This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.mft File: NlHOpaznf01_TdKC8Qq5yw7k0ew.mft (raw, json) Hash identifier: J+hQNdX/kyQO1kjEMkIPTF6xTkUdjJfm1zoLn1PHR8M= Subject key identifier: 01:46:20:C2:2E:DF:07:D1:82:14:F9:3B:F1:68:D4:3E:E7:88:38:DF Authority key identifier: 36:51:CE:A5:AC:E7:7F:4D:7F:4D:D2:82:F1:0A:B9:CB:0E:E4:D1:EC Certificate issuer: /CN=3651cea5ace77f4d7f4dd282f10ab9cb0ee4d1ec Certificate serial: 019AF276CFDB4ED7FAE7D6357C6B0E257D4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NlHOpaznf01_TdKC8Qq5yw7k0ew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.mft Manifest number: 1261 Signing time: Sat 06 Dec 2025 07:01:03 +0000 Manifest this update: Sat 06 Dec 2025 07:01:03 +0000 Manifest next update: Sun 07 Dec 2025 07:01:03 +0000 Files and hashes: 1: NlHOpaznf01_TdKC8Qq5yw7k0ew.crl (hash: cSSKsebDpfkZON7ClLa/8hvK9ujHiaYP7kekp6QuAQA=) 2: XPkovunJ2mYG9xru2HKfkrigcMA.roa (hash: ZBoNLDdsfMiH4Qvw9YL8Os7NUZ9E42iEu1OMEgsfl7U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.mft rsync://rpki.ripe.net/repository/DEFAULT/NlHOpaznf01_TdKC8Qq5yw7k0ew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:cf:db:4e:d7:fa:e7:d6:35:7c:6b:0e:25:7d:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3651cea5ace77f4d7f4dd282f10ab9cb0ee4d1ec Validity Not Before: Dec 6 07:01:03 2025 GMT Not After : Dec 7 07:01:03 2025 GMT Subject: CN=014620c22edf07d18214f93bf168d43ee78838df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:62:ae:fd:55:ae:ec:1a:92:11:ad:25:4f:08: 17:0c:14:a3:42:5e:45:0a:74:8a:e5:0f:6a:5c:f5: c1:27:11:35:84:fe:5f:22:dd:d9:ba:d1:aa:0e:eb: 85:e4:d8:d5:68:d6:be:d4:f6:10:81:99:35:19:dd: ce:a9:0d:dc:6d:b9:93:32:44:c2:15:46:0c:4f:18: 95:53:11:14:4d:fa:2c:3e:7b:7a:63:14:68:52:6b: 66:61:14:42:8a:cd:22:f5:0b:b1:a1:6c:ab:a4:9f: 7f:58:77:f9:c0:32:12:00:77:49:05:6f:1b:0b:f8: 86:09:a6:67:8b:be:56:c0:e6:60:f2:9f:54:e8:22: de:f2:1d:83:f0:55:4a:38:4f:b9:f4:7d:5c:13:04: ef:c9:9d:6b:98:8d:58:c6:5a:dd:da:af:9e:12:69: 7d:69:8c:ad:31:db:b3:55:50:5f:0e:08:db:83:4d: 9c:51:df:cb:fc:f4:dc:83:3e:f0:bd:af:75:d3:9b: df:2f:f1:ce:44:c7:e4:42:67:b6:3b:9a:22:b8:3e: 6f:53:79:9f:78:78:b1:e0:38:bd:9a:47:fa:9a:0b: 33:b3:d3:05:a3:23:e9:dd:8a:20:45:c6:7f:30:14: de:d6:d6:38:8a:62:82:fb:60:68:8e:81:6a:a3:e0: 69:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:46:20:C2:2E:DF:07:D1:82:14:F9:3B:F1:68:D4:3E:E7:88:38:DF X509v3 Authority Key Identifier: keyid:36:51:CE:A5:AC:E7:7F:4D:7F:4D:D2:82:F1:0A:B9:CB:0E:E4:D1:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NlHOpaznf01_TdKC8Qq5yw7k0ew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:fc:e8:f6:60:f7:cb:a1:54:63:ec:3d:db:9a:7e:f5:ba:11: 6a:9b:01:dc:56:05:34:2e:fc:7c:b7:b5:be:d7:08:be:3a:2d: c6:cf:13:fc:8a:e6:e2:93:23:53:e5:10:fa:64:d3:96:10:59: 9f:fb:5f:de:35:d7:7e:86:97:3a:d0:7b:f9:fc:ab:d5:87:80: ab:15:81:b7:6e:15:b6:2b:22:3e:84:8c:45:1a:3e:1f:5c:c0: 79:71:a2:92:23:cc:9e:61:f1:b2:13:2c:b3:99:0b:ca:ee:8c: 86:03:02:f0:26:48:1c:f0:ab:d6:df:4d:85:33:7f:c1:3a:e3: b8:ab:74:36:e9:b9:92:48:49:00:bd:da:2e:45:17:06:01:b6: 65:f5:91:d7:f6:18:2d:1b:a8:b0:c3:ed:a1:e6:da:bc:25:87: d5:de:bd:38:59:cf:f9:f0:06:56:b9:c7:70:ca:d2:8a:d8:ac: 0f:f7:17:07:3c:77:61:38:5b:06:a3:d7:17:e4:35:af:01:50: 34:f6:01:99:bf:02:d3:09:a9:9e:57:68:af:67:b3:2e:e5:00: be:07:d0:b7:91:c2:46:ce:17:b2:f9:92:66:bf:95:a2:fe:19: a3:62:7e:07:a7:2f:45:c8:72:1d:e8:b2:12:54:31:2d:de:e7: a1:ea:53:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryds/bTtf659Y1fGsOJX1LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2NTFjZWE1YWNlNzdmNGQ3ZjRkZDI4MmYxMGFiOWNiMGVl NGQxZWMwHhcNMjUxMjA2MDcwMTAzWhcNMjUxMjA3MDcwMTAzWjAzMTEwLwYDVQQD EygwMTQ2MjBjMjJlZGYwN2QxODIxNGY5M2JmMTY4ZDQzZWU3ODgzOGRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2Ku/VWu7BqSEa0lTwgXDBSjQl5F CnSK5Q9qXPXBJxE1hP5fIt3ZutGqDuuF5NjVaNa+1PYQgZk1Gd3OqQ3cbbmTMkTC FUYMTxiVUxEUTfosPnt6YxRoUmtmYRRCis0i9QuxoWyrpJ9/WHf5wDISAHdJBW8b C/iGCaZni75WwOZg8p9U6CLe8h2D8FVKOE+59H1cEwTvyZ1rmI1Yxlrd2q+eEml9 aYytMduzVVBfDgjbg02cUd/L/PTcgz7wva9105vfL/HORMfkQme2O5oiuD5vU3mf eHix4Di9mkf6mgszs9MFoyPp3YogRcZ/MBTe1tY4imKC+2BojoFqo+BpRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAFGIMIu3wfRghT5O/Fo1D7niDjfMB8GA1UdIwQY MBaAFDZRzqWs539Nf03SgvEKucsO5NHsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmxIT3Bhem5mMDFfVGRLQzhRcTV5dzdrMGV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9hYzIxNGItMzc3Mi00ODEwLTkyMDYt YjkyYjA5NGYzYTNjLzEvTmxIT3Bhem5mMDFfVGRLQzhRcTV5dzdrMGV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC9hYzIxNGItMzc3Mi00ODEwLTkyMDYtYjkyYjA5NGYzYTNj LzEvTmxIT3Bhem5mMDFfVGRLQzhRcTV5dzdrMGV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP/zo9mD3 y6FUY+w925p+9boRapsB3FYFNC78fLe1vtcIvjotxs8T/Irm4pMjU+UQ+mTTlhBZ n/tf3jXXfoaXOtB7+fyr1YeAqxWBt24VtisiPoSMRRo+H1zAeXGikiPMnmHxshMs s5kLyu6MhgMC8CZIHPCr1t9NhTN/wTrjuKt0Num5kkhJAL3aLkUXBgG2ZfWR1/YY LRuosMPtoebavCWH1d69OFnP+fAGVrnHcMrSitisD/cXBzx3YThbBqPXF+Q1rwFQ NPYBmb8C0wmpnldor2ezLuUAvgfQt5HCRs4XsvmSZr+Vov4Zo2J+B6cvRchyHeiy ElQxLd7noepT+Q== -----END CERTIFICATE-----Generated at Sat Dec 6 08:22:58 2025 by rpki-client