This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft File: NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft (raw, json) Hash identifier: DIbxpnCmnSt5kCQzVY13W8m1DGpem0OSCFI4If2zlik= Subject key identifier: AE:D9:64:48:EE:1F:B4:2C:E9:0E:8D:CF:11:BF:34:B7:05:21:7F:9B Authority key identifier: 35:12:A8:A6:DF:99:78:DE:72:27:00:3B:1F:D3:F0:E2:B9:E5:9C:C7 Certificate issuer: /CN=3512a8a6df9978de7227003b1fd3f0e2b9e59cc7 Certificate serial: 019B6DA1CE853357433300058ACC1168F6CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft Manifest number: 17A5 Signing time: Tue 30 Dec 2025 05:01:19 +0000 Manifest this update: Tue 30 Dec 2025 05:01:19 +0000 Manifest next update: Wed 31 Dec 2025 05:01:19 +0000 Files and hashes: 1: NRKopt-ZeN5yJwA7H9Pw4rnlnMc.crl (hash: 3oLc7v20DMwjMYXQXzSCUFBsbJQH+vvpJsoySP9Bs10=) 2: gPqZz-ULbWxNpVtGrAcbURafLCM.roa (hash: bhtp8MkxjHqH+uI5CHLafEhg4ALYqQQHfi1+8hAlks8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft rsync://rpki.ripe.net/repository/DEFAULT/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 05:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6d:a1:ce:85:33:57:43:33:00:05:8a:cc:11:68:f6:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3512a8a6df9978de7227003b1fd3f0e2b9e59cc7 Validity Not Before: Dec 30 05:01:19 2025 GMT Not After : Dec 31 05:01:19 2025 GMT Subject: CN=aed96448ee1fb42ce90e8dcf11bf34b705217f9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:7b:95:cb:31:11:e2:19:b8:24:7d:37:97:8b: 28:be:7f:91:70:95:df:3f:6e:3b:71:c1:25:e5:92: 83:e5:f0:22:14:c9:47:87:bd:24:0d:1a:03:08:f8: cb:5b:57:e4:af:62:7f:ca:14:48:67:2b:5f:ef:41: 2f:d4:91:f5:db:c2:1c:fd:4d:32:f7:1e:ab:65:14: d1:46:15:33:02:7a:ba:82:98:d1:6a:23:23:d6:6b: eb:cd:c9:4d:aa:65:5e:9b:a3:cf:4b:d6:b1:83:de: f0:44:96:ee:93:c7:21:ac:eb:19:96:57:dd:2b:bd: 1a:25:e3:8c:6b:50:4e:f6:a5:f7:5b:af:c6:ff:85: 4c:9b:3f:87:0f:25:b1:17:99:e8:09:7e:50:12:b4: c7:07:bf:f0:c2:42:34:f0:9a:5d:7e:4a:70:6f:7b: 75:1a:57:78:da:88:2b:b8:b2:31:69:56:aa:2e:fd: 65:29:74:25:43:7e:0e:df:da:92:23:ba:32:72:14: 73:6b:0b:95:c6:9a:4a:97:3c:d7:d1:bc:8c:48:ad: 4a:d0:7e:9f:f7:87:46:06:99:e1:c1:c4:9f:d2:99: 91:6d:d8:18:eb:ad:66:5f:0e:cb:a3:f2:57:1d:d7: 4d:c2:46:23:f8:3d:5b:3a:87:9d:28:71:0f:e4:ca: a4:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:D9:64:48:EE:1F:B4:2C:E9:0E:8D:CF:11:BF:34:B7:05:21:7F:9B X509v3 Authority Key Identifier: keyid:35:12:A8:A6:DF:99:78:DE:72:27:00:3B:1F:D3:F0:E2:B9:E5:9C:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:93:d2:bf:d7:25:8b:c5:a3:c6:4e:4e:03:95:5c:f9:91:02: 82:65:f6:cf:b7:ac:a0:1c:18:8b:ab:4f:56:1f:e5:c4:dd:9b: a1:30:58:79:d0:b8:7d:a0:8b:80:41:3e:9d:13:8b:c8:fc:85: c9:cd:6f:fb:17:07:8b:09:71:08:d2:4e:55:a5:e6:cf:19:d0: 89:0b:13:80:0e:8b:c6:12:72:0e:6f:12:e1:0f:92:55:58:11: 84:66:80:c4:77:30:3b:44:1c:60:80:16:14:d3:75:b6:dd:ff: 64:a9:95:25:80:c5:e7:52:c7:37:ef:3b:86:96:73:28:b2:96: 44:42:69:8e:97:5f:31:8e:cb:6a:55:18:9a:6c:d4:cd:16:d8: c7:08:38:f8:1d:7a:ea:6b:8d:25:08:9d:9c:78:28:3d:05:0a: a3:f1:4e:9c:a5:7b:e7:0b:8a:71:31:d5:93:2a:ea:11:fd:17: 93:77:b1:01:95:bb:6c:8a:72:c3:cd:8f:f2:1a:87:41:a4:72: 62:70:81:a5:ea:08:20:19:04:f3:0b:dc:a2:95:ef:57:a7:e7: a3:1d:4b:78:1e:36:94:de:be:72:1d:c3:6b:b1:59:99:a1:61: 4c:87:9d:8c:bc:ca:cb:81:3f:63:1d:b1:d8:57:ec:8f:a6:4d: 30:cd:7b:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZttoc6FM1dDMwAFiswRaPbPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MTJhOGE2ZGY5OTc4ZGU3MjI3MDAzYjFmZDNmMGUyYjll NTljYzcwHhcNMjUxMjMwMDUwMTE5WhcNMjUxMjMxMDUwMTE5WjAzMTEwLwYDVQQD EyhhZWQ5NjQ0OGVlMWZiNDJjZTkwZThkY2YxMWJmMzRiNzA1MjE3ZjliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3uVyzER4hm4JH03l4sovn+RcJXf P247ccEl5ZKD5fAiFMlHh70kDRoDCPjLW1fkr2J/yhRIZytf70Ev1JH128Ic/U0y 9x6rZRTRRhUzAnq6gpjRaiMj1mvrzclNqmVem6PPS9axg97wRJbuk8chrOsZllfd K70aJeOMa1BO9qX3W6/G/4VMmz+HDyWxF5noCX5QErTHB7/wwkI08Jpdfkpwb3t1 Gld42ogruLIxaVaqLv1lKXQlQ34O39qSI7oychRzawuVxppKlzzX0byMSK1K0H6f 94dGBpnhwcSf0pmRbdgY661mXw7Lo/JXHddNwkYj+D1bOoedKHEP5MqkuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK7ZZEjuH7Qs6Q6NzxG/NLcFIX+bMB8GA1UdIwQY MBaAFDUSqKbfmXjecicAOx/T8OK55ZzHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlJLb3B0LVplTjV5SndBN0g5UHc0cm5sbk1jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8wZDk1Y2EtYmFmNS00Njg5LTliNWIt NzQ3ZTc1ZTU1NDYxLzEvTlJLb3B0LVplTjV5SndBN0g5UHc0cm5sbk1jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8wZDk1Y2EtYmFmNS00Njg5LTliNWItNzQ3ZTc1ZTU1NDYx LzEvTlJLb3B0LVplTjV5SndBN0g5UHc0cm5sbk1jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY5PSv9cl i8Wjxk5OA5Vc+ZECgmX2z7esoBwYi6tPVh/lxN2boTBYedC4faCLgEE+nROLyPyF yc1v+xcHiwlxCNJOVaXmzxnQiQsTgA6LxhJyDm8S4Q+SVVgRhGaAxHcwO0QcYIAW FNN1tt3/ZKmVJYDF51LHN+87hpZzKLKWREJpjpdfMY7LalUYmmzUzRbYxwg4+B16 6muNJQidnHgoPQUKo/FOnKV75wuKcTHVkyrqEf0Xk3exAZW7bIpyw82P8hqHQaRy YnCBpeoIIBkE8wvcopXvV6fnox1LeB42lN6+ch3Da7FZmaFhTIedjLzKy4E/Yx2x 2Ffsj6ZNMM17RA== -----END CERTIFICATE-----Generated at Tue Dec 30 13:56:44 2025 by rpki-client