This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/NPeDYaB3sNeJE1zNaLEmHbE4-VA.mft File: NPeDYaB3sNeJE1zNaLEmHbE4-VA.mft (raw, json) Hash identifier: XEuC0XoWABI2dsWrGvHFGCWXHvSSgP08cRXP222oY8A= Subject key identifier: F4:D1:E6:CD:E9:AA:5B:3F:7C:5C:43:48:DF:56:DD:59:2E:8A:92:F0 Authority key identifier: 34:F7:83:61:A0:77:B0:D7:89:13:5C:CD:68:B1:26:1D:B1:38:F9:50 Certificate issuer: /CN=34f78361a077b0d789135ccd68b1261db138f950 Certificate serial: 019B4DDFD60D3297BE92FBC43BB47425B0B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPeDYaB3sNeJE1zNaLEmHbE4-VA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/NPeDYaB3sNeJE1zNaLEmHbE4-VA.mft Manifest number: 118C Signing time: Wed 24 Dec 2025 01:01:13 +0000 Manifest this update: Wed 24 Dec 2025 01:01:13 +0000 Manifest next update: Thu 25 Dec 2025 01:01:13 +0000 Files and hashes: 1: BT-QKLCE4MZ0YtWA2nAk6qpxv6g.roa (hash: t+OljMW5uOHxrHIlucZj5mZPbb09wnIuaUx+FWzOywc=) 2: NPeDYaB3sNeJE1zNaLEmHbE4-VA.crl (hash: hUxxf8Xc2y4+kKImLBWllT3QF+0kuopPaiUAqPGoZXw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/NPeDYaB3sNeJE1zNaLEmHbE4-VA.crl rsync://rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/NPeDYaB3sNeJE1zNaLEmHbE4-VA.mft rsync://rpki.ripe.net/repository/DEFAULT/NPeDYaB3sNeJE1zNaLEmHbE4-VA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 01:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:df:d6:0d:32:97:be:92:fb:c4:3b:b4:74:25:b0:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34f78361a077b0d789135ccd68b1261db138f950 Validity Not Before: Dec 24 01:01:13 2025 GMT Not After : Dec 25 01:01:13 2025 GMT Subject: CN=f4d1e6cde9aa5b3f7c5c4348df56dd592e8a92f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f5:32:10:b7:c9:9d:19:bd:f9:2f:88:a1:d9: ba:32:12:a2:81:19:b7:2c:dc:75:5f:21:68:37:1c: 29:8f:72:37:c7:96:40:af:62:33:a2:32:17:cb:ae: c1:cd:62:90:58:b8:44:3b:90:0c:89:00:bf:e7:0f: 5d:61:b8:9b:36:09:3b:da:f0:f8:a4:9e:7c:35:39: dc:05:34:1c:fe:29:58:c5:6f:df:93:4d:be:d5:03: 12:46:d4:85:14:ea:19:62:65:84:b6:06:0c:8e:73: 49:6b:2e:ce:88:62:49:12:18:06:3c:b0:34:98:b5: 49:9e:f1:3e:47:b2:31:fc:ed:2b:b5:95:36:4d:db: 9a:6d:b0:31:6b:fa:83:56:ac:c3:48:99:aa:8e:46: 6f:0c:ac:ab:08:63:c9:e4:23:29:d2:64:9c:e4:09: 52:97:38:df:ac:28:a8:91:53:cf:66:c8:02:cf:e5: 3e:ec:5b:e0:26:68:e6:da:3d:c5:46:da:2d:0d:b3: 7b:db:48:91:b2:79:7e:87:34:c8:71:e3:7e:ee:7d: 49:29:b2:c5:de:c8:53:9f:15:77:9a:ae:76:e6:22: 59:72:37:a6:66:0e:0d:42:6a:00:37:bf:72:f7:0d: 41:85:d0:79:21:4e:d6:4a:2b:2c:d6:85:77:b0:80: c5:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:D1:E6:CD:E9:AA:5B:3F:7C:5C:43:48:DF:56:DD:59:2E:8A:92:F0 X509v3 Authority Key Identifier: keyid:34:F7:83:61:A0:77:B0:D7:89:13:5C:CD:68:B1:26:1D:B1:38:F9:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPeDYaB3sNeJE1zNaLEmHbE4-VA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/NPeDYaB3sNeJE1zNaLEmHbE4-VA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/NPeDYaB3sNeJE1zNaLEmHbE4-VA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:ce:07:05:8c:60:42:68:ad:b7:97:9d:1b:58:9d:17:da:5f: 00:97:cc:4a:cd:52:e5:0a:d1:98:56:03:64:5d:67:23:2d:ee: a1:ad:46:ef:dd:6e:15:72:1b:4d:42:f7:95:a9:e4:b9:a2:d5: 52:fb:4c:a0:3b:7a:70:46:27:5b:58:15:ce:41:de:31:e0:c3: f2:93:08:a3:f9:e8:6e:c6:c9:c7:6b:93:33:89:89:cf:f2:84: cf:e1:84:ee:46:52:4d:de:ff:16:11:aa:7b:cb:33:75:13:b6: 8a:e7:63:bb:68:95:ee:75:23:2d:db:ca:d3:a9:05:b3:fe:9f: cf:c1:9a:5f:c3:d2:b4:72:24:05:e8:68:5b:89:01:a6:03:82: a3:78:ab:4c:2b:3e:2e:1b:78:ae:72:0e:ec:3e:b7:82:d4:65: 54:4b:65:00:03:09:fb:2a:a2:45:7d:05:f2:85:8a:bd:68:33: 4a:a3:a0:3a:c7:8e:25:62:b3:60:55:f1:bb:82:cc:c8:51:32: cc:14:f9:53:08:08:86:2a:d7:12:ed:c2:27:7e:a8:44:56:04: 96:a0:6d:67:dc:1a:a1:f3:19:3e:99:f6:39:c4:2a:3d:f5:bf: 01:c7:bb:33:46:61:36:31:24:41:bd:8e:64:28:11:8f:d5:6b: 5b:0e:02:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtN39YNMpe+kvvEO7R0JbC3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0Zjc4MzYxYTA3N2IwZDc4OTEzNWNjZDY4YjEyNjFkYjEz OGY5NTAwHhcNMjUxMjI0MDEwMTEzWhcNMjUxMjI1MDEwMTEzWjAzMTEwLwYDVQQD EyhmNGQxZTZjZGU5YWE1YjNmN2M1YzQzNDhkZjU2ZGQ1OTJlOGE5MmYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfUyELfJnRm9+S+Iodm6MhKigRm3 LNx1XyFoNxwpj3I3x5ZAr2IzojIXy67BzWKQWLhEO5AMiQC/5w9dYbibNgk72vD4 pJ58NTncBTQc/ilYxW/fk02+1QMSRtSFFOoZYmWEtgYMjnNJay7OiGJJEhgGPLA0 mLVJnvE+R7Ix/O0rtZU2TduabbAxa/qDVqzDSJmqjkZvDKyrCGPJ5CMp0mSc5AlS lzjfrCiokVPPZsgCz+U+7FvgJmjm2j3FRtotDbN720iRsnl+hzTIceN+7n1JKbLF 3shTnxV3mq525iJZcjemZg4NQmoAN79y9w1BhdB5IU7WSiss1oV3sIDFyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPTR5s3pqls/fFxDSN9W3VkuipLwMB8GA1UdIwQY MBaAFDT3g2Ggd7DXiRNczWixJh2xOPlQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlBlRFlhQjNzTmVKRTF6TmFMRW1IYkU0LVZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi85ZGY5ZjItYTIwYS00MjljLTgyZTgt YTU3MTY4NjVmZDM1LzEvTlBlRFlhQjNzTmVKRTF6TmFMRW1IYkU0LVZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi85ZGY5ZjItYTIwYS00MjljLTgyZTgtYTU3MTY4NjVmZDM1 LzEvTlBlRFlhQjNzTmVKRTF6TmFMRW1IYkU0LVZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAs4HBYxg Qmitt5edG1idF9pfAJfMSs1S5QrRmFYDZF1nIy3uoa1G791uFXIbTUL3lankuaLV UvtMoDt6cEYnW1gVzkHeMeDD8pMIo/nobsbJx2uTM4mJz/KEz+GE7kZSTd7/FhGq e8szdRO2iudju2iV7nUjLdvK06kFs/6fz8GaX8PStHIkBehoW4kBpgOCo3irTCs+ Lht4rnIO7D63gtRlVEtlAAMJ+yqiRX0F8oWKvWgzSqOgOseOJWKzYFXxu4LMyFEy zBT5UwgIhirXEu3CJ36oRFYElqBtZ9waofMZPpn2OcQqPfW/Ace7M0ZhNjEkQb2O ZCgRj9VrWw4CKA== -----END CERTIFICATE-----Generated at Wed Dec 24 10:52:30 2025 by rpki-client