This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.mft File: NHK1U_DLCxOQDUwuDmx3msoD47E.mft (raw, json) Hash identifier: CAHVq/fFR1Ev2VbbSem8h4VHqTsxhwz/AU6m1s5ZnFA= Subject key identifier: 72:4A:FA:C4:F9:13:F0:2B:07:B2:62:6B:AB:64:75:E8:E9:A8:38:9E Authority key identifier: 34:72:B5:53:F0:CB:0B:13:90:0D:4C:2E:0E:6C:77:9A:CA:03:E3:B1 Certificate issuer: /CN=3472b553f0cb0b13900d4c2e0e6c779aca03e3b1 Certificate serial: 019B1C8595C522CF3F12290836DCBDBFB489 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHK1U_DLCxOQDUwuDmx3msoD47E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.mft Manifest number: 14A6 Signing time: Sun 14 Dec 2025 11:01:15 +0000 Manifest this update: Sun 14 Dec 2025 11:01:15 +0000 Manifest next update: Mon 15 Dec 2025 11:01:15 +0000 Files and hashes: 1: 6-1i0N_EbFZTo9ANl2hYmIXY6kM.roa (hash: QWIH2VncfiqkLEzvbdcgtq9ctbO+I+7aPSyiE4vt93o=) 2: NHK1U_DLCxOQDUwuDmx3msoD47E.crl (hash: /bRHxBZL4bts2XeGMWLT3r6rg1u+WwJhfFNYOrUWUdI=) 3: PzRiqf6-YVqlskQDhqkV86tLS2k.roa (hash: hb2uYQFMFVLH00O7jFoKdZGYwNQ4nvgVdgn8uModie8=) 4: gu7MjE2UvzrS0XGUY6b4iCkG2LQ.roa (hash: kYyvw5YUpEYRs591UgfTOuS34Jj5NCcUlDlrBVHVgqQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.mft rsync://rpki.ripe.net/repository/DEFAULT/NHK1U_DLCxOQDUwuDmx3msoD47E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:85:95:c5:22:cf:3f:12:29:08:36:dc:bd:bf:b4:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3472b553f0cb0b13900d4c2e0e6c779aca03e3b1 Validity Not Before: Dec 14 11:01:15 2025 GMT Not After : Dec 15 11:01:15 2025 GMT Subject: CN=724afac4f913f02b07b2626bab6475e8e9a8389e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:88:3c:51:12:b2:06:a1:67:f6:e4:d9:e5:31: c7:8d:51:d2:10:5a:b8:6e:bf:14:31:7f:1d:ff:2e: 3e:f1:15:19:8e:d3:87:21:25:1b:9a:3b:8b:74:e1: f6:58:c2:14:99:58:05:57:c6:19:10:1b:7d:d5:40: ff:52:96:61:40:6e:cd:2e:a7:86:ad:eb:90:e4:8a: 97:1f:1c:89:85:54:d6:ad:5a:13:e1:e8:4b:f0:9c: b1:ec:3a:1c:f5:33:5c:9c:c5:1f:9b:bc:91:26:c8: a0:98:34:39:8b:46:b3:59:6a:f6:f4:89:48:2e:96: 86:0b:29:f8:d0:69:7d:d8:50:e5:4d:fd:49:78:f8: 79:cf:45:8b:0e:41:ef:5a:db:8e:6b:ea:7f:a2:cc: 72:89:ea:14:62:b8:49:f4:6a:33:27:62:20:8a:62: 24:eb:39:c8:2b:b6:ad:dc:99:90:57:b7:69:96:c2: bd:01:33:c9:61:f8:7d:a1:a2:86:3e:15:41:46:7b: 9f:a0:07:83:25:58:8f:d2:4f:20:b0:5d:00:b2:7e: d6:06:0c:1f:ef:3d:6c:8b:0f:ca:5f:08:cb:a0:d7: 26:ce:86:41:ad:fb:8f:50:14:be:85:73:cd:0c:e3: 2f:11:49:3c:2a:be:a1:2b:56:bc:e0:00:2d:bc:55: cd:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:4A:FA:C4:F9:13:F0:2B:07:B2:62:6B:AB:64:75:E8:E9:A8:38:9E X509v3 Authority Key Identifier: keyid:34:72:B5:53:F0:CB:0B:13:90:0D:4C:2E:0E:6C:77:9A:CA:03:E3:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHK1U_DLCxOQDUwuDmx3msoD47E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:f1:bc:57:11:ed:86:3b:6e:7d:fb:25:59:bb:db:de:15:2a: 5d:22:42:20:a6:1d:67:21:7b:58:ac:69:97:d5:c6:34:66:9b: cf:3b:06:ab:ad:7a:42:19:49:95:5b:f3:3f:8f:82:e2:2f:12: 20:24:2f:01:dc:6c:2d:54:23:75:e1:7f:c3:24:2b:f6:fb:b9: 74:5e:fe:d2:88:25:27:98:de:40:ea:c6:7f:8b:7f:67:22:4c: 1d:a0:1c:76:8c:d8:0b:24:21:63:90:ad:7b:ea:ff:02:da:14: 8d:3c:4c:11:70:f3:d5:2e:33:95:15:bd:0b:99:3a:44:6b:44: 41:e1:bd:a9:f3:1c:11:1b:58:46:7a:cc:14:1c:e2:f8:4a:34: a5:68:a4:fa:e9:7f:00:1b:03:49:d9:2b:1a:91:da:31:e8:82: cd:08:f8:d1:c7:1f:6f:a7:65:4a:76:8b:ad:69:b7:84:a7:6f: 45:33:43:6d:5d:5a:98:65:eb:27:3b:31:99:e1:ee:28:93:b0: 8d:ed:59:7a:3f:9c:a4:d6:40:3a:ee:dd:96:49:c5:27:90:a7: 20:71:8d:a8:82:62:e0:f4:98:d5:59:15:54:30:a4:cf:0f:47: 48:fa:85:8e:8d:f6:8f:f6:20:70:fc:47:6f:a0:0c:27:e7:48: 83:81:04:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZschZXFIs8/EikINty9v7SJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0NzJiNTUzZjBjYjBiMTM5MDBkNGMyZTBlNmM3NzlhY2Ew M2UzYjEwHhcNMjUxMjE0MTEwMTE1WhcNMjUxMjE1MTEwMTE1WjAzMTEwLwYDVQQD Eyg3MjRhZmFjNGY5MTNmMDJiMDdiMjYyNmJhYjY0NzVlOGU5YTgzODllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIg8URKyBqFn9uTZ5THHjVHSEFq4 br8UMX8d/y4+8RUZjtOHISUbmjuLdOH2WMIUmVgFV8YZEBt91UD/UpZhQG7NLqeG reuQ5IqXHxyJhVTWrVoT4ehL8Jyx7Doc9TNcnMUfm7yRJsigmDQ5i0azWWr29IlI LpaGCyn40Gl92FDlTf1JePh5z0WLDkHvWtuOa+p/osxyieoUYrhJ9GozJ2IgimIk 6znIK7at3JmQV7dplsK9ATPJYfh9oaKGPhVBRnufoAeDJViP0k8gsF0Asn7WBgwf 7z1siw/KXwjLoNcmzoZBrfuPUBS+hXPNDOMvEUk8Kr6hK1a84AAtvFXN2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHJK+sT5E/ArB7Jia6tkdejpqDieMB8GA1UdIwQY MBaAFDRytVPwywsTkA1MLg5sd5rKA+OxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkhLMVVfRExDeE9RRFV3dURteDNtc29ENDdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8wNWVkMmYtYzRmNy00NDE3LWE0ZmIt MGQyMDUyNWVkYzc0LzEvTkhLMVVfRExDeE9RRFV3dURteDNtc29ENDdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi8wNWVkMmYtYzRmNy00NDE3LWE0ZmItMGQyMDUyNWVkYzc0 LzEvTkhLMVVfRExDeE9RRFV3dURteDNtc29ENDdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh/G8VxHt hjtuffslWbvb3hUqXSJCIKYdZyF7WKxpl9XGNGabzzsGq616QhlJlVvzP4+C4i8S ICQvAdxsLVQjdeF/wyQr9vu5dF7+0oglJ5jeQOrGf4t/ZyJMHaAcdozYCyQhY5Ct e+r/AtoUjTxMEXDz1S4zlRW9C5k6RGtEQeG9qfMcERtYRnrMFBzi+Eo0pWik+ul/ ABsDSdkrGpHaMeiCzQj40ccfb6dlSnaLrWm3hKdvRTNDbV1amGXrJzsxmeHuKJOw je1Zej+cpNZAOu7dlknFJ5CnIHGNqIJi4PSY1VkVVDCkzw9HSPqFjo32j/YgcPxH b6AMJ+dIg4EErw== -----END CERTIFICATE-----Generated at Sun Dec 14 14:19:45 2025 by rpki-client