This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft File: naTpXS9Mw0pzdrc8DwObPhWPUVI.mft (raw, json) Hash identifier: YnStGPHmsxMiIyAlOZmMsWglv1gcNxYfAyC3ffQxVQA= Subject key identifier: 36:B7:36:B8:BB:87:0C:62:3F:5C:41:03:0B:D0:0D:50:2B:47:2A:74 Authority key identifier: 9D:A4:E9:5D:2F:4C:C3:4A:73:76:B7:3C:0F:03:9B:3E:15:8F:51:52 Certificate issuer: /CN=9da4e95d2f4cc34a7376b73c0f039b3e158f5152 Certificate serial: 019B1B3B890B195A4479175F33C3801C195C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft Manifest number: 1683 Signing time: Sun 14 Dec 2025 05:00:44 +0000 Manifest this update: Sun 14 Dec 2025 05:00:44 +0000 Manifest next update: Mon 15 Dec 2025 05:00:44 +0000 Files and hashes: 1: WYyFBT5nmwxFR4gPo5unCY2UhVc.roa (hash: Z4ZpbpPZKoHHj3yG0X2Ro2qP/JaWFIzV9WlYUI0Hg8s=) 2: j9lH8J7G3WobH4lsD15m-VsHfXA.roa (hash: qeHJX0Tapm1zxSb8XB+NF4p89KIeCYI5mpUGKGseBY0=) 3: naTpXS9Mw0pzdrc8DwObPhWPUVI.crl (hash: KKSMlG4Dafn/bsYYT9HNUqrYumDP++sWs4MUbhpxlg8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.crl rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:3b:89:0b:19:5a:44:79:17:5f:33:c3:80:1c:19:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9da4e95d2f4cc34a7376b73c0f039b3e158f5152 Validity Not Before: Dec 14 05:00:44 2025 GMT Not After : Dec 15 05:00:44 2025 GMT Subject: CN=36b736b8bb870c623f5c41030bd00d502b472a74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:2f:28:e9:f7:39:08:d4:47:25:c1:27:be:b7: c4:11:49:7d:87:de:a5:af:8b:61:db:57:2c:e2:8b: 6e:62:96:22:89:5c:6a:e2:cc:b0:53:c8:15:e2:fa: 4a:ff:4d:bf:33:1c:0b:2c:aa:8c:1a:03:94:57:13: c5:6d:ab:9e:4d:64:40:f8:8c:62:37:b8:7d:0e:9a: 92:8c:21:d3:d5:d6:fc:64:e8:e5:8d:22:c0:78:64: 49:1f:ba:e4:11:41:13:a4:3b:90:78:3b:35:66:01: 75:83:c5:52:d9:35:7c:10:68:62:01:d5:e5:38:71: f3:51:2a:c7:03:9b:05:c6:3d:cc:c8:0d:63:0b:8f: 87:35:c5:e5:0d:d8:3a:ab:8c:a1:09:29:18:cc:87: 06:3e:c9:55:10:59:71:9f:4d:4b:6d:c9:93:04:2e: f9:31:54:f5:fb:9e:3a:23:86:7f:fd:ba:ed:47:3b: 8e:17:d4:47:a9:af:23:bc:43:7f:33:38:08:88:ce: c5:d8:9d:be:bd:21:71:62:1c:a5:19:e8:b5:c5:5a: 30:9f:84:33:cb:69:68:b5:70:ca:c7:73:72:50:c0: 08:9c:de:51:12:21:45:e9:dd:3e:9b:88:bc:70:67: b6:6e:db:bf:26:9f:3c:d5:aa:d3:8c:8c:2a:c9:2f: a9:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:B7:36:B8:BB:87:0C:62:3F:5C:41:03:0B:D0:0D:50:2B:47:2A:74 X509v3 Authority Key Identifier: keyid:9D:A4:E9:5D:2F:4C:C3:4A:73:76:B7:3C:0F:03:9B:3E:15:8F:51:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:cf:83:74:1d:4d:c5:71:c0:92:67:95:36:fc:ea:a8:92:84: d5:37:4e:7b:40:d0:0a:e2:45:bf:a7:65:1f:50:17:09:30:64: 1c:0f:16:7a:5e:e8:cf:fb:dc:5a:46:0c:0d:7f:9a:1e:11:05: 75:2d:98:62:c3:79:c4:fd:11:1d:9e:16:d8:10:46:dc:6f:80: 80:f9:54:8f:a2:21:56:ad:23:eb:52:ca:7c:af:4a:54:a1:f8: 6a:71:2d:dc:65:60:5a:c2:e8:68:f1:66:bf:61:c1:e7:17:f5: ff:7f:c9:c8:5f:e3:1a:af:b6:d2:c6:96:f7:77:35:ba:91:02: 37:19:84:36:a6:32:9e:9d:56:c8:7f:ed:ef:35:12:85:52:c7: 3f:34:8b:07:de:38:47:6a:bd:f3:70:dd:f4:ec:4f:1e:39:02: 02:57:e5:b5:e5:06:19:1a:a5:37:ae:b4:03:48:32:e1:52:ef: 23:6f:af:e5:f7:0d:bc:30:aa:9c:7e:6d:4b:72:0d:59:e5:b0: ff:d3:46:86:19:42:cf:a8:56:7b:c0:99:99:23:76:2d:0e:56: 45:79:86:33:9e:e9:df:9e:e4:74:d1:57:d8:73:bb:af:2f:4b: 37:70:18:2d:65:45:4b:e9:86:66:a2:b2:30:90:71:1d:2f:26: 02:c4:76:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsbO4kLGVpEeRdfM8OAHBlcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkYTRlOTVkMmY0Y2MzNGE3Mzc2YjczYzBmMDM5YjNlMTU4 ZjUxNTIwHhcNMjUxMjE0MDUwMDQ0WhcNMjUxMjE1MDUwMDQ0WjAzMTEwLwYDVQQD EygzNmI3MzZiOGJiODcwYzYyM2Y1YzQxMDMwYmQwMGQ1MDJiNDcyYTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsi8o6fc5CNRHJcEnvrfEEUl9h96l r4th21cs4otuYpYiiVxq4sywU8gV4vpK/02/MxwLLKqMGgOUVxPFbaueTWRA+Ixi N7h9DpqSjCHT1db8ZOjljSLAeGRJH7rkEUETpDuQeDs1ZgF1g8VS2TV8EGhiAdXl OHHzUSrHA5sFxj3MyA1jC4+HNcXlDdg6q4yhCSkYzIcGPslVEFlxn01LbcmTBC75 MVT1+546I4Z//brtRzuOF9RHqa8jvEN/MzgIiM7F2J2+vSFxYhylGei1xVown4Qz y2lotXDKx3NyUMAInN5REiFF6d0+m4i8cGe2btu/Jp881arTjIwqyS+p8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDa3Nri7hwxiP1xBAwvQDVArRyp0MB8GA1UdIwQY MBaAFJ2k6V0vTMNKc3a3PA8Dmz4Vj1FSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmFUcFhTOU13MHB6ZHJjOER3T2JQaFdQVVZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9hY2YyYTItNGQ1Mi00MGNkLWE1Zjgt NTk1OTEzODllMjQyLzEvbmFUcFhTOU13MHB6ZHJjOER3T2JQaFdQVVZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC9hY2YyYTItNGQ1Mi00MGNkLWE1ZjgtNTk1OTEzODllMjQy LzEvbmFUcFhTOU13MHB6ZHJjOER3T2JQaFdQVVZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGs+DdB1N xXHAkmeVNvzqqJKE1TdOe0DQCuJFv6dlH1AXCTBkHA8Wel7oz/vcWkYMDX+aHhEF dS2YYsN5xP0RHZ4W2BBG3G+AgPlUj6IhVq0j61LKfK9KVKH4anEt3GVgWsLoaPFm v2HB5xf1/3/JyF/jGq+20saW93c1upECNxmENqYynp1WyH/t7zUShVLHPzSLB944 R2q983Dd9OxPHjkCAlflteUGGRqlN660A0gy4VLvI2+v5fcNvDCqnH5tS3INWeWw /9NGhhlCz6hWe8CZmSN2LQ5WRXmGM57p357kdNFX2HO7ry9LN3AYLWVFS+mGZqKy MJBxHS8mAsR2oQ== -----END CERTIFICATE-----Generated at Sun Dec 14 15:20:10 2025 by rpki-client