This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.mft File: NP5rnQzB5_bhaypGtCyl4BxwA0Y.mft (raw, json) Hash identifier: EYB7DYOKeql2DR2sP024t9nWLVoMX2OMGQH7zYtNeyE= Subject key identifier: 27:06:AE:46:10:CA:ED:DD:CF:C8:4E:2E:F7:7B:AE:60:3B:17:AF:76 Authority key identifier: 34:FE:6B:9D:0C:C1:E7:F6:E1:6B:2A:46:B4:2C:A5:E0:1C:70:03:46 Certificate issuer: /CN=34fe6b9d0cc1e7f6e16b2a46b42ca5e01c700346 Certificate serial: 019B6B44CA747C2CE0577CBE73CA624E4583 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NP5rnQzB5_bhaypGtCyl4BxwA0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.mft Manifest number: 150A Signing time: Mon 29 Dec 2025 18:00:28 +0000 Manifest this update: Mon 29 Dec 2025 18:00:28 +0000 Manifest next update: Tue 30 Dec 2025 18:00:28 +0000 Files and hashes: 1: HXMlv9NxuKboyUtKNMBCZQbSjW0.roa (hash: mL85Iwg8ADnZv62S9C7eQgo7c8UTYuO4j6CsY6zppGQ=) 2: NP5rnQzB5_bhaypGtCyl4BxwA0Y.crl (hash: KRk9DTAeUdwyeLL/zYWDKDXCAVfKNTaAnGO0/sdokNU=) 3: eJTJ2xXloI9cYA2PdEb7QzgzZMI.roa (hash: pJvyPt1aoxPTKu/5G35raZf6vtLPUO+Laz/ssfLJWrA=) 4: nyGwWtmUUenCuiNvi2rme3JvAnM.roa (hash: mv2iRNCUpphbjEmFj2ZluXSrRNCmkDp7k1nJS6ve48g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/NP5rnQzB5_bhaypGtCyl4BxwA0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 18:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6b:44:ca:74:7c:2c:e0:57:7c:be:73:ca:62:4e:45:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34fe6b9d0cc1e7f6e16b2a46b42ca5e01c700346 Validity Not Before: Dec 29 18:00:28 2025 GMT Not After : Dec 30 18:00:28 2025 GMT Subject: CN=2706ae4610caedddcfc84e2ef77bae603b17af76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:83:b3:c4:92:82:04:2e:8e:2b:14:b9:51:fd: a9:de:52:a8:72:9e:8c:f0:00:d3:da:c2:b2:2d:d8: 28:d0:0e:99:55:9c:e9:20:7a:79:b9:64:a4:00:ed: 8c:77:30:c9:83:e8:94:00:d9:f8:fc:96:7c:73:15: 40:83:7d:25:26:da:53:46:aa:62:13:1e:76:78:5c: 6d:ff:f4:6c:ce:89:de:6b:fc:fb:33:4e:96:e5:3b: cb:be:7a:01:68:7b:a6:5e:d8:c2:a3:4d:24:15:89: 52:d1:42:43:2d:7d:f0:a0:3c:7f:f8:80:b4:ce:1f: 9b:1e:ac:e7:32:72:a7:c2:54:ab:e0:4a:f8:eb:86: 6f:5a:4a:f9:74:f4:99:df:00:c9:93:27:ce:0d:2f: 08:0b:e0:fb:24:05:98:23:04:bc:e2:cb:14:d3:25: 22:ac:73:89:d6:e8:aa:e1:61:ab:2e:00:98:da:f4: 09:a5:9a:42:3c:ed:3d:81:ff:e8:3c:54:c3:7a:24: 20:f2:41:01:94:7d:70:ef:e0:06:20:da:e6:9a:b1: e7:75:75:08:d5:aa:7a:b6:fb:41:8d:6a:81:fd:e8: b7:67:93:cb:64:82:4d:52:43:6c:ea:e1:7a:fd:7c: 9c:ba:07:53:02:ff:70:61:c2:be:61:21:ac:6b:c5: ee:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:06:AE:46:10:CA:ED:DD:CF:C8:4E:2E:F7:7B:AE:60:3B:17:AF:76 X509v3 Authority Key Identifier: keyid:34:FE:6B:9D:0C:C1:E7:F6:E1:6B:2A:46:B4:2C:A5:E0:1C:70:03:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NP5rnQzB5_bhaypGtCyl4BxwA0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:5b:81:dd:30:94:cf:af:11:fe:5c:62:9c:32:fc:dd:b0:df: 9f:2a:25:4f:b8:c0:1e:3b:03:69:ca:65:ad:44:cf:a4:53:8b: 90:03:0b:88:ff:85:8f:ae:08:55:d9:2c:b0:3e:b4:96:5e:f0: 64:58:78:c0:b4:08:9f:af:fb:a6:58:15:b3:e3:b6:79:35:00: ae:95:83:4c:ec:98:32:d0:71:8a:66:06:a5:9d:da:f0:3c:f6: 04:7f:32:47:69:51:af:e4:f3:07:ba:89:13:5f:c0:ed:0a:b0: c7:9c:e4:ef:16:ce:cf:a7:ff:a3:12:16:ec:b3:ee:f7:9e:7d: 02:51:c1:7d:70:fe:08:76:05:09:10:3d:26:f1:6b:21:d7:25: 58:9a:d0:62:1f:c8:2e:f9:f1:d8:92:ce:bc:5e:e4:e4:14:a4: be:75:73:98:49:6e:4c:32:1d:ae:7f:48:6c:4c:e1:7e:07:4d: 81:8f:d9:a1:d9:76:b8:c5:c3:64:e1:29:eb:7d:e6:84:5f:a0: 64:7c:01:9e:d6:1d:ef:a9:85:71:d3:67:bb:41:fc:be:73:21: 92:17:6b:0e:36:f1:27:90:3a:e4:22:95:8b:34:77:cd:26:6b: 79:74:e1:a6:63:07:10:3e:e2:1f:4e:97:1a:1d:fd:a5:36:16: 5e:4a:9b:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtrRMp0fCzgV3y+c8piTkWDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0ZmU2YjlkMGNjMWU3ZjZlMTZiMmE0NmI0MmNhNWUwMWM3 MDAzNDYwHhcNMjUxMjI5MTgwMDI4WhcNMjUxMjMwMTgwMDI4WjAzMTEwLwYDVQQD EygyNzA2YWU0NjEwY2FlZGRkY2ZjODRlMmVmNzdiYWU2MDNiMTdhZjc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6IOzxJKCBC6OKxS5Uf2p3lKocp6M 8ADT2sKyLdgo0A6ZVZzpIHp5uWSkAO2MdzDJg+iUANn4/JZ8cxVAg30lJtpTRqpi Ex52eFxt//Rszonea/z7M06W5TvLvnoBaHumXtjCo00kFYlS0UJDLX3woDx/+IC0 zh+bHqznMnKnwlSr4Er464ZvWkr5dPSZ3wDJkyfODS8IC+D7JAWYIwS84ssU0yUi rHOJ1uiq4WGrLgCY2vQJpZpCPO09gf/oPFTDeiQg8kEBlH1w7+AGINrmmrHndXUI 1ap6tvtBjWqB/ei3Z5PLZIJNUkNs6uF6/XycugdTAv9wYcK+YSGsa8XuWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCcGrkYQyu3dz8hOLvd7rmA7F692MB8GA1UdIwQY MBaAFDT+a50Mwef24WsqRrQspeAccANGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlA1cm5RekI1X2JoYXlwR3RDeWw0Qnh3QTBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC82MmRmMzYtZmQzNi00YmFmLTlkMmUt MTE4YWZlZDdhNWFlLzEvTlA1cm5RekI1X2JoYXlwR3RDeWw0Qnh3QTBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC82MmRmMzYtZmQzNi00YmFmLTlkMmUtMTE4YWZlZDdhNWFl LzEvTlA1cm5RekI1X2JoYXlwR3RDeWw0Qnh3QTBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALluB3TCU z68R/lxinDL83bDfnyolT7jAHjsDacplrUTPpFOLkAMLiP+Fj64IVdkssD60ll7w ZFh4wLQIn6/7plgVs+O2eTUArpWDTOyYMtBximYGpZ3a8Dz2BH8yR2lRr+TzB7qJ E1/A7Qqwx5zk7xbOz6f/oxIW7LPu9559AlHBfXD+CHYFCRA9JvFrIdclWJrQYh/I Lvnx2JLOvF7k5BSkvnVzmEluTDIdrn9IbEzhfgdNgY/Zodl2uMXDZOEp633mhF+g ZHwBntYd76mFcdNnu0H8vnMhkhdrDjbxJ5A65CKVizR3zSZreXThpmMHED7iH06X Gh39pTYWXkqb2w== -----END CERTIFICATE-----Generated at Tue Dec 30 02:15:23 2025 by rpki-client