This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/8f11b3-89c5-4b11-9c09-3a07f9224e21/1/nphC_lRy5id-eSB2x9OHcALi4lE.mft File: nphC_lRy5id-eSB2x9OHcALi4lE.mft (raw, json) Hash identifier: IndR5BL/iU08lbkm2xM0QxQPd+9C29TqIJEV6P0MFXM= Subject key identifier: C9:E3:8B:DC:29:11:E6:4F:AE:0C:01:85:A4:87:14:6F:CC:EB:7F:7D Authority key identifier: 9E:98:42:FE:54:72:E6:27:7E:79:20:76:C7:D3:87:70:02:E2:E2:51 Certificate issuer: /CN=9e9842fe5472e6277e792076c7d3877002e2e251 Certificate serial: 019AF1D1D7DCEC35C1798199D925E80C9D8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nphC_lRy5id-eSB2x9OHcALi4lE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/8f11b3-89c5-4b11-9c09-3a07f9224e21/1/nphC_lRy5id-eSB2x9OHcALi4lE.mft Manifest number: 0260 Signing time: Sat 06 Dec 2025 04:00:52 +0000 Manifest this update: Sat 06 Dec 2025 04:00:52 +0000 Manifest next update: Sun 07 Dec 2025 04:00:52 +0000 Files and hashes: 1: nphC_lRy5id-eSB2x9OHcALi4lE.crl (hash: EvboWvynhoAZR9fCc4rFQG3BYlRj2yxYdaQoKSl2cOE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/8f11b3-89c5-4b11-9c09-3a07f9224e21/1/nphC_lRy5id-eSB2x9OHcALi4lE.crl rsync://rpki.ripe.net/repository/DEFAULT/29/8f11b3-89c5-4b11-9c09-3a07f9224e21/1/nphC_lRy5id-eSB2x9OHcALi4lE.mft rsync://rpki.ripe.net/repository/DEFAULT/nphC_lRy5id-eSB2x9OHcALi4lE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:d7:dc:ec:35:c1:79:81:99:d9:25:e8:0c:9d:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e9842fe5472e6277e792076c7d3877002e2e251 Validity Not Before: Dec 6 04:00:52 2025 GMT Not After : Dec 7 04:00:52 2025 GMT Subject: CN=c9e38bdc2911e64fae0c0185a487146fcceb7f7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:64:b4:33:08:ed:a1:67:6e:d3:4b:45:9d:c8: 3b:54:29:92:9a:29:a5:b0:61:3b:ed:2d:ba:7c:19: b3:a2:32:a6:f4:ee:91:d6:52:e0:0c:4f:46:36:91: 83:c0:e0:5b:76:b1:0e:0d:55:65:e0:f3:a2:2f:0b: 00:69:41:40:30:5e:30:02:57:43:bc:3c:8c:92:04: d1:5a:88:6e:33:39:a4:80:fd:86:e6:0c:6f:f3:c6: e1:6b:56:f3:34:58:ed:54:db:33:47:79:21:26:37: 10:4d:c5:1f:f7:76:64:df:5b:e5:4a:20:5a:4d:4e: b8:a2:c3:d6:ac:7e:cf:09:36:6b:dd:17:e4:55:ca: 85:72:c4:3b:23:0a:71:ac:b4:96:4c:6a:6f:27:7a: 16:4d:67:82:52:66:2a:26:9f:5b:70:9c:4d:50:30: 77:73:de:1c:f8:be:37:57:e0:0b:ee:c7:e9:fa:23: 4c:07:2b:93:c0:0e:b7:e4:2e:c8:02:13:98:c3:d5: 9b:2e:33:be:07:c6:f4:53:18:40:76:71:43:4a:8d: be:89:9b:03:72:03:81:1f:c3:6d:bb:df:ad:1d:41: 8d:f5:c5:bf:84:a4:37:67:e1:95:88:a6:f7:8e:fb: ee:5c:1c:56:28:c8:ac:95:4b:75:17:7d:92:13:18: b2:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:E3:8B:DC:29:11:E6:4F:AE:0C:01:85:A4:87:14:6F:CC:EB:7F:7D X509v3 Authority Key Identifier: keyid:9E:98:42:FE:54:72:E6:27:7E:79:20:76:C7:D3:87:70:02:E2:E2:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nphC_lRy5id-eSB2x9OHcALi4lE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/8f11b3-89c5-4b11-9c09-3a07f9224e21/1/nphC_lRy5id-eSB2x9OHcALi4lE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/8f11b3-89c5-4b11-9c09-3a07f9224e21/1/nphC_lRy5id-eSB2x9OHcALi4lE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:96:06:ad:be:a3:af:5d:87:65:d5:ab:32:48:fc:42:62:d1: 59:b3:1a:83:cb:cc:7c:8f:57:a2:c6:2c:e1:b0:b0:ad:8d:25: 4d:ce:8f:5e:60:cb:61:9a:39:65:d9:71:4c:a1:7d:55:44:97: b3:28:c1:91:b0:ec:c5:e5:55:69:b7:de:c1:51:49:5c:98:bd: bd:73:97:95:b3:29:63:50:a9:17:dc:f3:f6:b7:95:94:de:68: 5a:14:05:0a:da:23:2a:0a:cd:72:61:07:27:48:b6:fa:d1:6c: 54:7b:21:c3:d3:85:80:28:61:15:c7:48:3f:64:49:04:f9:56: 42:c8:04:6e:6c:f3:46:a8:28:89:82:e0:61:4a:69:1c:d9:dd: 79:f3:26:42:89:86:ff:02:c0:3e:6f:36:95:eb:b2:39:6d:85: c1:a7:cf:bb:99:4b:5b:f2:6c:e9:49:52:30:62:73:30:f0:c6: 63:89:6f:27:47:c2:e0:ae:0d:02:fa:ed:10:05:9e:0c:a4:c1: 7b:9c:7c:ac:88:21:92:c0:b7:ae:31:2e:77:e4:67:2a:4e:24: 4d:48:f9:6f:3d:34:11:39:10:96:50:10:e7:69:73:10:a3:a5: 7c:4a:0a:a7:30:21:38:f6:00:2e:92:81:3c:d5:40:8f:ed:87: 27:a3:b4:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0dfc7DXBeYGZ2SXoDJ2OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTg0MmZlNTQ3MmU2Mjc3ZTc5MjA3NmM3ZDM4NzcwMDJl MmUyNTEwHhcNMjUxMjA2MDQwMDUyWhcNMjUxMjA3MDQwMDUyWjAzMTEwLwYDVQQD EyhjOWUzOGJkYzI5MTFlNjRmYWUwYzAxODVhNDg3MTQ2ZmNjZWI3ZjdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmS0MwjtoWdu00tFncg7VCmSmiml sGE77S26fBmzojKm9O6R1lLgDE9GNpGDwOBbdrEODVVl4POiLwsAaUFAMF4wAldD vDyMkgTRWohuMzmkgP2G5gxv88bha1bzNFjtVNszR3khJjcQTcUf93Zk31vlSiBa TU64osPWrH7PCTZr3RfkVcqFcsQ7IwpxrLSWTGpvJ3oWTWeCUmYqJp9bcJxNUDB3 c94c+L43V+AL7sfp+iNMByuTwA635C7IAhOYw9WbLjO+B8b0UxhAdnFDSo2+iZsD cgOBH8Ntu9+tHUGN9cW/hKQ3Z+GViKb3jvvuXBxWKMislUt1F32SExiyNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMnji9wpEeZPrgwBhaSHFG/M6399MB8GA1UdIwQY MBaAFJ6YQv5UcuYnfnkgdsfTh3AC4uJRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBoQ19sUnk1aWQtZVNCMng5T0hjQUxpNGxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS84ZjExYjMtODljNS00YjExLTljMDkt M2EwN2Y5MjI0ZTIxLzEvbnBoQ19sUnk1aWQtZVNCMng5T0hjQUxpNGxFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS84ZjExYjMtODljNS00YjExLTljMDktM2EwN2Y5MjI0ZTIx LzEvbnBoQ19sUnk1aWQtZVNCMng5T0hjQUxpNGxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnZYGrb6j r12HZdWrMkj8QmLRWbMag8vMfI9XosYs4bCwrY0lTc6PXmDLYZo5ZdlxTKF9VUSX syjBkbDsxeVVabfewVFJXJi9vXOXlbMpY1CpF9zz9reVlN5oWhQFCtojKgrNcmEH J0i2+tFsVHshw9OFgChhFcdIP2RJBPlWQsgEbmzzRqgoiYLgYUppHNndefMmQomG /wLAPm82leuyOW2FwafPu5lLW/Js6UlSMGJzMPDGY4lvJ0fC4K4NAvrtEAWeDKTB e5x8rIghksC3rjEud+RnKk4kTUj5bz00ETkQllAQ52lzEKOlfEoKpzAhOPYALpKB PNVAj+2HJ6O06w== -----END CERTIFICATE-----Generated at Sat Dec 6 14:59:24 2025 by rpki-client