This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft File: NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft (raw, json) Hash identifier: 7YcLEDYdITmBoskAljz8AbkUO9UNoYQljLxXUhBK5Og= Subject key identifier: E4:21:9B:29:88:41:4E:A8:EB:B9:56:15:AE:D5:FC:76:1C:FD:EE:F5 Authority key identifier: 36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F Certificate issuer: /CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f Certificate serial: 019AF7D48E84926757B6DD6816EF1D779979 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft Manifest number: 1782 Signing time: Sun 07 Dec 2025 08:01:33 +0000 Manifest this update: Sun 07 Dec 2025 08:01:33 +0000 Manifest next update: Mon 08 Dec 2025 08:01:33 +0000 Files and hashes: 1: 1eZC9enfXbKkbChbya2s-NBXR10.roa (hash: K8gL7gYOdUPnWfON7y82NF9djuzcQAO7yPjvMnV4HWA=) 2: 4C1hs3Awu1pUWnx11isTd7urO8g.roa (hash: NHlupIJQHDTwRScv0dlfz2lFTerJ3fgzUZ9KeBTbFHo=) 3: 4aaliOpCta1xxwdPdgm9XgmQVe4.roa (hash: 50PVROIOCSd7qW0XXvFqQMxjDosAhVmRwG7IVPmy7ik=) 4: LNJOsnr56BpDhx0zCSJoGF_8kg4.roa (hash: ipKdM/rgGFJqpM5XZ1watukNv4jI5z2rHAUKNiP8l9M=) 5: NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl (hash: O3M9FraFxZezD5fFsBsuaq3QAUwCqTMxM8WuxlmqX4Q=) 6: P4RQICIsv2ynDFNy1pTdbhvIXok.roa (hash: 3BspGo/InWWElD0+8Z5QOqYWItS4j6gIXyuD2KZuZ58=) 7: ibQsYiMOU1D97Z6dBw2Z2nuJoA0.roa (hash: paBGRr0SKtx93/jOWaEGPMAan4qkVxtM/IYXrSHwl6Y=) 8: jBgv17Pl-Vh_L1PF3KmB8kI2bak.roa (hash: yIwLWwTP6qcl+lhvdLDbXrkIo53nDQZcaNGlgxGXrqE=) 9: xlTjepejuGlW3CGUnuf8jiI_Sb8.roa (hash: xnJVidZPq3qTfXPcYiZGHTVkjYmciZFHEO03/ve53hw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f7:d4:8e:84:92:67:57:b6:dd:68:16:ef:1d:77:99:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f Validity Not Before: Dec 7 08:01:33 2025 GMT Not After : Dec 8 08:01:33 2025 GMT Subject: CN=e4219b2988414ea8ebb95615aed5fc761cfdeef5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:0b:de:ac:43:44:f0:b5:a7:fd:99:0f:f1:2d: be:10:59:0f:b2:04:49:ac:13:c0:ed:e6:e2:c2:08: 51:93:b4:50:26:3b:95:5c:e6:7e:d1:4f:c8:2c:3a: 23:d1:25:b7:3c:88:52:c4:36:28:c9:62:cb:e0:89: c6:5a:bc:37:1b:56:72:3f:9c:86:ba:98:31:d3:ca: df:cb:ff:fb:34:a8:1f:fb:98:0c:e4:d4:f7:60:8f: e1:69:53:1a:92:3a:e9:77:86:de:f0:4f:89:03:0f: 5e:61:05:4b:8a:d7:e4:79:4a:72:d2:8f:dd:8a:89: 98:b1:2d:ff:c8:21:59:30:4a:8e:48:58:c7:ff:80: 8e:d7:ad:17:b6:70:dd:32:a8:45:c8:09:6f:fb:bb: f0:9a:e0:8e:98:de:a5:e3:a1:b5:6d:2f:d1:f8:b2: 66:6d:e6:f3:bc:a2:fb:57:f3:72:95:01:2b:de:97: b1:39:16:be:26:72:82:bb:2b:57:30:d6:fd:91:09: 2b:17:5f:be:4e:64:ad:2b:83:d6:60:43:c5:21:53: fd:34:37:12:b8:b2:1b:bb:ce:03:8b:3a:1e:cc:99: 3c:f3:ea:12:be:50:2d:c4:f8:06:08:e4:69:79:02: d3:2c:67:99:ac:ec:4a:36:cc:69:86:b3:2a:0f:16: 27:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:21:9B:29:88:41:4E:A8:EB:B9:56:15:AE:D5:FC:76:1C:FD:EE:F5 X509v3 Authority Key Identifier: keyid:36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:3f:2b:9e:cd:55:ae:54:56:45:22:6b:02:6d:4d:cc:19:7f: 4c:e0:9b:e8:5f:86:7a:a3:bc:bb:14:22:09:16:5f:32:6a:e7: 96:3f:3a:2a:b3:04:99:46:e5:1a:33:80:75:cf:04:ea:0c:45: 11:1a:52:0a:fa:a4:fe:7f:e7:2e:25:89:25:ac:42:20:21:2c: bf:f8:5c:42:4c:86:26:2d:7d:9c:f3:e5:88:4a:8d:79:8e:42: 62:29:31:6c:3c:7a:7d:c4:2d:ef:00:e6:22:87:5d:65:40:a2: 6a:46:d3:8d:69:5f:95:1d:c7:23:4e:a4:9b:42:80:9b:f7:5c: 19:77:eb:f9:ba:88:1d:f4:af:3d:c4:13:98:99:30:14:c6:31: 92:7c:5b:ee:49:4a:47:8d:66:86:6b:e7:11:b4:32:bb:8b:8a: 15:a0:58:00:d9:87:b8:c9:18:4e:62:5e:92:9e:c0:ee:40:59: f1:77:35:a6:b9:b8:82:ba:20:77:f6:01:a6:5e:0b:ee:af:8b: 32:f3:0b:5d:4a:f4:7b:07:e7:7c:02:4c:1f:5e:be:ed:39:d2: 0a:72:bf:ea:4e:2e:97:44:5e:0d:08:45:b5:81:e8:31:52:39: d2:54:24:26:36:6f:3b:a6:1b:a5:84:f7:13:3a:80:0b:2f:58: c4:47:5c:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr31I6EkmdXtt1oFu8dd5l5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2OTRmY2M2YmY2YTg3NDBmYTc4MTQ2NDFmZDlkNmVjOGQ4 NjJlNWYwHhcNMjUxMjA3MDgwMTMzWhcNMjUxMjA4MDgwMTMzWjAzMTEwLwYDVQQD EyhlNDIxOWIyOTg4NDE0ZWE4ZWJiOTU2MTVhZWQ1ZmM3NjFjZmRlZWY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3AverENE8LWn/ZkP8S2+EFkPsgRJ rBPA7ebiwghRk7RQJjuVXOZ+0U/ILDoj0SW3PIhSxDYoyWLL4InGWrw3G1ZyP5yG upgx08rfy//7NKgf+5gM5NT3YI/haVMakjrpd4be8E+JAw9eYQVLitfkeUpy0o/d iomYsS3/yCFZMEqOSFjH/4CO160XtnDdMqhFyAlv+7vwmuCOmN6l46G1bS/R+LJm bebzvKL7V/NylQEr3pexORa+JnKCuytXMNb9kQkrF1++TmStK4PWYEPFIVP9NDcS uLIbu84DizoezJk88+oSvlAtxPgGCORpeQLTLGeZrOxKNsxphrMqDxYnJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOQhmymIQU6o67lWFa7V/HYc/e71MB8GA1UdIwQY MBaAFDaU/Ma/aodA+ngUZB/Z1uyNhi5fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnBUOHhyOXFoMEQ2ZUJSa0g5blc3STJHTGw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9hOGRkOWUtNzFmMi00Zjc3LWI1NzUt MGQzZmNlNDI5YmRlLzEvTnBUOHhyOXFoMEQ2ZUJSa0g5blc3STJHTGw4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy9hOGRkOWUtNzFmMi00Zjc3LWI1NzUtMGQzZmNlNDI5YmRl LzEvTnBUOHhyOXFoMEQ2ZUJSa0g5blc3STJHTGw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjz8rns1V rlRWRSJrAm1NzBl/TOCb6F+GeqO8uxQiCRZfMmrnlj86KrMEmUblGjOAdc8E6gxF ERpSCvqk/n/nLiWJJaxCICEsv/hcQkyGJi19nPPliEqNeY5CYikxbDx6fcQt7wDm IoddZUCiakbTjWlflR3HI06km0KAm/dcGXfr+bqIHfSvPcQTmJkwFMYxknxb7klK R41mhmvnEbQyu4uKFaBYANmHuMkYTmJekp7A7kBZ8Xc1prm4grogd/YBpl4L7q+L MvMLXUr0ewfnfAJMH16+7TnSCnK/6k4ul0ReDQhFtYHoMVI50lQkJjZvO6YbpYT3 EzqACy9YxEdcrA== -----END CERTIFICATE-----Generated at Sun Dec 7 11:17:45 2025 by rpki-client