This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/acbc65-811a-4209-b6b0-ae355b2ae6ef/1/NPT7fWqMuH3Z2gbXZqCDjPNWBAI.mft File: NPT7fWqMuH3Z2gbXZqCDjPNWBAI.mft (raw, json) Hash identifier: bm7frIliWpA0rocyGHy+ITCFCYB2nXkHjemuX2jMwBo= Subject key identifier: CB:96:35:CA:15:2E:C3:00:4B:8C:81:34:40:76:62:36:54:0F:26:0E Authority key identifier: 34:F4:FB:7D:6A:8C:B8:7D:D9:DA:06:D7:66:A0:83:8C:F3:56:04:02 Certificate issuer: /CN=34f4fb7d6a8cb87dd9da06d766a0838cf3560402 Certificate serial: 019B3C7EEDB5F8636219640F728C0A67EE34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPT7fWqMuH3Z2gbXZqCDjPNWBAI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/acbc65-811a-4209-b6b0-ae355b2ae6ef/1/NPT7fWqMuH3Z2gbXZqCDjPNWBAI.mft Manifest number: 02D4 Signing time: Sat 20 Dec 2025 16:01:49 +0000 Manifest this update: Sat 20 Dec 2025 16:01:49 +0000 Manifest next update: Sun 21 Dec 2025 16:01:49 +0000 Files and hashes: 1: BC_CdjOB6RULGEZF7J94_vrGJec.roa (hash: JFygJvgYc7Kvmd7DMd2rl7uXMvNHWTmTg/wiD9RDlO4=) 2: NPT7fWqMuH3Z2gbXZqCDjPNWBAI.crl (hash: 38uBdjdvvSokio+PSCmI0q5XpGrQdxJZfH0nH3uT+c0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/acbc65-811a-4209-b6b0-ae355b2ae6ef/1/NPT7fWqMuH3Z2gbXZqCDjPNWBAI.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/acbc65-811a-4209-b6b0-ae355b2ae6ef/1/NPT7fWqMuH3Z2gbXZqCDjPNWBAI.mft rsync://rpki.ripe.net/repository/DEFAULT/NPT7fWqMuH3Z2gbXZqCDjPNWBAI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:ed:b5:f8:63:62:19:64:0f:72:8c:0a:67:ee:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34f4fb7d6a8cb87dd9da06d766a0838cf3560402 Validity Not Before: Dec 20 16:01:49 2025 GMT Not After : Dec 21 16:01:49 2025 GMT Subject: CN=cb9635ca152ec3004b8c813440766236540f260e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:34:26:58:cd:0d:54:81:6c:c3:fb:54:c0:6f: 72:0d:3e:6b:f9:54:c4:c5:30:48:01:09:50:d7:e8: 72:14:aa:c3:04:66:a6:44:e3:77:63:89:01:25:4e: 6d:68:13:b4:9c:e3:b8:3b:b1:17:20:52:00:1d:51: 03:e3:60:e9:2b:1d:0e:2e:7f:82:55:8d:2d:28:6d: 04:b0:e2:ff:49:10:a0:fb:1f:1f:34:79:ac:76:5b: 72:9d:89:22:9e:87:79:46:ed:50:c7:8d:18:f9:63: c4:cb:9c:9a:05:56:63:58:d3:4f:c7:c2:9a:a5:6a: 6c:c4:79:44:3f:6f:88:80:7d:99:68:6b:8e:f0:fb: f8:62:f4:41:2c:91:2d:84:f6:6d:5d:d0:3e:ff:ce: 50:72:b2:be:c8:f9:c1:df:6b:ab:87:6d:11:62:be: 4c:f4:18:9a:93:2e:1f:1f:99:21:bf:b0:37:0c:74: 30:c4:43:25:69:0f:99:40:7d:9c:68:70:2b:a9:4a: 27:f6:98:58:0f:9f:67:73:32:94:54:9f:c1:44:ee: 00:ab:0b:6c:05:51:68:a3:6f:d9:00:31:27:eb:d9: ba:3d:89:1f:e6:4b:b7:9d:61:a2:32:d8:bd:a0:dd: 4b:40:d2:aa:cd:a8:8e:d3:d4:dc:1d:28:f4:be:23: b2:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:96:35:CA:15:2E:C3:00:4B:8C:81:34:40:76:62:36:54:0F:26:0E X509v3 Authority Key Identifier: keyid:34:F4:FB:7D:6A:8C:B8:7D:D9:DA:06:D7:66:A0:83:8C:F3:56:04:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPT7fWqMuH3Z2gbXZqCDjPNWBAI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/acbc65-811a-4209-b6b0-ae355b2ae6ef/1/NPT7fWqMuH3Z2gbXZqCDjPNWBAI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/acbc65-811a-4209-b6b0-ae355b2ae6ef/1/NPT7fWqMuH3Z2gbXZqCDjPNWBAI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:dd:12:dc:90:a6:db:4e:7f:8b:6b:e0:80:32:dc:99:64:55: 3d:f6:7f:cb:ac:e9:cd:3e:ad:f1:a6:94:8a:d9:e4:f3:a2:96: d2:df:b7:cc:81:50:9b:8f:b0:0e:12:bd:9d:46:a7:a2:1a:70: 28:38:eb:58:a0:df:eb:34:02:9e:ef:cf:66:7f:fc:8a:46:dd: bd:3d:1c:f6:be:2f:47:3a:a2:0d:ac:25:be:a1:17:7d:50:32: 07:33:8b:46:48:d4:1c:e6:09:a8:a5:5e:8a:df:76:91:c0:4d: a8:78:ed:98:1a:9b:9b:51:4a:f0:88:a4:c1:3a:18:0d:1b:2a: 8e:6b:e0:37:74:ef:13:1c:36:bc:39:e4:e2:16:c7:39:82:bc: 97:2e:45:28:ab:d9:bb:68:c9:96:b9:96:73:f2:a4:48:8f:b0: 4f:f8:ad:4d:c7:a8:57:0f:b7:4d:54:66:7a:a9:9a:9a:11:12: 29:1f:fb:fe:86:ce:72:8b:93:53:b7:bc:4d:a8:e6:e7:e3:d1: 3d:f4:11:31:f1:3e:02:6e:9f:f4:20:13:49:9c:d1:2c:79:57: 01:d8:48:dc:88:1c:55:84:74:ae:3f:fb:b8:77:40:55:fa:6f: 38:86:62:1d:1e:00:29:5e:8c:6c:63:ba:d5:2e:03:c4:1f:03: 6a:1e:d0:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fu21+GNiGWQPcowKZ+40MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0ZjRmYjdkNmE4Y2I4N2RkOWRhMDZkNzY2YTA4MzhjZjM1 NjA0MDIwHhcNMjUxMjIwMTYwMTQ5WhcNMjUxMjIxMTYwMTQ5WjAzMTEwLwYDVQQD EyhjYjk2MzVjYTE1MmVjMzAwNGI4YzgxMzQ0MDc2NjIzNjU0MGYyNjBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDQmWM0NVIFsw/tUwG9yDT5r+VTE xTBIAQlQ1+hyFKrDBGamRON3Y4kBJU5taBO0nOO4O7EXIFIAHVED42DpKx0OLn+C VY0tKG0EsOL/SRCg+x8fNHmsdltynYkinod5Ru1Qx40Y+WPEy5yaBVZjWNNPx8Ka pWpsxHlEP2+IgH2ZaGuO8Pv4YvRBLJEthPZtXdA+/85QcrK+yPnB32urh20RYr5M 9Biaky4fH5khv7A3DHQwxEMlaQ+ZQH2caHArqUon9phYD59nczKUVJ/BRO4Aqwts BVFoo2/ZADEn69m6PYkf5ku3nWGiMti9oN1LQNKqzaiO09TcHSj0viOy2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMuWNcoVLsMAS4yBNEB2YjZUDyYOMB8GA1UdIwQY MBaAFDT0+31qjLh92doG12agg4zzVgQCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlBUN2ZXcU11SDNaMmdiWFpxQ0RqUE5XQkFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9hY2JjNjUtODExYS00MjA5LWI2YjAt YWUzNTViMmFlNmVmLzEvTlBUN2ZXcU11SDNaMmdiWFpxQ0RqUE5XQkFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS9hY2JjNjUtODExYS00MjA5LWI2YjAtYWUzNTViMmFlNmVm LzEvTlBUN2ZXcU11SDNaMmdiWFpxQ0RqUE5XQkFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL90S3JCm 205/i2vggDLcmWRVPfZ/y6zpzT6t8aaUitnk86KW0t+3zIFQm4+wDhK9nUanohpw KDjrWKDf6zQCnu/PZn/8ikbdvT0c9r4vRzqiDawlvqEXfVAyBzOLRkjUHOYJqKVe it92kcBNqHjtmBqbm1FK8IikwToYDRsqjmvgN3TvExw2vDnk4hbHOYK8ly5FKKvZ u2jJlrmWc/KkSI+wT/itTceoVw+3TVRmeqmamhESKR/7/obOcouTU7e8Tajm5+PR PfQRMfE+Am6f9CATSZzRLHlXAdhI3IgcVYR0rj/7uHdAVfpvOIZiHR4AKV6MbGO6 1S4DxB8Dah7QTw== -----END CERTIFICATE-----Generated at Sat Dec 20 23:04:34 2025 by rpki-client