This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft File: NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft (raw, json) Hash identifier: WDmjj8RL5NPKcVyN/19ThDkWdbj5E73jDcgPE/Ir4es= Subject key identifier: 32:2D:23:EC:7F:FA:38:30:3B:83:75:68:63:42:51:31:C8:9D:24:F2 Authority key identifier: 34:F4:81:A9:DD:CF:B4:85:91:F7:89:38:C4:FC:C7:B8:B6:7C:63:02 Certificate issuer: /CN=34f481a9ddcfb48591f78938c4fcc7b8b67c6302 Certificate serial: 019C1E03937696B9321C040B8E2E00AE31F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPSBqd3PtIWR94k4xPzHuLZ8YwI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft Manifest number: 17FE Signing time: Mon 02 Feb 2026 11:01:16 +0000 Manifest this update: Mon 02 Feb 2026 11:01:16 +0000 Manifest next update: Tue 03 Feb 2026 11:01:16 +0000 Files and hashes: 1: NPSBqd3PtIWR94k4xPzHuLZ8YwI.crl (hash: 77h3ncqLcWL1Jt21B3821goETHp6X9KU+ovslCYHhaM=) 2: u9-8FtTHX-Iha_x3C5q4_edNJaM.roa (hash: BJecwIh123OLgBTMSQtQt7fraFVyOfqi7zQMkz1z9tA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.crl rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft rsync://rpki.ripe.net/repository/DEFAULT/NPSBqd3PtIWR94k4xPzHuLZ8YwI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1e:03:93:76:96:b9:32:1c:04:0b:8e:2e:00:ae:31:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34f481a9ddcfb48591f78938c4fcc7b8b67c6302 Validity Not Before: Feb 2 11:01:16 2026 GMT Not After : Feb 3 11:01:16 2026 GMT Subject: CN=322d23ec7ffa38303b83756863425131c89d24f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:70:63:e2:7c:9f:ee:92:f9:34:e2:11:7a:5a: 0b:39:3b:b7:36:22:53:18:47:a7:88:59:55:9d:e5: fd:82:24:df:46:b9:c2:03:1d:e2:d4:d5:01:c7:5c: 42:64:fe:47:dd:84:b8:6d:c4:d5:10:1e:60:8d:49: 0f:52:c9:a8:07:f9:13:b5:cb:6a:e2:69:55:f2:52: 81:53:87:33:fc:29:3d:36:d3:c5:47:c6:8e:8a:64: 14:dd:e8:7d:aa:35:c1:64:06:7c:ca:14:c1:09:30: 26:89:f0:e9:e9:13:d8:3e:c9:ef:04:ea:cc:a9:93: b7:d5:1b:17:70:92:3b:eb:c5:52:c8:fe:0c:02:47: d7:b9:2a:43:9f:15:40:79:1a:1a:e8:05:7f:50:5f: 6a:b2:4f:36:98:cb:23:44:57:ce:2b:31:ce:5a:2b: 7e:f4:d0:6f:26:6e:a5:ce:8e:6f:f5:6d:31:d6:43: e3:ac:58:0b:7c:2f:fb:ef:86:aa:93:9c:50:17:81: fd:3d:dd:ea:4e:37:e5:b1:1f:b6:32:1c:5b:47:db: 65:35:4d:43:bd:1e:a0:7f:4d:7f:ff:34:cf:30:d9: e9:f0:71:a4:86:0a:29:bf:c0:fd:0d:64:03:09:a5: 06:39:92:cd:ba:05:26:cb:1e:3e:3c:68:1d:0d:29: 14:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:2D:23:EC:7F:FA:38:30:3B:83:75:68:63:42:51:31:C8:9D:24:F2 X509v3 Authority Key Identifier: keyid:34:F4:81:A9:DD:CF:B4:85:91:F7:89:38:C4:FC:C7:B8:B6:7C:63:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPSBqd3PtIWR94k4xPzHuLZ8YwI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:e0:29:eb:63:02:bb:f8:51:db:c6:ee:f8:3b:8a:4a:16:54: ed:d7:ae:4e:6e:19:c5:b6:3e:6e:3b:89:0e:24:97:b6:1d:73: ed:92:f6:1b:06:51:e8:a4:48:6d:dd:f9:46:24:38:a3:8d:4d: 08:9f:c6:06:cf:9b:be:e0:d4:43:16:9c:7c:2a:94:10:cd:9a: 95:6b:85:6e:a8:b4:59:c2:d5:77:b3:6a:d7:81:ee:04:eb:75: 6e:39:06:10:69:39:29:a0:0a:2f:d3:4d:55:88:e9:47:a4:ce: ed:92:8f:95:fa:9b:d1:d2:3d:a8:f0:ad:ef:7f:6f:f6:cf:76: 47:6f:9c:c9:76:b0:a8:ce:32:1b:af:04:64:7a:69:65:16:bd: d3:41:15:2f:a0:af:ae:7d:82:e6:a2:a9:50:36:38:75:76:e4: c1:c5:18:7a:e4:e5:b5:53:1b:30:54:81:a8:db:b0:72:39:e2: 58:b6:5e:16:03:1f:e5:ff:0c:c4:55:e7:55:b7:86:c4:49:97: 57:97:47:73:d3:7f:72:58:30:fd:89:92:ae:ee:28:09:df:36: 08:2a:7a:a2:d0:6d:a5:93:fe:ce:cf:c7:43:88:a7:95:25:09: 58:bd:12:40:82:9c:59:81:d6:8b:95:97:29:fc:ec:da:98:35: 7d:be:8b:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZweA5N2lrkyHAQLji4ArjH3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0ZjQ4MWE5ZGRjZmI0ODU5MWY3ODkzOGM0ZmNjN2I4YjY3 YzYzMDIwHhcNMjYwMjAyMTEwMTE2WhcNMjYwMjAzMTEwMTE2WjAzMTEwLwYDVQQD EygzMjJkMjNlYzdmZmEzODMwM2I4Mzc1Njg2MzQyNTEzMWM4OWQyNGYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHBj4nyf7pL5NOIReloLOTu3NiJT GEeniFlVneX9giTfRrnCAx3i1NUBx1xCZP5H3YS4bcTVEB5gjUkPUsmoB/kTtctq 4mlV8lKBU4cz/Ck9NtPFR8aOimQU3eh9qjXBZAZ8yhTBCTAmifDp6RPYPsnvBOrM qZO31RsXcJI768VSyP4MAkfXuSpDnxVAeRoa6AV/UF9qsk82mMsjRFfOKzHOWit+ 9NBvJm6lzo5v9W0x1kPjrFgLfC/774aqk5xQF4H9Pd3qTjflsR+2MhxbR9tlNU1D vR6gf01//zTPMNnp8HGkhgopv8D9DWQDCaUGOZLNugUmyx4+PGgdDSkU7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDItI+x/+jgwO4N1aGNCUTHInSTyMB8GA1UdIwQY MBaAFDT0gandz7SFkfeJOMT8x7i2fGMCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlBTQnFkM1B0SVdSOTRrNHhQekh1TFo4WXdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8zYWQ5YzEtM2UwOS00MWFjLWFjY2Et ZDExMzM5ZmU3ZGYwLzEvTlBTQnFkM1B0SVdSOTRrNHhQekh1TFo4WXdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC8zYWQ5YzEtM2UwOS00MWFjLWFjY2EtZDExMzM5ZmU3ZGYw LzEvTlBTQnFkM1B0SVdSOTRrNHhQekh1TFo4WXdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAouAp62MC u/hR28bu+DuKShZU7deuTm4ZxbY+bjuJDiSXth1z7ZL2GwZR6KRIbd35RiQ4o41N CJ/GBs+bvuDUQxacfCqUEM2alWuFbqi0WcLVd7Nq14HuBOt1bjkGEGk5KaAKL9NN VYjpR6TO7ZKPlfqb0dI9qPCt739v9s92R2+cyXawqM4yG68EZHppZRa900EVL6Cv rn2C5qKpUDY4dXbkwcUYeuTltVMbMFSBqNuwcjniWLZeFgMf5f8MxFXnVbeGxEmX V5dHc9N/clgw/YmSru4oCd82CCp6otBtpZP+zs/HQ4inlSUJWL0SQIKcWYHWi5WX Kfzs2pg1fb6LAg== -----END CERTIFICATE-----Generated at Mon Feb 2 15:48:35 2026 by rpki-client