This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/0fc5c9-4ec6-4df6-82c4-d87e4047f853/1/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.mft File: NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.mft (raw, json) Hash identifier: BckNMmY0q2Rcj5Sxj9mJHV6H8j58S/4s2Urjkt4WVj0= Subject key identifier: 1D:9B:12:32:AB:20:DC:E7:3E:9D:BD:21:52:0E:29:C1:54:3F:0B:0A Authority key identifier: 34:F4:7B:73:EE:8F:BE:DD:25:F4:1B:3B:17:B2:BE:08:F5:BF:65:63 Certificate issuer: /CN=34f47b73ee8fbedd25f41b3b17b2be08f5bf6563 Certificate serial: 019B44A57AFD62D816B8C1286555271301D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/0fc5c9-4ec6-4df6-82c4-d87e4047f853/1/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.mft Manifest number: 1791 Signing time: Mon 22 Dec 2025 06:00:54 +0000 Manifest this update: Mon 22 Dec 2025 06:00:54 +0000 Manifest next update: Tue 23 Dec 2025 06:00:54 +0000 Files and hashes: 1: 94wGpzC6dKW4wCyBuNwgbCmu0YI.roa (hash: HmlUsbHYgnjwmvm0Ep06MITWSKS8pcY785u7DkFvmwU=) 2: N1_eJlCZb3ETGGXcyIle3qD0zxM.roa (hash: ZUSIabtzDxcJVnD57wreF1I3FajQaelaynE8r9qpwLA=) 3: NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.crl (hash: wjiLH2iBlypRl6Z18r6Wu9qW9wBdhpxJnZJUC5GdNWY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/0fc5c9-4ec6-4df6-82c4-d87e4047f853/1/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/0fc5c9-4ec6-4df6-82c4-d87e4047f853/1/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.mft rsync://rpki.ripe.net/repository/DEFAULT/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 06:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:a5:7a:fd:62:d8:16:b8:c1:28:65:55:27:13:01:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34f47b73ee8fbedd25f41b3b17b2be08f5bf6563 Validity Not Before: Dec 22 06:00:54 2025 GMT Not After : Dec 23 06:00:54 2025 GMT Subject: CN=1d9b1232ab20dce73e9dbd21520e29c1543f0b0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:5a:1b:d5:8c:6d:5d:75:f4:a6:8e:33:67:f5: d1:88:7f:34:31:11:86:e3:8f:6e:ea:9a:e6:63:3b: 65:31:cf:13:74:15:eb:46:e5:35:e4:a9:18:23:84: b8:3a:9a:c1:64:41:71:f1:b3:4c:72:54:29:92:ee: 16:e4:22:03:6f:88:ad:ef:ac:08:1a:76:dc:15:25: 0d:f0:fe:10:8c:4c:26:87:a8:75:2f:b5:97:2c:60: 8e:17:35:3a:61:e9:f9:0f:05:ff:a8:a1:4a:50:40: 25:10:5e:1c:28:55:cf:c2:03:7a:46:04:7b:49:0b: 49:84:c2:18:1d:d4:bd:7d:09:4c:ff:fa:18:4a:8a: fe:3c:70:1f:22:3e:91:9b:b9:6b:7e:69:a4:90:13: 58:98:e0:5f:1c:11:1b:2f:5f:4a:8a:4d:7b:b1:19: 90:d9:0d:b7:36:9d:2b:3f:bd:85:6f:3a:7e:03:34: 46:49:f3:19:12:14:14:4b:4d:8d:18:1e:5f:f2:93: 41:1b:8c:9d:d9:ae:10:0a:69:6b:08:23:60:71:1c: 16:2e:cb:4f:35:35:d1:c3:47:8b:1b:9b:04:6d:05: c6:4e:62:0e:49:a5:07:4e:78:6b:bd:06:ef:cd:a4: bd:6f:e2:0f:a2:7c:eb:3e:a6:90:d7:c0:6a:94:d2: f8:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:9B:12:32:AB:20:DC:E7:3E:9D:BD:21:52:0E:29:C1:54:3F:0B:0A X509v3 Authority Key Identifier: keyid:34:F4:7B:73:EE:8F:BE:DD:25:F4:1B:3B:17:B2:BE:08:F5:BF:65:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/0fc5c9-4ec6-4df6-82c4-d87e4047f853/1/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/0fc5c9-4ec6-4df6-82c4-d87e4047f853/1/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:61:15:4b:d8:85:ed:e4:b3:29:5c:4f:f5:d5:a6:db:01:0e: 4b:7b:f6:41:f9:cc:b8:35:23:a8:b3:27:b0:83:6e:c6:db:62: 75:41:51:a8:e6:f6:20:9a:46:46:93:a3:6c:95:74:b0:a9:72: 80:dc:8b:1e:1f:86:b1:43:f3:f1:0f:c6:99:00:a7:b5:50:0a: 88:f2:5e:47:e6:1e:b4:a5:bc:8f:86:16:ef:42:50:3e:1b:1b: 45:7b:f0:a3:c1:00:a4:87:3d:a3:e0:bc:74:55:22:e5:eb:75: ce:b5:e9:6f:c9:50:8c:f3:49:e9:35:26:d2:8f:c0:c5:6b:08: d5:5b:3a:e8:ff:4d:6f:4e:9f:26:5c:05:d0:83:cd:20:d2:df: bc:37:9c:63:6b:d0:98:32:91:ad:e0:4c:5b:65:c1:1f:cc:46: 38:2e:cc:48:85:a1:7d:a4:d5:98:cd:7e:c2:04:41:65:a7:01: a3:d6:bc:f7:27:24:0a:05:cb:24:c5:bc:32:3d:e6:72:96:dd: 75:2a:a0:40:95:6a:9b:f9:83:97:60:37:81:97:e4:b5:b7:9d: f2:dc:16:c7:45:80:93:6f:6d:ec:df:4f:93:61:2c:7d:49:d3: 98:94:f5:d2:d7:65:ec:7f:24:10:e1:6f:7f:07:b6:3a:ca:88: 3a:7e:b1:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEpXr9YtgWuMEoZVUnEwHRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0ZjQ3YjczZWU4ZmJlZGQyNWY0MWIzYjE3YjJiZTA4ZjVi ZjY1NjMwHhcNMjUxMjIyMDYwMDU0WhcNMjUxMjIzMDYwMDU0WjAzMTEwLwYDVQQD EygxZDliMTIzMmFiMjBkY2U3M2U5ZGJkMjE1MjBlMjljMTU0M2YwYjBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1ob1YxtXXX0po4zZ/XRiH80MRGG 449u6prmYztlMc8TdBXrRuU15KkYI4S4OprBZEFx8bNMclQpku4W5CIDb4it76wI GnbcFSUN8P4QjEwmh6h1L7WXLGCOFzU6Yen5DwX/qKFKUEAlEF4cKFXPwgN6RgR7 SQtJhMIYHdS9fQlM//oYSor+PHAfIj6Rm7lrfmmkkBNYmOBfHBEbL19Kik17sRmQ 2Q23Np0rP72Fbzp+AzRGSfMZEhQUS02NGB5f8pNBG4yd2a4QCmlrCCNgcRwWLstP NTXRw0eLG5sEbQXGTmIOSaUHTnhrvQbvzaS9b+IPonzrPqaQ18BqlNL4KwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB2bEjKrINznPp29IVIOKcFUPwsKMB8GA1UdIwQY MBaAFDT0e3Puj77dJfQbOxeyvgj1v2VjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlBSN2MtNlB2dDBsOUJzN0Y3Sy1DUFdfWldNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8wZmM1YzktNGVjNi00ZGY2LTgyYzQt ZDg3ZTQwNDdmODUzLzEvTlBSN2MtNlB2dDBsOUJzN0Y3Sy1DUFdfWldNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS8wZmM1YzktNGVjNi00ZGY2LTgyYzQtZDg3ZTQwNDdmODUz LzEvTlBSN2MtNlB2dDBsOUJzN0Y3Sy1DUFdfWldNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAamEVS9iF 7eSzKVxP9dWm2wEOS3v2QfnMuDUjqLMnsINuxttidUFRqOb2IJpGRpOjbJV0sKly gNyLHh+GsUPz8Q/GmQCntVAKiPJeR+YetKW8j4YW70JQPhsbRXvwo8EApIc9o+C8 dFUi5et1zrXpb8lQjPNJ6TUm0o/AxWsI1Vs66P9Nb06fJlwF0IPNINLfvDecY2vQ mDKRreBMW2XBH8xGOC7MSIWhfaTVmM1+wgRBZacBo9a89yckCgXLJMW8Mj3mcpbd dSqgQJVqm/mDl2A3gZfktbed8twWx0WAk29t7N9Pk2EsfUnTmJT10tdl7H8kEOFv fwe2OsqIOn6xQA== -----END CERTIFICATE-----Generated at Mon Dec 22 16:01:40 2025 by rpki-client