This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft File: NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft (raw, json) Hash identifier: 6RVJPfrYIyaKaQqQIMuotXl7xRUbupU4PvVytbhqC9o= Subject key identifier: 5A:74:E6:92:97:F9:30:CF:1A:27:01:B5:D6:7D:D2:6A:FD:56:E7:E3 Authority key identifier: 34:F4:81:A9:DD:CF:B4:85:91:F7:89:38:C4:FC:C7:B8:B6:7C:63:02 Certificate issuer: /CN=34f481a9ddcfb48591f78938c4fcc7b8b67c6302 Certificate serial: 019AF49C325154099A47FAF08A155933848F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPSBqd3PtIWR94k4xPzHuLZ8YwI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 17:01:08 +0000 Manifest this update: Sat 06 Dec 2025 17:01:08 +0000 Manifest next update: Sun 07 Dec 2025 17:01:08 +0000 Files and hashes: 1: NPSBqd3PtIWR94k4xPzHuLZ8YwI.crl (hash: Y9YZ7tsIPoG1JFNiMsWqcBAhQSVLaf3vTD1nJBDf59k=) 2: n9slDOW816oCeV0oI8sGph9zEHY.roa (hash: qD/TRD91aBYWewYzdvChC8Edlu2GICT4uFezEduAc7k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.crl rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft rsync://rpki.ripe.net/repository/DEFAULT/NPSBqd3PtIWR94k4xPzHuLZ8YwI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:32:51:54:09:9a:47:fa:f0:8a:15:59:33:84:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34f481a9ddcfb48591f78938c4fcc7b8b67c6302 Validity Not Before: Dec 6 17:01:08 2025 GMT Not After : Dec 7 17:01:08 2025 GMT Subject: CN=5a74e69297f930cf1a2701b5d67dd26afd56e7e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:65:26:d6:02:11:c3:02:5b:d4:74:2c:0d:74: 97:cc:08:37:95:17:55:0c:23:0d:1f:6b:8d:dc:ca: 41:f0:dd:ec:60:0b:29:54:df:dd:a8:aa:73:a0:25: 3f:fa:a7:b8:92:91:98:f4:89:98:51:9b:e3:1d:f1: b1:83:78:bc:dc:23:d1:d3:0a:2c:4b:e1:70:f8:01: 7f:60:ae:49:a5:b8:04:c3:d8:ab:e3:d4:2c:9f:11: be:62:30:57:53:65:51:7d:4f:40:5a:17:60:ab:d6: da:67:6b:91:c7:97:38:3f:b6:a7:36:74:b3:3d:d3: 86:51:c3:bc:c9:bf:18:37:36:00:54:f7:7e:36:fb: 9c:32:13:d2:b8:86:ad:31:f4:ba:48:63:3a:bd:2f: d9:11:9f:c6:ec:bb:2b:cc:91:4c:96:9e:83:1c:cf: 00:27:5a:d8:43:46:6e:49:06:71:a1:eb:9e:2e:ea: 0e:72:98:70:18:5a:02:3a:35:03:0a:10:9a:21:70: 39:e2:9b:32:7e:b1:e9:0a:6d:42:1b:90:d1:90:61: 9b:67:72:48:89:e5:c4:20:80:09:04:5b:2f:99:67: 54:f9:61:03:94:dd:9e:d9:78:11:a1:1b:1c:00:19: a1:59:6a:e3:5d:7d:bf:9f:52:77:4b:48:93:4d:8a: ff:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:74:E6:92:97:F9:30:CF:1A:27:01:B5:D6:7D:D2:6A:FD:56:E7:E3 X509v3 Authority Key Identifier: keyid:34:F4:81:A9:DD:CF:B4:85:91:F7:89:38:C4:FC:C7:B8:B6:7C:63:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPSBqd3PtIWR94k4xPzHuLZ8YwI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:24:0a:c3:41:6d:bd:2e:45:4f:21:dc:3b:ad:bc:27:0a:03: 35:42:86:ad:11:5c:d2:be:dc:3c:35:4f:8f:0a:82:03:30:91: 34:82:3c:d3:a6:9f:72:ba:7f:e1:ae:65:0a:d0:20:4a:b1:7e: 3b:9c:7c:9f:47:aa:e9:76:cf:72:6e:0b:3f:4f:4a:05:55:3f: 9d:78:23:af:02:a0:85:c4:57:91:a5:b7:2a:f5:89:c2:48:c6: 68:25:80:3b:29:a2:01:c3:f7:9f:11:55:84:9e:43:88:6e:4a: 35:9a:47:d3:89:f1:f7:32:e9:b7:d6:9c:69:0e:66:8e:4a:ac: 84:26:2e:82:78:9a:51:3b:44:36:ba:55:a4:df:8c:2b:3d:30: a8:a2:fc:c4:cd:9e:e7:c2:bd:4d:bf:71:a4:43:3e:23:55:80: 57:53:d4:d4:8c:de:75:41:bb:b3:c1:83:90:fa:6b:af:1b:cb: 08:9c:0d:07:cd:f9:27:33:af:45:f7:39:4a:c8:9b:cd:97:1f: fe:c8:ea:ec:5a:15:c1:9e:49:56:92:5d:dd:63:74:26:1e:2c: 0b:fa:11:aa:81:44:43:2d:3e:c7:a1:97:10:6f:65:78:1e:b1: 74:b8:dd:d6:01:17:07:a6:e2:17:e1:37:a2:14:e9:83:5e:a8: 1f:34:ea:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nDJRVAmaR/rwihVZM4SPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0ZjQ4MWE5ZGRjZmI0ODU5MWY3ODkzOGM0ZmNjN2I4YjY3 YzYzMDIwHhcNMjUxMjA2MTcwMTA4WhcNMjUxMjA3MTcwMTA4WjAzMTEwLwYDVQQD Eyg1YTc0ZTY5Mjk3ZjkzMGNmMWEyNzAxYjVkNjdkZDI2YWZkNTZlN2UzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWUm1gIRwwJb1HQsDXSXzAg3lRdV DCMNH2uN3MpB8N3sYAspVN/dqKpzoCU/+qe4kpGY9ImYUZvjHfGxg3i83CPR0wos S+Fw+AF/YK5JpbgEw9ir49QsnxG+YjBXU2VRfU9AWhdgq9baZ2uRx5c4P7anNnSz PdOGUcO8yb8YNzYAVPd+NvucMhPSuIatMfS6SGM6vS/ZEZ/G7LsrzJFMlp6DHM8A J1rYQ0ZuSQZxoeueLuoOcphwGFoCOjUDChCaIXA54psyfrHpCm1CG5DRkGGbZ3JI ieXEIIAJBFsvmWdU+WEDlN2e2XgRoRscABmhWWrjXX2/n1J3S0iTTYr/awIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFp05pKX+TDPGicBtdZ90mr9VufjMB8GA1UdIwQY MBaAFDT0gandz7SFkfeJOMT8x7i2fGMCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlBTQnFkM1B0SVdSOTRrNHhQekh1TFo4WXdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8zYWQ5YzEtM2UwOS00MWFjLWFjY2Et ZDExMzM5ZmU3ZGYwLzEvTlBTQnFkM1B0SVdSOTRrNHhQekh1TFo4WXdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC8zYWQ5YzEtM2UwOS00MWFjLWFjY2EtZDExMzM5ZmU3ZGYw LzEvTlBTQnFkM1B0SVdSOTRrNHhQekh1TFo4WXdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeCQKw0Ft vS5FTyHcO628JwoDNUKGrRFc0r7cPDVPjwqCAzCRNII806afcrp/4a5lCtAgSrF+ O5x8n0eq6XbPcm4LP09KBVU/nXgjrwKghcRXkaW3KvWJwkjGaCWAOymiAcP3nxFV hJ5DiG5KNZpH04nx9zLpt9acaQ5mjkqshCYugniaUTtENrpVpN+MKz0wqKL8xM2e 58K9Tb9xpEM+I1WAV1PU1IzedUG7s8GDkPprrxvLCJwNB835JzOvRfc5SsibzZcf /sjq7FoVwZ5JVpJd3WN0Jh4sC/oRqoFEQy0+x6GXEG9leB6xdLjd1gEXB6biF+E3 ohTpg16oHzTq3g== -----END CERTIFICATE-----Generated at Sat Dec 6 23:31:23 2025 by rpki-client