This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/5f2e48-feba-4273-8e49-8259805c644c/1/npM_LOV8dMv5_6UJaF1qy9jFOZg.mft File: npM_LOV8dMv5_6UJaF1qy9jFOZg.mft (raw, json) Hash identifier: gmFO45JdI7YOFB96Vmy9EnI47u4zcB1bUw6wQt3KR+M= Subject key identifier: 52:4C:A8:01:3F:62:67:D7:97:4F:49:3C:C6:9C:55:B1:27:89:EB:BB Authority key identifier: 9E:93:3F:2C:E5:7C:74:CB:F9:FF:A5:09:68:5D:6A:CB:D8:C5:39:98 Certificate issuer: /CN=9e933f2ce57c74cbf9ffa509685d6acbd8c53998 Certificate serial: 019B3D59E4CF820A0D0B40203FB8EA124363 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npM_LOV8dMv5_6UJaF1qy9jFOZg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/5f2e48-feba-4273-8e49-8259805c644c/1/npM_LOV8dMv5_6UJaF1qy9jFOZg.mft Manifest number: 095E Signing time: Sat 20 Dec 2025 20:01:00 +0000 Manifest this update: Sat 20 Dec 2025 20:01:00 +0000 Manifest next update: Sun 21 Dec 2025 20:01:00 +0000 Files and hashes: 1: npM_LOV8dMv5_6UJaF1qy9jFOZg.crl (hash: L6HekOdv3tEEwTW2FPShuMreNCDbpvUwhTNM6jR05yU=) 2: yRFwTpF8uIi1_BjVUC-RFgZjVto.roa (hash: mNA1Sl4UbZtF2SriucljnpKsQkjCoecRg9zlE7G/VLE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/5f2e48-feba-4273-8e49-8259805c644c/1/npM_LOV8dMv5_6UJaF1qy9jFOZg.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/5f2e48-feba-4273-8e49-8259805c644c/1/npM_LOV8dMv5_6UJaF1qy9jFOZg.mft rsync://rpki.ripe.net/repository/DEFAULT/npM_LOV8dMv5_6UJaF1qy9jFOZg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:e4:cf:82:0a:0d:0b:40:20:3f:b8:ea:12:43:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e933f2ce57c74cbf9ffa509685d6acbd8c53998 Validity Not Before: Dec 20 20:01:00 2025 GMT Not After : Dec 21 20:01:00 2025 GMT Subject: CN=524ca8013f6267d7974f493cc69c55b12789ebbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:6e:7a:38:05:ee:9e:7f:e2:0c:16:4d:1d:14: 54:93:86:e7:01:e1:9c:e3:b5:d1:d4:8a:70:62:64: f8:f5:f2:4d:0d:f5:a2:90:c3:05:51:ae:d1:de:15: 91:e3:47:26:71:43:2e:92:ac:fc:bb:39:20:0c:ad: 3f:88:24:91:13:c1:1d:fa:a1:1f:87:e2:f9:1b:5f: 85:68:84:3d:b0:73:b5:2a:e3:7a:cf:61:a8:82:a5: 3f:52:47:c0:96:93:3c:df:ef:9f:14:b4:68:59:74: 45:b9:4a:6d:4c:8d:6e:5a:54:6d:85:f6:5a:4a:37: 05:e7:a3:9d:db:08:cc:5f:b2:7b:22:04:be:19:17: 95:8f:64:53:e0:ea:e9:54:68:f9:2d:7e:16:b5:95: 3a:8f:85:9d:9d:1f:94:e6:68:f5:c6:ff:31:a8:ba: 0e:e9:31:04:40:9c:ab:31:59:2c:9b:89:9f:d2:92: 82:d5:01:15:47:e5:04:4c:57:68:46:b2:be:9d:fc: a6:60:86:5a:61:60:82:7f:17:b8:c3:55:11:85:5a: e2:da:8c:29:3d:d4:a8:6d:d9:a8:23:df:04:f3:d1: c4:8a:3e:8c:7d:bf:30:86:48:40:8e:0f:c5:b2:3e: 8b:0d:08:c9:69:64:54:52:b6:fd:51:c6:9c:15:c8: 7d:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:4C:A8:01:3F:62:67:D7:97:4F:49:3C:C6:9C:55:B1:27:89:EB:BB X509v3 Authority Key Identifier: keyid:9E:93:3F:2C:E5:7C:74:CB:F9:FF:A5:09:68:5D:6A:CB:D8:C5:39:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npM_LOV8dMv5_6UJaF1qy9jFOZg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5f2e48-feba-4273-8e49-8259805c644c/1/npM_LOV8dMv5_6UJaF1qy9jFOZg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5f2e48-feba-4273-8e49-8259805c644c/1/npM_LOV8dMv5_6UJaF1qy9jFOZg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:c8:df:d4:00:ee:f5:c2:f5:8b:cc:9b:2c:e5:ac:fd:58:00: 01:91:c4:49:24:7b:39:14:cd:26:77:ed:10:41:09:d0:55:17: 09:47:f5:e7:7d:9c:71:18:74:a2:a2:a1:35:33:4e:35:d6:7e: df:8d:1d:0e:f8:99:dd:86:01:35:da:f3:b9:ac:d0:9e:e0:b8: 66:ef:57:c4:d5:81:d0:02:94:79:cf:3a:5a:4a:a1:78:7d:d8: df:0b:43:e9:5c:6b:35:b5:80:92:99:33:cb:de:48:c5:35:bf: f9:0d:94:39:e3:18:60:fe:fa:58:14:cf:c2:1a:4c:45:c9:c5: 75:7f:0e:66:d3:4d:51:b3:10:9d:f3:d8:b9:6c:05:80:d6:99: 64:c8:3d:c1:e3:42:a5:4a:04:06:47:e3:cd:8b:e7:16:77:71: 5a:62:70:6b:58:0e:17:a1:20:69:a3:d6:8f:74:c6:82:25:37: d1:d3:ce:a1:91:0e:da:b9:aa:1f:26:bc:80:b0:8b:d4:0e:ef: c7:b8:05:fd:25:9e:95:a8:1d:85:c7:c2:45:89:40:22:fb:d0: b8:db:0b:4a:b0:25:81:05:e8:4e:6f:54:1a:14:dc:ed:f6:10: 7b:3a:cf:6d:9e:cd:49:69:c6:8a:21:52:06:00:9a:a3:63:34: 58:ef:17:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WeTPggoNC0AgP7jqEkNjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTMzZjJjZTU3Yzc0Y2JmOWZmYTUwOTY4NWQ2YWNiZDhj NTM5OTgwHhcNMjUxMjIwMjAwMTAwWhcNMjUxMjIxMjAwMTAwWjAzMTEwLwYDVQQD Eyg1MjRjYTgwMTNmNjI2N2Q3OTc0ZjQ5M2NjNjljNTViMTI3ODllYmJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtm56OAXunn/iDBZNHRRUk4bnAeGc 47XR1IpwYmT49fJNDfWikMMFUa7R3hWR40cmcUMukqz8uzkgDK0/iCSRE8Ed+qEf h+L5G1+FaIQ9sHO1KuN6z2GogqU/UkfAlpM83++fFLRoWXRFuUptTI1uWlRthfZa SjcF56Od2wjMX7J7IgS+GReVj2RT4OrpVGj5LX4WtZU6j4WdnR+U5mj1xv8xqLoO 6TEEQJyrMVksm4mf0pKC1QEVR+UETFdoRrK+nfymYIZaYWCCfxe4w1URhVri2owp PdSobdmoI98E89HEij6Mfb8whkhAjg/Fsj6LDQjJaWRUUrb9UcacFch9wQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFJMqAE/YmfXl09JPMacVbEnieu7MB8GA1UdIwQY MBaAFJ6TPyzlfHTL+f+lCWhdasvYxTmYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBNX0xPVjhkTXY1XzZVSmFGMXF5OWpGT1pnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC81ZjJlNDgtZmViYS00MjczLThlNDkt ODI1OTgwNWM2NDRjLzEvbnBNX0xPVjhkTXY1XzZVSmFGMXF5OWpGT1pnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC81ZjJlNDgtZmViYS00MjczLThlNDktODI1OTgwNWM2NDRj LzEvbnBNX0xPVjhkTXY1XzZVSmFGMXF5OWpGT1pnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEsjf1ADu 9cL1i8ybLOWs/VgAAZHESSR7ORTNJnftEEEJ0FUXCUf1532ccRh0oqKhNTNONdZ+ 340dDviZ3YYBNdrzuazQnuC4Zu9XxNWB0AKUec86WkqheH3Y3wtD6VxrNbWAkpkz y95IxTW/+Q2UOeMYYP76WBTPwhpMRcnFdX8OZtNNUbMQnfPYuWwFgNaZZMg9weNC pUoEBkfjzYvnFndxWmJwa1gOF6EgaaPWj3TGgiU30dPOoZEO2rmqHya8gLCL1A7v x7gF/SWelagdhcfCRYlAIvvQuNsLSrAlgQXoTm9UGhTc7fYQezrPbZ7NSWnGiiFS BgCao2M0WO8XTA== -----END CERTIFICATE-----Generated at Sat Dec 20 23:07:57 2025 by rpki-client