This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.mft File: nHPZRT--37gMRUO7Up_DMMH4wc4.mft (raw, json) Hash identifier: uZwxSgy9bf6aJQexeWZfzqEZl6T1NbsQf00yRDx7cNw= Subject key identifier: F6:01:9D:59:5F:DB:30:87:01:7D:4F:49:EF:A0:06:A4:B8:7E:35:EC Authority key identifier: 9C:73:D9:45:3F:BE:DF:B8:0C:45:43:BB:52:9F:C3:30:C1:F8:C1:CE Certificate issuer: /CN=9c73d9453fbedfb80c4543bb529fc330c1f8c1ce Certificate serial: 019AF19B293CD69CB894338DAEE59032E0A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nHPZRT--37gMRUO7Up_DMMH4wc4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.mft Manifest number: 0D19 Signing time: Sat 06 Dec 2025 03:01:08 +0000 Manifest this update: Sat 06 Dec 2025 03:01:08 +0000 Manifest next update: Sun 07 Dec 2025 03:01:08 +0000 Files and hashes: 1: AMTfdcOhvN2UxA7mt3gv3KECuGg.roa (hash: k51GSY+oL6d3vSnVOqR7gGcER+6PBSvBsmHDXYmEq2c=) 2: IZ4_8o0uG1RVAax56_hcAW3WTtc.roa (hash: BLF9NvSAp12xGKGCWF6fmakXoIQEimqM8wkdCYNJdbY=) 3: U3sT87GYwy9D9SgOPVW_RiOktmI.roa (hash: 1ZFvEfBkgKcB/Gz4D0UF4KApAihzQ1ZYW/CMo5SgnsM=) 4: ieAfCh_vwbBTbF3DGBJXQYMx9Pw.roa (hash: N095uXaZbk2Jvru/0oYsrQzeZ/eKCMXo6ETE3DefpcQ=) 5: j4cd6L8tYRDjLejdv94aClKAGXU.roa (hash: WlNinENED4PfFKrXHfbYinzDLlIPfYjUPCjvbvhk+i8=) 6: nHPZRT--37gMRUO7Up_DMMH4wc4.crl (hash: sXsbKG0p7UNxI2+yR2Lc9SjL3Oqk5VhDE1EiRcPqP7Q=) 7: xe-87aH9X1grSznD-2-c4OZyYHo.roa (hash: S80ekAfHbqsZOpsBTbZwj0DAL1iEaOufRZ1+nQUXDqE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.mft rsync://rpki.ripe.net/repository/DEFAULT/nHPZRT--37gMRUO7Up_DMMH4wc4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:29:3c:d6:9c:b8:94:33:8d:ae:e5:90:32:e0:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c73d9453fbedfb80c4543bb529fc330c1f8c1ce Validity Not Before: Dec 6 03:01:08 2025 GMT Not After : Dec 7 03:01:08 2025 GMT Subject: CN=f6019d595fdb3087017d4f49efa006a4b87e35ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:74:8c:84:5d:9a:30:1a:c1:a9:21:f9:84:9d: 1e:4f:7a:23:8a:fb:c2:94:3a:bb:5e:71:f0:71:c3: b4:e5:e1:43:ca:b2:3f:66:4a:d9:d7:87:61:ae:ca: 21:1d:e7:de:c6:07:de:89:a0:04:fe:c3:b2:88:31: 17:68:55:9e:25:e7:f5:57:39:0c:0e:47:be:ef:67: db:cb:b5:de:22:8a:2c:d3:49:55:0e:1c:1f:15:c3: 46:ed:0b:f1:68:3e:60:b4:d7:d5:42:50:e3:be:41: aa:71:bd:5c:13:15:35:52:ad:a5:39:b0:fa:aa:58: dc:9c:eb:a4:d6:49:cc:69:8b:b1:3d:fa:e0:bd:2d: 92:b6:e9:56:32:c2:a8:d2:45:6e:43:cc:fc:02:18: e9:0d:64:2f:66:33:61:ec:a7:e4:4e:87:18:f0:fa: a1:f8:3a:99:1a:5f:39:bd:67:62:ac:db:67:90:6e: e3:b3:e3:cb:79:10:fe:0a:ad:4b:ef:e1:b0:f5:1a: e3:ab:da:57:97:df:de:f8:63:08:6e:94:4c:8b:4f: 98:2f:35:44:34:3e:2b:67:b1:e4:dd:17:b9:59:c2: 7b:44:9f:99:13:c9:c8:04:c4:5f:53:e5:fb:a1:d8: 48:c7:26:92:c4:5a:85:f0:49:6d:4e:c7:a9:a8:45: 0e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:01:9D:59:5F:DB:30:87:01:7D:4F:49:EF:A0:06:A4:B8:7E:35:EC X509v3 Authority Key Identifier: keyid:9C:73:D9:45:3F:BE:DF:B8:0C:45:43:BB:52:9F:C3:30:C1:F8:C1:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nHPZRT--37gMRUO7Up_DMMH4wc4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:8b:14:9f:86:ae:52:eb:d2:53:98:1d:ed:e0:69:09:31:9e: bb:7d:a6:c3:48:5b:05:d2:cb:52:01:68:40:a3:1b:02:6d:c0: 5d:2e:b8:72:f7:bc:fc:3d:71:3b:b1:3e:ab:8b:a5:99:88:30: 3b:4a:12:ef:69:cc:3b:9b:74:cc:19:c3:b6:a2:10:b7:56:da: 27:f3:a1:fd:f8:7f:66:9e:c1:12:5a:54:93:a5:f4:e8:cb:35: b6:ae:43:dc:86:b2:44:fd:e8:7e:2e:38:ab:17:1c:7f:bb:f0: 95:dd:4b:36:47:48:70:31:60:4a:5d:3c:22:5e:ea:cc:1a:34: cc:f9:3f:07:4c:c1:14:1f:c3:74:8a:a7:9c:33:18:41:2b:c6: 5e:87:2b:97:fa:03:16:7d:df:b2:0b:0a:dd:29:50:b9:6f:39: ef:9a:7c:97:83:a4:29:b0:ea:d8:ff:c2:06:bb:72:d5:42:e2: d9:7d:ee:e9:44:42:03:80:1d:9c:36:3e:ac:38:ed:fa:b6:0d: 7b:db:e4:38:3c:63:c8:6d:e0:e8:db:37:c9:23:1a:a9:9e:29: c3:49:5c:84:fd:db:0c:fd:ff:22:28:9e:24:cc:b1:93:d2:e6: 20:30:39:d1:db:21:6d:31:77:38:12:66:1e:44:76:bb:1a:12: a3:61:2f:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmyk81py4lDONruWQMuCmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljNzNkOTQ1M2ZiZWRmYjgwYzQ1NDNiYjUyOWZjMzMwYzFm OGMxY2UwHhcNMjUxMjA2MDMwMTA4WhcNMjUxMjA3MDMwMTA4WjAzMTEwLwYDVQQD EyhmNjAxOWQ1OTVmZGIzMDg3MDE3ZDRmNDllZmEwMDZhNGI4N2UzNWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2nSMhF2aMBrBqSH5hJ0eT3ojivvC lDq7XnHwccO05eFDyrI/ZkrZ14dhrsohHefexgfeiaAE/sOyiDEXaFWeJef1VzkM Dke+72fby7XeIoos00lVDhwfFcNG7QvxaD5gtNfVQlDjvkGqcb1cExU1Uq2lObD6 qljcnOuk1knMaYuxPfrgvS2StulWMsKo0kVuQ8z8AhjpDWQvZjNh7KfkTocY8Pqh +DqZGl85vWdirNtnkG7js+PLeRD+Cq1L7+Gw9Rrjq9pXl9/e+GMIbpRMi0+YLzVE ND4rZ7Hk3Re5WcJ7RJ+ZE8nIBMRfU+X7odhIxyaSxFqF8EltTsepqEUOqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPYBnVlf2zCHAX1PSe+gBqS4fjXsMB8GA1UdIwQY MBaAFJxz2UU/vt+4DEVDu1KfwzDB+MHOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkhQWlJULS0zN2dNUlVPN1VwX0RNTUg0d2M0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9iMzUzNzktMjEyMi00MTkxLTg4MjEt YzQ3ZTE4ZGYwMzcxLzEvbkhQWlJULS0zN2dNUlVPN1VwX0RNTUg0d2M0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC9iMzUzNzktMjEyMi00MTkxLTg4MjEtYzQ3ZTE4ZGYwMzcx LzEvbkhQWlJULS0zN2dNUlVPN1VwX0RNTUg0d2M0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB4sUn4au UuvSU5gd7eBpCTGeu32mw0hbBdLLUgFoQKMbAm3AXS64cve8/D1xO7E+q4ulmYgw O0oS72nMO5t0zBnDtqIQt1baJ/Oh/fh/Zp7BElpUk6X06Ms1tq5D3IayRP3ofi44 qxccf7vwld1LNkdIcDFgSl08Il7qzBo0zPk/B0zBFB/DdIqnnDMYQSvGXocrl/oD Fn3fsgsK3SlQuW8575p8l4OkKbDq2P/CBrty1ULi2X3u6URCA4AdnDY+rDjt+rYN e9vkODxjyG3g6Ns3ySMaqZ4pw0lchP3bDP3/IiieJMyxk9LmIDA50dshbTF3OBJm HkR2uxoSo2EvyA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:25:01 2025 by rpki-client