This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft File: NpgLSGOkwPwQnpM6n494kuQmIvg.mft (raw, json) Hash identifier: 2pzzKR+XG/ra6OiSUr4jhZsAH6xmaZRGVyRfsobYe8g= Subject key identifier: E5:93:31:90:A9:7C:59:E3:E5:2E:DC:29:E7:F2:65:0F:49:34:FC:EF Authority key identifier: 36:98:0B:48:63:A4:C0:FC:10:9E:93:3A:9F:8F:78:92:E4:26:22:F8 Certificate issuer: /CN=36980b4863a4c0fc109e933a9f8f7892e42622f8 Certificate serial: 019B3EDAB0B69734A56D11CD698D985EACF3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpgLSGOkwPwQnpM6n494kuQmIvg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft Manifest number: 1789 Signing time: Sun 21 Dec 2025 03:01:17 +0000 Manifest this update: Sun 21 Dec 2025 03:01:17 +0000 Manifest next update: Mon 22 Dec 2025 03:01:17 +0000 Files and hashes: 1: LuqTaLAIb1FyHM5wmPs1YLA-1NQ.roa (hash: qV1VopZp94X/gYFO14Dpzbo5vZkWKbjRJxqhcQk1sTY=) 2: NpgLSGOkwPwQnpM6n494kuQmIvg.crl (hash: Z44dvl8fhgf7jOi+NxC5n9m+zKhuvjeV0Jr4VzWonCI=) 3: kBYkIoAwOTb1jZVoI-2IjKFmw9s.roa (hash: XJGvgivLL6yw0361zmrsd505aLJW4OPiGkt/w/pz35g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.crl rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft rsync://rpki.ripe.net/repository/DEFAULT/NpgLSGOkwPwQnpM6n494kuQmIvg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:b0:b6:97:34:a5:6d:11:cd:69:8d:98:5e:ac:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36980b4863a4c0fc109e933a9f8f7892e42622f8 Validity Not Before: Dec 21 03:01:17 2025 GMT Not After : Dec 22 03:01:17 2025 GMT Subject: CN=e5933190a97c59e3e52edc29e7f2650f4934fcef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:82:5d:95:37:f8:64:84:d1:26:87:2f:85:3a: 55:47:5c:0b:07:f8:9e:60:3f:65:e9:79:6c:9a:e7: a1:40:b2:16:f5:6b:dd:6a:8d:42:75:b1:05:94:7a: bf:e5:81:9f:a5:7e:74:e3:93:03:24:5a:d0:e1:a7: 12:c0:3b:2f:27:74:8a:4c:31:99:a5:87:90:23:96: cb:27:f5:60:1d:d2:a8:e1:8c:f7:cb:31:1d:b4:e6: 91:37:64:43:1c:c6:2b:57:e4:30:da:58:a9:13:d6: d5:ef:b6:6d:7d:24:c8:e2:5c:4d:4e:10:70:31:4b: 97:6a:78:e0:b0:a1:36:ff:b7:c7:d6:bf:f5:7c:d8: 9c:22:69:5a:fa:f2:38:06:61:ac:02:b2:42:33:de: 50:a8:53:5d:c1:62:55:63:64:89:50:e6:4c:81:b7: 7d:c8:0d:ed:eb:46:23:85:87:2c:3f:22:52:33:b3: 11:75:05:78:77:97:78:55:ce:1e:2c:cd:16:fb:b1: 97:f0:05:2f:dc:d2:1c:ca:5a:5e:ad:65:02:f7:16: 21:12:a0:fa:f4:5a:04:2e:02:8d:ea:b9:b1:ad:eb: c6:29:73:e8:f0:d0:5b:58:92:1a:ac:e9:84:eb:ce: 93:81:98:bb:3d:4f:8c:40:1a:f9:a5:5e:0f:5a:ed: be:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:93:31:90:A9:7C:59:E3:E5:2E:DC:29:E7:F2:65:0F:49:34:FC:EF X509v3 Authority Key Identifier: keyid:36:98:0B:48:63:A4:C0:FC:10:9E:93:3A:9F:8F:78:92:E4:26:22:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpgLSGOkwPwQnpM6n494kuQmIvg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:ef:8e:f6:ef:19:18:91:ca:51:3b:16:b0:b6:2d:3f:c1:0d: bc:dc:78:f5:9c:21:7c:32:f0:57:ee:63:b3:90:93:a1:0c:c7: 3c:5f:26:bb:3b:d3:63:ee:c4:17:0f:fc:83:22:c9:b6:5b:0c: 2c:fe:82:af:68:ed:f0:3b:84:d1:ee:29:7f:ee:47:97:1f:14: 2a:a7:a5:d7:97:6b:eb:3c:ad:00:34:e4:34:7c:c5:77:17:09: cc:ad:63:d2:37:41:56:03:b4:57:bf:d8:6b:44:79:12:73:d1: 3a:d9:91:4a:44:cb:c1:59:45:39:4b:ce:12:bc:bc:f8:02:8a: 7d:4a:1f:54:35:68:e8:31:b9:e8:1f:0a:e0:bb:44:60:59:5b: ca:22:c4:c8:d6:8b:3a:d9:c9:6b:8e:67:dc:d9:72:d2:43:97: 60:6f:0e:1c:97:a4:5a:c3:5f:8b:1a:6b:11:f0:5d:30:15:b5: 48:90:8b:59:c0:8f:28:1c:05:3d:14:4f:04:91:c2:fc:8f:5a: 21:a2:6c:62:f8:6b:a4:de:f8:8c:e4:01:c5:b7:50:5d:b4:2e: c1:6d:2e:20:cb:99:88:74:2b:26:09:f8:ea:77:2c:fa:4f:18: 45:b2:79:96:79:0d:fa:fc:46:6e:73:b9:93:2a:52:0d:d3:d3: 25:df:fb:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2rC2lzSlbRHNaY2YXqzzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2OTgwYjQ4NjNhNGMwZmMxMDllOTMzYTlmOGY3ODkyZTQy NjIyZjgwHhcNMjUxMjIxMDMwMTE3WhcNMjUxMjIyMDMwMTE3WjAzMTEwLwYDVQQD EyhlNTkzMzE5MGE5N2M1OWUzZTUyZWRjMjllN2YyNjUwZjQ5MzRmY2VmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0oJdlTf4ZITRJocvhTpVR1wLB/ie YD9l6XlsmuehQLIW9Wvdao1CdbEFlHq/5YGfpX5045MDJFrQ4acSwDsvJ3SKTDGZ pYeQI5bLJ/VgHdKo4Yz3yzEdtOaRN2RDHMYrV+Qw2lipE9bV77ZtfSTI4lxNThBw MUuXanjgsKE2/7fH1r/1fNicImla+vI4BmGsArJCM95QqFNdwWJVY2SJUOZMgbd9 yA3t60YjhYcsPyJSM7MRdQV4d5d4Vc4eLM0W+7GX8AUv3NIcylperWUC9xYhEqD6 9FoELgKN6rmxrevGKXPo8NBbWJIarOmE686TgZi7PU+MQBr5pV4PWu2+0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOWTMZCpfFnj5S7cKefyZQ9JNPzvMB8GA1UdIwQY MBaAFDaYC0hjpMD8EJ6TOp+PeJLkJiL4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnBnTFNHT2t3UHdRbnBNNm40OTRrdVFtSXZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC82OGY0NGItMzY3NS00YWQ4LWEwY2Et NzRiYTI2YWFmMWY2LzEvTnBnTFNHT2t3UHdRbnBNNm40OTRrdVFtSXZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC82OGY0NGItMzY3NS00YWQ4LWEwY2EtNzRiYTI2YWFmMWY2 LzEvTnBnTFNHT2t3UHdRbnBNNm40OTRrdVFtSXZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKu+O9u8Z GJHKUTsWsLYtP8ENvNx49ZwhfDLwV+5js5CToQzHPF8muzvTY+7EFw/8gyLJtlsM LP6Cr2jt8DuE0e4pf+5Hlx8UKqel15dr6zytADTkNHzFdxcJzK1j0jdBVgO0V7/Y a0R5EnPROtmRSkTLwVlFOUvOEry8+AKKfUofVDVo6DG56B8K4LtEYFlbyiLEyNaL OtnJa45n3Nly0kOXYG8OHJekWsNfixprEfBdMBW1SJCLWcCPKBwFPRRPBJHC/I9a IaJsYvhrpN74jOQBxbdQXbQuwW0uIMuZiHQrJgn46ncs+k8YRbJ5lnkN+vxGbnO5 kypSDdPTJd/7pQ== -----END CERTIFICATE-----Generated at Sun Dec 21 09:33:19 2025 by rpki-client