This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.mft File: NP5rnQzB5_bhaypGtCyl4BxwA0Y.mft (raw, json) Hash identifier: HXBkYoQhc74b3nH4Op2AU9QYcAeBo9sREt3DcJdgwKA= Subject key identifier: 18:E1:E5:99:A5:02:86:15:29:DA:14:31:6C:64:67:8F:4E:12:27:1B Authority key identifier: 34:FE:6B:9D:0C:C1:E7:F6:E1:6B:2A:46:B4:2C:A5:E0:1C:70:03:46 Certificate issuer: /CN=34fe6b9d0cc1e7f6e16b2a46b42ca5e01c700346 Certificate serial: 019AF389BB687F60A53FF7D49F2243283716 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NP5rnQzB5_bhaypGtCyl4BxwA0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.mft Manifest number: 14CC Signing time: Sat 06 Dec 2025 12:01:20 +0000 Manifest this update: Sat 06 Dec 2025 12:01:20 +0000 Manifest next update: Sun 07 Dec 2025 12:01:20 +0000 Files and hashes: 1: HXMlv9NxuKboyUtKNMBCZQbSjW0.roa (hash: mL85Iwg8ADnZv62S9C7eQgo7c8UTYuO4j6CsY6zppGQ=) 2: NP5rnQzB5_bhaypGtCyl4BxwA0Y.crl (hash: reeJauNpycaUDsJcBDa+YitDjaQ9Qlc7LgJZ7pQunlg=) 3: eJTJ2xXloI9cYA2PdEb7QzgzZMI.roa (hash: pJvyPt1aoxPTKu/5G35raZf6vtLPUO+Laz/ssfLJWrA=) 4: nyGwWtmUUenCuiNvi2rme3JvAnM.roa (hash: mv2iRNCUpphbjEmFj2ZluXSrRNCmkDp7k1nJS6ve48g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/NP5rnQzB5_bhaypGtCyl4BxwA0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:bb:68:7f:60:a5:3f:f7:d4:9f:22:43:28:37:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34fe6b9d0cc1e7f6e16b2a46b42ca5e01c700346 Validity Not Before: Dec 6 12:01:20 2025 GMT Not After : Dec 7 12:01:20 2025 GMT Subject: CN=18e1e599a502861529da14316c64678f4e12271b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:89:1a:90:04:16:33:e5:83:27:85:df:8c:ff: f4:44:b0:0d:58:38:b4:a0:88:bd:cb:05:86:85:8f: 7d:27:05:cd:f4:2a:0d:a9:52:11:2c:03:0e:0d:27: 8a:17:7a:ad:97:92:53:70:9f:e5:5a:0d:b9:d2:b4: 17:ed:23:90:74:99:bd:9e:b6:4d:39:7a:5a:85:c3: 76:77:ec:8d:be:9f:0a:0c:46:c4:67:d5:39:f9:86: ea:d9:40:c6:a9:ca:b1:26:f6:7c:66:9c:3d:8c:ef: 60:4f:d4:3b:13:ea:53:f5:3b:a8:51:d3:57:33:4e: 3c:b8:22:23:d7:78:cb:83:41:88:22:ef:6b:d8:1c: af:1a:42:f0:45:e2:a5:3f:de:c0:84:3d:65:26:d0: d3:68:46:85:00:4e:7d:87:50:c4:b4:4b:2b:e0:b3: b0:09:0a:09:dd:f6:73:43:ad:77:3c:ce:31:03:2e: c1:9b:e3:df:27:fe:13:51:f3:ed:91:99:02:c5:d5: 8a:67:8d:e1:eb:49:30:85:f8:27:9e:43:1b:d6:b9: f7:71:8c:7b:5d:9b:54:0b:73:83:47:bc:fb:6a:cc: ee:b6:7f:0b:56:c4:ea:4f:bf:96:f3:30:7b:dc:8e: fe:ec:09:26:86:e3:7a:24:ad:78:e8:f0:9c:f4:04: 2d:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:E1:E5:99:A5:02:86:15:29:DA:14:31:6C:64:67:8F:4E:12:27:1B X509v3 Authority Key Identifier: keyid:34:FE:6B:9D:0C:C1:E7:F6:E1:6B:2A:46:B4:2C:A5:E0:1C:70:03:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NP5rnQzB5_bhaypGtCyl4BxwA0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:44:2b:c2:00:41:6c:07:eb:40:2d:76:2f:fc:0f:51:5e:f9: 8f:2f:a1:c7:98:4f:7c:64:84:62:00:60:8e:dc:6e:f8:4d:bb: 33:ce:0b:d8:84:6d:9d:43:33:c1:c2:7f:d5:c4:ae:74:fa:10: a5:c7:8c:1a:d7:72:bc:c7:f7:18:0f:9c:e6:fc:9b:16:53:d9: a6:bd:7a:60:f2:36:40:2c:e0:03:ae:88:8e:ed:10:09:d7:4a: 13:91:98:c9:9f:3c:10:da:4d:a3:5f:56:b8:e1:42:e9:01:cb: d0:b5:97:7c:e5:7a:a1:9d:3c:93:59:43:dc:cf:8b:c0:6d:27: 1c:b0:6b:6b:88:3d:e6:03:e4:31:fe:25:4f:69:b1:64:c3:d3: c5:c1:46:d7:0d:9c:a5:df:f8:ba:b5:36:ce:bc:83:a7:c3:41: da:5f:d3:48:30:5a:7b:f0:46:53:3f:ab:9b:f4:8a:5a:72:5f: d4:40:e3:01:b1:58:1f:4b:23:c7:32:94:86:01:de:70:a5:44: d8:51:ff:ec:b7:ec:0a:63:a9:51:2b:41:66:56:f2:4b:d7:0c: ad:b4:0d:ff:e8:bf:ec:e5:c9:fe:8b:cc:ba:9e:c2:6e:3b:82: dd:ce:0b:f3:34:25:0a:c1:0a:50:9b:f7:65:35:22:7b:ff:82: 64:e0:1a:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzibtof2ClP/fUnyJDKDcWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0ZmU2YjlkMGNjMWU3ZjZlMTZiMmE0NmI0MmNhNWUwMWM3 MDAzNDYwHhcNMjUxMjA2MTIwMTIwWhcNMjUxMjA3MTIwMTIwWjAzMTEwLwYDVQQD EygxOGUxZTU5OWE1MDI4NjE1MjlkYTE0MzE2YzY0Njc4ZjRlMTIyNzFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4kakAQWM+WDJ4XfjP/0RLANWDi0 oIi9ywWGhY99JwXN9CoNqVIRLAMODSeKF3qtl5JTcJ/lWg250rQX7SOQdJm9nrZN OXpahcN2d+yNvp8KDEbEZ9U5+Ybq2UDGqcqxJvZ8Zpw9jO9gT9Q7E+pT9TuoUdNX M048uCIj13jLg0GIIu9r2ByvGkLwReKlP97AhD1lJtDTaEaFAE59h1DEtEsr4LOw CQoJ3fZzQ613PM4xAy7Bm+PfJ/4TUfPtkZkCxdWKZ43h60kwhfgnnkMb1rn3cYx7 XZtUC3ODR7z7aszutn8LVsTqT7+W8zB73I7+7AkmhuN6JK146PCc9AQt/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBjh5ZmlAoYVKdoUMWxkZ49OEicbMB8GA1UdIwQY MBaAFDT+a50Mwef24WsqRrQspeAccANGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlA1cm5RekI1X2JoYXlwR3RDeWw0Qnh3QTBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC82MmRmMzYtZmQzNi00YmFmLTlkMmUt MTE4YWZlZDdhNWFlLzEvTlA1cm5RekI1X2JoYXlwR3RDeWw0Qnh3QTBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC82MmRmMzYtZmQzNi00YmFmLTlkMmUtMTE4YWZlZDdhNWFl LzEvTlA1cm5RekI1X2JoYXlwR3RDeWw0Qnh3QTBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALUQrwgBB bAfrQC12L/wPUV75jy+hx5hPfGSEYgBgjtxu+E27M84L2IRtnUMzwcJ/1cSudPoQ pceMGtdyvMf3GA+c5vybFlPZpr16YPI2QCzgA66Iju0QCddKE5GYyZ88ENpNo19W uOFC6QHL0LWXfOV6oZ08k1lD3M+LwG0nHLBra4g95gPkMf4lT2mxZMPTxcFG1w2c pd/4urU2zryDp8NB2l/TSDBae/BGUz+rm/SKWnJf1EDjAbFYH0sjxzKUhgHecKVE 2FH/7LfsCmOpUStBZlbyS9cMrbQN/+i/7OXJ/ovMup7CbjuC3c4L8zQlCsEKUJv3 ZTUie/+CZOAa+Q== -----END CERTIFICATE-----Generated at Sat Dec 6 20:29:08 2025 by rpki-client