This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft File: NPFybqS9bTyAka4MitGgPpHjWaI.mft (raw, json) Hash identifier: eeNS+/kAtnd5+l1hTsIfPQPVer5tgpxWyLbh92udmeQ= Subject key identifier: 94:6D:99:25:CA:C2:27:52:A1:27:EF:B8:B5:1C:6B:C8:3B:9A:47:96 Authority key identifier: 34:F1:72:6E:A4:BD:6D:3C:80:91:AE:0C:8A:D1:A0:3E:91:E3:59:A2 Certificate issuer: /CN=34f1726ea4bd6d3c8091ae0c8ad1a03e91e359a2 Certificate serial: 019B3E6D6D3F238326D2739287C8C770EE7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft Manifest number: 14C4 Signing time: Sun 21 Dec 2025 01:01:57 +0000 Manifest this update: Sun 21 Dec 2025 01:01:57 +0000 Manifest next update: Mon 22 Dec 2025 01:01:57 +0000 Files and hashes: 1: 1-QRYDCk4GRkhhK94MTs5nmWBy_E.roa (hash: 0DMmysmCmz5ptQIzT31buoWW9naDewY16lMSk6nyNPM=) 2: 4_hN70Gn93YtNqyU6RsNlMbDtXc.roa (hash: peVwC9DiY5O5MpDM5td7h9VpXZKdL2e2Hkif7cNRbJM=) 3: 6RKHwkUGkLRE0nOS7i-phv0Y7b8.roa (hash: YNCF/KzAqV3Fo+hsWHR3r0AQecfE2O/ljxIxKeerc6E=) 4: NPFybqS9bTyAka4MitGgPpHjWaI.crl (hash: NOBHdAmYCseBvS0UoLnlDh8rIFp7K5RUdxJENm1CQu4=) 5: RZB6hhj_LzY-DO3DfmavoIAg3K8.roa (hash: 8fSztyIXmdrydCA2Hwo+fzHNQuQ8HachHnXLTdni/F4=) 6: V-ziVBTzF3yW8Qn17SkTQka0Z1w.roa (hash: dzI5Exw0Cav9WTDJa9bU3vaVrx3/DEAhAyNHw9d0Q+M=) 7: f9J3fcUkkHHcn80-VJtEBd6Rau4.roa (hash: JDi8khg5idPehoZbbOnLzz9O6Dz2cHDlR75V8A55UBk=) 8: m26Z4EdJjPTeKqQP4bLFsm0qZJo.roa (hash: NWpdZVKoDOS9cnbyZWpfcC92E8AFSl1SI5HiCmg5+Gg=) 9: mI_12gpPA1x4m56hwYP082Ar3JU.roa (hash: nTAzRPzpRleX8rbBjz+dEflffb+oOGW6DVQuLBf/K4c=) 10: oHw7wrhs1qz9tzh4TUZjM8oea6k.roa (hash: IIsyfj8tmjqckisgTytL6hssPf4b/V3+My7Zj1/h7d0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.crl rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:6d:3f:23:83:26:d2:73:92:87:c8:c7:70:ee:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34f1726ea4bd6d3c8091ae0c8ad1a03e91e359a2 Validity Not Before: Dec 21 01:01:57 2025 GMT Not After : Dec 22 01:01:57 2025 GMT Subject: CN=946d9925cac22752a127efb8b51c6bc83b9a4796 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f8:f2:fd:1b:e1:5d:54:be:bd:35:9b:74:97: 00:51:e7:6d:99:b4:b8:68:a3:f0:78:0c:2e:67:ff: a3:ce:80:35:e7:d7:4e:65:92:f5:46:7c:f0:44:ac: 91:12:11:78:ea:c0:84:c3:c4:e6:3b:f2:12:9c:d4: 0b:92:10:e0:e3:7a:0d:f1:6f:70:b1:9d:f8:2b:c7: 3d:e9:95:71:a9:a3:3f:3a:dc:0b:26:a5:7e:06:a1: 60:cf:53:bc:d9:67:4a:ab:23:39:d0:23:fc:8f:cb: c1:aa:73:89:aa:b7:19:0d:fc:66:1d:f4:7b:f6:80: 7f:26:9d:d6:85:2f:12:c8:0f:9f:bb:9c:46:c6:06: 56:4e:34:38:6c:9d:65:98:9d:d4:60:09:a1:2b:ea: 22:18:58:0c:a1:60:2e:8c:5c:d8:5d:38:25:1e:f4: 9c:04:6d:21:e8:8d:c7:ff:13:39:a2:8f:3c:fc:ba: 84:9c:e0:3b:24:ec:cd:ac:0c:9e:2f:96:ca:de:e7: 90:ea:00:35:4f:d7:91:6c:ed:bc:9f:78:cd:c3:21: 01:6b:e2:7e:de:a4:33:fe:00:18:25:dc:50:e2:aa: 71:fd:fa:c6:02:5b:8a:42:bf:cf:5f:52:41:5c:41: a9:db:b0:2d:20:78:a6:0d:31:c8:1f:16:c4:af:02: 93:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:6D:99:25:CA:C2:27:52:A1:27:EF:B8:B5:1C:6B:C8:3B:9A:47:96 X509v3 Authority Key Identifier: keyid:34:F1:72:6E:A4:BD:6D:3C:80:91:AE:0C:8A:D1:A0:3E:91:E3:59:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:71:9b:cd:27:90:08:f7:26:f6:7b:8e:55:03:4e:84:ed:be: bd:24:c2:51:02:c1:56:92:c1:a3:cf:28:84:90:2a:67:f3:2d: 38:40:67:1e:64:8b:8e:a4:b0:9d:f0:50:df:f1:95:28:6a:6e: 71:39:ec:48:b8:31:3a:7c:96:2c:ea:2f:be:20:1d:70:57:a9: 96:c6:16:f4:26:82:80:2e:d5:87:88:e2:41:5f:e6:6f:91:30: 02:ab:b0:25:55:77:27:02:f1:ca:6d:4b:40:57:18:c6:5c:88: cb:36:8f:6f:2a:1a:1b:66:90:c1:70:48:6a:2c:a6:62:91:56: 2d:a5:c5:b2:2c:78:f7:a9:2d:97:5d:18:c8:ea:ff:ca:14:6d: 12:c8:b5:c6:8c:d8:5a:4a:0c:c8:5a:37:32:f8:34:95:82:a0: 0b:e5:b7:40:8d:4d:8b:75:16:db:35:b3:bc:36:5b:32:44:1e: c3:bd:fa:34:58:5d:bf:6d:49:67:97:9b:a8:87:dd:49:33:28: 09:68:ea:22:3c:16:25:d4:33:d7:32:fc:8e:42:33:01:ff:d4: 65:d9:90:d2:0d:ca:2e:cf:b9:43:72:7f:d4:67:5e:f5:4c:1a: b2:6c:59:b6:68:e8:23:01:e6:b1:62:1a:72:e3:a3:68:5c:8c: 77:22:a1:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bW0/I4Mm0nOSh8jHcO58MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0ZjE3MjZlYTRiZDZkM2M4MDkxYWUwYzhhZDFhMDNlOTFl MzU5YTIwHhcNMjUxMjIxMDEwMTU3WhcNMjUxMjIyMDEwMTU3WjAzMTEwLwYDVQQD Eyg5NDZkOTkyNWNhYzIyNzUyYTEyN2VmYjhiNTFjNmJjODNiOWE0Nzk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/jy/RvhXVS+vTWbdJcAUedtmbS4 aKPweAwuZ/+jzoA159dOZZL1RnzwRKyREhF46sCEw8TmO/ISnNQLkhDg43oN8W9w sZ34K8c96ZVxqaM/OtwLJqV+BqFgz1O82WdKqyM50CP8j8vBqnOJqrcZDfxmHfR7 9oB/Jp3WhS8SyA+fu5xGxgZWTjQ4bJ1lmJ3UYAmhK+oiGFgMoWAujFzYXTglHvSc BG0h6I3H/xM5oo88/LqEnOA7JOzNrAyeL5bK3ueQ6gA1T9eRbO28n3jNwyEBa+J+ 3qQz/gAYJdxQ4qpx/frGAluKQr/PX1JBXEGp27AtIHimDTHIHxbErwKTWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJRtmSXKwidSoSfvuLUca8g7mkeWMB8GA1UdIwQY MBaAFDTxcm6kvW08gJGuDIrRoD6R41miMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlBGeWJxUzliVHlBa2E0TWl0R2dQcEhqV2FJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9lZjhlODQtOTE2MS00MDJjLTgxYWQt ZThlOGQyZmU3MGZlLzEvTlBGeWJxUzliVHlBa2E0TWl0R2dQcEhqV2FJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9lZjhlODQtOTE2MS00MDJjLTgxYWQtZThlOGQyZmU3MGZl LzEvTlBGeWJxUzliVHlBa2E0TWl0R2dQcEhqV2FJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhHGbzSeQ CPcm9nuOVQNOhO2+vSTCUQLBVpLBo88ohJAqZ/MtOEBnHmSLjqSwnfBQ3/GVKGpu cTnsSLgxOnyWLOovviAdcFeplsYW9CaCgC7Vh4jiQV/mb5EwAquwJVV3JwLxym1L QFcYxlyIyzaPbyoaG2aQwXBIaiymYpFWLaXFsix496ktl10YyOr/yhRtEsi1xozY WkoMyFo3Mvg0lYKgC+W3QI1Ni3UW2zWzvDZbMkQew736NFhdv21JZ5ebqIfdSTMo CWjqIjwWJdQz1zL8jkIzAf/UZdmQ0g3KLs+5Q3J/1Gde9UwasmxZtmjoIwHmsWIa cuOjaFyMdyKh3w== -----END CERTIFICATE-----Generated at Sun Dec 21 09:32:31 2025 by rpki-client