This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft File: NHQhDChBPiYoSCKr6DrW18D3ZPo.mft (raw, json) Hash identifier: 6WASTiueLX/Pr3ADVfKrMcDWbebBFx1GOiGcpV5pd3c= Subject key identifier: E6:C5:4C:89:26:46:C3:9D:86:97:4B:2A:95:8A:E8:65:04:30:37:50 Authority key identifier: 34:74:21:0C:28:41:3E:26:28:48:22:AB:E8:3A:D6:D7:C0:F7:64:FA Certificate issuer: /CN=3474210c28413e26284822abe83ad6d7c0f764fa Certificate serial: 019B1080BBEF10BB96A4AD7CC0C21429623C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft Manifest number: 1779 Signing time: Fri 12 Dec 2025 03:00:30 +0000 Manifest this update: Fri 12 Dec 2025 03:00:30 +0000 Manifest next update: Sat 13 Dec 2025 03:00:30 +0000 Files and hashes: 1: 1bcuYr7QKJ5bW0bfcIYHS53yG6g.roa (hash: qd4P1coRqTY7B32E2jEnjJekCI9CLXdo/5/4fRHSsDk=) 2: 2yd3628VmNb462n9Ht_mrHJwpz4.roa (hash: jjvaAqc3q0c+UVUm7qyigUPHQ2zsUspQsTjOZ4ZjQ5E=) 3: 77kR0uenLneOf0_otMBTrdwkJ5I.roa (hash: kFgic4lpP8Yb+Wik/VcFSyZzSPM0vnTo7v0lGbnx3eU=) 4: An_xJWf4RJw4Ylw59J21Md85Jws.roa (hash: gk/epjcVW86jJdWfxESndHuaQolg8wlmkWBhHhLsN3Y=) 5: MMs4HnHsbdNr8Ew965SH5DIpvi4.roa (hash: Ku/6dybZerpifq4qXee8mDRjz4eG7rI5ajzOtuGjP0c=) 6: NHQhDChBPiYoSCKr6DrW18D3ZPo.crl (hash: ON/Pbr78CHiCcusL5EL8SNTk9GduUcUF85TdzeCVsdg=) 7: byk_uVbEcBcJ5E54PZILxzilXqs.roa (hash: JCkW4yYVwvgxvyj62HKMLWieGutHlsi8Ja6vFazZOyk=) 8: s_AA60Ddfygbd8EKAGEg6mSlXwc.roa (hash: ENuKCW/gynViV0FOCDZJgVAAEXvbRuvjapJ167NV/i4=) 9: zbORAgVCBGdwMFpkpNpVU4F-JYE.roa (hash: bnmHuORo7L7E/r6zgTIFCwfAOxo5IKx9z46OH+yKYpI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.crl rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 03:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:80:bb:ef:10:bb:96:a4:ad:7c:c0:c2:14:29:62:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3474210c28413e26284822abe83ad6d7c0f764fa Validity Not Before: Dec 12 03:00:30 2025 GMT Not After : Dec 13 03:00:30 2025 GMT Subject: CN=e6c54c892646c39d86974b2a958ae86504303750 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:5a:f4:ae:66:d2:74:e8:84:b5:b9:e5:82:1a: 28:c4:8d:32:4d:87:72:56:72:60:c9:48:aa:dc:0e: 34:7d:e6:2b:cd:d0:eb:63:ff:fe:7d:9d:ae:49:4f: c7:0a:ab:55:94:c2:9b:74:28:33:61:e6:39:d1:96: 42:4e:b0:3c:f3:cc:6d:70:7d:54:ed:c1:9c:0f:0e: c6:9a:55:4e:60:e1:45:88:e2:b1:65:49:10:23:99: 4a:79:c4:ae:da:34:3c:5a:6a:ec:e0:5e:ad:81:31: c5:d8:91:f8:93:89:fb:92:3f:69:f2:a8:4f:8a:7f: 16:8d:29:10:05:36:83:3a:12:81:b6:d9:7d:f3:a1: 97:42:05:c7:97:b5:7c:cd:5d:ce:65:39:31:94:23: 31:66:61:5f:c2:77:09:64:34:93:33:76:46:62:ae: 77:e1:99:26:30:94:5d:f4:d7:19:6e:e7:fb:4f:43: 33:9e:0b:1c:e0:a6:52:99:ac:ed:00:01:91:28:68: 60:d3:d8:1b:88:37:be:e0:0f:0a:73:ed:e1:b1:e2: 55:f7:89:b5:93:20:75:6b:1c:59:a3:07:0c:11:87: e4:a7:3b:c0:12:0c:af:d9:d2:fd:15:92:84:5c:89: a7:32:c7:53:7c:b8:33:5c:b6:ca:7d:66:14:d7:8c: 31:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:C5:4C:89:26:46:C3:9D:86:97:4B:2A:95:8A:E8:65:04:30:37:50 X509v3 Authority Key Identifier: keyid:34:74:21:0C:28:41:3E:26:28:48:22:AB:E8:3A:D6:D7:C0:F7:64:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:cf:ac:4d:0c:57:34:60:4d:d6:36:81:6c:6f:90:b9:bd:d3: 20:c3:96:cc:d0:22:64:05:af:34:27:a8:c7:7a:ea:c7:d3:07: 5e:79:41:f4:3c:8f:6e:ad:8e:76:1a:9f:b9:24:d3:b1:92:be: 01:5e:45:21:a5:72:71:c9:39:63:2a:3a:08:f8:b9:cb:c0:92: 6d:36:9e:3b:63:cf:0a:0a:20:1c:ce:da:25:dc:cb:83:60:a3: 69:77:aa:a9:93:28:8f:1d:33:76:8d:04:f9:c6:e8:a6:b7:39: 08:a3:61:7d:fb:05:fd:a8:47:df:22:31:98:5b:ba:cc:69:21: c7:a1:ca:e5:f1:89:e4:4f:24:a6:72:1a:67:c8:ea:ba:04:89: 50:42:21:13:32:b9:c1:f9:f6:9d:df:24:0d:ef:1e:fb:75:76: a0:45:56:9d:dc:a4:c9:b4:ab:3a:93:f7:e1:37:cc:91:ca:e5: 7e:4d:2a:12:91:4c:73:0d:fd:3e:86:61:53:b7:c6:56:9a:e6: 3f:e5:07:fd:98:98:6d:5c:ae:b2:dc:6e:ed:0e:e7:8d:99:d4: 21:c0:b6:03:c2:d3:1d:a4:9b:79:9d:f5:e9:a8:81:8d:06:0a: 67:3a:ec:b3:10:fa:20:2c:0d:20:7e:b8:31:0c:3c:44:d9:e8: 63:6b:3c:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQgLvvELuWpK18wMIUKWI8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0NzQyMTBjMjg0MTNlMjYyODQ4MjJhYmU4M2FkNmQ3YzBm NzY0ZmEwHhcNMjUxMjEyMDMwMDMwWhcNMjUxMjEzMDMwMDMwWjAzMTEwLwYDVQQD EyhlNmM1NGM4OTI2NDZjMzlkODY5NzRiMmE5NThhZTg2NTA0MzAzNzUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFr0rmbSdOiEtbnlghooxI0yTYdy VnJgyUiq3A40feYrzdDrY//+fZ2uSU/HCqtVlMKbdCgzYeY50ZZCTrA888xtcH1U 7cGcDw7GmlVOYOFFiOKxZUkQI5lKecSu2jQ8Wmrs4F6tgTHF2JH4k4n7kj9p8qhP in8WjSkQBTaDOhKBttl986GXQgXHl7V8zV3OZTkxlCMxZmFfwncJZDSTM3ZGYq53 4ZkmMJRd9NcZbuf7T0Mzngsc4KZSmaztAAGRKGhg09gbiDe+4A8Kc+3hseJV94m1 kyB1axxZowcMEYfkpzvAEgyv2dL9FZKEXImnMsdTfLgzXLbKfWYU14wxvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFObFTIkmRsOdhpdLKpWK6GUEMDdQMB8GA1UdIwQY MBaAFDR0IQwoQT4mKEgiq+g61tfA92T6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkhRaERDaEJQaVlvU0NLcjZEclcxOEQzWlBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8zZTk5MTYtNGY4YS00YjA4LTg5Yzkt YjBjNzRiNzZlMTgyLzEvTkhRaERDaEJQaVlvU0NLcjZEclcxOEQzWlBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My8zZTk5MTYtNGY4YS00YjA4LTg5YzktYjBjNzRiNzZlMTgy LzEvTkhRaERDaEJQaVlvU0NLcjZEclcxOEQzWlBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqs+sTQxX NGBN1jaBbG+Qub3TIMOWzNAiZAWvNCeox3rqx9MHXnlB9DyPbq2OdhqfuSTTsZK+ AV5FIaVycck5Yyo6CPi5y8CSbTaeO2PPCgogHM7aJdzLg2CjaXeqqZMojx0zdo0E +cboprc5CKNhffsF/ahH3yIxmFu6zGkhx6HK5fGJ5E8kpnIaZ8jqugSJUEIhEzK5 wfn2nd8kDe8e+3V2oEVWndykybSrOpP34TfMkcrlfk0qEpFMcw39PoZhU7fGVprm P+UH/ZiYbVyustxu7Q7njZnUIcC2A8LTHaSbeZ316aiBjQYKZzrssxD6ICwNIH64 MQw8RNnoY2s8qA== -----END CERTIFICATE-----Generated at Fri Dec 12 13:03:13 2025 by rpki-client