This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft File: Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft (raw, json) Hash identifier: WEuEv6w7kBPW3cuXGotjFvfy4EOBMqk0PtJtvJ8MHQs= Subject key identifier: 87:E5:96:98:2A:4C:CF:66:68:27:97:E0:59:82:EB:D9:B8:26:FE:2E Authority key identifier: 36:18:BE:04:41:7A:6B:CB:9F:33:94:2A:63:15:18:BE:53:3F:FA:F4 Certificate issuer: /CN=3618be04417a6bcb9f33942a631518be533ffaf4 Certificate serial: 019AF0888115016EDE5E9A27138F327AB331 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft Manifest number: 1769 Signing time: Fri 05 Dec 2025 22:01:08 +0000 Manifest this update: Fri 05 Dec 2025 22:01:08 +0000 Manifest next update: Sat 06 Dec 2025 22:01:08 +0000 Files and hashes: 1: 8JFEQ15V1WkFsHsLCpH1WN9k3hk.roa (hash: S3+H2pUWxDExgmiMXa3i+Ddat9VWGJWFmy60af4zAEw=) 2: Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.crl (hash: xd7FCUqW1IG4dbAwZAQBZ+h76BhXppIq/Jvxf3JDp14=) 3: m_yuF_gKCaNoEVKUC8-fWWQ7lec.roa (hash: T7vZt2YpwQuwzPcw42BsApEdPgoH6UgHCbnE4qt5NfM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:81:15:01:6e:de:5e:9a:27:13:8f:32:7a:b3:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3618be04417a6bcb9f33942a631518be533ffaf4 Validity Not Before: Dec 5 22:01:08 2025 GMT Not After : Dec 6 22:01:08 2025 GMT Subject: CN=87e596982a4ccf66682797e05982ebd9b826fe2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:90:8c:50:30:81:1d:a7:a9:43:79:ae:95:b0: 63:78:f3:a9:8b:74:01:bf:9e:24:06:02:2b:97:99: e2:69:cb:b3:d5:2a:ec:85:96:80:5d:e4:72:24:8d: 50:c9:2d:99:c5:5b:62:6a:ce:68:a3:70:61:f9:a4: 3e:8d:80:66:a9:a0:08:c0:e0:20:c7:1b:d9:f1:4c: 8d:0a:ce:93:ac:26:0a:b2:34:e9:b3:ea:a9:55:57: 5c:21:b3:ae:70:e3:97:4f:30:77:19:d0:86:1c:0a: f9:95:a1:b5:fc:cd:ad:95:30:ba:35:60:5a:6e:d3: 85:c4:33:6f:e6:52:dd:a8:ab:0a:00:a9:52:f9:89: 04:a1:7b:4f:31:37:5e:cb:55:81:3b:65:ad:38:9f: e4:11:b0:c2:5b:7b:13:f7:94:5d:c1:ec:a7:7f:2b: e6:fa:fb:e2:bc:5c:9b:df:8f:ea:30:37:33:9f:d2: 08:90:ad:1e:9f:ac:fc:7e:cc:80:70:f0:91:fc:b2: 17:89:d9:e0:e5:8a:02:ee:f0:ac:39:72:70:eb:0a: 57:9a:2b:e1:6f:0c:79:c9:1c:eb:6a:e6:a1:db:29: ac:9b:e9:0d:ba:31:b9:88:92:c8:21:bb:ce:9f:87: b0:dd:6b:a8:2d:be:4b:32:34:3f:b6:d6:dc:5f:63: 46:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:E5:96:98:2A:4C:CF:66:68:27:97:E0:59:82:EB:D9:B8:26:FE:2E X509v3 Authority Key Identifier: keyid:36:18:BE:04:41:7A:6B:CB:9F:33:94:2A:63:15:18:BE:53:3F:FA:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:35:bc:6d:e4:23:97:eb:ad:bc:c2:20:36:43:02:da:2f:04: a7:c0:57:d4:0f:51:00:5d:e5:81:d8:44:d7:d6:17:b7:83:b6: c0:af:bd:de:65:75:a1:52:ca:82:57:c5:dc:77:97:13:f2:4a: 83:90:b5:89:11:14:a3:b6:51:09:83:6b:b0:4a:3c:e7:53:51: 63:85:28:ff:33:d7:94:c8:47:4e:a6:09:7c:77:6f:60:98:58: 8d:ca:02:da:55:21:f4:9f:c8:c2:c7:0d:47:e8:43:0c:2c:f1: 75:95:44:c8:7f:ea:4d:1a:77:2e:1d:c3:be:db:d1:6b:9f:80: e3:5e:78:2b:3a:79:c3:9e:d6:9d:24:cb:79:e1:f7:1d:72:f5: 34:17:9f:16:ec:43:97:63:47:31:41:ec:0d:8f:96:ac:86:ed: 9d:45:f2:71:a7:a3:76:e5:fc:8d:77:2e:ea:e8:40:a7:39:7c: 07:dc:74:d3:2e:22:44:8e:4a:ad:14:7c:7c:45:51:de:12:e0: cb:fc:58:53:20:54:9c:8c:33:86:7b:60:85:a6:d3:e1:ac:17: d5:38:e8:bf:89:c2:64:be:2b:0c:db:71:03:3b:82:b6:3d:33: db:e5:f6:0b:de:8d:eb:bd:b5:f5:43:9b:4e:59:df:5c:1c:36: 0b:19:2b:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiIEVAW7eXponE48yerMxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2MThiZTA0NDE3YTZiY2I5ZjMzOTQyYTYzMTUxOGJlNTMz ZmZhZjQwHhcNMjUxMjA1MjIwMTA4WhcNMjUxMjA2MjIwMTA4WjAzMTEwLwYDVQQD Eyg4N2U1OTY5ODJhNGNjZjY2NjgyNzk3ZTA1OTgyZWJkOWI4MjZmZTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZCMUDCBHaepQ3mulbBjePOpi3QB v54kBgIrl5niacuz1SrshZaAXeRyJI1QyS2ZxVtias5oo3Bh+aQ+jYBmqaAIwOAg xxvZ8UyNCs6TrCYKsjTps+qpVVdcIbOucOOXTzB3GdCGHAr5laG1/M2tlTC6NWBa btOFxDNv5lLdqKsKAKlS+YkEoXtPMTdey1WBO2WtOJ/kEbDCW3sT95Rdweynfyvm +vvivFyb34/qMDczn9IIkK0en6z8fsyAcPCR/LIXidng5YoC7vCsOXJw6wpXmivh bwx5yRzrauah2ymsm+kNujG5iJLIIbvOn4ew3WuoLb5LMjQ/ttbcX2NGyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIfllpgqTM9maCeX4FmC69m4Jv4uMB8GA1UdIwQY MBaAFDYYvgRBemvLnzOUKmMVGL5TP/r0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmhpLUJFRjZhOHVmTTVRcVl4VVl2bE1fLXZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8yMDYxZDktNjQ5YS00MTM2LThjOTMt MjI2OGU5N2E4YmMxLzEvTmhpLUJFRjZhOHVmTTVRcVl4VVl2bE1fLXZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC8yMDYxZDktNjQ5YS00MTM2LThjOTMtMjI2OGU5N2E4YmMx LzEvTmhpLUJFRjZhOHVmTTVRcVl4VVl2bE1fLXZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASjW8beQj l+utvMIgNkMC2i8Ep8BX1A9RAF3lgdhE19YXt4O2wK+93mV1oVLKglfF3HeXE/JK g5C1iREUo7ZRCYNrsEo851NRY4Uo/zPXlMhHTqYJfHdvYJhYjcoC2lUh9J/IwscN R+hDDCzxdZVEyH/qTRp3Lh3DvtvRa5+A4154Kzp5w57WnSTLeeH3HXL1NBefFuxD l2NHMUHsDY+WrIbtnUXycaejduX8jXcu6uhApzl8B9x00y4iRI5KrRR8fEVR3hLg y/xYUyBUnIwzhntghabT4awX1Tjov4nCZL4rDNtxAzuCtj0z2+X2C96N67219UOb TlnfXBw2CxkrgQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:10:51 2025 by rpki-client