This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.mft File: nhrDaclFaRShLgLf_I3XmXTrHvg.mft (raw, json) Hash identifier: tLj9DnZzwauCA/s4Ik9PDKXmk/2GKXeodiG8/qXgXXA= Subject key identifier: 3A:0D:84:4B:D2:ED:DF:83:4F:D4:77:C7:1C:EF:33:A0:23:6D:9B:ED Authority key identifier: 9E:1A:C3:69:C9:45:69:14:A1:2E:02:DF:FC:8D:D7:99:74:EB:1E:F8 Certificate issuer: /CN=9e1ac369c9456914a12e02dffc8dd79974eb1ef8 Certificate serial: 019B1ACE30150FD376A5BCBCA52939F4BC84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nhrDaclFaRShLgLf_I3XmXTrHvg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.mft Manifest number: 1780 Signing time: Sun 14 Dec 2025 03:01:18 +0000 Manifest this update: Sun 14 Dec 2025 03:01:18 +0000 Manifest next update: Mon 15 Dec 2025 03:01:18 +0000 Files and hashes: 1: lpNjWcDqYNxUEkbmUFWNkNGP3TU.roa (hash: kcvM/hwQgGd7DFNi9gnmV0tC16haiAENeyJbTz8H4R8=) 2: nhrDaclFaRShLgLf_I3XmXTrHvg.crl (hash: 8A+8asXYEsRlCS4EOQIGzvX4yQLBJRP3b/CeOgazJZM=) 3: xPxcOJ0Kf0LZfYxMGi5tIqm-oOA.roa (hash: YhAeuzShCUwBEhqFDEaD7LdhtEsAu+eg8PVlI1fAhv4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.mft rsync://rpki.ripe.net/repository/DEFAULT/nhrDaclFaRShLgLf_I3XmXTrHvg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:ce:30:15:0f:d3:76:a5:bc:bc:a5:29:39:f4:bc:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e1ac369c9456914a12e02dffc8dd79974eb1ef8 Validity Not Before: Dec 14 03:01:18 2025 GMT Not After : Dec 15 03:01:18 2025 GMT Subject: CN=3a0d844bd2eddf834fd477c71cef33a0236d9bed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:fc:77:e4:b4:4b:74:b5:96:4a:91:ac:72:d4: 28:e1:85:e7:df:65:01:01:66:46:38:2a:86:d8:4f: b6:e8:7e:c7:3e:4c:11:f8:df:d9:1c:11:10:e8:a0: 96:22:17:66:28:16:e4:7c:aa:50:8c:b7:d4:8f:e2: 31:7f:e5:62:27:4b:22:8e:c1:4b:64:3a:a0:78:f0: 62:f8:65:6e:54:d6:81:79:1b:14:7c:58:82:70:29: b8:d3:ad:39:40:6d:bf:f1:5a:9c:1a:0d:ec:a0:c6: 5c:d3:36:2a:6a:0b:1a:1c:03:59:eb:b9:9e:25:24: 46:f3:42:93:bd:d7:23:a3:53:4b:30:3d:e4:10:02: a8:f5:56:fc:08:81:2d:74:31:9e:18:b2:f6:0d:dc: 64:3c:1d:87:2d:57:6d:ef:a8:84:47:b7:6a:ba:00: d1:af:8a:aa:b5:51:54:d4:38:91:a7:98:53:39:a3: 91:8d:73:1a:48:c6:41:dc:ab:02:1f:67:2f:43:7c: ea:bc:06:79:ec:2d:99:89:df:67:8c:c2:8b:5b:00: 47:60:6f:22:fb:7c:71:a7:af:c1:17:99:60:93:1d: 8d:d3:92:29:5a:db:a5:c6:d7:4c:f2:33:e5:81:4c: df:3e:9f:f3:49:79:d1:99:6f:70:06:f1:da:fe:96: dc:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:0D:84:4B:D2:ED:DF:83:4F:D4:77:C7:1C:EF:33:A0:23:6D:9B:ED X509v3 Authority Key Identifier: keyid:9E:1A:C3:69:C9:45:69:14:A1:2E:02:DF:FC:8D:D7:99:74:EB:1E:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nhrDaclFaRShLgLf_I3XmXTrHvg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:9a:4d:79:15:ab:69:fd:c0:aa:15:1a:ec:cd:f7:37:7d:a7: 8c:7a:69:06:b6:64:bc:ad:5c:c6:b9:62:bd:d5:25:4e:96:9d: e8:66:0d:53:a8:d2:55:30:d7:23:e1:2c:c8:12:33:dd:4b:72: 98:e7:21:5f:3e:e2:a9:46:0d:49:1c:ee:1e:3e:2e:42:1b:32: 6f:ea:d9:b5:ad:22:da:9e:f8:f5:f5:a6:63:c0:e8:06:3b:38: 38:30:e6:b0:61:36:09:04:a4:0d:03:69:9e:ac:eb:57:03:70: 7d:17:73:df:ad:30:00:44:52:27:ae:d6:45:53:38:fe:e7:9f: 6c:94:fa:43:33:19:92:6d:75:cc:d8:27:0a:24:c2:f4:e0:2f: 0d:75:8d:f4:3d:18:23:ab:95:6d:bb:f4:fe:82:28:39:1e:b6: 45:02:59:7c:dd:fb:ac:31:c2:bf:ba:fb:4a:6c:8b:81:c9:e3: ef:6e:7e:f3:20:e5:64:1e:2c:28:df:0e:4c:89:51:58:6b:5b: a7:07:fa:b8:9e:93:55:fb:e6:fa:ae:77:c0:69:fd:bc:54:74: 70:16:4b:21:2a:bb:7b:ff:43:90:07:6d:13:40:a8:3d:02:96: a2:26:b1:51:17:11:90:b6:c6:05:4d:41:10:f0:22:98:48:f0: dc:2b:d1:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsazjAVD9N2pby8pSk59LyEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllMWFjMzY5Yzk0NTY5MTRhMTJlMDJkZmZjOGRkNzk5NzRl YjFlZjgwHhcNMjUxMjE0MDMwMTE4WhcNMjUxMjE1MDMwMTE4WjAzMTEwLwYDVQQD EygzYTBkODQ0YmQyZWRkZjgzNGZkNDc3YzcxY2VmMzNhMDIzNmQ5YmVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvx35LRLdLWWSpGsctQo4YXn32UB AWZGOCqG2E+26H7HPkwR+N/ZHBEQ6KCWIhdmKBbkfKpQjLfUj+Ixf+ViJ0sijsFL ZDqgePBi+GVuVNaBeRsUfFiCcCm40605QG2/8VqcGg3soMZc0zYqagsaHANZ67me JSRG80KTvdcjo1NLMD3kEAKo9Vb8CIEtdDGeGLL2DdxkPB2HLVdt76iER7dqugDR r4qqtVFU1DiRp5hTOaORjXMaSMZB3KsCH2cvQ3zqvAZ57C2Zid9njMKLWwBHYG8i +3xxp6/BF5lgkx2N05IpWtulxtdM8jPlgUzfPp/zSXnRmW9wBvHa/pbcUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDoNhEvS7d+DT9R3xxzvM6AjbZvtMB8GA1UdIwQY MBaAFJ4aw2nJRWkUoS4C3/yN15l06x74MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmhyRGFjbEZhUlNoTGdMZl9JM1htWFRySHZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8wOTFiZDAtMmY2Ny00N2NlLWFlMTct ZDY4YzU3ZGI0Y2FlLzEvbmhyRGFjbEZhUlNoTGdMZl9JM1htWFRySHZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC8wOTFiZDAtMmY2Ny00N2NlLWFlMTctZDY4YzU3ZGI0Y2Fl LzEvbmhyRGFjbEZhUlNoTGdMZl9JM1htWFRySHZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACZpNeRWr af3AqhUa7M33N32njHppBrZkvK1cxrlivdUlTpad6GYNU6jSVTDXI+EsyBIz3Uty mOchXz7iqUYNSRzuHj4uQhsyb+rZta0i2p749fWmY8DoBjs4ODDmsGE2CQSkDQNp nqzrVwNwfRdz360wAERSJ67WRVM4/uefbJT6QzMZkm11zNgnCiTC9OAvDXWN9D0Y I6uVbbv0/oIoOR62RQJZfN37rDHCv7r7SmyLgcnj725+8yDlZB4sKN8OTIlRWGtb pwf6uJ6TVfvm+q53wGn9vFR0cBZLISq7e/9DkAdtE0CoPQKWoiaxURcRkLbGBU1B EPAimEjw3CvRhg== -----END CERTIFICATE-----Generated at Sun Dec 14 12:03:36 2025 by rpki-client