This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.mft File: NP5rnQzB5_bhaypGtCyl4BxwA0Y.mft (raw, json) Hash identifier: +ODKyXhiDW4pzb+9yzwn4TP/YRJqZ9tz6KGBC6kscW8= Subject key identifier: DC:BE:4C:C4:57:92:40:25:09:39:E3:FD:FA:A7:C8:0A:F7:18:8F:22 Authority key identifier: 34:FE:6B:9D:0C:C1:E7:F6:E1:6B:2A:46:B4:2C:A5:E0:1C:70:03:46 Certificate issuer: /CN=34fe6b9d0cc1e7f6e16b2a46b42ca5e01c700346 Certificate serial: 019B7CA709118FC85F773D13B70F7FCDBE83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NP5rnQzB5_bhaypGtCyl4BxwA0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.mft Manifest number: 1513 Signing time: Fri 02 Jan 2026 03:01:20 +0000 Manifest this update: Fri 02 Jan 2026 03:01:20 +0000 Manifest next update: Sat 03 Jan 2026 03:01:20 +0000 Files and hashes: 1: HXMlv9NxuKboyUtKNMBCZQbSjW0.roa (hash: mL85Iwg8ADnZv62S9C7eQgo7c8UTYuO4j6CsY6zppGQ=) 2: NP5rnQzB5_bhaypGtCyl4BxwA0Y.crl (hash: 627dCf5tG5GB5aektvpHFoWGP/bNpJOI4dzUxeyDglI=) 3: eJTJ2xXloI9cYA2PdEb7QzgzZMI.roa (hash: pJvyPt1aoxPTKu/5G35raZf6vtLPUO+Laz/ssfLJWrA=) 4: nyGwWtmUUenCuiNvi2rme3JvAnM.roa (hash: mv2iRNCUpphbjEmFj2ZluXSrRNCmkDp7k1nJS6ve48g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/NP5rnQzB5_bhaypGtCyl4BxwA0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:a7:09:11:8f:c8:5f:77:3d:13:b7:0f:7f:cd:be:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34fe6b9d0cc1e7f6e16b2a46b42ca5e01c700346 Validity Not Before: Jan 2 03:01:20 2026 GMT Not After : Jan 3 03:01:20 2026 GMT Subject: CN=dcbe4cc4579240250939e3fdfaa7c80af7188f22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:13:28:48:59:b5:6d:b3:ac:92:bb:d2:58:00: a6:23:4e:58:a4:5b:b0:b5:9e:e9:2b:8b:b2:da:98: 75:1c:6f:97:69:ed:fb:1e:9e:39:5e:58:c1:0e:77: ac:ab:68:77:04:ec:50:d8:51:3a:c8:5b:ba:9e:f9: 9f:04:be:ab:e1:a3:84:5b:83:da:77:3e:82:17:a8: a8:64:56:e8:02:6a:f5:7b:a4:4f:75:0a:bc:af:7e: 2b:f2:1a:a6:22:24:6f:b1:8b:d4:e6:40:62:0d:8f: 97:49:83:e0:4b:18:b5:5d:51:1a:bf:5a:32:1b:23: b5:32:7d:32:69:4a:0b:8d:a5:d8:a4:22:f8:86:8a: 3e:28:39:1a:00:da:a1:9e:44:7f:06:7a:75:56:a8: a7:a7:b2:83:25:4e:11:e3:e2:83:dd:17:78:40:c9: 33:66:66:6d:81:77:b9:ba:0e:e0:d7:f4:bc:f3:ea: 77:e4:98:88:b8:f3:00:b6:30:3f:36:c1:3d:ae:7a: 16:9c:8f:47:98:35:d1:3b:b3:60:02:59:57:2d:52: 8a:04:80:6b:20:c3:b1:46:0a:d1:54:55:7c:7b:5e: bb:95:36:9a:3b:64:47:7b:78:e5:cb:21:a4:33:27: e5:c2:d1:1d:8c:6b:9f:2b:e9:fa:36:03:8f:01:d9: 72:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:BE:4C:C4:57:92:40:25:09:39:E3:FD:FA:A7:C8:0A:F7:18:8F:22 X509v3 Authority Key Identifier: keyid:34:FE:6B:9D:0C:C1:E7:F6:E1:6B:2A:46:B4:2C:A5:E0:1C:70:03:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NP5rnQzB5_bhaypGtCyl4BxwA0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:c3:00:29:3d:92:51:40:cc:23:e3:a2:58:b5:e7:40:f2:df: ef:b0:1d:83:6c:61:26:35:67:70:9e:12:ef:43:a5:fd:3b:7b: 66:7b:20:dd:cc:86:2f:01:78:59:76:88:e4:6f:4b:d3:05:81: 0e:3a:f6:fc:66:f0:04:c6:0a:dc:79:66:38:c3:d5:74:d4:ff: 0a:51:77:0e:89:e9:63:28:f2:54:7d:e3:95:7c:c0:93:2a:dd: e0:9e:88:c3:33:c0:e4:67:58:fd:bf:55:29:bb:1e:fb:f4:c3: 89:66:24:df:77:27:75:f6:ad:83:07:05:82:2c:82:3d:2f:23: fe:16:b6:92:8c:84:ad:3e:e7:b9:4b:fe:d7:67:cc:88:59:15: d9:b8:92:6e:68:76:1b:cc:88:9f:29:d7:2a:11:ce:93:e8:23: 7d:c5:2a:00:c4:2f:e2:67:55:76:7d:22:c0:6c:5f:8d:ad:3f: 0e:4b:60:7c:ac:fb:3d:7c:b9:ae:87:d3:68:4a:ce:b6:7a:40: 0b:02:dd:27:7d:1e:a1:56:c9:00:90:97:1b:38:a3:00:d7:8f: 36:14:be:c5:70:ce:e8:73:31:3a:ec:8c:1c:5e:03:4e:25:b5: 2f:46:1c:15:2a:c1:ca:ae:70:d8:a0:e3:b6:3d:10:9c:bf:52: 9c:e8:18:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt8pwkRj8hfdz0Ttw9/zb6DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0ZmU2YjlkMGNjMWU3ZjZlMTZiMmE0NmI0MmNhNWUwMWM3 MDAzNDYwHhcNMjYwMTAyMDMwMTIwWhcNMjYwMTAzMDMwMTIwWjAzMTEwLwYDVQQD EyhkY2JlNGNjNDU3OTI0MDI1MDkzOWUzZmRmYWE3YzgwYWY3MTg4ZjIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRMoSFm1bbOskrvSWACmI05YpFuw tZ7pK4uy2ph1HG+Xae37Hp45XljBDnesq2h3BOxQ2FE6yFu6nvmfBL6r4aOEW4Pa dz6CF6ioZFboAmr1e6RPdQq8r34r8hqmIiRvsYvU5kBiDY+XSYPgSxi1XVEav1oy GyO1Mn0yaUoLjaXYpCL4hoo+KDkaANqhnkR/Bnp1Vqinp7KDJU4R4+KD3Rd4QMkz ZmZtgXe5ug7g1/S88+p35JiIuPMAtjA/NsE9rnoWnI9HmDXRO7NgAllXLVKKBIBr IMOxRgrRVFV8e167lTaaO2RHe3jlyyGkMyflwtEdjGufK+n6NgOPAdlyKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNy+TMRXkkAlCTnj/fqnyAr3GI8iMB8GA1UdIwQY MBaAFDT+a50Mwef24WsqRrQspeAccANGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlA1cm5RekI1X2JoYXlwR3RDeWw0Qnh3QTBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC82MmRmMzYtZmQzNi00YmFmLTlkMmUt MTE4YWZlZDdhNWFlLzEvTlA1cm5RekI1X2JoYXlwR3RDeWw0Qnh3QTBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC82MmRmMzYtZmQzNi00YmFmLTlkMmUtMTE4YWZlZDdhNWFl LzEvTlA1cm5RekI1X2JoYXlwR3RDeWw0Qnh3QTBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkcMAKT2S UUDMI+OiWLXnQPLf77Adg2xhJjVncJ4S70Ol/Tt7Znsg3cyGLwF4WXaI5G9L0wWB Djr2/GbwBMYK3HlmOMPVdNT/ClF3DonpYyjyVH3jlXzAkyrd4J6IwzPA5GdY/b9V Kbse+/TDiWYk33cndfatgwcFgiyCPS8j/ha2koyErT7nuUv+12fMiFkV2biSbmh2 G8yInynXKhHOk+gjfcUqAMQv4mdVdn0iwGxfja0/DktgfKz7PXy5rofTaErOtnpA CwLdJ30eoVbJAJCXGzijANePNhS+xXDO6HMxOuyMHF4DTiW1L0YcFSrByq5w2KDj tj0QnL9SnOgYjw== -----END CERTIFICATE-----Generated at Fri Jan 2 12:51:56 2026 by rpki-client