This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/802e9e-f982-449d-8b70-76c05cf5f2e6/1/NpxxPFGYfh_6VIInf18cjLci9Es.mft File: NpxxPFGYfh_6VIInf18cjLci9Es.mft (raw, json) Hash identifier: mByz3XAv01MTFuSUpTortKtvV/Ils8+EqZY+YgGtVLk= Subject key identifier: 7D:33:5B:BF:63:9C:C7:21:2F:38:B3:8C:7F:83:16:5D:CE:BA:E7:F7 Authority key identifier: 36:9C:71:3C:51:98:7E:1F:FA:54:82:27:7F:5F:1C:8C:B7:22:F4:4B Certificate issuer: /CN=369c713c51987e1ffa5482277f5f1c8cb722f44b Certificate serial: 019B3A8FF993E11FA63B96B9485D7477E029 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpxxPFGYfh_6VIInf18cjLci9Es.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/802e9e-f982-449d-8b70-76c05cf5f2e6/1/NpxxPFGYfh_6VIInf18cjLci9Es.mft Manifest number: 0B8A Signing time: Sat 20 Dec 2025 07:01:12 +0000 Manifest this update: Sat 20 Dec 2025 07:01:12 +0000 Manifest next update: Sun 21 Dec 2025 07:01:12 +0000 Files and hashes: 1: 6dTT-rARhT9SKaU0Q5LyIvW6cuU.roa (hash: AGsDOWQR4BMJI4oi03KYaFPz/MqqxHtOCzcXxJU+zUU=) 2: 9fxVVEARajC-2ASXFi0_DFGSBc8.roa (hash: hXfrG37neyCRh8L2PA4JPhumP6PxcdmlSO8PbLD9FY4=) 3: FW_JqLhHC7LyHZmaeSFALgStml0.roa (hash: pWsELGWJQyn59BiBQF9FnS772zDDCwVPNTG6tAAe2Fg=) 4: NpxxPFGYfh_6VIInf18cjLci9Es.crl (hash: N2vNESf2I0WD84lF77VXzNCRcMw4LvXKBM39Tpmi37s=) 5: rwCQmNOuZE_kryjC8QIDqyzBek8.roa (hash: OHzMcdBam5j/wfHUyz5DszdE5+OjpxcpG78RADThpWo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/802e9e-f982-449d-8b70-76c05cf5f2e6/1/NpxxPFGYfh_6VIInf18cjLci9Es.crl rsync://rpki.ripe.net/repository/DEFAULT/45/802e9e-f982-449d-8b70-76c05cf5f2e6/1/NpxxPFGYfh_6VIInf18cjLci9Es.mft rsync://rpki.ripe.net/repository/DEFAULT/NpxxPFGYfh_6VIInf18cjLci9Es.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:8f:f9:93:e1:1f:a6:3b:96:b9:48:5d:74:77:e0:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=369c713c51987e1ffa5482277f5f1c8cb722f44b Validity Not Before: Dec 20 07:01:12 2025 GMT Not After : Dec 21 07:01:12 2025 GMT Subject: CN=7d335bbf639cc7212f38b38c7f83165dcebae7f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:34:65:ef:45:41:d7:54:4e:72:77:33:b4:42: b5:a2:76:79:b2:a7:73:41:9d:18:6e:c8:ad:a2:a6: c9:4c:cf:d6:9c:05:63:48:1c:ad:f2:8e:da:a0:b2: 32:ed:59:75:92:3b:82:3c:fa:a7:85:c0:6d:b2:4a: c1:74:90:df:d8:5b:67:23:7d:a8:fa:2e:bb:d0:20: 3c:8d:6d:35:7e:39:ca:70:94:bd:c1:3f:7d:d1:de: e7:06:eb:02:a2:a8:e8:14:45:11:c9:8d:b8:31:34: d6:ff:e8:2b:d3:46:13:9c:8b:a0:78:1c:bf:61:cf: 78:1b:e8:5f:f5:f1:7e:d4:dc:ca:3d:ba:a7:0d:eb: 09:f1:1e:3e:22:57:f5:1f:4d:27:3a:07:31:9c:67: 29:dc:3e:86:1b:97:7e:08:87:74:94:d8:e8:04:b2: 8a:d2:d3:a2:17:4b:7f:23:29:d8:41:21:91:01:33: 87:76:ff:77:2f:ed:87:e1:ca:1d:33:b5:38:1f:ff: c6:2b:7c:89:3a:7a:b3:72:ac:49:6d:c2:ab:34:2f: 4b:ed:e1:77:de:67:bc:b4:d7:06:7b:da:68:cb:7c: f6:d8:cd:10:ca:70:49:d2:93:5d:99:ac:80:22:e0: 7c:33:ca:40:13:5d:b4:83:81:f9:b4:25:f4:b6:9c: b4:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:33:5B:BF:63:9C:C7:21:2F:38:B3:8C:7F:83:16:5D:CE:BA:E7:F7 X509v3 Authority Key Identifier: keyid:36:9C:71:3C:51:98:7E:1F:FA:54:82:27:7F:5F:1C:8C:B7:22:F4:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpxxPFGYfh_6VIInf18cjLci9Es.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/802e9e-f982-449d-8b70-76c05cf5f2e6/1/NpxxPFGYfh_6VIInf18cjLci9Es.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/802e9e-f982-449d-8b70-76c05cf5f2e6/1/NpxxPFGYfh_6VIInf18cjLci9Es.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:e3:33:5a:03:4f:9b:43:be:08:1d:0c:de:47:5c:a3:dc:28: 87:1d:51:46:d5:01:75:7d:b4:82:f1:9d:43:93:6b:e0:db:82: fa:8e:ce:7b:1d:2a:f8:b6:57:8e:82:c1:38:13:32:93:7e:19: 93:64:55:e9:cf:c0:84:c1:48:f9:5e:70:d5:3c:0c:5a:da:1a: 73:41:ba:fd:c8:db:cc:ce:36:e3:0b:3d:2e:74:71:df:40:4d: c2:c5:98:e4:c7:95:06:27:a5:41:76:a0:e1:07:4a:dc:95:5e: 98:bf:e9:88:86:30:6f:eb:e9:f3:a4:4d:b1:a4:fc:7c:6c:89: a0:e4:17:53:76:09:aa:2d:b4:d5:52:15:b4:91:6b:30:2e:ce: 32:95:87:0d:1f:47:70:6a:4f:2d:c7:6f:0c:a4:81:19:d1:48: ab:4a:2b:e5:74:13:5b:d6:92:84:77:d7:41:d6:e6:17:b9:a8: b9:78:c9:b4:c8:8f:cb:e5:36:b3:d0:6c:b5:65:cd:6a:c3:09: bb:95:dc:da:a8:c0:12:77:80:34:ff:e8:c4:de:dc:07:31:67: 22:38:0f:f3:36:7f:37:eb:66:74:3f:d4:23:4e:58:45:da:db: b9:91:29:cc:79:04:2f:69:07:7c:23:d8:d0:da:c6:66:1e:84: e4:d9:7d:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6j/mT4R+mO5a5SF10d+ApMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2OWM3MTNjNTE5ODdlMWZmYTU0ODIyNzdmNWYxYzhjYjcy MmY0NGIwHhcNMjUxMjIwMDcwMTEyWhcNMjUxMjIxMDcwMTEyWjAzMTEwLwYDVQQD Eyg3ZDMzNWJiZjYzOWNjNzIxMmYzOGIzOGM3ZjgzMTY1ZGNlYmFlN2Y3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0TRl70VB11ROcncztEK1onZ5sqdz QZ0YbsitoqbJTM/WnAVjSByt8o7aoLIy7Vl1kjuCPPqnhcBtskrBdJDf2FtnI32o +i670CA8jW01fjnKcJS9wT990d7nBusCoqjoFEURyY24MTTW/+gr00YTnIugeBy/ Yc94G+hf9fF+1NzKPbqnDesJ8R4+Ilf1H00nOgcxnGcp3D6GG5d+CId0lNjoBLKK 0tOiF0t/IynYQSGRATOHdv93L+2H4codM7U4H//GK3yJOnqzcqxJbcKrNC9L7eF3 3me8tNcGe9poy3z22M0QynBJ0pNdmayAIuB8M8pAE120g4H5tCX0tpy0wQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH0zW79jnMchLzizjH+DFl3Ouuf3MB8GA1UdIwQY MBaAFDaccTxRmH4f+lSCJ39fHIy3IvRLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnB4eFBGR1lmaF82VklJbmYxOGNqTGNpOUVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84MDJlOWUtZjk4Mi00NDlkLThiNzAt NzZjMDVjZjVmMmU2LzEvTnB4eFBGR1lmaF82VklJbmYxOGNqTGNpOUVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS84MDJlOWUtZjk4Mi00NDlkLThiNzAtNzZjMDVjZjVmMmU2 LzEvTnB4eFBGR1lmaF82VklJbmYxOGNqTGNpOUVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGOMzWgNP m0O+CB0M3kdco9wohx1RRtUBdX20gvGdQ5Nr4NuC+o7Oex0q+LZXjoLBOBMyk34Z k2RV6c/AhMFI+V5w1TwMWtoac0G6/cjbzM424ws9LnRx30BNwsWY5MeVBielQXag 4QdK3JVemL/piIYwb+vp86RNsaT8fGyJoOQXU3YJqi201VIVtJFrMC7OMpWHDR9H cGpPLcdvDKSBGdFIq0or5XQTW9aShHfXQdbmF7mouXjJtMiPy+U2s9BstWXNasMJ u5Xc2qjAEneANP/oxN7cBzFnIjgP8zZ/N+tmdD/UI05YRdrbuZEpzHkEL2kHfCPY 0NrGZh6E5Nl9ZA== -----END CERTIFICATE-----Generated at Sat Dec 20 12:37:46 2025 by rpki-client