This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.mft File: rh__nrDPTAungU4yLsjgPU8fBxg.mft (raw, json) Hash identifier: kfacFI9EVp8rhAIpvbF4aozp1QGg7ec1ZFtYtd2TKfo= Subject key identifier: 6B:69:86:F6:66:12:17:42:AC:77:E7:50:2A:0A:BD:F8:C9:33:09:EA Authority key identifier: AE:1F:FF:9E:B0:CF:4C:0B:A7:81:4E:32:2E:C8:E0:3D:4F:1F:07:18 Certificate issuer: /CN=ae1fff9eb0cf4c0ba7814e322ec8e03d4f1f0718 Certificate serial: 019B31C36DC69D1FDD9D6B8C9A4C2B94D620 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rh__nrDPTAungU4yLsjgPU8fBxg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.mft Manifest number: 0E11 Signing time: Thu 18 Dec 2025 14:00:49 +0000 Manifest this update: Thu 18 Dec 2025 14:00:49 +0000 Manifest next update: Fri 19 Dec 2025 14:00:49 +0000 Files and hashes: 1: FE0N8Kmo4OQXkTM86cmuHztqlpc.roa (hash: SAO+tGk+RLFdSMx2iDPle0Zv+2Ko3C4/o12jLuDIkhw=) 2: rh__nrDPTAungU4yLsjgPU8fBxg.crl (hash: gAY2HeWS+Yta7EYZASwtrw2eJGfZWMvpOTwIG8WD7YE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.crl rsync://rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.mft rsync://rpki.ripe.net/repository/DEFAULT/rh__nrDPTAungU4yLsjgPU8fBxg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 14:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:c3:6d:c6:9d:1f:dd:9d:6b:8c:9a:4c:2b:94:d6:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae1fff9eb0cf4c0ba7814e322ec8e03d4f1f0718 Validity Not Before: Dec 18 14:00:49 2025 GMT Not After : Dec 19 14:00:49 2025 GMT Subject: CN=6b6986f666121742ac77e7502a0abdf8c93309ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:95:73:ea:56:4b:12:41:df:cc:a0:87:0e:f8: 6c:66:50:ca:9d:88:8b:0f:00:f4:9c:bf:0c:a1:5a: a7:65:c8:e3:e6:e9:f9:db:89:a6:c9:f9:2d:9d:bb: 39:b3:b0:bb:6d:43:db:ad:f3:55:7d:69:07:27:f7: 8b:a3:2a:bd:3d:f4:a2:fd:85:c7:2c:0d:1b:4a:f4: 36:21:d4:f6:17:1e:b7:9d:15:72:ce:13:c1:af:2b: ad:e1:91:29:f6:46:1a:09:37:94:59:ed:91:81:a6: 49:b2:da:c6:c9:b4:46:f0:2c:09:3a:88:e6:25:7c: 15:47:f7:70:c7:a5:13:0e:7e:e2:97:3c:f4:2e:2d: c3:aa:64:72:f6:aa:38:85:cd:c2:0a:e5:4d:b2:75: 36:52:01:0c:34:b5:58:ce:19:b4:c9:d6:db:b6:08: f3:f4:2c:b8:32:9b:5e:e4:1f:72:3f:53:e6:68:9a: 61:cb:17:c0:ab:d2:64:9c:c9:8e:18:cb:70:cb:b8: ff:a6:94:af:d6:58:02:22:46:58:64:36:0e:8d:87: 92:b2:64:cc:02:a2:13:68:70:95:1f:ae:99:63:b3: bf:0d:ce:00:68:53:46:0d:2a:2b:bf:d9:30:cf:11: 7b:a7:82:df:b5:0c:1a:bd:6a:96:93:74:fe:64:2f: 1e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:69:86:F6:66:12:17:42:AC:77:E7:50:2A:0A:BD:F8:C9:33:09:EA X509v3 Authority Key Identifier: keyid:AE:1F:FF:9E:B0:CF:4C:0B:A7:81:4E:32:2E:C8:E0:3D:4F:1F:07:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rh__nrDPTAungU4yLsjgPU8fBxg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:de:18:80:d7:39:ce:d1:dc:80:d4:29:af:98:ad:f7:8e:f7: 6a:20:29:94:9c:9b:69:0e:3a:7e:c5:5f:91:1e:f9:c3:35:df: 82:16:ff:56:bf:00:5a:3b:bc:a6:bf:29:52:29:83:8b:04:46: b5:26:0d:f5:fa:5b:c3:a7:d8:77:6b:e5:6b:a8:63:90:0d:bc: 47:48:af:e5:00:dc:61:a9:2e:cb:66:ef:8f:3f:2d:4b:3b:f3: e3:56:88:ac:e9:85:1a:4a:c2:f2:94:14:49:c6:89:db:7e:d7: 03:df:24:e8:98:21:14:65:e4:a8:cc:68:e2:47:2b:a9:af:43: 89:ff:84:3e:2c:6a:17:2d:ab:b3:41:1c:d0:e2:ff:fc:d0:a0: 40:32:ac:f2:78:80:23:b3:62:19:c8:63:d8:9c:50:05:6d:05: 06:43:a7:87:49:1e:94:fa:b0:00:10:cb:f2:bb:c3:89:bf:7a: 80:44:f4:c7:a4:21:bb:b1:eb:a6:79:bc:b9:e8:91:95:64:d2: dc:38:31:af:08:de:3b:58:28:b6:78:f0:97:a1:60:f3:45:71: e8:43:0f:ff:25:43:8e:d5:9b:bd:33:eb:19:4b:f9:55:93:48: 72:ed:a9:e5:6b:4c:c2:10:95:ef:33:cc:4e:6b:a1:b1:15:d6: 44:38:cc:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxw23GnR/dnWuMmkwrlNYgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlMWZmZjllYjBjZjRjMGJhNzgxNGUzMjJlYzhlMDNkNGYx ZjA3MTgwHhcNMjUxMjE4MTQwMDQ5WhcNMjUxMjE5MTQwMDQ5WjAzMTEwLwYDVQQD Eyg2YjY5ODZmNjY2MTIxNzQyYWM3N2U3NTAyYTBhYmRmOGM5MzMwOWVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5Vz6lZLEkHfzKCHDvhsZlDKnYiL DwD0nL8MoVqnZcjj5un524mmyfktnbs5s7C7bUPbrfNVfWkHJ/eLoyq9PfSi/YXH LA0bSvQ2IdT2Fx63nRVyzhPBryut4ZEp9kYaCTeUWe2RgaZJstrGybRG8CwJOojm JXwVR/dwx6UTDn7ilzz0Li3DqmRy9qo4hc3CCuVNsnU2UgEMNLVYzhm0ydbbtgjz 9Cy4Mpte5B9yP1PmaJphyxfAq9JknMmOGMtwy7j/ppSv1lgCIkZYZDYOjYeSsmTM AqITaHCVH66ZY7O/Dc4AaFNGDSorv9kwzxF7p4LftQwavWqWk3T+ZC8ehwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGtphvZmEhdCrHfnUCoKvfjJMwnqMB8GA1UdIwQY MBaAFK4f/56wz0wLp4FOMi7I4D1PHwcYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmhfX25yRFBUQXVuZ1U0eUxzamdQVThmQnhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8wZTlmYjktZjVhNy00NjZhLThmODEt OWUxMDI5NGExOGVhLzEvcmhfX25yRFBUQXVuZ1U0eUxzamdQVThmQnhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8wZTlmYjktZjVhNy00NjZhLThmODEtOWUxMDI5NGExOGVh LzEvcmhfX25yRFBUQXVuZ1U0eUxzamdQVThmQnhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAod4YgNc5 ztHcgNQpr5it9473aiAplJybaQ46fsVfkR75wzXfghb/Vr8AWju8pr8pUimDiwRG tSYN9fpbw6fYd2vla6hjkA28R0iv5QDcYakuy2bvjz8tSzvz41aIrOmFGkrC8pQU ScaJ237XA98k6JghFGXkqMxo4kcrqa9Dif+EPixqFy2rs0Ec0OL//NCgQDKs8niA I7NiGchj2JxQBW0FBkOnh0kelPqwABDL8rvDib96gET0x6Qhu7Hrpnm8ueiRlWTS 3DgxrwjeO1gotnjwl6Fg80Vx6EMP/yVDjtWbvTPrGUv5VZNIcu2p5WtMwhCV7zPM TmuhsRXWRDjM2g== -----END CERTIFICATE-----Generated at Thu Dec 18 23:31:40 2025 by rpki-client