This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/0fc7d8-2a5f-4b38-a230-8396f8c6255a/1/NHi9VqAesq4wdvaW0B1P_NFAGp8.mft File: NHi9VqAesq4wdvaW0B1P_NFAGp8.mft (raw, json) Hash identifier: lk3Ki8ucaQXnAyw8f54QEo0+AC4EFoOWdXdnSkF4uWU= Subject key identifier: 1D:AA:58:84:97:F6:78:DB:5A:6D:3D:F4:D2:D6:0E:9E:E8:08:4E:B2 Authority key identifier: 34:78:BD:56:A0:1E:B2:AE:30:76:F6:96:D0:1D:4F:FC:D1:40:1A:9F Certificate issuer: /CN=3478bd56a01eb2ae3076f696d01d4ffcd1401a9f Certificate serial: 019AF12D13AE52082326373456E7964366FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHi9VqAesq4wdvaW0B1P_NFAGp8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/0fc7d8-2a5f-4b38-a230-8396f8c6255a/1/NHi9VqAesq4wdvaW0B1P_NFAGp8.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 01:00:54 +0000 Manifest this update: Sat 06 Dec 2025 01:00:54 +0000 Manifest next update: Sun 07 Dec 2025 01:00:54 +0000 Files and hashes: 1: NHi9VqAesq4wdvaW0B1P_NFAGp8.crl (hash: WQKybsqiafVQaaLGCY8DxoUHYubLw/Aj05mwOT2cRLQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/0fc7d8-2a5f-4b38-a230-8396f8c6255a/1/NHi9VqAesq4wdvaW0B1P_NFAGp8.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/0fc7d8-2a5f-4b38-a230-8396f8c6255a/1/NHi9VqAesq4wdvaW0B1P_NFAGp8.mft rsync://rpki.ripe.net/repository/DEFAULT/NHi9VqAesq4wdvaW0B1P_NFAGp8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:13:ae:52:08:23:26:37:34:56:e7:96:43:66:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3478bd56a01eb2ae3076f696d01d4ffcd1401a9f Validity Not Before: Dec 6 01:00:54 2025 GMT Not After : Dec 7 01:00:54 2025 GMT Subject: CN=1daa588497f678db5a6d3df4d2d60e9ee8084eb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d4:18:8b:33:d9:2d:05:f0:49:e1:a5:ca:2b: 62:e0:b1:7b:1e:89:27:e5:ed:b5:75:53:c3:91:06: 3c:5d:fb:16:9c:66:23:92:d2:65:a4:94:44:5b:b3: 62:65:fa:6f:76:b6:c9:04:fc:51:0b:6d:67:14:80: 03:7c:4d:e6:01:4f:d2:26:b1:74:f4:b3:b7:9f:03: 6e:de:de:37:e9:cd:18:c7:85:f8:bb:91:87:57:d9: d9:1c:1f:90:0a:9b:d5:18:1c:87:8a:bc:30:13:06: 6a:38:16:da:68:36:3e:0e:25:e7:9d:51:ac:68:8a: 8a:10:87:a0:0f:13:6c:72:38:46:13:7f:a8:4f:64: 27:bd:da:f5:6d:85:1e:22:94:0d:bf:bf:a4:10:17: 06:09:df:58:9d:e3:1d:c7:a0:c7:7e:80:23:31:9d: 6b:21:19:68:5e:68:6b:da:90:7c:86:13:bf:d3:bc: 15:d0:aa:b7:d4:cd:5f:f9:bd:c9:94:50:3f:0e:68: 64:62:e1:c1:1d:0a:a3:75:59:11:fc:e5:41:5e:ca: 7f:95:d1:de:c5:f7:99:58:83:cb:1a:d0:7a:c7:58: aa:cf:1c:d8:6a:ef:fc:93:77:d5:b5:b8:e5:d8:45: f4:02:17:e0:0e:1b:56:5c:4c:32:50:d1:25:49:59: df:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:AA:58:84:97:F6:78:DB:5A:6D:3D:F4:D2:D6:0E:9E:E8:08:4E:B2 X509v3 Authority Key Identifier: keyid:34:78:BD:56:A0:1E:B2:AE:30:76:F6:96:D0:1D:4F:FC:D1:40:1A:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHi9VqAesq4wdvaW0B1P_NFAGp8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0fc7d8-2a5f-4b38-a230-8396f8c6255a/1/NHi9VqAesq4wdvaW0B1P_NFAGp8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0fc7d8-2a5f-4b38-a230-8396f8c6255a/1/NHi9VqAesq4wdvaW0B1P_NFAGp8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:33:4d:7e:21:f0:b5:08:d8:66:ae:cb:7f:44:94:01:f5:db: 56:56:e8:00:c3:c7:9c:8c:fd:98:2c:2c:ce:43:9d:b8:c6:2d: b3:d0:c0:bf:93:7a:b4:23:f5:b1:c7:e4:b1:5f:c8:ec:73:b1: a5:64:3b:e0:a3:c1:ae:29:c2:b3:b9:97:97:92:25:cb:97:f7: 60:e3:4c:ff:7a:3d:fe:82:c1:21:f8:61:5e:9f:23:86:6c:c2: 8c:c9:2d:26:b7:1d:06:a5:65:9d:7d:44:f6:16:52:f5:b6:23: dc:21:a2:22:a7:7a:9d:3f:27:ca:43:b3:c0:6f:21:72:a2:ee: 7a:4a:18:c1:03:0e:86:83:f4:bf:49:21:ef:aa:84:70:c1:32: 82:c1:8a:1a:a2:b5:77:7d:6c:00:1b:95:61:70:f1:cf:56:df: e9:ca:1f:79:d4:a7:37:96:ca:2f:83:f4:fb:3d:ff:fa:a9:38: d9:6c:d4:19:90:d0:2c:4c:0c:67:b4:da:b8:b2:a3:3c:20:87: bb:6d:ed:bb:ec:f9:a7:d3:47:f4:bc:43:59:88:1d:19:7a:1c: 52:80:94:1e:55:47:65:48:ba:5d:07:54:e4:d5:8b:39:4d:c1: f9:5b:10:b2:f8:cd:cf:3b:bc:5a:75:84:91:6a:f6:a7:b0:11: fd:f3:70:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLROuUggjJjc0VueWQ2b+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0NzhiZDU2YTAxZWIyYWUzMDc2ZjY5NmQwMWQ0ZmZjZDE0 MDFhOWYwHhcNMjUxMjA2MDEwMDU0WhcNMjUxMjA3MDEwMDU0WjAzMTEwLwYDVQQD EygxZGFhNTg4NDk3ZjY3OGRiNWE2ZDNkZjRkMmQ2MGU5ZWU4MDg0ZWIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNQYizPZLQXwSeGlyiti4LF7Hokn 5e21dVPDkQY8XfsWnGYjktJlpJREW7NiZfpvdrbJBPxRC21nFIADfE3mAU/SJrF0 9LO3nwNu3t436c0Yx4X4u5GHV9nZHB+QCpvVGByHirwwEwZqOBbaaDY+DiXnnVGs aIqKEIegDxNscjhGE3+oT2Qnvdr1bYUeIpQNv7+kEBcGCd9YneMdx6DHfoAjMZ1r IRloXmhr2pB8hhO/07wV0Kq31M1f+b3JlFA/DmhkYuHBHQqjdVkR/OVBXsp/ldHe xfeZWIPLGtB6x1iqzxzYau/8k3fVtbjl2EX0AhfgDhtWXEwyUNElSVnfQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB2qWISX9njbWm099NLWDp7oCE6yMB8GA1UdIwQY MBaAFDR4vVagHrKuMHb2ltAdT/zRQBqfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkhpOVZxQWVzcTR3ZHZhVzBCMVBfTkZBR3A4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8wZmM3ZDgtMmE1Zi00YjM4LWEyMzAt ODM5NmY4YzYyNTVhLzEvTkhpOVZxQWVzcTR3ZHZhVzBCMVBfTkZBR3A4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC8wZmM3ZDgtMmE1Zi00YjM4LWEyMzAtODM5NmY4YzYyNTVh LzEvTkhpOVZxQWVzcTR3ZHZhVzBCMVBfTkZBR3A4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsTNNfiHw tQjYZq7Lf0SUAfXbVlboAMPHnIz9mCwszkOduMYts9DAv5N6tCP1scfksV/I7HOx pWQ74KPBrinCs7mXl5Ily5f3YONM/3o9/oLBIfhhXp8jhmzCjMktJrcdBqVlnX1E 9hZS9bYj3CGiIqd6nT8nykOzwG8hcqLuekoYwQMOhoP0v0kh76qEcMEygsGKGqK1 d31sABuVYXDxz1bf6cofedSnN5bKL4P0+z3/+qk42WzUGZDQLEwMZ7TauLKjPCCH u23tu+z5p9NH9LxDWYgdGXocUoCUHlVHZUi6XQdU5NWLOU3B+VsQsvjNzzu8WnWE kWr2p7AR/fNwzA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:35:07 2025 by rpki-client