This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft File: NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft (raw, json) Hash identifier: uTL2JmAB++ZBcepMVbdF4hGbejePSui3KT1mZP1vaUo= Subject key identifier: 7C:12:B7:5F:FF:41:9B:B1:0E:90:48:20:52:AB:B9:09:13:B0:AA:48 Authority key identifier: 34:F4:81:A9:DD:CF:B4:85:91:F7:89:38:C4:FC:C7:B8:B6:7C:63:02 Certificate issuer: /CN=34f481a9ddcfb48591f78938c4fcc7b8b67c6302 Certificate serial: 019B2E8B2CD24505E4FABB6819AF139F852A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPSBqd3PtIWR94k4xPzHuLZ8YwI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft Manifest number: 1781 Signing time: Wed 17 Dec 2025 23:00:31 +0000 Manifest this update: Wed 17 Dec 2025 23:00:31 +0000 Manifest next update: Thu 18 Dec 2025 23:00:31 +0000 Files and hashes: 1: NPSBqd3PtIWR94k4xPzHuLZ8YwI.crl (hash: uruwf3faHJugnpqt/9I8WWdd7eXqLAE2bKwlnrVpDcs=) 2: n9slDOW816oCeV0oI8sGph9zEHY.roa (hash: qD/TRD91aBYWewYzdvChC8Edlu2GICT4uFezEduAc7k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.crl rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft rsync://rpki.ripe.net/repository/DEFAULT/NPSBqd3PtIWR94k4xPzHuLZ8YwI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 23:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:8b:2c:d2:45:05:e4:fa:bb:68:19:af:13:9f:85:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34f481a9ddcfb48591f78938c4fcc7b8b67c6302 Validity Not Before: Dec 17 23:00:31 2025 GMT Not After : Dec 18 23:00:31 2025 GMT Subject: CN=7c12b75fff419bb10e90482052abb90913b0aa48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ca:26:48:f0:97:6a:e0:92:3b:bb:85:b0:91: f1:fb:cf:40:09:5a:53:bf:83:b8:6f:bc:b6:ce:87: ef:2f:c4:4f:a8:dd:6c:ed:82:c2:f8:c4:f3:46:c7: 2a:6a:de:33:5d:36:f7:71:87:03:a7:bf:81:04:61: 27:b6:8e:62:d5:88:41:3e:d3:fb:3a:3c:32:b0:f1: e5:de:dd:fc:08:63:52:6e:aa:f3:ed:31:6a:4e:69: 07:fb:3b:a7:21:2e:d6:b0:a2:35:99:f4:13:1d:a3: a7:32:ff:9b:63:f5:d9:03:23:e4:a6:6a:dd:cb:d0: 02:bf:46:a7:45:6a:6f:fe:df:74:f3:b6:ed:df:81: 64:d6:2f:02:78:64:83:e6:a2:2c:02:43:47:74:3b: 6e:1a:b2:0d:0b:8a:02:5c:0c:b8:3f:aa:e7:f0:3c: d9:ef:2c:d6:93:d4:51:3c:31:2a:5c:91:f0:a9:bd: 91:14:60:aa:f1:f3:b7:cc:9e:2a:ae:c4:a3:9a:89: 5a:23:9c:48:a3:72:99:e8:c2:e9:7b:4d:77:d7:b9: 12:6e:de:c2:f0:3a:83:08:e1:ce:1e:aa:fa:79:15: a2:01:fc:f5:a9:a9:bc:8b:74:3e:55:4d:06:29:c2: 75:06:22:7d:8c:be:7e:7a:26:81:f3:0d:3f:b2:0a: 09:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:12:B7:5F:FF:41:9B:B1:0E:90:48:20:52:AB:B9:09:13:B0:AA:48 X509v3 Authority Key Identifier: keyid:34:F4:81:A9:DD:CF:B4:85:91:F7:89:38:C4:FC:C7:B8:B6:7C:63:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPSBqd3PtIWR94k4xPzHuLZ8YwI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:00:20:bb:0d:b4:d0:73:5a:48:aa:e3:12:1e:51:f1:c9:2a: 4a:48:43:c7:75:99:6e:64:26:63:a0:56:16:0c:64:35:a2:84: 06:f0:95:fb:02:16:94:92:51:a0:a1:fb:ea:1f:00:12:37:c3: 8f:83:1b:00:74:7e:dd:1c:84:09:bc:d0:92:8a:87:f8:16:53: 3d:62:d2:f4:c3:e2:41:56:5c:be:ed:91:39:44:a1:3a:81:53: 0b:d8:63:25:f1:b3:8f:3b:28:d3:01:f7:6a:f5:32:39:3f:fd: cc:72:af:07:d6:a9:3f:cc:be:76:4c:bf:dc:e7:27:60:d2:72: d6:7d:c2:5f:2f:04:22:27:ea:b1:d4:2a:45:33:45:5e:33:07: 31:c2:15:e9:36:58:0b:b6:ea:0b:a7:f2:ad:9b:9a:69:04:ed: 20:71:ad:aa:05:1b:30:c5:3a:dc:38:e2:6b:8f:ea:9e:a0:b6: 24:1c:ab:99:8e:d2:77:44:b7:e0:29:2c:f5:35:ad:e7:ed:57: 70:9b:f7:0e:14:83:8d:10:f3:7c:74:a3:a2:c6:0e:a1:d0:dc: ac:5a:2a:2c:21:d7:a3:17:45:08:37:b8:46:fc:1a:fd:f5:0c: 9c:2c:89:48:61:32:3d:5a:da:47:77:c6:b5:6c:41:18:78:a7: ca:8f:93:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsuiyzSRQXk+rtoGa8Tn4UqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0ZjQ4MWE5ZGRjZmI0ODU5MWY3ODkzOGM0ZmNjN2I4YjY3 YzYzMDIwHhcNMjUxMjE3MjMwMDMxWhcNMjUxMjE4MjMwMDMxWjAzMTEwLwYDVQQD Eyg3YzEyYjc1ZmZmNDE5YmIxMGU5MDQ4MjA1MmFiYjkwOTEzYjBhYTQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcomSPCXauCSO7uFsJHx+89ACVpT v4O4b7y2zofvL8RPqN1s7YLC+MTzRscqat4zXTb3cYcDp7+BBGEnto5i1YhBPtP7 OjwysPHl3t38CGNSbqrz7TFqTmkH+zunIS7WsKI1mfQTHaOnMv+bY/XZAyPkpmrd y9ACv0anRWpv/t9087bt34Fk1i8CeGSD5qIsAkNHdDtuGrINC4oCXAy4P6rn8DzZ 7yzWk9RRPDEqXJHwqb2RFGCq8fO3zJ4qrsSjmolaI5xIo3KZ6MLpe01317kSbt7C 8DqDCOHOHqr6eRWiAfz1qam8i3Q+VU0GKcJ1BiJ9jL5+eiaB8w0/sgoJawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHwSt1//QZuxDpBIIFKruQkTsKpIMB8GA1UdIwQY MBaAFDT0gandz7SFkfeJOMT8x7i2fGMCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlBTQnFkM1B0SVdSOTRrNHhQekh1TFo4WXdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8zYWQ5YzEtM2UwOS00MWFjLWFjY2Et ZDExMzM5ZmU3ZGYwLzEvTlBTQnFkM1B0SVdSOTRrNHhQekh1TFo4WXdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC8zYWQ5YzEtM2UwOS00MWFjLWFjY2EtZDExMzM5ZmU3ZGYw LzEvTlBTQnFkM1B0SVdSOTRrNHhQekh1TFo4WXdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMAAguw20 0HNaSKrjEh5R8ckqSkhDx3WZbmQmY6BWFgxkNaKEBvCV+wIWlJJRoKH76h8AEjfD j4MbAHR+3RyECbzQkoqH+BZTPWLS9MPiQVZcvu2ROUShOoFTC9hjJfGzjzso0wH3 avUyOT/9zHKvB9apP8y+dky/3OcnYNJy1n3CXy8EIifqsdQqRTNFXjMHMcIV6TZY C7bqC6fyrZuaaQTtIHGtqgUbMMU63Djia4/qnqC2JByrmY7Sd0S34Cks9TWt5+1X cJv3DhSDjRDzfHSjosYOodDcrFoqLCHXoxdFCDe4Rvwa/fUMnCyJSGEyPVraR3fG tWxBGHinyo+Thw== -----END CERTIFICATE-----Generated at Thu Dec 18 07:04:33 2025 by rpki-client