This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft File: NpgLSGOkwPwQnpM6n494kuQmIvg.mft (raw, json) Hash identifier: qnDaPME99se58xjf7hfUnEMbA8MZ0z2jo9Tn3//Vg2U= Subject key identifier: E5:97:A9:80:2A:A6:D5:0A:11:4D:66:4F:D9:27:D1:EB:72:88:EC:A3 Authority key identifier: 36:98:0B:48:63:A4:C0:FC:10:9E:93:3A:9F:8F:78:92:E4:26:22:F8 Certificate issuer: /CN=36980b4863a4c0fc109e933a9f8f7892e42622f8 Certificate serial: 019B710FE6036B31CD5A7A9EF5B762DE732E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpgLSGOkwPwQnpM6n494kuQmIvg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft Manifest number: 17A3 Signing time: Tue 30 Dec 2025 21:00:25 +0000 Manifest this update: Tue 30 Dec 2025 21:00:25 +0000 Manifest next update: Wed 31 Dec 2025 21:00:25 +0000 Files and hashes: 1: LuqTaLAIb1FyHM5wmPs1YLA-1NQ.roa (hash: qV1VopZp94X/gYFO14Dpzbo5vZkWKbjRJxqhcQk1sTY=) 2: NpgLSGOkwPwQnpM6n494kuQmIvg.crl (hash: 1ZDy3f125c4uj2tnSRmRceJljBHjZOWxY+iHjwDqTvU=) 3: kBYkIoAwOTb1jZVoI-2IjKFmw9s.roa (hash: XJGvgivLL6yw0361zmrsd505aLJW4OPiGkt/w/pz35g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.crl rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft rsync://rpki.ripe.net/repository/DEFAULT/NpgLSGOkwPwQnpM6n494kuQmIvg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 15:21:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:71:0f:e6:03:6b:31:cd:5a:7a:9e:f5:b7:62:de:73:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36980b4863a4c0fc109e933a9f8f7892e42622f8 Validity Not Before: Dec 30 21:00:25 2025 GMT Not After : Dec 31 21:00:25 2025 GMT Subject: CN=e597a9802aa6d50a114d664fd927d1eb7288eca3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b9:75:5e:90:8a:88:de:7c:6e:a3:8d:ab:19: f5:3b:dc:3f:75:90:76:4d:61:b5:58:0f:8d:ec:d2: f1:bb:df:58:92:ca:7d:0c:94:6c:2c:e6:14:65:7f: d1:d2:e0:0a:24:90:6a:7b:f1:ea:0f:85:36:5f:9e: 4e:58:23:2b:e7:4b:1f:4e:8f:e6:e7:35:ce:47:57: 20:ad:93:54:56:21:0e:58:20:f0:13:b5:9f:a9:02: eb:14:62:65:1d:db:77:24:26:e8:f9:c5:fe:62:bf: 0c:f5:05:37:44:4f:05:38:20:9f:fe:41:eb:4d:c8: d3:18:02:d3:f3:87:f4:c8:d7:6c:21:fd:22:a0:87: f1:64:ac:41:5c:6c:ea:54:aa:7c:c8:b3:bb:82:78: d8:4a:03:c6:11:01:6d:9d:9a:c1:35:62:62:46:2f: f5:00:96:9c:bd:f0:16:13:0f:7d:0b:1d:8c:35:a3: 32:8c:48:65:2d:55:97:85:8d:d1:e0:93:b7:d6:84: 74:94:43:a1:db:48:10:03:5c:c9:42:96:c7:28:07: 7d:2a:95:6b:07:e4:12:08:cf:35:0d:b3:8e:a0:52: cc:6e:d7:db:cb:57:0a:ae:0f:8d:f9:56:e8:52:8f: 82:e3:d8:a9:c2:dc:0c:d0:35:e9:c2:35:43:b5:21: d0:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:97:A9:80:2A:A6:D5:0A:11:4D:66:4F:D9:27:D1:EB:72:88:EC:A3 X509v3 Authority Key Identifier: keyid:36:98:0B:48:63:A4:C0:FC:10:9E:93:3A:9F:8F:78:92:E4:26:22:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpgLSGOkwPwQnpM6n494kuQmIvg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:42:dc:6a:6f:5d:2f:8e:42:7a:f7:81:ea:a7:d9:58:b0:d5: cd:62:d2:d5:cc:98:a8:9c:7e:be:30:55:73:8c:19:91:ca:00: 28:10:15:d7:d0:63:6f:34:dc:fb:25:23:9b:32:1f:f9:cb:55: 3c:fb:9a:20:57:fd:13:3a:db:e1:c4:d5:e2:16:7e:d9:de:9c: a2:a9:0b:b0:4a:d0:cb:4a:48:53:c1:57:cc:25:54:40:9f:7e: 30:f6:1d:8c:60:b2:29:f3:56:33:35:da:f0:ac:8e:02:93:80: 50:b7:76:21:ad:4b:7c:b7:5a:a2:87:81:3a:a8:c9:ee:4b:3c: 7b:aa:24:2f:c7:ca:4c:51:9c:4d:74:c3:e1:fa:d2:a1:e2:3f: eb:7d:56:a7:91:21:e1:af:56:84:f9:61:23:04:11:70:17:39: 0b:25:3c:b5:9f:b1:ba:20:13:c7:57:7f:dd:a5:34:50:3e:5b: e9:08:c7:7e:67:07:0b:7c:30:25:36:91:29:a4:ae:12:d0:d2: c4:79:39:e6:0a:b4:9e:60:6b:53:c1:eb:97:2d:63:89:cc:49: c1:f5:c7:82:97:01:6c:f1:3a:ae:a9:a4:2d:d9:4c:03:32:06: 86:f0:03:27:48:88:e7:6f:3f:de:f9:37:e6:a1:27:3d:cd:36: c5:95:6b:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtxD+YDazHNWnqe9bdi3nMuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2OTgwYjQ4NjNhNGMwZmMxMDllOTMzYTlmOGY3ODkyZTQy NjIyZjgwHhcNMjUxMjMwMjEwMDI1WhcNMjUxMjMxMjEwMDI1WjAzMTEwLwYDVQQD EyhlNTk3YTk4MDJhYTZkNTBhMTE0ZDY2NGZkOTI3ZDFlYjcyODhlY2EzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7l1XpCKiN58bqONqxn1O9w/dZB2 TWG1WA+N7NLxu99Yksp9DJRsLOYUZX/R0uAKJJBqe/HqD4U2X55OWCMr50sfTo/m 5zXOR1cgrZNUViEOWCDwE7WfqQLrFGJlHdt3JCbo+cX+Yr8M9QU3RE8FOCCf/kHr TcjTGALT84f0yNdsIf0ioIfxZKxBXGzqVKp8yLO7gnjYSgPGEQFtnZrBNWJiRi/1 AJacvfAWEw99Cx2MNaMyjEhlLVWXhY3R4JO31oR0lEOh20gQA1zJQpbHKAd9KpVr B+QSCM81DbOOoFLMbtfby1cKrg+N+VboUo+C49ipwtwM0DXpwjVDtSHQlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOWXqYAqptUKEU1mT9kn0etyiOyjMB8GA1UdIwQY MBaAFDaYC0hjpMD8EJ6TOp+PeJLkJiL4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnBnTFNHT2t3UHdRbnBNNm40OTRrdVFtSXZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC82OGY0NGItMzY3NS00YWQ4LWEwY2Et NzRiYTI2YWFmMWY2LzEvTnBnTFNHT2t3UHdRbnBNNm40OTRrdVFtSXZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC82OGY0NGItMzY3NS00YWQ4LWEwY2EtNzRiYTI2YWFmMWY2 LzEvTnBnTFNHT2t3UHdRbnBNNm40OTRrdVFtSXZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE0Lcam9d L45CeveB6qfZWLDVzWLS1cyYqJx+vjBVc4wZkcoAKBAV19BjbzTc+yUjmzIf+ctV PPuaIFf9Ezrb4cTV4hZ+2d6coqkLsErQy0pIU8FXzCVUQJ9+MPYdjGCyKfNWMzXa 8KyOApOAULd2Ia1LfLdaooeBOqjJ7ks8e6okL8fKTFGcTXTD4frSoeI/631Wp5Eh 4a9WhPlhIwQRcBc5CyU8tZ+xuiATx1d/3aU0UD5b6QjHfmcHC3wwJTaRKaSuEtDS xHk55gq0nmBrU8Hrly1jicxJwfXHgpcBbPE6rqmkLdlMAzIGhvADJ0iI528/3vk3 5qEnPc02xZVrfg== -----END CERTIFICATE-----Generated at Wed Dec 31 00:09:56 2025 by rpki-client