfMXDD32c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.crl rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.mft rsync://rpki.ripe.net/repository/DEFAULT/NhMCLe3B-PATqm45D6I70i8f45I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:14:a4:9a:74:ce:c1:25:9b:dc:38:3c:32:6b:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3613022dedc1f8f013aa6e390fa23bd22f1fe392 Validity Not Before: Dec 6 03:01:03 2025 GMT Not After : Dec 7 03:01:03 2025 GMT Subject: CN=873bab0ffa46c88e9b58e305a06df3f52cf5e18f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f1:37:f7:6a:fa:3a:77:ce:c8:37:4a:4a:e0: 4f:7c:58:c3:50:75:0f:d0:40:ac:56:2f:3e:46:43: 75:e7:06:e2:98:d3:ab:77:1c:58:38:ea:99:8e:71: 35:22:67:e9:ca:8c:d9:23:a1:42:f3:a1:8a:5c:8d: 6c:78:fa:ee:1a:79:85:16:e6:9b:86:e3:90:b5:02: 6c:33:39:7b:4a:fc:7e:36:55:1f:5d:72:96:48:24: 81:a1:dc:e8:12:7f:a5:9a:59:51:43:db:8d:62:af: 9d:0e:73:b5:77:22:96:10:01:9d:d2:f6:b0:44:fe: 0d:13:5c:53:63:71:34:89:14:f7:8f:3a:a1:fd:04: c8:7b:2c:53:41:77:ca:ed:52:ae:aa:69:5b:34:e7: a2:d0:86:bf:f1:58:68:1f:b6:85:cc:4f:42:e1:c2: 9e:2f:fd:83:71:63:8a:76:80:4d:b4:2a:ad:f9:1f: 3f:82:36:46:bd:fb:e5:bc:13:6a:cc:d1:5f:72:4d: 75:4c:83:9c:b3:1d:bd:93:a5:7a:ba:21:37:eb:eb: 2b:b8:bd:f9:4b:f6:08:e1:11:2c:89:2b:29:b4:6f: e3:44:96:26:c1:37:c2:fb:49:fd:cb:b8:fb:11:18: 12:66:d7:5f:ea:12:e7:0c:33:25:1d:4a:f3:f2:59: df:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:3B:AB:0F:FA:46:C8:8E:9B:58:E3:05:A0:6D:F3:F5:2C:F5:E1:8F X509v3 Authority Key Identifier: keyid:36:13:02:2D:ED:C1:F8:F0:13:AA:6E:39:0F:A2:3B:D2:2F:1F:E3:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhMCLe3B-PATqm45D6I70i8f45I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:54:b5:b0:3c:84:e0:2b:5e:77:e6:f6:8c:b9:43:16:10:44: fd:c2:4e:14:58:05:1f:2d:ac:45:52:64:10:1e:38:29:93:34: 6d:1d:bd:7c:82:57:cf:42:57:b3:07:9a:49:ea:ea:e8:0a:fd: 34:46:1d:38:f7:1c:9f:b0:cf:12:cb:43:ad:e5:fe:3a:f8:50: d7:a1:b3:b2:66:20:20:8a:86:26:19:f6:74:f2:78:1b:62:0b: 4c:e9:e0:b9:e1:a5:01:4f:5e:b2:cd:24:10:25:77:c3:cc:1e: 60:f5:8e:8a:64:c6:52:96:6b:61:47:76:f2:20:78:13:96:68: 8b:3c:14:41:b4:19:04:c4:aa:c2:80:a8:f7:87:78:ae:96:51: 88:ed:ff:8e:6d:b3:8b:ea:79:ec:08:1f:31:35:20:a6:7a:d2: 93:42:25:f3:48:5d:81:5a:56:bc:c8:61:e3:49:a1:f1:d8:a4: d8:d5:53:24:f9:e9:1b:50:ec:d7:71:50:77:e6:19:b4:42:dd: 57:4b:ab:2a:20:81:ed:13:45:1a:da:a6:45:e6:da:f1:1a:28: 30:5a:d9:7a:be:57:70:1f:07:d3:4f:ad:e8:fe:9e:ac:2d:44: 11:41:93:7a:41:ff:a2:2c:9e:e8:e5:93:78:b2:2e:5d:ab:93: 30:35:3f:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmxSkmnTOwSWb3Dg8MmsfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2MTMwMjJkZWRjMWY4ZjAxM2FhNmUzOTBmYTIzYmQyMmYx ZmUzOTIwHhcNMjUxMjA2MDMwMTAzWhcNMjUxMjA3MDMwMTAzWjAzMTEwLwYDVQQD Eyg4NzNiYWIwZmZhNDZjODhlOWI1OGUzMDVhMDZkZjNmNTJjZjVlMThmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPE392r6OnfOyDdKSuBPfFjDUHUP 0ECsVi8+RkN15wbimNOrdxxYOOqZjnE1ImfpyozZI6FC86GKXI1sePruGnmFFuab huOQtQJsMzl7Svx+NlUfXXKWSCSBodzoEn+lmllRQ9uNYq+dDnO1dyKWEAGd0vaw RP4NE1xTY3E0iRT3jzqh/QTIeyxTQXfK7VKuqmlbNOei0Ia/8VhoH7aFzE9C4cKe L/2DcWOKdoBNtCqt+R8/gjZGvfvlvBNqzNFfck11TIOcsx29k6V6uiE36+sruL35 S/YI4REsiSsptG/jRJYmwTfC+0n9y7j7ERgSZtdf6hLnDDMlHUrz8lnfRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIc7qw/6RsiOm1jjBaBt8/Us9eGPMB8GA1UdIwQY MBaAFDYTAi3twfjwE6puOQ+iO9IvH+OSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmhNQ0xlM0ItUEFUcW00NUQ2STcwaThmNDVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8xZTdmOTYtZTkzNi00MmM4LWFjNjIt NDA2NjlhZDE5ZmI5LzEvTmhNQ0xlM0ItUEFUcW00NUQ2STcwaThmNDVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC8xZTdmOTYtZTkzNi00MmM4LWFjNjItNDA2NjlhZDE5ZmI5 LzEvTmhNQ0xlM0ItUEFUcW00NUQ2STcwaThmNDVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQVS1sDyE 4Cted+b2jLlDFhBE/cJOFFgFHy2sRVJkEB44KZM0bR29fIJXz0JXsweaSerq6Ar9 NEYdOPccn7DPEstDreX+OvhQ16GzsmYgIIqGJhn2dPJ4G2ILTOngueGlAU9ess0k ECV3w8weYPWOimTGUpZrYUd28iB4E5ZoizwUQbQZBMSqwoCo94d4rpZRiO3/jm2z i+p57AgfMTUgpnrSk0Il80hdgVpWvMhh40mh8dik2NVTJPnpG1Ds13FQd+YZtELd V0urKiCB7RNFGtqmReba8RooMFrZer5XcB8H00+t6P6erC1EEUGTekH/oiye6OWT eLIuXauTMDU/SA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:23:22 2025 by rpki-client