This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/2a942a-f1bf-43e2-b92a-1dec40584806/1/NpHSlQFF3OrADAyk61NtkoZ7ONM.mft File: NpHSlQFF3OrADAyk61NtkoZ7ONM.mft (raw, json) Hash identifier: etG10ZovFfUSnf+cFTA3VpGEH6/LlpOc96zv3NtlpBA= Subject key identifier: 75:3C:25:B2:26:ED:AE:9C:1F:7A:7C:21:B0:BE:2F:C2:4A:9F:3E:35 Authority key identifier: 36:91:D2:95:01:45:DC:EA:C0:0C:0C:A4:EB:53:6D:92:86:7B:38:D3 Certificate issuer: /CN=3691d2950145dceac00c0ca4eb536d92867b38d3 Certificate serial: 019B0DEDBA931E358E78AAB4B96F7DE96167 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpHSlQFF3OrADAyk61NtkoZ7ONM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/2a942a-f1bf-43e2-b92a-1dec40584806/1/NpHSlQFF3OrADAyk61NtkoZ7ONM.mft Manifest number: 0DC6 Signing time: Thu 11 Dec 2025 15:00:42 +0000 Manifest this update: Thu 11 Dec 2025 15:00:42 +0000 Manifest next update: Fri 12 Dec 2025 15:00:42 +0000 Files and hashes: 1: AYNfqVlSCZxSkottsPIfKriDdHo.roa (hash: DR+WljYSnHEBz/1Nc0C8V29PSzaZP+WZg97TUOW5Zds=) 2: I7WvLIen2Qt15jt5djzF4qVwAeA.roa (hash: TDT2LdFRYTW16jzLI/jmwBH74PERZ5uRk6SAxtSvBQc=) 3: Ma-ZL87NKbXOh3PKteMYs4_0CwA.roa (hash: 8ACKMnvKrVu9alfiMw6lXVKm3qwxGI4mZvc+z4si/8c=) 4: NpHSlQFF3OrADAyk61NtkoZ7ONM.crl (hash: uAvoVd5c+d9tOa68FBFigaECK27q6KZ9whqYqbjmxss=) 5: ZdlemGQCA8jrtuYIR9ZFtWke_wc.roa (hash: yL1F1JtC6s6D+a5TG0GVaaYEiJsHRH7GC/1uOa8xe0w=) 6: mO0be8bDbmiYSh_iKVixTT5SzHA.roa (hash: lIkXoLyk/hMEyc076/9zdceKJAYDU0c31VY+iGKjKOI=) 7: tEjZ-uzo44NLPAS076hKMuReNzU.asa (hash: 48Hb8aEmbuJS71uhwJUr/NwsMXvw9LlHCMvZffWtx1o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/2a942a-f1bf-43e2-b92a-1dec40584806/1/NpHSlQFF3OrADAyk61NtkoZ7ONM.crl rsync://rpki.ripe.net/repository/DEFAULT/72/2a942a-f1bf-43e2-b92a-1dec40584806/1/NpHSlQFF3OrADAyk61NtkoZ7ONM.mft rsync://rpki.ripe.net/repository/DEFAULT/NpHSlQFF3OrADAyk61NtkoZ7ONM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:ed:ba:93:1e:35:8e:78:aa:b4:b9:6f:7d:e9:61:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3691d2950145dceac00c0ca4eb536d92867b38d3 Validity Not Before: Dec 11 15:00:42 2025 GMT Not After : Dec 12 15:00:42 2025 GMT Subject: CN=753c25b226edae9c1f7a7c21b0be2fc24a9f3e35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b4:eb:3a:d9:80:f0:04:5d:56:e6:e0:3c:bc: 29:b5:8b:ac:ca:e5:2d:82:d6:3f:82:05:91:93:91: d4:a5:5d:5b:3c:33:32:30:ea:02:1a:5e:63:71:d6: 52:41:92:55:f3:dc:51:26:44:59:f6:5d:4e:7a:6f: 43:81:28:08:ed:e0:a1:95:c1:c2:1b:33:be:05:52: b9:8a:e7:bf:58:10:ee:d0:5e:79:c9:48:0e:05:be: d3:5c:44:eb:47:7d:12:a5:14:ab:c3:88:37:cc:f2: b1:6f:4a:76:2f:6d:9e:ff:a1:d7:07:75:f7:16:57: 77:ff:fc:66:c9:8e:da:d3:d1:32:3b:38:b4:eb:b6: f7:84:2f:d9:d6:7d:c0:79:c6:51:a0:57:f5:0e:fe: c0:52:47:fe:4e:7d:9a:3c:17:06:b6:75:74:97:4d: 50:0b:fc:2e:b6:dd:0c:75:c0:80:79:a5:90:89:c3: cb:a4:f0:c9:01:05:f0:27:61:fb:c1:88:20:75:d8: 52:2a:1e:52:89:7e:1d:e6:91:f1:04:81:15:fb:78: 51:48:41:27:b7:46:cf:8a:83:00:22:72:51:9a:00: c3:c8:ed:40:33:13:e6:ea:13:99:65:1a:0e:16:f0: 48:88:2a:30:de:11:4b:7b:4a:80:25:4b:e2:5a:e7: 5a:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:3C:25:B2:26:ED:AE:9C:1F:7A:7C:21:B0:BE:2F:C2:4A:9F:3E:35 X509v3 Authority Key Identifier: keyid:36:91:D2:95:01:45:DC:EA:C0:0C:0C:A4:EB:53:6D:92:86:7B:38:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpHSlQFF3OrADAyk61NtkoZ7ONM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2a942a-f1bf-43e2-b92a-1dec40584806/1/NpHSlQFF3OrADAyk61NtkoZ7ONM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2a942a-f1bf-43e2-b92a-1dec40584806/1/NpHSlQFF3OrADAyk61NtkoZ7ONM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:a1:dd:40:61:d0:d2:47:a5:78:4a:8b:fb:88:3a:c1:d4:d2: 54:df:e0:28:86:94:0a:dc:28:ab:20:83:47:6b:c4:aa:ed:4a: 87:7d:81:2c:1a:50:e4:f9:18:3a:e1:d3:76:7b:33:db:e2:b4: ad:b0:02:39:fe:20:8a:17:7c:74:0e:51:97:26:03:0c:c5:39: 73:f3:fa:55:18:e9:bc:c4:dd:67:55:64:be:97:2d:f6:d7:67: 6f:c9:19:3b:55:3f:b2:a0:15:34:61:b2:53:35:b4:c9:55:59: 92:c5:ce:75:33:ae:43:ad:c9:3b:d5:02:d6:30:84:14:fb:ee: d5:ea:01:06:34:11:b8:29:66:f1:93:a3:86:44:54:b2:ad:ab: 1e:28:02:69:fe:fd:ba:0c:a2:85:b2:35:1f:7f:d7:3a:38:cf: ce:0a:2d:77:92:a0:29:07:08:23:7c:c2:5c:cd:04:da:63:aa: 9d:3e:c1:08:3d:c0:0b:29:e0:a8:f1:cf:d9:78:a2:be:ff:24: 51:e8:ce:e1:69:e2:34:bd:bc:36:d8:2c:43:d5:d6:ef:f1:2c: 45:d2:c1:5c:4c:60:a2:fc:7c:31:e9:07:3f:26:f2:30:86:da: a0:e1:41:96:38:9e:a8:c6:43:c4:19:87:86:ea:fb:3c:59:7b: fc:1e:60:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsN7bqTHjWOeKq0uW996WFnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2OTFkMjk1MDE0NWRjZWFjMDBjMGNhNGViNTM2ZDkyODY3 YjM4ZDMwHhcNMjUxMjExMTUwMDQyWhcNMjUxMjEyMTUwMDQyWjAzMTEwLwYDVQQD Eyg3NTNjMjViMjI2ZWRhZTljMWY3YTdjMjFiMGJlMmZjMjRhOWYzZTM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrTrOtmA8ARdVubgPLwptYusyuUt gtY/ggWRk5HUpV1bPDMyMOoCGl5jcdZSQZJV89xRJkRZ9l1Oem9DgSgI7eChlcHC GzO+BVK5iue/WBDu0F55yUgOBb7TXETrR30SpRSrw4g3zPKxb0p2L22e/6HXB3X3 Fld3//xmyY7a09EyOzi067b3hC/Z1n3AecZRoFf1Dv7AUkf+Tn2aPBcGtnV0l01Q C/wutt0MdcCAeaWQicPLpPDJAQXwJ2H7wYggddhSKh5SiX4d5pHxBIEV+3hRSEEn t0bPioMAInJRmgDDyO1AMxPm6hOZZRoOFvBIiCow3hFLe0qAJUviWudaYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHU8JbIm7a6cH3p8IbC+L8JKnz41MB8GA1UdIwQY MBaAFDaR0pUBRdzqwAwMpOtTbZKGezjTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnBIU2xRRkYzT3JBREF5azYxTnRrb1o3T05NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi8yYTk0MmEtZjFiZi00M2UyLWI5MmEt MWRlYzQwNTg0ODA2LzEvTnBIU2xRRkYzT3JBREF5azYxTnRrb1o3T05NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi8yYTk0MmEtZjFiZi00M2UyLWI5MmEtMWRlYzQwNTg0ODA2 LzEvTnBIU2xRRkYzT3JBREF5azYxTnRrb1o3T05NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoaHdQGHQ 0keleEqL+4g6wdTSVN/gKIaUCtwoqyCDR2vEqu1Kh32BLBpQ5PkYOuHTdnsz2+K0 rbACOf4gihd8dA5RlyYDDMU5c/P6VRjpvMTdZ1Vkvpct9tdnb8kZO1U/sqAVNGGy UzW0yVVZksXOdTOuQ63JO9UC1jCEFPvu1eoBBjQRuClm8ZOjhkRUsq2rHigCaf79 ugyihbI1H3/XOjjPzgotd5KgKQcII3zCXM0E2mOqnT7BCD3ACyngqPHP2Xiivv8k UejO4WniNL28NtgsQ9XW7/EsRdLBXExgovx8MekHPybyMIbaoOFBljieqMZDxBmH hur7PFl7/B5gpA== -----END CERTIFICATE-----Generated at Fri Dec 12 01:34:11 2025 by rpki-client