This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/acbc65-811a-4209-b6b0-ae355b2ae6ef/1/NPT7fWqMuH3Z2gbXZqCDjPNWBAI.mft File: NPT7fWqMuH3Z2gbXZqCDjPNWBAI.mft (raw, json) Hash identifier: CBAbXG3RXMhF7zp+p+yl00gKE3W1ilcnuO2kJJN+jPo= Subject key identifier: CB:4D:13:50:C6:25:12:63:D5:17:C7:14:C3:A7:A2:F4:6C:24:1A:2F Authority key identifier: 34:F4:FB:7D:6A:8C:B8:7D:D9:DA:06:D7:66:A0:83:8C:F3:56:04:02 Certificate issuer: /CN=34f4fb7d6a8cb87dd9da06d766a0838cf3560402 Certificate serial: 019B5975C7A10C45219795A1E3B5EF88691A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPT7fWqMuH3Z2gbXZqCDjPNWBAI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/acbc65-811a-4209-b6b0-ae355b2ae6ef/1/NPT7fWqMuH3Z2gbXZqCDjPNWBAI.mft Manifest number: 02E3 Signing time: Fri 26 Dec 2025 07:00:49 +0000 Manifest this update: Fri 26 Dec 2025 07:00:49 +0000 Manifest next update: Sat 27 Dec 2025 07:00:49 +0000 Files and hashes: 1: BC_CdjOB6RULGEZF7J94_vrGJec.roa (hash: JFygJvgYc7Kvmd7DMd2rl7uXMvNHWTmTg/wiD9RDlO4=) 2: NPT7fWqMuH3Z2gbXZqCDjPNWBAI.crl (hash: gytywk9dhH7ZgaP4qRQw/BSxJXXe4iSwJSzCj9Esy1s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/acbc65-811a-4209-b6b0-ae355b2ae6ef/1/NPT7fWqMuH3Z2gbXZqCDjPNWBAI.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/acbc65-811a-4209-b6b0-ae355b2ae6ef/1/NPT7fWqMuH3Z2gbXZqCDjPNWBAI.mft rsync://rpki.ripe.net/repository/DEFAULT/NPT7fWqMuH3Z2gbXZqCDjPNWBAI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:75:c7:a1:0c:45:21:97:95:a1:e3:b5:ef:88:69:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34f4fb7d6a8cb87dd9da06d766a0838cf3560402 Validity Not Before: Dec 26 07:00:49 2025 GMT Not After : Dec 27 07:00:49 2025 GMT Subject: CN=cb4d1350c6251263d517c714c3a7a2f46c241a2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:58:93:b8:4d:7c:96:90:75:8f:8c:fb:fa:93: 12:2f:a8:a0:c6:c4:80:90:62:74:1d:c4:a9:51:3e: 36:fb:5f:01:8f:3d:4a:85:d5:06:5c:07:0f:e5:37: 70:ab:81:cf:9b:f3:85:fc:49:e7:65:d7:49:2d:e9: 90:4b:ce:13:88:b6:fc:b3:47:f9:9f:c8:dd:57:62: 7d:07:05:75:96:ee:ae:08:7b:3b:c1:1a:04:84:59: 2e:1f:ec:5b:b5:a4:4b:35:9d:8e:4c:10:b0:fa:80: 8d:72:0f:0e:ee:38:d2:46:b7:89:8e:80:42:c0:a0: 57:43:54:cb:27:68:ac:99:14:1f:9d:d1:f6:29:f0: 2b:a7:2f:67:ad:85:6a:20:1c:d6:60:df:5b:76:8c: 27:b9:83:70:0d:fa:06:0d:ba:f9:1d:a7:a9:1e:14: b0:79:13:57:d8:57:4d:8e:38:5a:da:99:42:37:96: 73:dd:66:a9:78:a3:36:7c:ee:79:d9:be:35:96:23: c1:ae:70:c3:6c:c0:fb:53:af:21:a3:26:19:ff:d9: 46:14:15:23:73:76:67:35:12:ff:1c:59:6c:11:a3: c7:1e:c7:ca:26:0c:c9:3d:f1:4f:5d:17:78:f2:0c: f4:7c:88:28:76:09:e1:ab:73:d1:0a:d6:4f:92:3f: 40:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:4D:13:50:C6:25:12:63:D5:17:C7:14:C3:A7:A2:F4:6C:24:1A:2F X509v3 Authority Key Identifier: keyid:34:F4:FB:7D:6A:8C:B8:7D:D9:DA:06:D7:66:A0:83:8C:F3:56:04:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPT7fWqMuH3Z2gbXZqCDjPNWBAI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/acbc65-811a-4209-b6b0-ae355b2ae6ef/1/NPT7fWqMuH3Z2gbXZqCDjPNWBAI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/acbc65-811a-4209-b6b0-ae355b2ae6ef/1/NPT7fWqMuH3Z2gbXZqCDjPNWBAI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:ee:90:91:09:3d:4e:d8:4a:ac:bb:0a:29:ca:f6:df:93:f9: 65:da:8b:b3:cb:71:56:90:9f:a6:01:e3:c6:d3:85:09:05:90: 8c:7f:da:cf:7f:24:11:5b:ec:cc:f2:a2:6b:d3:ea:b3:2b:09: a9:63:d3:f9:e4:51:43:7c:4d:47:03:1c:47:e5:8f:0a:10:18: b0:f4:2a:8a:9f:da:e4:91:c7:a9:5a:31:89:70:e6:27:d3:06: b7:7f:c4:b4:41:45:3d:b1:d0:d9:b8:78:09:42:20:22:05:0d: c7:54:11:25:e3:ad:d4:c4:a8:a5:5c:ed:56:89:ac:67:bc:2f: 23:97:32:06:23:e4:57:f0:45:54:2e:34:67:74:57:71:06:0c: b7:cb:4d:a7:0b:12:62:ac:0b:8e:5f:4b:06:71:36:9d:cf:3e: e8:d6:cf:d4:c3:34:fd:16:54:48:dd:af:a0:0c:f5:cd:42:86: ba:fe:96:75:0b:c1:de:8b:de:fa:7d:0f:4f:e7:27:13:73:d5: 26:3c:b1:b0:3b:63:41:8e:2b:01:d0:2d:77:f3:75:69:13:65: 52:1c:46:f0:bf:16:0c:c2:45:30:89:15:53:05:ea:15:e7:81: eb:2f:47:48:9e:0f:97:47:d5:8c:9b:9c:f1:2d:1b:da:2e:1a: 9e:3d:a7:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdcehDEUhl5Wh47XviGkaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0ZjRmYjdkNmE4Y2I4N2RkOWRhMDZkNzY2YTA4MzhjZjM1 NjA0MDIwHhcNMjUxMjI2MDcwMDQ5WhcNMjUxMjI3MDcwMDQ5WjAzMTEwLwYDVQQD EyhjYjRkMTM1MGM2MjUxMjYzZDUxN2M3MTRjM2E3YTJmNDZjMjQxYTJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsliTuE18lpB1j4z7+pMSL6igxsSA kGJ0HcSpUT42+18Bjz1KhdUGXAcP5Tdwq4HPm/OF/EnnZddJLemQS84TiLb8s0f5 n8jdV2J9BwV1lu6uCHs7wRoEhFkuH+xbtaRLNZ2OTBCw+oCNcg8O7jjSRreJjoBC wKBXQ1TLJ2ismRQfndH2KfArpy9nrYVqIBzWYN9bdownuYNwDfoGDbr5HaepHhSw eRNX2FdNjjha2plCN5Zz3WapeKM2fO552b41liPBrnDDbMD7U68hoyYZ/9lGFBUj c3ZnNRL/HFlsEaPHHsfKJgzJPfFPXRd48gz0fIgodgnhq3PRCtZPkj9AxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMtNE1DGJRJj1RfHFMOnovRsJBovMB8GA1UdIwQY MBaAFDT0+31qjLh92doG12agg4zzVgQCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlBUN2ZXcU11SDNaMmdiWFpxQ0RqUE5XQkFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9hY2JjNjUtODExYS00MjA5LWI2YjAt YWUzNTViMmFlNmVmLzEvTlBUN2ZXcU11SDNaMmdiWFpxQ0RqUE5XQkFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS9hY2JjNjUtODExYS00MjA5LWI2YjAtYWUzNTViMmFlNmVm LzEvTlBUN2ZXcU11SDNaMmdiWFpxQ0RqUE5XQkFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB+6QkQk9 TthKrLsKKcr235P5ZdqLs8txVpCfpgHjxtOFCQWQjH/az38kEVvszPKia9PqsysJ qWPT+eRRQ3xNRwMcR+WPChAYsPQqip/a5JHHqVoxiXDmJ9MGt3/EtEFFPbHQ2bh4 CUIgIgUNx1QRJeOt1MSopVztVomsZ7wvI5cyBiPkV/BFVC40Z3RXcQYMt8tNpwsS YqwLjl9LBnE2nc8+6NbP1MM0/RZUSN2voAz1zUKGuv6WdQvB3ove+n0PT+cnE3PV JjyxsDtjQY4rAdAtd/N1aRNlUhxG8L8WDMJFMIkVUwXqFeeB6y9HSJ4Pl0fVjJuc 8S0b2i4anj2n1Q== -----END CERTIFICATE-----Generated at Fri Dec 26 16:05:48 2025 by rpki-client