This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/nPYI_632AAge6SIpjksq6Wr_SOg.mft File: nPYI_632AAge6SIpjksq6Wr_SOg.mft (raw, json) Hash identifier: WATBQqbrOsaYBqmYckD/k4p9mR2NEjCDH6BHUHqkMOU= Subject key identifier: E3:CA:F1:0B:15:98:71:C8:75:46:30:BB:66:88:EE:FC:E5:B9:E8:39 Authority key identifier: 9C:F6:08:FF:AD:F6:00:08:1E:E9:22:29:8E:4B:2A:E9:6A:FF:48:E8 Certificate issuer: /CN=9cf608ffadf600081ee922298e4b2ae96aff48e8 Certificate serial: 019AFCFA5781CD571E0C446B519672AB9AF0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nPYI_632AAge6SIpjksq6Wr_SOg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/nPYI_632AAge6SIpjksq6Wr_SOg.mft Manifest number: 1769 Signing time: Mon 08 Dec 2025 08:00:56 +0000 Manifest this update: Mon 08 Dec 2025 08:00:56 +0000 Manifest next update: Tue 09 Dec 2025 08:00:56 +0000 Files and hashes: 1: RvXB7TupJSt9FEkzNNElWKNqWuk.roa (hash: yijhlw1vumObJvF+OXDbjNPPtftfHa2fND852vV46Co=) 2: nPYI_632AAge6SIpjksq6Wr_SOg.crl (hash: H/CPPNHMujQ2unVnIQFezNdpQnmfKG/QewqxeNAsjX0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/nPYI_632AAge6SIpjksq6Wr_SOg.crl rsync://rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/nPYI_632AAge6SIpjksq6Wr_SOg.mft rsync://rpki.ripe.net/repository/DEFAULT/nPYI_632AAge6SIpjksq6Wr_SOg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fc:fa:57:81:cd:57:1e:0c:44:6b:51:96:72:ab:9a:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cf608ffadf600081ee922298e4b2ae96aff48e8 Validity Not Before: Dec 8 08:00:56 2025 GMT Not After : Dec 9 08:00:56 2025 GMT Subject: CN=e3caf10b159871c8754630bb6688eefce5b9e839 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:4c:31:c4:a3:47:e9:1f:6e:50:cd:f0:02:9f: 2d:ac:cb:90:7b:86:39:48:71:d8:5c:14:19:f6:b5: d7:6f:8a:9a:be:aa:c8:58:83:1c:1b:1d:f9:f6:bb: 31:06:7a:39:2d:c0:fc:2a:89:b9:f4:e8:d0:49:6a: 6a:07:8f:c5:25:9f:22:50:48:8a:74:59:bf:be:b5: fe:80:46:0d:eb:38:0f:be:c7:18:38:91:97:26:ce: c1:20:a6:42:98:fc:a3:8a:8a:61:9f:f1:b1:1a:be: 91:19:5f:5b:06:33:c5:b9:ce:af:cf:19:cd:fd:4f: c6:47:d8:52:7e:4d:9f:d1:31:57:7f:08:cc:35:4e: c0:d1:16:72:10:d0:dc:e7:39:e8:18:82:58:35:0e: f4:1f:b7:10:1c:52:c2:e5:ff:53:4e:78:d5:b3:0e: 7e:f2:c0:49:70:f4:b7:45:04:8b:c4:ca:62:6f:d6: a5:e2:65:e1:db:ae:9c:63:18:21:49:70:5b:6a:40: 4c:34:95:8f:98:b5:1b:e6:7e:04:c4:c0:0b:80:5a: 3d:6e:5f:13:b9:3c:bd:ff:e1:7a:05:18:18:f1:02: 7e:c4:9a:29:44:a6:b9:85:cb:50:2e:ed:fa:e6:d6: 07:e8:a8:bb:d8:4b:38:80:5d:1f:68:29:af:69:ad: 36:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:CA:F1:0B:15:98:71:C8:75:46:30:BB:66:88:EE:FC:E5:B9:E8:39 X509v3 Authority Key Identifier: keyid:9C:F6:08:FF:AD:F6:00:08:1E:E9:22:29:8E:4B:2A:E9:6A:FF:48:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nPYI_632AAge6SIpjksq6Wr_SOg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/nPYI_632AAge6SIpjksq6Wr_SOg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/nPYI_632AAge6SIpjksq6Wr_SOg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:3e:3b:57:0a:21:09:d3:26:b5:e8:d5:83:1a:ba:b6:2b:63: 6e:e8:3b:95:77:ef:2f:21:b9:d5:60:e4:ed:89:99:83:9c:6c: c2:57:88:7f:4b:ee:33:b6:20:2e:57:ac:83:a9:0e:17:e0:e5: 7b:5c:59:23:f1:3f:5e:e9:ab:3d:e7:b5:85:56:be:71:29:13: 1d:ab:81:f4:e8:d6:98:82:43:2f:a6:47:bf:b9:bf:19:b7:f8: e9:fe:49:7d:50:84:6d:f0:1e:03:24:65:af:5d:b0:67:74:ba: 71:95:5d:f5:f6:bc:1b:78:0f:c6:5b:cf:d4:b5:f9:4b:67:0d: 56:aa:95:d5:96:6b:ca:f2:b4:af:ac:c1:7b:f5:ad:d9:13:2d: 79:7f:89:0b:99:d6:a3:d9:12:38:c7:3f:da:92:c8:39:be:3a: ea:42:15:9c:d7:0c:4e:2c:17:ad:ec:6a:29:7a:91:d7:fe:d6: ed:9c:95:44:1d:ff:2d:ec:e1:7c:6f:ca:a6:ca:e1:42:56:81: 6b:a0:9d:51:3b:c8:27:b2:5b:c8:8f:45:a6:fd:7b:2b:57:e6: 4f:15:5e:5b:e7:6c:0d:aa:72:93:b5:01:2f:07:a2:91:c0:95: 4a:20:45:32:4e:5e:4c:4a:6e:2e:69:67:bc:08:c2:bb:d9:e0: 37:d7:7c:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr8+leBzVceDERrUZZyq5rwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljZjYwOGZmYWRmNjAwMDgxZWU5MjIyOThlNGIyYWU5NmFm ZjQ4ZTgwHhcNMjUxMjA4MDgwMDU2WhcNMjUxMjA5MDgwMDU2WjAzMTEwLwYDVQQD EyhlM2NhZjEwYjE1OTg3MWM4NzU0NjMwYmI2Njg4ZWVmY2U1YjllODM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0wxxKNH6R9uUM3wAp8trMuQe4Y5 SHHYXBQZ9rXXb4qavqrIWIMcGx359rsxBno5LcD8Kom59OjQSWpqB4/FJZ8iUEiK dFm/vrX+gEYN6zgPvscYOJGXJs7BIKZCmPyjiophn/GxGr6RGV9bBjPFuc6vzxnN /U/GR9hSfk2f0TFXfwjMNU7A0RZyENDc5znoGIJYNQ70H7cQHFLC5f9TTnjVsw5+ 8sBJcPS3RQSLxMpib9al4mXh266cYxghSXBbakBMNJWPmLUb5n4ExMALgFo9bl8T uTy9/+F6BRgY8QJ+xJopRKa5hctQLu365tYH6Ki72Es4gF0faCmvaa02EwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOPK8QsVmHHIdUYwu2aI7vzlueg5MB8GA1UdIwQY MBaAFJz2CP+t9gAIHukiKY5LKulq/0joMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblBZSV82MzJBQWdlNlNJcGprc3E2V3JfU09nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9kNDVmMTEtNjdjMi00N2E1LTk5NmMt ODkxZWI1NDhiODkxLzEvblBZSV82MzJBQWdlNlNJcGprc3E2V3JfU09nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9kNDVmMTEtNjdjMi00N2E1LTk5NmMtODkxZWI1NDhiODkx LzEvblBZSV82MzJBQWdlNlNJcGprc3E2V3JfU09nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsj47Vwoh CdMmtejVgxq6titjbug7lXfvLyG51WDk7YmZg5xswleIf0vuM7YgLlesg6kOF+Dl e1xZI/E/XumrPee1hVa+cSkTHauB9OjWmIJDL6ZHv7m/Gbf46f5JfVCEbfAeAyRl r12wZ3S6cZVd9fa8G3gPxlvP1LX5S2cNVqqV1ZZryvK0r6zBe/Wt2RMteX+JC5nW o9kSOMc/2pLIOb466kIVnNcMTiwXrexqKXqR1/7W7ZyVRB3/LezhfG/KpsrhQlaB a6CdUTvIJ7JbyI9Fpv17K1fmTxVeW+dsDapyk7UBLweikcCVSiBFMk5eTEpuLmln vAjCu9ngN9d8Ew== -----END CERTIFICATE-----Generated at Mon Dec 8 09:36:06 2025 by rpki-client