This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft File: NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft (raw, json) Hash identifier: /a1/1C2Q9jSm/JSxf7/93l8Y39m44v7UHxLJ2ewaFjE= Subject key identifier: 5E:DA:61:B5:D8:C5:B1:E6:27:94:9B:AF:68:52:73:F6:AB:16:AC:6D Authority key identifier: 36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F Certificate issuer: /CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f Certificate serial: 019B3B6BA0A10AB4FFA46CDF98D0BD2DE015 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft Manifest number: 17A5 Signing time: Sat 20 Dec 2025 11:01:07 +0000 Manifest this update: Sat 20 Dec 2025 11:01:07 +0000 Manifest next update: Sun 21 Dec 2025 11:01:07 +0000 Files and hashes: 1: 1eZC9enfXbKkbChbya2s-NBXR10.roa (hash: K8gL7gYOdUPnWfON7y82NF9djuzcQAO7yPjvMnV4HWA=) 2: 4C1hs3Awu1pUWnx11isTd7urO8g.roa (hash: NHlupIJQHDTwRScv0dlfz2lFTerJ3fgzUZ9KeBTbFHo=) 3: 4aaliOpCta1xxwdPdgm9XgmQVe4.roa (hash: 50PVROIOCSd7qW0XXvFqQMxjDosAhVmRwG7IVPmy7ik=) 4: LNJOsnr56BpDhx0zCSJoGF_8kg4.roa (hash: ipKdM/rgGFJqpM5XZ1watukNv4jI5z2rHAUKNiP8l9M=) 5: NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl (hash: 0HMU1aJdiahu5CJTPggBsNVwza0+nmEP7GbRO8CC4fw=) 6: P4RQICIsv2ynDFNy1pTdbhvIXok.roa (hash: 3BspGo/InWWElD0+8Z5QOqYWItS4j6gIXyuD2KZuZ58=) 7: ibQsYiMOU1D97Z6dBw2Z2nuJoA0.roa (hash: paBGRr0SKtx93/jOWaEGPMAan4qkVxtM/IYXrSHwl6Y=) 8: jBgv17Pl-Vh_L1PF3KmB8kI2bak.roa (hash: yIwLWwTP6qcl+lhvdLDbXrkIo53nDQZcaNGlgxGXrqE=) 9: xlTjepejuGlW3CGUnuf8jiI_Sb8.roa (hash: xnJVidZPq3qTfXPcYiZGHTVkjYmciZFHEO03/ve53hw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:a0:a1:0a:b4:ff:a4:6c:df:98:d0:bd:2d:e0:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f Validity Not Before: Dec 20 11:01:07 2025 GMT Not After : Dec 21 11:01:07 2025 GMT Subject: CN=5eda61b5d8c5b1e627949baf685273f6ab16ac6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:bf:70:8a:12:99:4a:4c:c3:8d:87:f8:60:56: db:45:26:8d:6b:e7:a1:46:b2:1a:5a:34:b4:fd:87: c3:14:36:59:03:37:a2:93:9f:ee:64:8c:c3:cf:3e: 60:50:ee:27:cf:df:14:23:d5:8f:bc:e1:ec:ad:4b: 6e:17:52:d4:5b:11:7a:88:0d:1b:55:a7:53:9c:2b: 65:9c:ea:ea:bb:41:1a:a9:36:57:fc:41:e7:f9:e5: 03:21:13:18:83:df:ad:09:75:dc:1f:1d:dd:40:79: 11:88:51:ca:07:dd:1e:5a:20:fc:8b:bf:dc:8e:ef: cc:04:5b:54:bb:90:82:7d:f3:3e:00:c0:d7:00:36: 89:a9:62:7e:8f:25:73:30:f1:92:d6:4b:ff:c4:aa: 36:63:7e:aa:73:29:c9:ff:80:83:9d:d0:2b:27:de: c7:ae:61:f2:64:2b:8a:99:99:3b:c9:16:36:13:81: 06:bc:0b:cb:8f:a5:45:c7:40:e2:6a:9f:34:d1:4f: 47:61:f7:6b:e9:ba:51:56:89:b8:04:00:30:25:98: 96:1f:d7:66:b0:15:01:85:9d:e1:ce:82:57:1d:96: 96:6e:db:49:cd:f3:8c:35:a3:b7:09:1f:2d:90:27: 43:d4:d7:fa:68:4d:a6:01:3d:b6:2a:c6:49:ff:05: 11:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:DA:61:B5:D8:C5:B1:E6:27:94:9B:AF:68:52:73:F6:AB:16:AC:6D X509v3 Authority Key Identifier: keyid:36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:80:11:cf:62:b8:f6:38:c4:ed:5b:26:a8:81:e4:ab:78:02: e9:90:d3:91:14:b4:cb:41:9d:85:f7:88:13:9c:26:c6:b9:36: d4:76:47:7f:8f:32:7e:03:4f:76:3f:8d:81:f0:a7:ad:6b:37: 07:3b:ad:a4:24:d7:20:05:a6:6b:58:45:87:b8:22:20:44:ca: 0f:4e:c7:cf:aa:5e:28:32:21:f0:65:b1:06:d7:20:8c:0d:62: 41:8d:c0:73:34:ad:28:de:c0:d1:8e:94:24:5b:50:60:f2:75: 1d:3e:2d:39:27:f4:91:8d:c2:7f:af:55:03:f8:ea:89:14:80: b5:a6:66:34:7e:09:50:54:9e:0e:d7:f3:a4:fd:55:21:19:f5: d9:99:3a:ee:5c:f6:e9:3f:39:2d:a2:c5:ba:df:a2:d3:64:48: 12:03:67:29:83:f6:c7:bb:1f:31:74:6f:d0:02:ef:83:f2:04: 14:8f:79:db:60:3f:b7:2f:b0:5e:8d:3a:87:7d:e4:1f:55:11: ab:9f:43:1e:77:36:cd:ce:d8:d9:fd:c9:9d:be:dc:c3:19:0d: 16:77:fc:5e:39:c0:7a:9e:4b:cb:ae:f1:72:07:81:d1:cd:c1: e5:11:19:f0:a5:3a:42:bc:36:c1:b3:2f:d3:db:cf:25:af:c7: f3:aa:fb:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7a6ChCrT/pGzfmNC9LeAVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2OTRmY2M2YmY2YTg3NDBmYTc4MTQ2NDFmZDlkNmVjOGQ4 NjJlNWYwHhcNMjUxMjIwMTEwMTA3WhcNMjUxMjIxMTEwMTA3WjAzMTEwLwYDVQQD Eyg1ZWRhNjFiNWQ4YzViMWU2Mjc5NDliYWY2ODUyNzNmNmFiMTZhYzZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt79wihKZSkzDjYf4YFbbRSaNa+eh RrIaWjS0/YfDFDZZAzeik5/uZIzDzz5gUO4nz98UI9WPvOHsrUtuF1LUWxF6iA0b VadTnCtlnOrqu0EaqTZX/EHn+eUDIRMYg9+tCXXcHx3dQHkRiFHKB90eWiD8i7/c ju/MBFtUu5CCffM+AMDXADaJqWJ+jyVzMPGS1kv/xKo2Y36qcynJ/4CDndArJ97H rmHyZCuKmZk7yRY2E4EGvAvLj6VFx0Diap800U9HYfdr6bpRVom4BAAwJZiWH9dm sBUBhZ3hzoJXHZaWbttJzfOMNaO3CR8tkCdD1Nf6aE2mAT22KsZJ/wURcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF7aYbXYxbHmJ5Sbr2hSc/arFqxtMB8GA1UdIwQY MBaAFDaU/Ma/aodA+ngUZB/Z1uyNhi5fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnBUOHhyOXFoMEQ2ZUJSa0g5blc3STJHTGw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9hOGRkOWUtNzFmMi00Zjc3LWI1NzUt MGQzZmNlNDI5YmRlLzEvTnBUOHhyOXFoMEQ2ZUJSa0g5blc3STJHTGw4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy9hOGRkOWUtNzFmMi00Zjc3LWI1NzUtMGQzZmNlNDI5YmRl LzEvTnBUOHhyOXFoMEQ2ZUJSa0g5blc3STJHTGw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL4ARz2K4 9jjE7VsmqIHkq3gC6ZDTkRS0y0GdhfeIE5wmxrk21HZHf48yfgNPdj+NgfCnrWs3 BzutpCTXIAWma1hFh7giIETKD07Hz6peKDIh8GWxBtcgjA1iQY3AczStKN7A0Y6U JFtQYPJ1HT4tOSf0kY3Cf69VA/jqiRSAtaZmNH4JUFSeDtfzpP1VIRn12Zk67lz2 6T85LaLFut+i02RIEgNnKYP2x7sfMXRv0ALvg/IEFI9522A/ty+wXo06h33kH1UR q59DHnc2zc7Y2f3Jnb7cwxkNFnf8XjnAep5Ly67xcgeB0c3B5REZ8KU6Qrw2wbMv 09vPJa/H86r7dw== -----END CERTIFICATE-----Generated at Sat Dec 20 18:54:07 2025 by rpki-client