This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/4ef69e-9978-436d-90c9-82d97c069566/1/NHkVOIV45h2IaEmiHXC6B1FJwaE.mft File: NHkVOIV45h2IaEmiHXC6B1FJwaE.mft (raw, json) Hash identifier: wQiSudJJG9DL6Hxnx0tOoe9aYJlbeDMO0eUAob8GEio= Subject key identifier: A6:89:4F:01:11:7F:1E:C2:5D:D2:AF:28:3F:C9:C8:16:C2:37:0C:4D Authority key identifier: 34:79:15:38:85:78:E6:1D:88:68:49:A2:1D:70:BA:07:51:49:C1:A1 Certificate issuer: /CN=347915388578e61d886849a21d70ba075149c1a1 Certificate serial: 019B3A8F65D5805E6FC3C3A241546EAC919A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHkVOIV45h2IaEmiHXC6B1FJwaE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/4ef69e-9978-436d-90c9-82d97c069566/1/NHkVOIV45h2IaEmiHXC6B1FJwaE.mft Manifest number: 0D13 Signing time: Sat 20 Dec 2025 07:00:34 +0000 Manifest this update: Sat 20 Dec 2025 07:00:34 +0000 Manifest next update: Sun 21 Dec 2025 07:00:34 +0000 Files and hashes: 1: NHkVOIV45h2IaEmiHXC6B1FJwaE.crl (hash: SbV5hlsXFLrt0N58po7/cg08EZWM7MGHTgNzTm9hAC0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/4ef69e-9978-436d-90c9-82d97c069566/1/NHkVOIV45h2IaEmiHXC6B1FJwaE.crl rsync://rpki.ripe.net/repository/DEFAULT/67/4ef69e-9978-436d-90c9-82d97c069566/1/NHkVOIV45h2IaEmiHXC6B1FJwaE.mft rsync://rpki.ripe.net/repository/DEFAULT/NHkVOIV45h2IaEmiHXC6B1FJwaE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:8f:65:d5:80:5e:6f:c3:c3:a2:41:54:6e:ac:91:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=347915388578e61d886849a21d70ba075149c1a1 Validity Not Before: Dec 20 07:00:34 2025 GMT Not After : Dec 21 07:00:34 2025 GMT Subject: CN=a6894f01117f1ec25dd2af283fc9c816c2370c4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:9c:b1:49:4c:73:5b:42:2a:7e:a2:bf:fc:66: 4f:14:2f:95:c2:7c:4e:ce:e2:02:f6:38:2f:7a:1c: c2:5f:a7:b6:ba:34:ab:0a:de:1e:43:23:65:2b:52: 91:1b:3e:f1:cd:c0:51:93:44:ac:b5:2f:02:79:16: f9:08:85:88:45:50:3c:97:26:47:04:cd:15:41:2a: d9:24:d1:34:6e:00:12:63:5a:b5:51:b5:3c:74:7a: de:34:e2:7e:95:e3:c5:da:35:40:7e:e1:00:83:71: cd:93:8f:56:fb:60:79:bb:7d:27:a0:71:21:3f:4c: 5d:45:c9:4d:e0:26:b2:91:40:f2:30:ac:2c:0c:7b: c0:e7:9f:d0:68:83:9f:c9:53:68:13:b6:db:0a:eb: 58:07:7f:9c:d2:63:70:82:85:ad:07:c2:bb:42:95: a3:43:60:85:b2:bc:ab:5e:d8:38:4c:c5:74:e4:19: b4:d5:3f:23:f2:a9:b6:d4:eb:e1:9a:54:8c:ee:d4: 92:f8:3b:5c:19:31:01:8f:93:9a:72:0d:9c:b6:48: b5:94:4a:a0:f4:cf:ae:ba:93:77:fe:63:32:02:7d: b8:40:c7:95:d9:2f:87:4d:ba:e3:12:58:74:74:3d: 46:2a:bb:82:52:b9:50:d7:53:fe:44:29:34:8a:5f: 4d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:89:4F:01:11:7F:1E:C2:5D:D2:AF:28:3F:C9:C8:16:C2:37:0C:4D X509v3 Authority Key Identifier: keyid:34:79:15:38:85:78:E6:1D:88:68:49:A2:1D:70:BA:07:51:49:C1:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHkVOIV45h2IaEmiHXC6B1FJwaE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4ef69e-9978-436d-90c9-82d97c069566/1/NHkVOIV45h2IaEmiHXC6B1FJwaE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4ef69e-9978-436d-90c9-82d97c069566/1/NHkVOIV45h2IaEmiHXC6B1FJwaE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:79:45:6c:20:db:5c:f3:a9:ed:08:58:da:fc:57:f6:ea:da: 62:26:f5:42:8a:9f:7c:9e:7b:02:1f:ce:c6:89:5b:f1:a3:08: 1b:f4:72:72:ca:8f:f2:bb:c7:85:3e:0b:1b:0b:3f:ff:53:22: 13:06:7e:5a:c4:7f:5c:e8:9b:d0:91:f9:a3:8d:7a:c6:dd:7a: 37:7d:f6:c8:81:9f:4c:df:b4:17:30:81:1d:cf:e9:b9:e8:1b: 7e:a3:92:55:e8:7d:7a:7f:34:76:55:e4:87:fe:2f:d4:35:d1: 32:ef:e0:a5:85:b4:64:40:9a:c8:01:0e:ff:a9:80:e3:13:c5: a1:2e:ae:0b:c1:b0:6b:f0:1d:66:e5:2d:d6:65:9a:07:22:68: d5:ed:4b:a8:d3:2a:2a:84:f9:e1:b9:3e:72:87:1e:85:55:17: ae:8b:1f:ba:c1:d3:33:ef:b7:59:a0:e7:01:1b:ef:05:8e:c4: 2c:62:5f:ef:c7:b9:a3:f9:0c:11:fb:c7:10:7e:00:96:40:71: e6:7f:31:cb:73:70:26:7e:83:ee:46:54:c6:28:4e:95:23:46: f3:be:a9:64:d6:eb:4c:28:1e:19:37:c1:65:ef:56:97:63:40: e1:62:d6:81:f7:d8:7b:00:d2:f6:44:68:6c:0a:e1:60:02:03: a0:e5:ca:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6j2XVgF5vw8OiQVRurJGaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0NzkxNTM4ODU3OGU2MWQ4ODY4NDlhMjFkNzBiYTA3NTE0 OWMxYTEwHhcNMjUxMjIwMDcwMDM0WhcNMjUxMjIxMDcwMDM0WjAzMTEwLwYDVQQD EyhhNjg5NGYwMTExN2YxZWMyNWRkMmFmMjgzZmM5YzgxNmMyMzcwYzRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JyxSUxzW0IqfqK//GZPFC+VwnxO zuIC9jgvehzCX6e2ujSrCt4eQyNlK1KRGz7xzcBRk0SstS8CeRb5CIWIRVA8lyZH BM0VQSrZJNE0bgASY1q1UbU8dHreNOJ+lePF2jVAfuEAg3HNk49W+2B5u30noHEh P0xdRclN4CaykUDyMKwsDHvA55/QaIOfyVNoE7bbCutYB3+c0mNwgoWtB8K7QpWj Q2CFsryrXtg4TMV05Bm01T8j8qm21OvhmlSM7tSS+DtcGTEBj5Oacg2ctki1lEqg 9M+uupN3/mMyAn24QMeV2S+HTbrjElh0dD1GKruCUrlQ11P+RCk0il9NgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKaJTwERfx7CXdKvKD/JyBbCNwxNMB8GA1UdIwQY MBaAFDR5FTiFeOYdiGhJoh1wugdRScGhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkhrVk9JVjQ1aDJJYUVtaUhYQzZCMUZKd2FFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny80ZWY2OWUtOTk3OC00MzZkLTkwYzkt ODJkOTdjMDY5NTY2LzEvTkhrVk9JVjQ1aDJJYUVtaUhYQzZCMUZKd2FFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny80ZWY2OWUtOTk3OC00MzZkLTkwYzktODJkOTdjMDY5NTY2 LzEvTkhrVk9JVjQ1aDJJYUVtaUhYQzZCMUZKd2FFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANnlFbCDb XPOp7QhY2vxX9uraYib1QoqffJ57Ah/Oxolb8aMIG/RycsqP8rvHhT4LGws//1Mi EwZ+WsR/XOib0JH5o416xt16N332yIGfTN+0FzCBHc/puegbfqOSVeh9en80dlXk h/4v1DXRMu/gpYW0ZECayAEO/6mA4xPFoS6uC8Gwa/AdZuUt1mWaByJo1e1LqNMq KoT54bk+cocehVUXrosfusHTM++3WaDnARvvBY7ELGJf78e5o/kMEfvHEH4AlkBx 5n8xy3NwJn6D7kZUxihOlSNG876pZNbrTCgeGTfBZe9Wl2NA4WLWgffYewDS9kRo bArhYAIDoOXKcA== -----END CERTIFICATE-----Generated at Sat Dec 20 09:13:51 2025 by rpki-client