This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/9dc3e0-8de0-494b-8ff5-d95e5a63a48e/1/NPdSlbuVtVRThE8y1uOVCdO-zkU.mft File: NPdSlbuVtVRThE8y1uOVCdO-zkU.mft (raw, json) Hash identifier: YZF55OmIxoPGrhIZ5PzjidboWwlkaddS0VOa1j9qyfk= Subject key identifier: E8:75:F4:44:2E:ED:45:39:13:38:B5:EB:FA:89:81:62:E1:C2:C6:B0 Authority key identifier: 34:F7:52:95:BB:95:B5:54:53:84:4F:32:D6:E3:95:09:D3:BE:CE:45 Certificate issuer: /CN=34f75295bb95b55453844f32d6e39509d3bece45 Certificate serial: 019B4DE0AAB933A9DE9E513EA6E9E72ADABE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPdSlbuVtVRThE8y1uOVCdO-zkU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/9dc3e0-8de0-494b-8ff5-d95e5a63a48e/1/NPdSlbuVtVRThE8y1uOVCdO-zkU.mft Manifest number: 0205 Signing time: Wed 24 Dec 2025 01:02:07 +0000 Manifest this update: Wed 24 Dec 2025 01:02:07 +0000 Manifest next update: Thu 25 Dec 2025 01:02:07 +0000 Files and hashes: 1: NPdSlbuVtVRThE8y1uOVCdO-zkU.crl (hash: 2XobHupORY4ESye6KxCMmFILOjHvzQOPprwxRsjTA/k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/9dc3e0-8de0-494b-8ff5-d95e5a63a48e/1/NPdSlbuVtVRThE8y1uOVCdO-zkU.crl rsync://rpki.ripe.net/repository/DEFAULT/87/9dc3e0-8de0-494b-8ff5-d95e5a63a48e/1/NPdSlbuVtVRThE8y1uOVCdO-zkU.mft rsync://rpki.ripe.net/repository/DEFAULT/NPdSlbuVtVRThE8y1uOVCdO-zkU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:e0:aa:b9:33:a9:de:9e:51:3e:a6:e9:e7:2a:da:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34f75295bb95b55453844f32d6e39509d3bece45 Validity Not Before: Dec 24 01:02:07 2025 GMT Not After : Dec 25 01:02:07 2025 GMT Subject: CN=e875f4442eed45391338b5ebfa898162e1c2c6b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:53:50:7b:a1:7b:82:12:24:9f:7d:d7:f3:90: b2:55:e3:87:8c:65:80:80:8b:28:f4:4c:fd:2c:3e: 01:fe:e2:fb:e9:b3:12:14:75:f0:9f:0e:1e:a1:51: 33:03:44:6d:46:42:01:b8:74:be:7f:1c:d9:71:55: 7b:b7:52:3e:35:ea:1b:2b:e9:b4:49:a2:a0:d9:85: 18:7e:30:d6:a1:ef:b5:c1:3f:eb:71:75:45:4d:51: 95:a0:cb:2e:21:10:fe:76:3d:70:bc:eb:8c:e6:72: 91:3e:5b:5c:f9:18:bb:a5:e3:d4:7e:8a:69:c9:0a: c7:0d:7d:20:00:0d:30:81:7b:30:cd:d2:81:d9:d6: 9f:3c:ec:c7:0d:23:c5:c4:90:3b:a1:d2:b4:58:21: c7:df:64:21:cf:ce:ea:52:b8:11:3a:8d:be:c9:ca: 58:eb:03:a7:0d:26:53:c4:06:fb:4d:00:4c:d0:9e: 02:af:24:d8:fa:39:cc:34:2e:94:94:28:ae:48:29: f3:d4:29:9c:cb:48:d6:74:6f:24:27:9d:a0:2e:c5: 2b:b9:66:bf:04:1b:91:c3:44:50:84:c8:bd:f1:32: c4:6a:5e:75:04:5d:5e:f2:fd:4c:a7:88:a5:ab:42: c6:ac:bb:bf:b2:38:f9:c9:64:b4:af:8e:77:93:98: 22:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:75:F4:44:2E:ED:45:39:13:38:B5:EB:FA:89:81:62:E1:C2:C6:B0 X509v3 Authority Key Identifier: keyid:34:F7:52:95:BB:95:B5:54:53:84:4F:32:D6:E3:95:09:D3:BE:CE:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPdSlbuVtVRThE8y1uOVCdO-zkU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/9dc3e0-8de0-494b-8ff5-d95e5a63a48e/1/NPdSlbuVtVRThE8y1uOVCdO-zkU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/9dc3e0-8de0-494b-8ff5-d95e5a63a48e/1/NPdSlbuVtVRThE8y1uOVCdO-zkU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:f9:73:fc:e3:49:f7:21:25:f1:85:c6:91:7e:fe:6d:c9:95: 21:8d:28:25:bc:a1:0d:d5:7a:01:5a:e3:d0:27:96:d2:dd:cc: 3b:2e:9a:49:52:ab:57:76:3f:f6:de:a9:0c:4d:d5:18:a0:70: d8:e6:e8:cd:9c:34:78:6f:bc:1b:99:d2:b8:47:fa:2a:82:74: 0a:06:f8:a6:92:92:c3:b8:3b:a9:7a:1a:e7:49:1a:0e:ea:60: 0e:73:58:16:74:ad:df:65:1c:01:d1:ee:69:9c:86:2f:e7:16: 7f:34:d1:50:e4:cf:6a:50:3d:cc:71:5b:f1:d3:85:6a:df:d6: 2b:e3:9d:f5:e9:32:3e:19:a1:bc:9c:c5:0a:1e:28:56:ca:da: 22:49:8f:47:6c:77:07:a6:54:70:df:44:6f:9c:40:be:83:3a: 20:77:b4:ac:e1:44:e3:2c:4a:ba:7b:fa:7b:c9:a2:e7:bf:5d: 6b:fa:ff:e7:14:d0:28:d2:16:4b:3c:db:3b:b3:f5:9e:cc:b5: 15:d5:6a:63:01:fc:b0:67:24:fe:47:c6:8e:c0:b9:c7:42:14: 6e:16:ed:00:88:bf:f0:06:0a:9c:68:0b:c1:70:e8:ce:ff:b5: 8b:67:f3:69:fe:6f:67:7e:5a:2f:be:23:09:fd:82:f7:08:bd: 13:24:de:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtN4Kq5M6nenlE+punnKtq+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0Zjc1Mjk1YmI5NWI1NTQ1Mzg0NGYzMmQ2ZTM5NTA5ZDNi ZWNlNDUwHhcNMjUxMjI0MDEwMjA3WhcNMjUxMjI1MDEwMjA3WjAzMTEwLwYDVQQD EyhlODc1ZjQ0NDJlZWQ0NTM5MTMzOGI1ZWJmYTg5ODE2MmUxYzJjNmIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAylNQe6F7ghIkn33X85CyVeOHjGWA gIso9Ez9LD4B/uL76bMSFHXwnw4eoVEzA0RtRkIBuHS+fxzZcVV7t1I+NeobK+m0 SaKg2YUYfjDWoe+1wT/rcXVFTVGVoMsuIRD+dj1wvOuM5nKRPltc+Ri7pePUfopp yQrHDX0gAA0wgXswzdKB2dafPOzHDSPFxJA7odK0WCHH32Qhz87qUrgROo2+ycpY 6wOnDSZTxAb7TQBM0J4CryTY+jnMNC6UlCiuSCnz1Cmcy0jWdG8kJ52gLsUruWa/ BBuRw0RQhMi98TLEal51BF1e8v1Mp4ilq0LGrLu/sjj5yWS0r453k5giWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOh19EQu7UU5Ezi16/qJgWLhwsawMB8GA1UdIwQY MBaAFDT3UpW7lbVUU4RPMtbjlQnTvs5FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlBkU2xidVZ0VlJUaEU4eTF1T1ZDZE8temtVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85ZGMzZTAtOGRlMC00OTRiLThmZjUt ZDk1ZTVhNjNhNDhlLzEvTlBkU2xidVZ0VlJUaEU4eTF1T1ZDZE8temtVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85ZGMzZTAtOGRlMC00OTRiLThmZjUtZDk1ZTVhNjNhNDhl LzEvTlBkU2xidVZ0VlJUaEU4eTF1T1ZDZE8temtVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK/lz/ONJ 9yEl8YXGkX7+bcmVIY0oJbyhDdV6AVrj0CeW0t3MOy6aSVKrV3Y/9t6pDE3VGKBw 2ObozZw0eG+8G5nSuEf6KoJ0Cgb4ppKSw7g7qXoa50kaDupgDnNYFnSt32UcAdHu aZyGL+cWfzTRUOTPalA9zHFb8dOFat/WK+Od9ekyPhmhvJzFCh4oVsraIkmPR2x3 B6ZUcN9Eb5xAvoM6IHe0rOFE4yxKunv6e8mi579da/r/5xTQKNIWSzzbO7P1nsy1 FdVqYwH8sGck/kfGjsC5x0IUbhbtAIi/8AYKnGgLwXDozv+1i2fzaf5vZ35aL74j Cf2C9wi9EyTerg== -----END CERTIFICATE-----Generated at Wed Dec 24 08:47:33 2025 by rpki-client