This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft File: NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft (raw, json) Hash identifier: oo61aiv/mSsBXS4Oz6g0njKv7ip3cvreKK6mA5Zujwg= Subject key identifier: D9:95:CD:E3:D3:B3:46:2D:76:72:A0:19:C7:74:1E:2D:0F:38:DC:C7 Authority key identifier: 35:12:A8:A6:DF:99:78:DE:72:27:00:3B:1F:D3:F0:E2:B9:E5:9C:C7 Certificate issuer: /CN=3512a8a6df9978de7227003b1fd3f0e2b9e59cc7 Certificate serial: 019B1E744A52818BEC03729E23D454D67022 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft Manifest number: 177C Signing time: Sun 14 Dec 2025 20:01:36 +0000 Manifest this update: Sun 14 Dec 2025 20:01:36 +0000 Manifest next update: Mon 15 Dec 2025 20:01:36 +0000 Files and hashes: 1: NRKopt-ZeN5yJwA7H9Pw4rnlnMc.crl (hash: +5UQcHttAOtDJTh1MzRMh/LdEoR2DoiArup7xTVuP4U=) 2: gPqZz-ULbWxNpVtGrAcbURafLCM.roa (hash: bhtp8MkxjHqH+uI5CHLafEhg4ALYqQQHfi1+8hAlks8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft rsync://rpki.ripe.net/repository/DEFAULT/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:74:4a:52:81:8b:ec:03:72:9e:23:d4:54:d6:70:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3512a8a6df9978de7227003b1fd3f0e2b9e59cc7 Validity Not Before: Dec 14 20:01:36 2025 GMT Not After : Dec 15 20:01:36 2025 GMT Subject: CN=d995cde3d3b3462d7672a019c7741e2d0f38dcc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:27:02:67:ba:ee:87:1b:5d:92:00:ba:30:46: 0b:e4:3f:d5:99:93:a6:11:cc:bb:ce:4d:05:69:f4: 01:4f:11:90:75:84:6a:6c:31:a7:5d:b8:ed:b7:fc: 85:c2:9d:88:12:42:06:36:ff:ec:53:ea:fe:ba:4e: 0c:d3:6a:2e:04:2a:fa:99:34:b5:10:06:f3:5d:30: 4d:c4:ea:ed:66:76:10:a9:e1:b2:48:ab:05:f5:9b: fb:22:1f:dc:31:ff:a2:70:36:f2:96:6a:6c:9b:40: 41:60:03:34:dd:37:be:77:a3:61:75:4a:00:12:97: e7:20:4d:de:06:34:81:04:2f:c0:8f:28:44:66:42: 25:63:21:3b:b2:33:12:bb:6b:08:32:fc:06:8b:2b: 7f:f0:0e:84:98:bd:50:ba:e4:97:6e:ab:cc:ce:63: 28:68:95:86:d3:7f:90:14:68:bb:1b:a9:db:17:e3: c1:ec:81:4a:7a:1f:58:17:32:a5:ec:3a:e8:0f:00: 4a:45:33:b1:eb:da:a3:b1:66:de:0e:c1:28:09:94: 00:fa:85:eb:fb:32:f3:6c:ef:88:2c:20:bb:12:c6: 79:bd:f8:08:3f:7a:d6:74:a5:0c:43:28:72:5c:60: 70:f6:ca:31:95:25:6e:6a:74:55:eb:0a:86:dc:e5: 6d:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:95:CD:E3:D3:B3:46:2D:76:72:A0:19:C7:74:1E:2D:0F:38:DC:C7 X509v3 Authority Key Identifier: keyid:35:12:A8:A6:DF:99:78:DE:72:27:00:3B:1F:D3:F0:E2:B9:E5:9C:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:20:79:91:31:ac:cf:07:5b:d3:99:8e:79:26:58:16:18:d4: 97:8b:b2:f2:d6:42:bf:93:e2:22:4a:55:f0:9e:02:3d:f2:a9: 92:64:de:4e:2f:b0:bc:e1:24:df:9c:43:19:38:a8:a0:92:39: c4:84:15:b4:a2:64:1e:85:53:4f:f5:de:ef:98:08:a0:0b:20: d1:db:bd:c9:0c:7b:68:75:ac:53:ec:45:48:c0:ee:e6:68:a6: ba:90:46:5c:f7:e3:1e:3f:75:0e:ab:51:ad:2d:fb:61:97:8a: 85:f3:ee:52:ca:14:6b:57:ab:88:f3:c1:f3:e6:4f:96:02:04: 7a:10:ab:a8:74:a5:b3:41:59:98:5e:83:68:96:ed:c9:3c:84: 04:d8:14:c0:a7:b0:2c:4c:d4:6b:0c:71:40:ae:85:6e:5c:41: 0d:62:42:0d:bc:dc:c0:5f:ef:ea:d4:6a:20:78:14:73:0d:4f: da:16:70:45:d7:95:3e:fc:fe:fe:de:8f:68:74:ae:b2:fd:07: 76:f2:d4:98:c3:9e:92:22:f5:21:51:4c:57:7e:16:b6:34:57: 25:d7:af:80:ff:c1:7d:d2:a3:16:c5:e0:18:10:d7:45:69:ef: ae:7d:3a:84:68:4c:bc:3f:1c:32:87:c3:e3:93:70:35:36:70: 38:6f:22:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsedEpSgYvsA3KeI9RU1nAiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MTJhOGE2ZGY5OTc4ZGU3MjI3MDAzYjFmZDNmMGUyYjll NTljYzcwHhcNMjUxMjE0MjAwMTM2WhcNMjUxMjE1MjAwMTM2WjAzMTEwLwYDVQQD EyhkOTk1Y2RlM2QzYjM0NjJkNzY3MmEwMTljNzc0MWUyZDBmMzhkY2M3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ScCZ7ruhxtdkgC6MEYL5D/VmZOm Ecy7zk0FafQBTxGQdYRqbDGnXbjtt/yFwp2IEkIGNv/sU+r+uk4M02ouBCr6mTS1 EAbzXTBNxOrtZnYQqeGySKsF9Zv7Ih/cMf+icDbylmpsm0BBYAM03Te+d6NhdUoA EpfnIE3eBjSBBC/AjyhEZkIlYyE7sjMSu2sIMvwGiyt/8A6EmL1QuuSXbqvMzmMo aJWG03+QFGi7G6nbF+PB7IFKeh9YFzKl7DroDwBKRTOx69qjsWbeDsEoCZQA+oXr +zLzbO+ILCC7EsZ5vfgIP3rWdKUMQyhyXGBw9soxlSVuanRV6wqG3OVtlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNmVzePTs0YtdnKgGcd0Hi0PONzHMB8GA1UdIwQY MBaAFDUSqKbfmXjecicAOx/T8OK55ZzHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlJLb3B0LVplTjV5SndBN0g5UHc0cm5sbk1jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8wZDk1Y2EtYmFmNS00Njg5LTliNWIt NzQ3ZTc1ZTU1NDYxLzEvTlJLb3B0LVplTjV5SndBN0g5UHc0cm5sbk1jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8wZDk1Y2EtYmFmNS00Njg5LTliNWItNzQ3ZTc1ZTU1NDYx LzEvTlJLb3B0LVplTjV5SndBN0g5UHc0cm5sbk1jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlSB5kTGs zwdb05mOeSZYFhjUl4uy8tZCv5PiIkpV8J4CPfKpkmTeTi+wvOEk35xDGTiooJI5 xIQVtKJkHoVTT/Xe75gIoAsg0du9yQx7aHWsU+xFSMDu5mimupBGXPfjHj91DqtR rS37YZeKhfPuUsoUa1eriPPB8+ZPlgIEehCrqHSls0FZmF6DaJbtyTyEBNgUwKew LEzUawxxQK6FblxBDWJCDbzcwF/v6tRqIHgUcw1P2hZwRdeVPvz+/t6PaHSusv0H dvLUmMOekiL1IVFMV34WtjRXJdevgP/BfdKjFsXgGBDXRWnvrn06hGhMvD8cMofD 45NwNTZwOG8iwQ== -----END CERTIFICATE-----Generated at Sun Dec 14 22:01:48 2025 by rpki-client