This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/5f2e48-feba-4273-8e49-8259805c644c/1/npM_LOV8dMv5_6UJaF1qy9jFOZg.mft
File:                     npM_LOV8dMv5_6UJaF1qy9jFOZg.mft (raw, json)
Hash identifier:          6M/rLu3ZZKpHqR2mElxXaYBZMqlQzwzyCSJp9faLktM=
Subject key identifier:   9B:E9:67:1E:14:7F:C4:02:25:1A:AC:80:A0:B1:55:BC:B1:8F:12:1F
Authority key identifier: 9E:93:3F:2C:E5:7C:74:CB:F9:FF:A5:09:68:5D:6A:CB:D8:C5:39:98
Certificate issuer:       /CN=9e933f2ce57c74cbf9ffa509685d6acbd8c53998
Certificate serial:       019B35A05F4304E79495B7E48FFAD4880DA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/npM_LOV8dMv5_6UJaF1qy9jFOZg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/5f2e48-feba-4273-8e49-8259805c644c/1/npM_LOV8dMv5_6UJaF1qy9jFOZg.mft
Manifest number:          095A
Signing time:             Fri 19 Dec 2025 08:01:01 +0000
Manifest this update:     Fri 19 Dec 2025 08:01:01 +0000
Manifest next update:     Sat 20 Dec 2025 08:01:01 +0000
Files and hashes:         1: npM_LOV8dMv5_6UJaF1qy9jFOZg.crl (hash: Jhc4upQxlCCScEoVjcXw+7vGwLGsGCxPSx2RrfoVnvg=)
                          2: yRFwTpF8uIi1_BjVUC-RFgZjVto.roa (hash: mNA1Sl4UbZtF2SriucljnpKsQkjCoecRg9zlE7G/VLE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/5f2e48-feba-4273-8e49-8259805c644c/1/npM_LOV8dMv5_6UJaF1qy9jFOZg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/5f2e48-feba-4273-8e49-8259805c644c/1/npM_LOV8dMv5_6UJaF1qy9jFOZg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/npM_LOV8dMv5_6UJaF1qy9jFOZg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 08:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:35:a0:5f:43:04:e7:94:95:b7:e4:8f:fa:d4:88:0d:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e933f2ce57c74cbf9ffa509685d6acbd8c53998
        Validity
            Not Before: Dec 19 08:01:01 2025 GMT
            Not After : Dec 20 08:01:01 2025 GMT
        Subject: CN=9be9671e147fc402251aac80a0b155bcb18f121f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:cf:2e:2d:02:f7:28:03:e6:ee:03:54:79:6b:
                    b2:f2:78:22:70:a6:bb:53:94:63:80:ca:9a:a2:0f:
                    ea:5a:9c:56:7e:86:4e:47:c2:35:09:35:db:c1:23:
                    ea:bc:79:80:d8:16:00:60:af:32:6b:93:5a:6d:c2:
                    eb:86:12:f7:e0:3d:66:a1:da:bb:5d:b3:42:05:ed:
                    d5:10:bf:36:23:c7:6f:ee:58:6a:e1:f5:6d:9f:86:
                    07:b1:a4:71:8a:5f:b6:71:f0:ec:4b:9c:4b:88:9b:
                    ac:81:62:c5:05:0c:42:03:38:ca:04:cf:fd:d7:72:
                    ad:a6:21:a8:0a:7a:58:4f:be:71:ac:66:24:8b:c2:
                    c1:b8:75:6c:7d:cc:8c:42:61:f7:ea:73:30:b5:f8:
                    7e:e8:64:01:84:94:e9:e6:71:1a:fe:90:e2:42:dd:
                    7b:8b:08:48:2f:8b:f2:81:fd:49:9c:bc:6a:ba:c3:
                    44:73:c5:9a:8b:8d:af:c3:1e:93:69:c2:5b:da:9e:
                    aa:52:eb:fa:47:4b:d6:12:d6:ba:b4:ef:26:5a:72:
                    bf:8c:73:40:f2:a1:b7:09:3d:0e:4c:4b:7a:d3:12:
                    6a:92:3d:e2:9b:24:5a:e7:32:84:20:32:2a:15:b3:
                    bb:c1:24:12:46:93:f8:a1:92:ed:07:5f:23:03:ff:
                    69:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:E9:67:1E:14:7F:C4:02:25:1A:AC:80:A0:B1:55:BC:B1:8F:12:1F
            X509v3 Authority Key Identifier:
                keyid:9E:93:3F:2C:E5:7C:74:CB:F9:FF:A5:09:68:5D:6A:CB:D8:C5:39:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npM_LOV8dMv5_6UJaF1qy9jFOZg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5f2e48-feba-4273-8e49-8259805c644c/1/npM_LOV8dMv5_6UJaF1qy9jFOZg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5f2e48-feba-4273-8e49-8259805c644c/1/npM_LOV8dMv5_6UJaF1qy9jFOZg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:db:f6:5f:9a:ed:f3:1d:5a:d1:b2:23:2a:2d:19:c6:5f:87:
         2b:82:6f:13:49:d8:04:17:3d:dd:c3:11:10:4b:6d:92:47:7c:
         00:86:95:ce:58:ef:b8:4f:ce:cc:dc:e4:7f:c8:02:26:88:93:
         82:af:81:73:08:3f:75:c8:09:8b:c6:ce:b7:3a:b2:49:8b:30:
         77:ae:e6:0f:a6:97:6e:d9:58:88:3d:a0:6c:96:42:4e:bd:9b:
         61:07:27:96:47:47:ab:a8:84:18:35:3d:33:39:fd:94:45:42:
         ec:e1:dd:ed:04:bf:bb:44:15:f2:9e:d7:b8:97:14:5b:e4:f4:
         e4:3d:12:e8:e0:46:b1:fe:60:44:40:a5:14:22:da:e1:84:48:
         46:c4:f8:f8:3c:e6:47:8d:c0:71:96:e7:6a:72:75:0f:69:75:
         9e:f4:f2:2e:47:fa:7c:8f:40:9d:a2:5a:6a:a3:a8:ff:1c:97:
         1f:ab:38:13:7b:2b:53:50:f4:91:df:49:67:33:e3:20:c6:5f:
         ee:7d:ce:61:6c:26:10:c7:15:6a:64:e0:96:3f:3b:2d:fc:af:
         26:41:01:81:ca:51:de:91:ef:62:81:77:7d:cd:00:ab:3f:6c:
         f0:44:90:a9:c8:7e:78:27:dd:08:d4:96:26:12:fa:cd:cf:08:
         80:cd:e7:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 17:24:37 2025 by rpki-client