This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.mft File: NhrfV8jct7_TTprs2D42NC7Do8k.mft (raw, json) Hash identifier: DSjMv6flKqlBRbYOmLjP0f6WQuSWaj39Tc88wapWFMs= Subject key identifier: 63:D9:5A:A5:9B:98:32:C7:15:DA:26:02:CB:02:EC:EF:69:04:6C:09 Authority key identifier: 36:1A:DF:57:C8:DC:B7:BF:D3:4E:9A:EC:D8:3E:36:34:2E:C3:A3:C9 Certificate issuer: /CN=361adf57c8dcb7bfd34e9aecd83e36342ec3a3c9 Certificate serial: 019B2250912119CB0F1EEF54728C1769AB60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhrfV8jct7_TTprs2D42NC7Do8k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.mft Manifest number: 1537 Signing time: Mon 15 Dec 2025 14:01:03 +0000 Manifest this update: Mon 15 Dec 2025 14:01:03 +0000 Manifest next update: Tue 16 Dec 2025 14:01:03 +0000 Files and hashes: 1: 8GuN-54fOOWK-SbVRHbvHD1t258.roa (hash: +JAgmZYVHbTg/tn7L+SSKAVcpZBlqMe4rbmvvs3DmTY=) 2: KFmrVFMv5VvGN18H4jdGIeWGvn8.roa (hash: /z+1/Ei//uOKicmtTi2XHrdGdq2SuXHHljqI7g0rhfE=) 3: NhrfV8jct7_TTprs2D42NC7Do8k.crl (hash: xgdKAujzo7kvhh8eFEyt0WuctiY+w+sUUImXuMFLtbY=) 4: gaApv-P3VWnlKNagOLOw5elCXUg.roa (hash: uJOMrg9lvM87wMjmTs9ZCZY0pZU1l+jJJKNSBI4+HgI=) 5: mldZ02SgByZkxb9-hN-tKmR0o0s.roa (hash: DrkW1wHvYpTjqDlBZkGq/sAaUPB7borOxMsYKMVFock=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.mft rsync://rpki.ripe.net/repository/DEFAULT/NhrfV8jct7_TTprs2D42NC7Do8k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 14:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:50:91:21:19:cb:0f:1e:ef:54:72:8c:17:69:ab:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=361adf57c8dcb7bfd34e9aecd83e36342ec3a3c9 Validity Not Before: Dec 15 14:01:03 2025 GMT Not After : Dec 16 14:01:03 2025 GMT Subject: CN=63d95aa59b9832c715da2602cb02ecef69046c09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:86:77:8d:c4:e4:0e:b4:0b:df:99:1f:73:1a: 04:41:05:55:00:96:68:61:3b:5a:5a:b9:f4:b1:cc: 00:6d:03:a1:eb:62:6f:de:6c:63:b4:61:60:8f:ca: d3:f6:8a:f7:4f:0c:e8:aa:fd:e2:90:a7:7e:e0:82: e1:1f:fa:24:bb:f3:4c:d9:de:aa:ad:2b:3c:99:08: 10:d3:57:8b:95:6f:c3:d3:b9:2b:91:bc:04:67:4e: a8:cc:06:04:0a:b3:1d:51:b6:53:00:88:ad:8c:e8: 71:02:70:99:1e:d7:bb:fd:90:23:74:3a:6a:f5:7f: e6:ed:cf:64:41:b5:f7:2c:14:d1:fa:f4:41:fa:8c: 38:57:6f:ef:00:71:0b:9d:6f:a3:05:d6:ae:02:c2: 67:a1:0c:b4:1c:76:3d:0f:85:80:09:c9:9f:c3:e8: 11:ef:db:ed:a0:e1:85:ef:a7:63:40:30:ec:42:3d: e6:aa:de:00:03:0f:24:b7:d8:ce:e5:ba:3c:8a:af: a6:9e:e3:d1:03:0e:b4:b0:dc:d6:e2:12:0e:09:a4: 38:5c:9d:a8:c5:d7:07:71:89:a4:f9:90:65:2f:d3: 68:24:b9:97:61:16:ad:6d:ed:07:69:a5:ed:29:c9: d2:b5:48:79:5f:a0:1c:36:6d:b7:a7:27:20:16:0d: 6c:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:D9:5A:A5:9B:98:32:C7:15:DA:26:02:CB:02:EC:EF:69:04:6C:09 X509v3 Authority Key Identifier: keyid:36:1A:DF:57:C8:DC:B7:BF:D3:4E:9A:EC:D8:3E:36:34:2E:C3:A3:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhrfV8jct7_TTprs2D42NC7Do8k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:88:7a:c0:01:c9:6f:8d:dc:5d:31:99:a4:57:42:05:a5:f4: 84:cf:00:23:c7:e3:19:30:d2:d0:5e:bf:84:77:44:99:f3:6d: f6:10:13:f7:5a:ae:9c:b1:f6:1b:e7:8e:c2:9d:e6:36:45:30: 5f:d1:4a:2e:0a:da:cc:be:c2:37:e2:34:fe:57:20:87:4b:fd: 86:e1:94:83:b0:f3:9d:63:5e:ef:b9:cf:ad:c7:b3:71:6c:c7: 15:30:a3:6e:5b:87:3b:1a:42:a4:e3:52:d3:a9:56:ce:fd:c0: 2b:06:dd:16:50:58:cb:66:c1:36:93:f1:73:4e:21:55:26:d6: c7:46:65:04:39:2c:ee:60:79:1b:50:55:e3:81:b4:49:5d:8e: 9a:65:2c:c1:66:df:b5:04:ac:fb:02:e2:45:ff:8a:15:76:26: 80:eb:ac:31:0d:31:d6:a9:8c:e8:c0:c7:c6:a0:50:ab:30:a4: 9a:c4:6d:ec:32:9f:01:36:43:b9:7d:9c:ca:05:58:ae:4b:5f: f5:31:16:29:16:99:34:58:fa:16:fe:70:df:c3:65:50:f1:c6: 6a:9d:b4:ca:7a:80:00:9c:d9:c7:2e:25:71:47:57:7d:b1:e0: d9:18:47:77:4a:8e:10:3a:6c:1d:7e:84:d8:90:f5:1c:8b:96: 5a:21:19:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsiUJEhGcsPHu9UcowXaatgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2MWFkZjU3YzhkY2I3YmZkMzRlOWFlY2Q4M2UzNjM0MmVj M2EzYzkwHhcNMjUxMjE1MTQwMTAzWhcNMjUxMjE2MTQwMTAzWjAzMTEwLwYDVQQD Eyg2M2Q5NWFhNTliOTgzMmM3MTVkYTI2MDJjYjAyZWNlZjY5MDQ2YzA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0oZ3jcTkDrQL35kfcxoEQQVVAJZo YTtaWrn0scwAbQOh62Jv3mxjtGFgj8rT9or3Twzoqv3ikKd+4ILhH/oku/NM2d6q rSs8mQgQ01eLlW/D07krkbwEZ06ozAYECrMdUbZTAIitjOhxAnCZHte7/ZAjdDpq 9X/m7c9kQbX3LBTR+vRB+ow4V2/vAHELnW+jBdauAsJnoQy0HHY9D4WACcmfw+gR 79vtoOGF76djQDDsQj3mqt4AAw8kt9jO5bo8iq+mnuPRAw60sNzW4hIOCaQ4XJ2o xdcHcYmk+ZBlL9NoJLmXYRatbe0HaaXtKcnStUh5X6AcNm23pycgFg1srQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGPZWqWbmDLHFdomAssC7O9pBGwJMB8GA1UdIwQY MBaAFDYa31fI3Le/006a7Ng+NjQuw6PJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmhyZlY4amN0N19UVHByczJENDJOQzdEbzhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9lMGY4YzYtYWFkYy00YzMxLWI5MmIt MWExODczOGI0NzQxLzEvTmhyZlY4amN0N19UVHByczJENDJOQzdEbzhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi9lMGY4YzYtYWFkYy00YzMxLWI5MmItMWExODczOGI0NzQx LzEvTmhyZlY4amN0N19UVHByczJENDJOQzdEbzhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABoh6wAHJ b43cXTGZpFdCBaX0hM8AI8fjGTDS0F6/hHdEmfNt9hAT91qunLH2G+eOwp3mNkUw X9FKLgrazL7CN+I0/lcgh0v9huGUg7DznWNe77nPrcezcWzHFTCjbluHOxpCpONS 06lWzv3AKwbdFlBYy2bBNpPxc04hVSbWx0ZlBDks7mB5G1BV44G0SV2OmmUswWbf tQSs+wLiRf+KFXYmgOusMQ0x1qmM6MDHxqBQqzCkmsRt7DKfATZDuX2cygVYrktf 9TEWKRaZNFj6Fv5w38NlUPHGap20ynqAAJzZxy4lcUdXfbHg2RhHd0qOEDpsHX6E 2JD1HIuWWiEZmw== -----END CERTIFICATE-----Generated at Tue Dec 16 00:11:33 2025 by rpki-client