This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/21d560-cb15-46c3-af34-a89e937e29d1/1/NhIf0uc0bus8H451uTyE-VhB9EY.mft File: NhIf0uc0bus8H451uTyE-VhB9EY.mft (raw, json) Hash identifier: zwMhr2xIKi4vRlQSvlpX/HxbDBcFOtNwSS/8PN3gc8M= Subject key identifier: A4:11:D9:E8:6C:5D:55:FE:4F:80:30:E1:22:DA:3E:65:66:BF:93:81 Authority key identifier: 36:12:1F:D2:E7:34:6E:EB:3C:1F:8E:75:B9:3C:84:F9:58:41:F4:46 Certificate issuer: /CN=36121fd2e7346eeb3c1f8e75b93c84f95841f446 Certificate serial: 019AF23FF2752D40003EA8F08D326DD939B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhIf0uc0bus8H451uTyE-VhB9EY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/21d560-cb15-46c3-af34-a89e937e29d1/1/NhIf0uc0bus8H451uTyE-VhB9EY.mft Manifest number: 0478 Signing time: Sat 06 Dec 2025 06:01:08 +0000 Manifest this update: Sat 06 Dec 2025 06:01:08 +0000 Manifest next update: Sun 07 Dec 2025 06:01:08 +0000 Files and hashes: 1: NhIf0uc0bus8H451uTyE-VhB9EY.crl (hash: 5S/Vx3FtN5LPkhGASTPRWmJ94ZFGbnBqezTJVuya/HI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/21d560-cb15-46c3-af34-a89e937e29d1/1/NhIf0uc0bus8H451uTyE-VhB9EY.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/21d560-cb15-46c3-af34-a89e937e29d1/1/NhIf0uc0bus8H451uTyE-VhB9EY.mft rsync://rpki.ripe.net/repository/DEFAULT/NhIf0uc0bus8H451uTyE-VhB9EY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:f2:75:2d:40:00:3e:a8:f0:8d:32:6d:d9:39:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36121fd2e7346eeb3c1f8e75b93c84f95841f446 Validity Not Before: Dec 6 06:01:08 2025 GMT Not After : Dec 7 06:01:08 2025 GMT Subject: CN=a411d9e86c5d55fe4f8030e122da3e6566bf9381 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:63:7a:0b:88:a3:31:5c:19:19:61:d2:81:ab: 7f:2f:e8:85:43:c2:4b:f0:b1:1a:20:d2:2b:b1:e2: da:4e:4f:b9:5c:34:2b:06:7c:01:d0:57:3c:9c:1f: f5:bc:ca:dc:7c:ca:14:96:de:3e:44:62:a2:39:fe: 33:98:99:86:11:e9:30:da:07:7e:75:55:b6:74:83: 6c:d1:11:13:9e:50:33:f9:28:d5:f6:f3:e1:d4:26: 8e:c5:cc:50:5c:b3:d4:99:2c:26:39:66:80:50:06: cb:0c:bc:1f:04:9e:5e:4a:54:eb:dc:ad:2c:21:f8: 5e:31:96:7c:cb:f1:ef:1f:f6:17:ac:f1:e3:0c:74: 6f:11:34:60:0d:70:fd:66:23:f9:06:67:b4:0e:e3: 5d:3d:d4:c5:e8:38:0f:30:04:4a:91:89:82:5a:d5: 56:fd:00:18:29:fa:a6:27:58:ff:72:3a:b1:15:3c: ec:15:73:ba:25:30:67:9d:70:00:8b:a3:7b:46:b3: ee:f0:ad:98:e9:e6:30:dc:ec:0c:f7:8f:f9:a0:a5: 00:d7:ee:f4:78:31:67:d0:45:53:58:8a:45:20:13: 2f:10:2e:58:7c:f8:f6:ab:67:5e:c1:5e:be:36:3f: 79:ff:14:69:d5:ac:72:e4:e1:6a:5f:da:bf:b6:b4: 87:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:11:D9:E8:6C:5D:55:FE:4F:80:30:E1:22:DA:3E:65:66:BF:93:81 X509v3 Authority Key Identifier: keyid:36:12:1F:D2:E7:34:6E:EB:3C:1F:8E:75:B9:3C:84:F9:58:41:F4:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhIf0uc0bus8H451uTyE-VhB9EY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/21d560-cb15-46c3-af34-a89e937e29d1/1/NhIf0uc0bus8H451uTyE-VhB9EY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/21d560-cb15-46c3-af34-a89e937e29d1/1/NhIf0uc0bus8H451uTyE-VhB9EY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:fa:75:ac:5e:cc:d4:c6:2c:a7:d9:8c:b3:66:40:ed:89:96: cf:65:99:b2:49:7e:9e:d1:d3:c8:78:13:41:13:9e:3e:71:40: 4c:9f:80:83:54:53:65:5b:d1:b2:89:be:1c:a1:57:38:1b:d3: d9:56:bc:77:41:fb:0a:8a:a2:bf:d0:da:5d:6c:cf:33:a7:31: 11:ca:0e:e9:d9:ba:62:fa:50:ce:b1:da:2d:36:96:70:de:5f: 89:05:05:e9:77:30:db:20:0c:d4:3a:77:11:67:37:fc:86:a0: b8:b4:6c:32:e7:67:37:32:8f:19:75:e7:0f:e5:f8:78:4c:98: e3:7a:52:ed:44:6f:06:b9:d6:be:da:35:49:6e:2b:4d:22:09: 9c:b6:c9:11:b8:1c:2d:1a:e5:93:fc:f6:ec:16:cc:a4:03:2b: d2:4a:11:ab:c7:2b:60:15:b0:13:0f:28:c2:91:37:8f:7b:91: 38:1e:dc:e1:57:65:20:a9:56:7e:09:a9:1c:ac:12:8d:06:8d: 0f:e9:dc:68:3a:95:15:95:7a:9c:ff:da:03:2a:d2:4d:99:d9: da:1e:bd:5b:13:4f:01:70:3f:a1:be:f3:83:f3:2b:88:d7:1e: 24:48:e6:86:d0:03:32:c2:39:f0:8d:7c:1d:76:8c:d4:db:98: 50:5b:fe:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP/J1LUAAPqjwjTJt2TmzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2MTIxZmQyZTczNDZlZWIzYzFmOGU3NWI5M2M4NGY5NTg0 MWY0NDYwHhcNMjUxMjA2MDYwMTA4WhcNMjUxMjA3MDYwMTA4WjAzMTEwLwYDVQQD EyhhNDExZDllODZjNWQ1NWZlNGY4MDMwZTEyMmRhM2U2NTY2YmY5MzgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmN6C4ijMVwZGWHSgat/L+iFQ8JL 8LEaINIrseLaTk+5XDQrBnwB0Fc8nB/1vMrcfMoUlt4+RGKiOf4zmJmGEekw2gd+ dVW2dINs0RETnlAz+SjV9vPh1CaOxcxQXLPUmSwmOWaAUAbLDLwfBJ5eSlTr3K0s IfheMZZ8y/HvH/YXrPHjDHRvETRgDXD9ZiP5Bme0DuNdPdTF6DgPMARKkYmCWtVW /QAYKfqmJ1j/cjqxFTzsFXO6JTBnnXAAi6N7RrPu8K2Y6eYw3OwM94/5oKUA1+70 eDFn0EVTWIpFIBMvEC5YfPj2q2dewV6+Nj95/xRp1axy5OFqX9q/trSHjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKQR2ehsXVX+T4Aw4SLaPmVmv5OBMB8GA1UdIwQY MBaAFDYSH9LnNG7rPB+Odbk8hPlYQfRGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmhJZjB1YzBidXM4SDQ1MXVUeUUtVmhCOUVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8yMWQ1NjAtY2IxNS00NmMzLWFmMzQt YTg5ZTkzN2UyOWQxLzEvTmhJZjB1YzBidXM4SDQ1MXVUeUUtVmhCOUVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8yMWQ1NjAtY2IxNS00NmMzLWFmMzQtYTg5ZTkzN2UyOWQx LzEvTmhJZjB1YzBidXM4SDQ1MXVUeUUtVmhCOUVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhfp1rF7M 1MYsp9mMs2ZA7YmWz2WZskl+ntHTyHgTQROePnFATJ+Ag1RTZVvRsom+HKFXOBvT 2Va8d0H7Coqiv9DaXWzPM6cxEcoO6dm6YvpQzrHaLTaWcN5fiQUF6Xcw2yAM1Dp3 EWc3/IaguLRsMudnNzKPGXXnD+X4eEyY43pS7URvBrnWvto1SW4rTSIJnLbJEbgc LRrlk/z27BbMpAMr0koRq8crYBWwEw8owpE3j3uROB7c4VdlIKlWfgmpHKwSjQaN D+ncaDqVFZV6nP/aAyrSTZnZ2h69WxNPAXA/ob7zg/MriNceJEjmhtADMsI58I18 HXaM1NuYUFv+RQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:59:26 2025 by rpki-client