This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft File: NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft (raw, json) Hash identifier: h5G+Bp8vJHgXotoVrjCFTK1nBKu6XxnOYlHVOilIR5U= Subject key identifier: 2B:FE:95:04:6B:9F:8B:E0:CD:4E:C4:71:4C:42:57:35:DD:48:DE:63 Authority key identifier: 36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F Certificate issuer: /CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f Certificate serial: 019B3D5A3F94B2AF4236CAE74FE7A8BDE8E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft Manifest number: 17A6 Signing time: Sat 20 Dec 2025 20:01:23 +0000 Manifest this update: Sat 20 Dec 2025 20:01:23 +0000 Manifest next update: Sun 21 Dec 2025 20:01:23 +0000 Files and hashes: 1: 1eZC9enfXbKkbChbya2s-NBXR10.roa (hash: K8gL7gYOdUPnWfON7y82NF9djuzcQAO7yPjvMnV4HWA=) 2: 4C1hs3Awu1pUWnx11isTd7urO8g.roa (hash: NHlupIJQHDTwRScv0dlfz2lFTerJ3fgzUZ9KeBTbFHo=) 3: 4aaliOpCta1xxwdPdgm9XgmQVe4.roa (hash: 50PVROIOCSd7qW0XXvFqQMxjDosAhVmRwG7IVPmy7ik=) 4: LNJOsnr56BpDhx0zCSJoGF_8kg4.roa (hash: ipKdM/rgGFJqpM5XZ1watukNv4jI5z2rHAUKNiP8l9M=) 5: NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl (hash: XwWT1BdmCzh4Zu03/Mg6ioVeqHAYfPzV3NgZ2L/lrFw=) 6: P4RQICIsv2ynDFNy1pTdbhvIXok.roa (hash: 3BspGo/InWWElD0+8Z5QOqYWItS4j6gIXyuD2KZuZ58=) 7: ibQsYiMOU1D97Z6dBw2Z2nuJoA0.roa (hash: paBGRr0SKtx93/jOWaEGPMAan4qkVxtM/IYXrSHwl6Y=) 8: jBgv17Pl-Vh_L1PF3KmB8kI2bak.roa (hash: yIwLWwTP6qcl+lhvdLDbXrkIo53nDQZcaNGlgxGXrqE=) 9: xlTjepejuGlW3CGUnuf8jiI_Sb8.roa (hash: xnJVidZPq3qTfXPcYiZGHTVkjYmciZFHEO03/ve53hw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:5a:3f:94:b2:af:42:36:ca:e7:4f:e7:a8:bd:e8:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f Validity Not Before: Dec 20 20:01:23 2025 GMT Not After : Dec 21 20:01:23 2025 GMT Subject: CN=2bfe95046b9f8be0cd4ec4714c425735dd48de63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d1:a2:c3:04:64:01:e4:73:09:2e:38:f9:d9: fc:83:08:86:fa:77:c5:f5:94:5f:13:55:36:65:d1: 9c:d0:8d:c5:9f:77:85:4a:9e:f7:41:f9:2c:29:66: f9:1b:b6:12:03:82:15:7f:38:d0:9c:3b:c9:d1:e2: 37:8e:68:27:43:31:e6:4f:62:eb:f8:48:5e:52:7d: e4:82:3e:39:de:03:b0:21:80:61:e5:25:26:0d:b2: 27:4b:a2:d7:13:80:ee:cf:ba:28:ef:23:d5:c9:c3: 2c:ee:d1:a4:f6:4f:88:a5:2e:cb:10:ac:a9:39:3e: 22:27:21:67:9a:7c:29:b1:79:fd:8f:b8:ee:a3:2b: 79:cd:80:25:44:a3:7a:d6:d4:80:6c:2a:2f:ae:cc: 25:a7:cb:e2:13:6f:ea:dd:90:24:87:c5:8d:25:a4: b5:12:51:29:cf:19:13:84:61:34:46:4c:a7:c8:5d: 52:a8:fc:5e:bf:7f:b6:c3:a7:89:4c:54:cf:fa:27: 35:51:ad:0d:0a:7a:af:3d:f8:2b:b4:96:85:dd:87: 2b:85:63:04:11:91:c5:a5:f2:12:09:0e:eb:3c:95: e8:1a:1e:f3:02:eb:0c:71:2e:0b:8b:9e:b4:b3:81: 06:6e:0e:3a:2c:78:7c:7f:10:0c:c8:bc:e7:8c:b6: bc:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:FE:95:04:6B:9F:8B:E0:CD:4E:C4:71:4C:42:57:35:DD:48:DE:63 X509v3 Authority Key Identifier: keyid:36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:5e:b0:03:4d:ac:79:37:ce:1b:23:5c:a9:0a:bf:da:13:8d: 40:4b:e6:d0:5e:ec:02:f8:a5:3b:9f:ee:28:d8:fc:01:df:3f: e7:fc:61:4a:12:2b:6b:14:8d:50:bf:7a:b1:67:0f:f9:76:15: 59:da:e6:ef:e8:65:5f:f4:c1:db:5e:95:ff:b1:61:7a:d4:d3: c1:9b:ae:55:bb:3d:e7:b1:96:be:e5:fb:8e:dd:55:d4:f5:af: 6e:b3:78:d4:73:d7:4a:23:73:a8:dc:e2:29:df:d0:0a:01:9d: 8f:31:79:f3:55:63:27:94:83:a8:79:27:2d:3b:b9:33:36:b3: 4e:f4:ce:c9:f9:21:6a:53:20:ca:92:de:70:5c:3a:47:dd:f4: 76:39:5c:88:3b:04:e6:9d:8e:f7:d1:d5:4d:83:92:fe:2a:be: cb:0d:aa:ac:ec:47:1e:41:ff:93:46:16:83:0a:e7:48:16:57: 63:89:3d:f1:8c:65:51:9c:e7:af:37:f1:48:3c:49:3e:08:e8: b1:4d:9d:48:8b:e9:3a:56:27:31:ee:7c:06:47:64:5d:2d:30: 08:67:54:78:c5:d6:1a:48:82:e9:5c:57:5f:08:1d:b8:d2:1c: 26:fc:90:d0:fe:78:8c:73:ea:48:97:b0:9f:83:bb:16:fc:73: 97:70:ed:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9Wj+Usq9CNsrnT+eovejlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2OTRmY2M2YmY2YTg3NDBmYTc4MTQ2NDFmZDlkNmVjOGQ4 NjJlNWYwHhcNMjUxMjIwMjAwMTIzWhcNMjUxMjIxMjAwMTIzWjAzMTEwLwYDVQQD EygyYmZlOTUwNDZiOWY4YmUwY2Q0ZWM0NzE0YzQyNTczNWRkNDhkZTYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtGiwwRkAeRzCS44+dn8gwiG+nfF 9ZRfE1U2ZdGc0I3Fn3eFSp73QfksKWb5G7YSA4IVfzjQnDvJ0eI3jmgnQzHmT2Lr +EheUn3kgj453gOwIYBh5SUmDbInS6LXE4Duz7oo7yPVycMs7tGk9k+IpS7LEKyp OT4iJyFnmnwpsXn9j7juoyt5zYAlRKN61tSAbCovrswlp8viE2/q3ZAkh8WNJaS1 ElEpzxkThGE0RkynyF1SqPxev3+2w6eJTFTP+ic1Ua0NCnqvPfgrtJaF3YcrhWME EZHFpfISCQ7rPJXoGh7zAusMcS4Li560s4EGbg46LHh8fxAMyLznjLa8KwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCv+lQRrn4vgzU7EcUxCVzXdSN5jMB8GA1UdIwQY MBaAFDaU/Ma/aodA+ngUZB/Z1uyNhi5fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnBUOHhyOXFoMEQ2ZUJSa0g5blc3STJHTGw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9hOGRkOWUtNzFmMi00Zjc3LWI1NzUt MGQzZmNlNDI5YmRlLzEvTnBUOHhyOXFoMEQ2ZUJSa0g5blc3STJHTGw4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy9hOGRkOWUtNzFmMi00Zjc3LWI1NzUtMGQzZmNlNDI5YmRl LzEvTnBUOHhyOXFoMEQ2ZUJSa0g5blc3STJHTGw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXV6wA02s eTfOGyNcqQq/2hONQEvm0F7sAvilO5/uKNj8Ad8/5/xhShIraxSNUL96sWcP+XYV Wdrm7+hlX/TB216V/7FhetTTwZuuVbs957GWvuX7jt1V1PWvbrN41HPXSiNzqNzi Kd/QCgGdjzF581VjJ5SDqHknLTu5MzazTvTOyfkhalMgypLecFw6R930djlciDsE 5p2O99HVTYOS/iq+yw2qrOxHHkH/k0YWgwrnSBZXY4k98YxlUZznrzfxSDxJPgjo sU2dSIvpOlYnMe58BkdkXS0wCGdUeMXWGkiC6VxXXwgduNIcJvyQ0P54jHPqSJew n4O7Fvxzl3DtiQ== -----END CERTIFICATE-----Generated at Sat Dec 20 22:05:18 2025 by rpki-client