This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/8ce83c-ccc8-45dd-b67e-a79d09644779/1/NPuMu3pio_Drqk5fRqvjHiXRfP0.mft File: NPuMu3pio_Drqk5fRqvjHiXRfP0.mft (raw, json) Hash identifier: 5xVP8O6UafZgnEfpoi53JNBcc4Yxq41MEvkclfHTSN4= Subject key identifier: 57:90:1A:A7:36:D8:5C:72:39:0E:E6:D3:89:E0:7C:A5:38:66:43:EF Authority key identifier: 34:FB:8C:BB:7A:62:A3:F0:EB:AA:4E:5F:46:AB:E3:1E:25:D1:7C:FD Certificate issuer: /CN=34fb8cbb7a62a3f0ebaa4e5f46abe31e25d17cfd Certificate serial: 019B59AC78094EF3313407B1F1A015A37978 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPuMu3pio_Drqk5fRqvjHiXRfP0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/8ce83c-ccc8-45dd-b67e-a79d09644779/1/NPuMu3pio_Drqk5fRqvjHiXRfP0.mft Manifest number: 06BB Signing time: Fri 26 Dec 2025 08:00:33 +0000 Manifest this update: Fri 26 Dec 2025 08:00:33 +0000 Manifest next update: Sat 27 Dec 2025 08:00:33 +0000 Files and hashes: 1: NPuMu3pio_Drqk5fRqvjHiXRfP0.crl (hash: xesohM9Pe1aj7Zq6QDAYD7xVOoJzpjFQ8dRIYf4/yn4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/8ce83c-ccc8-45dd-b67e-a79d09644779/1/NPuMu3pio_Drqk5fRqvjHiXRfP0.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/8ce83c-ccc8-45dd-b67e-a79d09644779/1/NPuMu3pio_Drqk5fRqvjHiXRfP0.mft rsync://rpki.ripe.net/repository/DEFAULT/NPuMu3pio_Drqk5fRqvjHiXRfP0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ac:78:09:4e:f3:31:34:07:b1:f1:a0:15:a3:79:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34fb8cbb7a62a3f0ebaa4e5f46abe31e25d17cfd Validity Not Before: Dec 26 08:00:33 2025 GMT Not After : Dec 27 08:00:33 2025 GMT Subject: CN=57901aa736d85c72390ee6d389e07ca5386643ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:76:0c:6b:8a:ec:db:ce:33:26:b7:cc:6d:6d: d4:d8:c8:68:81:25:a4:6d:c5:6a:b8:19:60:03:c8: 01:ad:02:ec:58:d5:f8:86:ee:06:53:e1:5c:50:30: c0:83:23:68:12:86:9c:ae:6b:fd:8b:ca:01:14:c9: 99:53:44:3a:67:f7:ad:1f:6c:26:1d:aa:8a:5f:be: 88:97:06:35:fc:9e:5e:66:61:21:a1:45:52:ad:69: 5b:b6:e2:ef:c8:16:68:6c:a0:8f:84:d9:16:90:90: d3:eb:d6:92:32:f0:4e:4d:4a:44:b4:27:b0:30:b6: 6c:d3:22:d2:05:ea:8b:85:3d:48:2d:0d:24:57:0a: c0:50:2e:f8:f5:c6:c5:68:27:5a:a8:d6:29:bc:79: bb:60:31:c0:18:03:80:91:90:01:ed:29:4c:8c:61: 3d:1c:ee:43:5a:36:0a:50:49:b2:7b:91:d3:17:eb: fd:f3:c3:79:c0:c0:5b:af:33:fd:87:c6:6c:a5:45: bc:21:c6:47:48:ec:2f:89:24:9c:ea:1e:6d:6b:6a: 92:a3:03:76:31:d8:03:2b:97:cf:6b:a7:ea:5b:17: 32:60:61:3b:c2:ee:38:e6:7f:ee:cc:1f:28:c4:5d: 30:c6:f5:2e:b5:d3:83:27:bd:55:e2:fa:c9:20:17: 1a:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:90:1A:A7:36:D8:5C:72:39:0E:E6:D3:89:E0:7C:A5:38:66:43:EF X509v3 Authority Key Identifier: keyid:34:FB:8C:BB:7A:62:A3:F0:EB:AA:4E:5F:46:AB:E3:1E:25:D1:7C:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPuMu3pio_Drqk5fRqvjHiXRfP0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/8ce83c-ccc8-45dd-b67e-a79d09644779/1/NPuMu3pio_Drqk5fRqvjHiXRfP0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/8ce83c-ccc8-45dd-b67e-a79d09644779/1/NPuMu3pio_Drqk5fRqvjHiXRfP0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:cc:81:2f:24:7e:fb:a4:d9:cd:5f:7d:7e:22:a4:0d:11:a7: 57:40:ab:a4:b8:06:c6:3a:17:e0:d0:ba:fe:f5:14:40:42:88: 2e:12:50:b6:02:ec:ea:d8:5e:a2:9f:78:9a:46:9b:83:50:bb: 5e:ee:30:64:49:a4:4f:54:1a:6b:0d:55:fd:23:bf:36:c6:49: 7e:7a:d2:b1:c5:e9:7b:98:11:7f:2c:1c:ba:11:56:e5:97:59: dd:70:55:6e:2d:31:29:01:2a:21:bd:06:36:ba:18:9d:66:02: 21:52:d7:0b:0a:b8:a5:a7:42:a4:4e:8f:11:0f:ab:ce:88:97: 5c:6d:15:32:19:95:b6:10:52:5f:78:aa:47:09:f7:ac:c4:05: 10:ab:90:94:de:15:bd:4e:97:55:42:a1:40:10:32:a7:77:65: fd:e7:6f:a1:6f:aa:72:bf:aa:37:41:e8:fd:18:69:8d:fa:63: 11:28:3c:9e:b9:76:23:07:a1:0c:b4:05:e8:93:a9:b0:7b:dc: 05:64:ed:7e:cd:56:6d:f7:76:b7:53:52:f1:35:5e:78:a7:72: fe:25:78:df:b8:37:7e:9a:6d:8a:30:06:31:dd:96:f7:c4:e2: 46:26:f6:79:ba:8e:27:4b:d1:86:82:5e:9c:d9:19:b1:1a:d6: 03:71:f9:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrHgJTvMxNAex8aAVo3l4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0ZmI4Y2JiN2E2MmEzZjBlYmFhNGU1ZjQ2YWJlMzFlMjVk MTdjZmQwHhcNMjUxMjI2MDgwMDMzWhcNMjUxMjI3MDgwMDMzWjAzMTEwLwYDVQQD Eyg1NzkwMWFhNzM2ZDg1YzcyMzkwZWU2ZDM4OWUwN2NhNTM4NjY0M2VmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03YMa4rs284zJrfMbW3U2MhogSWk bcVquBlgA8gBrQLsWNX4hu4GU+FcUDDAgyNoEoacrmv9i8oBFMmZU0Q6Z/etH2wm HaqKX76IlwY1/J5eZmEhoUVSrWlbtuLvyBZobKCPhNkWkJDT69aSMvBOTUpEtCew MLZs0yLSBeqLhT1ILQ0kVwrAUC749cbFaCdaqNYpvHm7YDHAGAOAkZAB7SlMjGE9 HO5DWjYKUEmye5HTF+v988N5wMBbrzP9h8ZspUW8IcZHSOwviSSc6h5ta2qSowN2 MdgDK5fPa6fqWxcyYGE7wu445n/uzB8oxF0wxvUutdODJ71V4vrJIBcaeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFeQGqc22FxyOQ7m04ngfKU4ZkPvMB8GA1UdIwQY MBaAFDT7jLt6YqPw66pOX0ar4x4l0Xz9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlB1TXUzcGlvX0RycWs1ZlJxdmpIaVhSZlAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS84Y2U4M2MtY2NjOC00NWRkLWI2N2Ut YTc5ZDA5NjQ0Nzc5LzEvTlB1TXUzcGlvX0RycWs1ZlJxdmpIaVhSZlAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS84Y2U4M2MtY2NjOC00NWRkLWI2N2UtYTc5ZDA5NjQ0Nzc5 LzEvTlB1TXUzcGlvX0RycWs1ZlJxdmpIaVhSZlAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOsyBLyR+ +6TZzV99fiKkDRGnV0CrpLgGxjoX4NC6/vUUQEKILhJQtgLs6theop94mkabg1C7 Xu4wZEmkT1Qaaw1V/SO/NsZJfnrSscXpe5gRfywcuhFW5ZdZ3XBVbi0xKQEqIb0G NroYnWYCIVLXCwq4padCpE6PEQ+rzoiXXG0VMhmVthBSX3iqRwn3rMQFEKuQlN4V vU6XVUKhQBAyp3dl/edvoW+qcr+qN0Ho/RhpjfpjESg8nrl2IwehDLQF6JOpsHvc BWTtfs1Wbfd2t1NS8TVeeKdy/iV437g3fpptijAGMd2W98TiRib2ebqOJ0vRhoJe nNkZsRrWA3H5ow== -----END CERTIFICATE-----Generated at Fri Dec 26 16:05:53 2025 by rpki-client