This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.mft File: NharGOa87eCFC8quvZWZk-hAhus.mft (raw, json) Hash identifier: 6Gr4/MMBKvJeSKKDBae5n9bBct7mzEazbiT+siIf7/s= Subject key identifier: F5:60:F7:33:39:95:CE:B5:6B:86:25:D9:AA:7C:6D:3C:37:FE:90:77 Authority key identifier: 36:16:AB:18:E6:BC:ED:E0:85:0B:CA:AE:BD:95:99:93:E8:40:86:EB Certificate issuer: /CN=3616ab18e6bcede0850bcaaebd959993e84086eb Certificate serial: 019AF31C83B55659E22902CFC1794F80E8A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NharGOa87eCFC8quvZWZk-hAhus.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 10:02:03 +0000 Manifest this update: Sat 06 Dec 2025 10:02:03 +0000 Manifest next update: Sun 07 Dec 2025 10:02:03 +0000 Files and hashes: 1: NharGOa87eCFC8quvZWZk-hAhus.crl (hash: FLxAts1UAOI/nbgy1Li3KljS8Y66HiLcd3DSidUA2uw=) 2: a86URqUjdV6NGR4_Rkuxzk9nvOQ.roa (hash: QkDObpBQb/2gqaSVK2qoFjm69vfVIidcXe/y1fY7jKg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.mft rsync://rpki.ripe.net/repository/DEFAULT/NharGOa87eCFC8quvZWZk-hAhus.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:83:b5:56:59:e2:29:02:cf:c1:79:4f:80:e8:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3616ab18e6bcede0850bcaaebd959993e84086eb Validity Not Before: Dec 6 10:02:03 2025 GMT Not After : Dec 7 10:02:03 2025 GMT Subject: CN=f560f7333995ceb56b8625d9aa7c6d3c37fe9077 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:03:18:eb:96:ef:bc:e8:49:0c:23:78:49:bc: 33:35:15:1f:8e:dc:6b:28:08:1b:92:6c:2b:57:90: b1:64:c4:47:b9:67:d1:87:b6:16:cd:74:9c:f6:ad: c9:d1:be:e5:66:1e:1e:70:d2:30:de:7e:61:52:f6: c3:4f:1c:eb:13:9d:e7:ff:a0:f7:8c:3f:2d:79:2d: 59:ef:64:5d:ca:1b:f5:db:ab:77:30:65:87:70:2f: 2c:be:19:d3:87:fd:05:dd:69:44:e3:b6:e7:c7:0f: 8e:b4:4d:b9:47:88:27:16:2b:35:f1:80:35:c5:0c: ba:71:57:7f:ad:79:03:91:c1:cf:65:d8:a2:92:bb: 58:3f:b0:9d:a0:da:bb:40:a4:f7:24:2a:58:4b:c6: cf:3d:b0:33:f3:d7:93:d7:2d:bb:20:ab:81:82:0f: c6:e6:fe:31:a8:4e:0c:e8:d9:3f:3c:48:c0:ee:53: 18:54:66:9d:c8:4a:61:8d:ea:a8:7b:0b:da:a9:22: 2f:9b:53:5d:6a:90:e4:c1:ad:a8:4e:ea:df:85:30: 80:14:1d:cd:e0:7c:e7:54:9d:ef:a5:8f:5a:45:66: bd:86:13:e0:a5:26:ca:29:32:11:ff:d9:b4:7f:d2: 55:16:94:1a:01:64:68:46:d9:51:6f:bb:84:d5:db: e1:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:60:F7:33:39:95:CE:B5:6B:86:25:D9:AA:7C:6D:3C:37:FE:90:77 X509v3 Authority Key Identifier: keyid:36:16:AB:18:E6:BC:ED:E0:85:0B:CA:AE:BD:95:99:93:E8:40:86:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NharGOa87eCFC8quvZWZk-hAhus.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:44:55:e1:4d:d2:d1:2b:4d:59:da:47:5f:11:20:70:8b:2f: 45:20:41:0c:87:55:d3:6a:02:14:fa:d7:65:8a:3a:4c:a8:06: de:4b:e5:42:b3:6c:3d:02:49:e3:64:b8:09:a4:2b:f4:ca:95: f2:ba:76:e9:47:c5:af:8f:77:d9:a6:07:53:6d:e4:fb:cd:b3: 69:65:99:be:9b:6e:08:01:06:49:c7:86:f3:e1:da:ea:4e:74: 52:f3:93:00:45:b0:5d:d4:d2:2e:ae:0f:92:81:f9:9f:02:ce: 32:1f:51:fb:b3:de:d8:a3:24:51:c0:cb:86:d2:2e:7b:77:8b: d6:bb:92:7a:58:3e:5f:40:d8:b2:56:2b:c2:16:8b:3b:56:92: a5:08:6f:b1:6f:b0:3d:52:b1:6e:4a:13:ed:2d:9b:4e:ec:d8: a9:6d:c8:76:a0:89:0b:1d:40:f0:ae:a7:8e:df:4b:2e:44:b8: 93:50:31:c9:70:39:0c:e9:52:42:2e:18:d2:02:38:39:01:ce: 67:51:7f:6a:60:75:d8:ea:f2:fd:c8:19:9b:eb:e8:39:d0:2c: 53:c4:4a:9a:d3:c5:fc:14:b2:9f:bc:18:2c:a0:f6:f2:5e:ef: e7:34:f0:b5:ce:9b:35:f2:2d:ff:fc:d4:ba:b4:6b:8b:3a:21: 77:85:d3:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHIO1VlniKQLPwXlPgOikMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2MTZhYjE4ZTZiY2VkZTA4NTBiY2FhZWJkOTU5OTkzZTg0 MDg2ZWIwHhcNMjUxMjA2MTAwMjAzWhcNMjUxMjA3MTAwMjAzWjAzMTEwLwYDVQQD EyhmNTYwZjczMzM5OTVjZWI1NmI4NjI1ZDlhYTdjNmQzYzM3ZmU5MDc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgMY65bvvOhJDCN4SbwzNRUfjtxr KAgbkmwrV5CxZMRHuWfRh7YWzXSc9q3J0b7lZh4ecNIw3n5hUvbDTxzrE53n/6D3 jD8teS1Z72Rdyhv126t3MGWHcC8svhnTh/0F3WlE47bnxw+OtE25R4gnFis18YA1 xQy6cVd/rXkDkcHPZdiikrtYP7CdoNq7QKT3JCpYS8bPPbAz89eT1y27IKuBgg/G 5v4xqE4M6Nk/PEjA7lMYVGadyEphjeqoewvaqSIvm1NdapDkwa2oTurfhTCAFB3N 4HznVJ3vpY9aRWa9hhPgpSbKKTIR/9m0f9JVFpQaAWRoRtlRb7uE1dvhYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPVg9zM5lc61a4Yl2ap8bTw3/pB3MB8GA1UdIwQY MBaAFDYWqxjmvO3ghQvKrr2VmZPoQIbrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmhhckdPYTg3ZUNGQzhxdXZaV1prLWhBaHVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy83ZDJmMzQtYWZmZC00ZDFjLWI0MTYt YWFjMmViY2JmNWQ0LzEvTmhhckdPYTg3ZUNGQzhxdXZaV1prLWhBaHVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy83ZDJmMzQtYWZmZC00ZDFjLWI0MTYtYWFjMmViY2JmNWQ0 LzEvTmhhckdPYTg3ZUNGQzhxdXZaV1prLWhBaHVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARkRV4U3S 0StNWdpHXxEgcIsvRSBBDIdV02oCFPrXZYo6TKgG3kvlQrNsPQJJ42S4CaQr9MqV 8rp26UfFr4932aYHU23k+82zaWWZvptuCAEGSceG8+Ha6k50UvOTAEWwXdTSLq4P koH5nwLOMh9R+7Pe2KMkUcDLhtIue3eL1ruSelg+X0DYslYrwhaLO1aSpQhvsW+w PVKxbkoT7S2bTuzYqW3IdqCJCx1A8K6njt9LLkS4k1AxyXA5DOlSQi4Y0gI4OQHO Z1F/amB12Ory/cgZm+voOdAsU8RKmtPF/BSyn7wYLKD28l7v5zTwtc6bNfIt//zU urRrizohd4XTMg== -----END CERTIFICATE-----Generated at Sat Dec 6 14:38:43 2025 by rpki-client