This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/a280d8-8dba-4566-a238-33a3f3f003a5/1/NHBSPMWdTwUnV-cSKR4rt535KAA.mft File: NHBSPMWdTwUnV-cSKR4rt535KAA.mft (raw, json) Hash identifier: xY8Zk74lPnTiAIIPFDZcWD1eou5NPVH4AbKewed6lHk= Subject key identifier: 0C:EB:9A:DE:05:68:F5:55:32:D0:39:48:83:E4:E5:A5:06:7A:8C:AC Authority key identifier: 34:70:52:3C:C5:9D:4F:05:27:57:E7:12:29:1E:2B:B7:9D:F9:28:00 Certificate issuer: /CN=3470523cc59d4f052757e712291e2bb79df92800 Certificate serial: 019B18A8621EAC4C36EB75E15F5EDE9A58D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHBSPMWdTwUnV-cSKR4rt535KAA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/a280d8-8dba-4566-a238-33a3f3f003a5/1/NHBSPMWdTwUnV-cSKR4rt535KAA.mft Manifest number: 0284 Signing time: Sat 13 Dec 2025 17:00:46 +0000 Manifest this update: Sat 13 Dec 2025 17:00:46 +0000 Manifest next update: Sun 14 Dec 2025 17:00:46 +0000 Files and hashes: 1: NHBSPMWdTwUnV-cSKR4rt535KAA.crl (hash: evbVK6pMlAT99cOj6M0YUaNktcbMLiCJsi7EMZgTefQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/a280d8-8dba-4566-a238-33a3f3f003a5/1/NHBSPMWdTwUnV-cSKR4rt535KAA.crl rsync://rpki.ripe.net/repository/DEFAULT/24/a280d8-8dba-4566-a238-33a3f3f003a5/1/NHBSPMWdTwUnV-cSKR4rt535KAA.mft rsync://rpki.ripe.net/repository/DEFAULT/NHBSPMWdTwUnV-cSKR4rt535KAA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:18:a8:62:1e:ac:4c:36:eb:75:e1:5f:5e:de:9a:58:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3470523cc59d4f052757e712291e2bb79df92800 Validity Not Before: Dec 13 17:00:46 2025 GMT Not After : Dec 14 17:00:46 2025 GMT Subject: CN=0ceb9ade0568f55532d0394883e4e5a5067a8cac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:39:da:cb:10:6b:72:32:41:88:6f:e3:2f:78: 3f:2b:fe:81:95:b3:5a:29:2e:ed:48:4f:78:4d:0f: 05:59:7f:97:17:3d:72:7a:a9:19:74:b6:8b:43:85: 85:cf:ce:d5:6e:2b:fa:ec:5d:6b:53:d4:d5:81:52: 91:a0:00:fd:52:81:5a:48:4e:ce:f1:0c:84:41:e4: 7f:09:1a:01:8a:5e:71:f2:ae:6a:65:1e:e4:85:69: 2b:47:c5:b4:da:b0:4b:0f:cf:ff:05:1c:f4:ac:65: 96:29:6a:93:9f:e3:26:79:b0:6a:d3:d4:a2:19:98: 27:ca:65:98:d9:a9:9b:c7:f4:a2:32:09:fa:03:4a: a3:ef:50:2c:41:ea:84:34:7b:ce:4b:20:1d:ce:b6: c1:cb:cc:4d:f6:38:c0:5d:e6:7a:0c:3e:58:7b:54: c5:09:e7:b2:58:47:2c:8d:fe:93:e1:72:4a:1c:08: af:65:fe:b3:c9:d0:0c:cd:ba:1a:f1:22:7f:23:24: c0:d4:a2:3b:c2:39:72:88:96:ea:2c:8c:af:44:9e: 44:cb:4a:17:91:c0:9a:4c:3a:0b:52:41:fc:1f:38: 6e:52:d4:c0:8b:a4:99:b5:a6:d8:d4:c4:b4:10:da: cf:89:ab:14:e0:5b:44:22:bd:71:6c:75:31:8b:f5: 6e:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:EB:9A:DE:05:68:F5:55:32:D0:39:48:83:E4:E5:A5:06:7A:8C:AC X509v3 Authority Key Identifier: keyid:34:70:52:3C:C5:9D:4F:05:27:57:E7:12:29:1E:2B:B7:9D:F9:28:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHBSPMWdTwUnV-cSKR4rt535KAA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a280d8-8dba-4566-a238-33a3f3f003a5/1/NHBSPMWdTwUnV-cSKR4rt535KAA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a280d8-8dba-4566-a238-33a3f3f003a5/1/NHBSPMWdTwUnV-cSKR4rt535KAA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:7c:52:12:88:95:e0:ab:1c:7a:1d:fb:69:56:42:55:6c:fc: 19:89:e7:d0:26:a5:94:3d:a6:5b:0e:d6:ad:ee:1c:dc:7e:63: 32:a1:69:f3:f9:1c:46:ad:fd:7b:5b:af:ae:8a:03:32:fe:3f: 6c:3a:6d:dd:c4:ed:d2:d2:2e:cf:32:a8:25:d9:ff:29:48:e4: 46:cb:20:e3:da:e3:fe:eb:89:0d:66:7d:8a:c6:23:f2:bd:10: 05:92:13:ac:ae:a5:9a:7e:65:8e:29:7a:3b:20:26:c3:6d:23: b9:01:28:5f:6f:66:e2:c6:fa:32:7d:5c:09:d7:b3:63:e7:f7: 8e:2d:13:db:f4:3a:6b:8e:83:89:17:52:ad:f0:d5:73:2e:ef: 37:f0:48:a8:12:42:e3:d4:e5:49:5f:88:f4:87:26:04:a7:aa: b5:76:82:37:ba:e8:15:95:a9:5c:a9:3b:41:d9:f1:63:8a:b0: 4d:96:50:e0:23:29:ba:f4:a2:bb:0a:eb:46:0e:f5:55:a8:55: 82:0e:a9:39:30:67:3f:cd:10:34:15:7e:66:34:88:31:ce:a1: 85:da:10:b5:49:aa:8e:e5:4c:75:d0:c8:73:16:c1:15:b9:36: 64:4f:73:aa:b8:fa:18:f1:70:ac:f8:08:97:e9:62:1f:bb:b4: bc:31:46:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsYqGIerEw263XhX17emljQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0NzA1MjNjYzU5ZDRmMDUyNzU3ZTcxMjI5MWUyYmI3OWRm OTI4MDAwHhcNMjUxMjEzMTcwMDQ2WhcNMjUxMjE0MTcwMDQ2WjAzMTEwLwYDVQQD EygwY2ViOWFkZTA1NjhmNTU1MzJkMDM5NDg4M2U0ZTVhNTA2N2E4Y2FjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtznayxBrcjJBiG/jL3g/K/6BlbNa KS7tSE94TQ8FWX+XFz1yeqkZdLaLQ4WFz87Vbiv67F1rU9TVgVKRoAD9UoFaSE7O 8QyEQeR/CRoBil5x8q5qZR7khWkrR8W02rBLD8//BRz0rGWWKWqTn+MmebBq09Si GZgnymWY2ambx/SiMgn6A0qj71AsQeqENHvOSyAdzrbBy8xN9jjAXeZ6DD5Ye1TF CeeyWEcsjf6T4XJKHAivZf6zydAMzboa8SJ/IyTA1KI7wjlyiJbqLIyvRJ5Ey0oX kcCaTDoLUkH8HzhuUtTAi6SZtabY1MS0ENrPiasU4FtEIr1xbHUxi/VunwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAzrmt4FaPVVMtA5SIPk5aUGeoysMB8GA1UdIwQY MBaAFDRwUjzFnU8FJ1fnEikeK7ed+SgAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkhCU1BNV2RUd1VuVi1jU0tSNHJ0NTM1S0FBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9hMjgwZDgtOGRiYS00NTY2LWEyMzgt MzNhM2YzZjAwM2E1LzEvTkhCU1BNV2RUd1VuVi1jU0tSNHJ0NTM1S0FBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9hMjgwZDgtOGRiYS00NTY2LWEyMzgtMzNhM2YzZjAwM2E1 LzEvTkhCU1BNV2RUd1VuVi1jU0tSNHJ0NTM1S0FBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHHxSEoiV 4Ksceh37aVZCVWz8GYnn0CallD2mWw7Wre4c3H5jMqFp8/kcRq39e1uvrooDMv4/ bDpt3cTt0tIuzzKoJdn/KUjkRssg49rj/uuJDWZ9isYj8r0QBZITrK6lmn5ljil6 OyAmw20juQEoX29m4sb6Mn1cCdezY+f3ji0T2/Q6a46DiRdSrfDVcy7vN/BIqBJC 49TlSV+I9IcmBKeqtXaCN7roFZWpXKk7QdnxY4qwTZZQ4CMpuvSiuwrrRg71VahV gg6pOTBnP80QNBV+ZjSIMc6hhdoQtUmqjuVMddDIcxbBFbk2ZE9zqrj6GPFwrPgI l+liH7u0vDFG/w== -----END CERTIFICATE-----Generated at Sun Dec 14 00:04:44 2025 by rpki-client